NETWORK SECURITY AS A SERVICE USING VIRTUAL SECURE CHANNELS

摘要

Disclosed are methods, devices, and systems to provide an end-to-end secure transaction over a network. In one embodiment, a machine-implemented method comprises opening an in-band channel or an out-of-band channel over the network; authenticating, through the control plane of a switch managing the network, a user of a resource over the in-band channel or the out-of-band channel; authorizing the user, through the control plane, access to the resource over the in-band channel or the out-of-band channel; and accounting for a transaction conducted by the user accessing the resource, through the control plane, over the in-band channel or the out-of-band channel. In another embodiment, a switch to manage the network and to implement the method described herein is disclosed.

主权项

1. A machine-implemented method, comprising:
opening at least one of an in-band channel or an out-of-band channel over a network; authenticating, through a control plane of a switch managing the network, a user of a resource over at least one of the in-band channel or the out-of-band channel; authorizing the user, through the control plane, access to the resource over at least one of the in-band channel or the out-of-band channel; and accounting for a transaction conducted by the user accessing the resource, through the control plane, over at least one of the in-band channel or the out-of-band channel.