US 11,943,297 B2
Distributed network security system providing isolation of customer data
Paul Michael Martini, Boston, MA (US)
Assigned to iboss, Inc., Boston, MA (US)
Filed by iboss, Inc., Boston, MA (US)
Filed on Sep. 22, 2023, as Appl. No. 18/472,709.
Application 18/472,709 is a continuation of application No. 17/189,082, filed on Mar. 1, 2021, granted, now 11,799,960.
Application 17/189,082 is a continuation of application No. 16/666,296, filed on Oct. 28, 2019, granted, now 10,938,906, issued on Mar. 2, 2021.
Application 16/666,296 is a continuation of application No. 15/233,894, filed on Aug. 10, 2016, granted, now 10,462,219, issued on Oct. 29, 2019.
Prior Publication US 2024/0015219 A1, Jan. 11, 2024
Int. Cl. G06F 15/16 (2006.01); G06F 9/455 (2018.01); H04L 9/40 (2022.01); H04L 12/46 (2006.01); H04L 67/10 (2022.01); H04L 67/1097 (2022.01); H04L 67/52 (2022.01)
CPC H04L 67/1097 (2013.01) [G06F 9/45533 (2013.01); G06F 9/45558 (2013.01); H04L 12/4641 (2013.01); H04L 63/0209 (2013.01); H04L 63/20 (2013.01); H04L 67/10 (2013.01); H04L 67/52 (2022.05); G06F 2009/4557 (2013.01); G06F 2009/45579 (2013.01); G06F 2009/45587 (2013.01); G06F 2009/45595 (2013.01)] 18 Claims
OG exemplary drawing
 
1. A computer-implemented method executed by one or more processors comprising:
maintaining a distributed network security service, the security service configured to perform operations comprising:
generating, for each of a plurality of client organizations, an associated node container;
executing, in each node container, one or more nodes that are each configured to act as an intermediary between clients of the associated client organization and sources outside the distributed network, and to examine i) traffic addressed to the clients of the associated client organization and originating from sources outside the distributed network; and ii) traffic addressed to the sources outside the distributed network and originating from the clients of the associated client organization;
maintaining, for each client organization, an associated unique node address that is not shared by any other client organization;
assigning each unique node address to at least one security container associated with the corresponding client organization;
receiving a Domain Name System (DNS) request from a requesting-client;
determining to which of the client organizations the requesting-client belongs; and
returning a selected unique node address that has been selected out of the unique node addresses based on the determined client organization to which the requesting-client belongs.