Patent ID: 6202157
Filing Date: 2001-03-13
Classification: G06F,H04L

Abstract:
A computer network security system having enforceable security policy provision comprising:means for providing variable security policy rule data for distribution to at least one network node, wherein the variable policy rule data includes differing policy rule data for a plurality of software applications supported by at least one network node and wherein the at least one network node includes means for facilitating cryptographic processing of data that is accessible by the plurality of software applications;means, operatively coupled to the means for providing, for associating a digital signature of a central security policy rule data distribution source to the variable security policy rule data;means for storing the digital signature and the variable policy rule data; andnetwork node means, operatively coupled to the storage means, for periodically obtaining the digital signature and the variable policy rule data from the means for storing, and for analyzing the variable policy rule data to facilitate unilateral security policy enforcement at a network node level.