Patent ID: 7024686
Filing Date: 2006-04-04
Classification: H04L

Abstract:
1. A secure network configured to carry data, comprising: a plurality of anti-bubbles, each anti-bubble having a plurality of anti-bubble partitions, each anti-bubble partition having at least one network device configured to transmit and receive data and each anti-bubble partition having no network connectivity to all other anti-bubble partitions within the same anti-bubble, and all of the network devices corresponding to at least one of the plurality of anti-bubbles have the same network security policy; and a plurality of network control points, each network control point including one or more network control point devices having at least one interface, wherein each of the plurality of anti-bubble partitions is connected to at least one network control point to form an anti-bubble boundary, the network control point is used to provide a connection between any two network devices, and wherein at least one of the network control point devices is configured to enforce the network security policy of the anti-bubble that is connected to the network control point device.