Patent ID: 7243225
Filing Date: 2007-07-10
Classification: H04L

Abstract:
1. A method for providing cryptographic functions to data packets below the network layer of a network stack and hidden from said network layer, the method including the steps of: intercepting in the data link layer of said network stack, datagrams outbound to and inbound from said network layer, said datagrams being encapsulated by a header and a footer associated with said data link layer and having at least one encapsulated data packet; decapsulating said datagrams by removing said header and said footer to retrieve said at least one encapsulated data packet; examining said at least one encapsulated data packet to determine whether to process said at least one encapsulated data packet using said cryptographic functions by referencing a security policy comprising one or more processing rules and selecting at least one processing rule for said at least one encapsulated data packet according to said security policy; if said at least one encapsulated data packet requires processing, modifying said at least one encapsulated data packet to provide said cryptographic functions; preparing reconstructed datagrams by re-encapsulating said at least one encapsulated data packet with said header and said footer; and providing said reconstructed datagrams back to said data link layer for continued transmission along said network stack.