Check Point Software Technologies has been granted a patent for a system that allows client devices connected to a cloud-based network via two different network links to open connections in a gateway. The system involves a Software Defined Perimeter (SDP) controller receiving a connection request from a client device, generating a one-time Single Packet Authentication (SPA) key, and transmitting it to the gateway and client device. The gateway then opens a connection for the client device based on the validation of the SPA key. GlobalData’s report on Check Point Software Technologies gives a 360-degree view of the company including its patenting strategy. Buy the report here.
Smarter leaders trust GlobalData
Access deeper industry intelligence
Experience unmatched clarity with a single platform that combines unique data, AI, and human expertise.
According to GlobalData’s company profile on Check Point Software Technologies, IoT network security was a key innovation area identified from patents. Check Point Software Technologies's grant share as of September 2023 was 64%. Grant share is based on the ratio of number of grants to total number of patents.
Opening connections in a cloud-based network for client devices
A recently granted patent (Publication Number: US11777718B2) describes a system for opening connections in a cloud-based network gateway for client devices connected via two different network links. The system includes a Software Defined Perimeter (SDP) controller that receives connection requests from client devices and generates one-time Single Packet Authentication (SPA) keys for authenticated devices. These keys have a predefined expiration time and are stored in an access keys repository accessible to the gateway. The gateway retrieves the SPA keys from the repository and opens connections for client devices based on the validation of the received keys.
The system also includes an access keys repository that monitors the expiration time of the SPA keys and controls the expiration time accordingly. The gateway verifies the validity of the SPA keys by checking if the expiration time has not expired. The network links used by the client devices and the gateway can be secure links, and they are mapped by an access point providing network connectivity to the client devices.
The SPA keys transmitted by the SDP controller to the client devices can be encrypted using encryption keys. The client devices transmit the SPA keys to the gateway either through a door knocking sequence initiated by the client devices or in User Datagram Protocol (UDP) packets. The client devices can encrypt the SPA keys using encryption keys before transmitting them to the gateway.
In addition to the SPA keys, the connection requests from the client devices can include a public key of a key pair associated with the user of the client device. The SDP controller can transmit the public key to the gateway, which can authenticate network packets transmitted by the client device and signed with the corresponding private key of the key pair.
The patent also describes a computer-implemented method and a computer program product for implementing the system and method described above.
Overall, this patent describes a system and method for securely opening connections in a cloud-based network gateway for client devices using one-time SPA keys and authentication mechanisms. The system ensures the validity and security of the connections between the client devices and the gateway.
To know more about GlobalData’s detailed insights on Check Point Software Technologies, buy the report here.
Data Insights
From
The gold standard of business intelligence.
Blending expert knowledge with cutting-edge technology, GlobalData’s unrivalled proprietary data will enable you to decode what’s happening in your market. You can make better informed decisions and gain a future-proof advantage over your competitors.
GlobalData, the leading provider of industry intelligence, provided the underlying data, research, and analysis used to produce this article.
GlobalData Patent Analytics tracks bibliographic data, legal events data, point in time patent ownerships, and backward and forward citations from global patenting offices. Textual analysis and official patent classifications are used to group patents into key thematic areas and link them to specific companies across the world’s largest industries.
