초록 ▼

A method and apparatus are provided for dynamically configuring authorized clients with the address of a protected host and the key and address of an intermediate device (e.g., encrypting firewall, encrypting router, secure gateway) which is protecting a number of hosts on a private network located

A method and apparatus are provided for dynamically configuring authorized clients with the address of a protected host and the key and address of an intermediate device (e.g., encrypting firewall, encrypting router, secure gateway) which is protecting a number of hosts on a private network located topologically behind that intermediate device. The registered name server for a domain is configured to return a new resource record type, herein called an SX record, in response to requests for information needed for secure communications with protected hosts in that domain. The resolver on (or otherwise associated with) the authorized client is configured to use the data in the SX record to dynamically update the information used by the client to handle secure communications.

대표청구항 ▼

[ What is claimed is:] [65.] A computer-readable medium comprising a data structure for facilitating secure access by a first machine to a second machine, said data structure including a tunnel map having:(a) an address of said second machine;(b) a parameter of a secure exchanger corresponding to sa

[ What is claimed is:] [65.] A computer-readable medium comprising a data structure for facilitating secure access by a first machine to a second machine, said data structure including a tunnel map having:(a) an address of said second machine;(b) a parameter of a secure exchanger corresponding to said second machine, said parameter for providing information about a secure exchanger to said second machine for the benefit of said first machine; and(c) an original database name pertaining to said secure exchanger.