Method for managing network using microsegmentation for zero trust security and access switch using the same
By adopting the micro-segment management method in the network access switch, micro-segment configuration and user security policy are applied for each network port, the existing zero-trust security model has been solved, and the existing zero-trust security model is costly and time-consuming in the implementation and management process is achieved, and the low-cost and efficient network security management and user experience is improved.
JP2025067750AActive Publication Date: 2025-04-24PIOLINK
0 Cites 1 Cited by
Patent Information
- Application Number
- JP2023210058
- Authority / Receiving Office
- JP · JP
- Patent Type
- Applications
- Current Assignee / Owner
- Priority Date
- 2023-10-13
- Filing Date
- 2023-12-13
- Publication Date
- 2025-04-24
- Estimated Expiration
- 2043-12-13
AI Technical Summary
Technical Problem
The existing zero-trust security model is costly and time-consuming in the implementation and management process, and the user experience is affected.
Method used
By adopting a micro-segment management method in the network access switch, the application of micro-segment configuration and user security policies for each network port is realized, and packet forwarding and access control is performed.
Benefits of technology
It realizes low-cost and efficient management of the zero-trust security model, reduces the negative impact of user experience, and improves the flexibility and manageability of network security.
✦ Generated by Eureka AI based on patent content.
Abstract
To provide a network management method using microsegmentation for zero trust security.SOLUTION: A method includes (a) obtaining a source MAC address of a packet by a specific access switch when a first forwarding is performed on the packet, registering the source MAC address when the source MAC address is not registered in a MAC address table, and performing a second forwarding when the source MAC address satisfies a specific user security policy, (b) obtaining a source IP address of the packet by the specific access switch, registering the source IP address when the source IP address is not registered in a routing table, and performing a third forwarding, obtaining a destination IP address or service port of the packet, and filtering the packet for which the third forwarding is performed by checking whether the destination IP address or service port of the packet satisfies a specific service security policy.SELECTED DRAWING: Figure 2
Need to check novelty before this filing date? Find Prior Art