Rule sets for client-applied encryption in communications networks

摘要

A rule set for client-applied encryption is created and deployed to a client device by a network device over a communications network. Encryption applied by the client in accordance with the rule set may form the basis of a secure connection in which encrypted information is encapsulated and tunneled across a network that includes a wireless or wired interface through which the client obtains network connectivity. The client may monitor operating conditions, including operating conditions of the communications network, client device, and/or service provider. The rule set includes one or more rules that may be used by the client in combination with the detected operating conditions to select the appropriate encryption protocol. The rule set may persist at the client for use over multiple sessions in which a range of communication protocols and/or access points are used by the client to obtain network connectivity.

主权项

1. A method performed by a computing system including one or more computing devices, the method comprising:
receiving first information over a wide area communications network at the computing system, the first information attributed to a client identity and including a client-defined rule set for encrypting communications for the client identity; receiving second information over the wide area communications network at the computing system, the second information attributed to a service provider identity and including a service provider-defined rule set for encrypting communications carried over a service provider-operated portion of the wide area communications network; authenticating the client identity via a client device; and transmitting the client-defined rule set and the service provider-defined rule set to the client device over the wide area communications network; wherein the client-defined rule set and the service provider-defined rule set defines, based on one or more operating conditions of the wide area communications network, an encryption policy to be applied at the client device for a network communication originating at or requested by the client device that traverses the service provider-operated portion of the wide area communications network.