James Alexander Godwin
Electrician at Pershing Rd, Raleigh, NC

6505192, Jan 7, 2003

Aug 12, 1999

09/373416

James Russell Godwin - Raleigh NC
David Andrew Jones - Raleigh NC
Richard Allen Wenklar - Rougemont NC

International Business Machines Corporation - Armonk NY

G06F 1730

707 3, 713201

IPSec rules are searched in an improved manner to reduce processing overhead. For selected connectionless protocols, packets are treated as if they were part of a simulated connection. A pseudo-connection memory block is allocated with the creation of each socket and IPSec security binding information is stored in the pseudo-connection memory block on a first packet. Thereafter, as long as the source address and port in incoming packets on the same socket or destination address and port in outgoing packets on the same socket remain the same, the packets are treated as part of a simulated connection. The security rules are not searched again until the simulated connection terminates or the static rule table is modified. In the preferred embodiment, security binding is made only to the static rule or placeholder.

6715081, Mar 30, 2004

Aug 12, 1999

09/373361

Kira Sterling Attwood - Chapel Hill NC
James Russell Godwin - Raleigh NC
Brian Sean Perry - Johnson City NY
David John Wierbowski - Owego NY

International Business Machines Corporation - Armonk NY

H04L 900

713201, 707 3, 707 9

Ipsec rules are searched in order from rules containing the most specificity to those containing the least specificity of attributes. The static rules include placeholders for sets of dynamic rules. Dynamic rules are searched only if a placeholder is the first matching rule in the static table. Sets of dynamic rules are partitioned into separate groups. Within each group there is no rule order dependence. Each such group is searched with an enhanced search mechanism, such as a search tree. For connection oriented protocols, security rule binding information is stored in association with the connection. This allows the searching of the rules to be performed only when a connection is first established. If a static or dynamic rule is changed during a connection, a search is repeated. For selected connectionless protocols, packets are treated as if they were part of a simulated connection.

6347376, Feb 12, 2002

Aug 12, 1999

09/373104

Kira Sterling Attwood - Chapel Hill NC
James Russell Godwin - Raleigh NC
Brian Sean Perry - Johnson City NY
David John Wierbowski - Owego NY

International Business Machines Corp. - Armonk NY

G06F 1130

713201, 707 3

Ipsec rules are searched in order from rules containing the most specificity of attributes to those containing the least specificity of attributes. The static rules include placeholders for sets of dynamic rules. The placeholders in the static table immediately precede and point to an associated set of dynamic rules. Dynamic rules are searched only if a placeholder is found to be the first matching rule in the static table. Sets of dynamic rules are partitioned into separate groups. Within each group there is no rule order dependence. Each such group is searched with an enhanced search mechanism, such as a search tree. Searching is further improved by searching at layers higher than the IP layer.

7426566, Sep 16, 2008

Jan 17, 2001

09/764613

James Russell Godwin - Raleigh NC, US

International Business Machines Corporation - Armonk NY

G06F 13/00

709230, 709245, 713201

Methods, systems and computer program products provide Internet Protocol Security (IPSec) to a plurality of target hosts in a cluster of data processing systems which communicate with a network through a routing communication protocol stack utilizing a dynamically routable Virtual Internet Protocol Address (DVIPA) by negotiating security associations (SAs) associated with the DVIPA utilizing an Internet Key Exchange (IKE) component associated with the routing communication protocol stack and distributing information about the negotiated SAs to the target hosts so as to allow the target hosts to perform IPSec processing of communications from the network utilizing the negotiated SAs.

7146432, Dec 5, 2006

Jan 17, 2001

09/764790

Mark L. Antes - Gillett PA, US
James Russell Godwin - Raleigh NC, US
David Anthony Herr - Apex NC, US
David J. Wierbowski - Owego NY, US

International Business Machines Corporation - Armonk NY

G06F 15/173, G06F 11/30, G01R 31/08

709239, 709226, 709240, 709242, 370216, 370220, 370223, 713200, 713201

Methods, systems and computer program products provide for recovering from the failure of a primary distribution processor which provides secure communications over a network in a distributed workload environment having target hosts which are accessed through the primary distribution processor by a common network address. Information sufficient to restart communications through the primary distribution processor utilizing network security is provided to a backup distribution processor. Failure of the primary distribution processor is detected and the communications utilizing network security restarted at the backup distribution processor utilizing the provided information. Both inbound and outbound communications with target hosts utilizing the common network address and which are associated with a secure network communication are then routed through the backup distribution processor. Both inbound and outbound processing of secure network communications utilizing the common network address is performed at the backup distribution processor so as to provide network security processing of communications from the target host and network security processing of communications to the target host.

7340530, Mar 4, 2008

Jan 17, 2001

09/764252

James Russell Godwin - Raleigh NC, US
David Anthony Herr - Apex NC, US

International Business Machines Corporation - Armonk NY

G06F 15/16, G06F 11/00

709232, 709238, 709245, 370218

Secure communications are provided over a network in a distributed workload environment having target hosts which are accessed through a distribution processor by a common network address. Secure communications are provided by routing both inbound and outbound communications with target hosts which are associated with a secure network communication through the distribution processor. Both inbound and outbound secure network communications are processed at the distribution processor so as to provide network security processing of communications from the target host and network security processing of communications to the target host.

2008009, Apr 24, 2008

Dec 21, 2007

11/962551

James Godwin - Raleigh NC, US
David Herr - Apex NC, US
Linwood Overby - Raleigh NC, US

INTERNATIONAL BUSINESS MACHINES CORPORATION - Armonk NY

G06F 15/16

709232000

Secure communications are provided over a network in a distributed workload environment having target hosts which are accessed through a distribution processor by a common network address. Secure communications are provided by routing both inbound and outbound communications with target hosts which are associated with a secure network communication through the distribution processor. Both inbound and outbound secure network communications are processed at the distribution processor so as to provide network security processing of communications from the target host and network security processing of communications to the target host.