US 12,192,176 B2
Cloud based platform to efficiently manage firewall rules and data traffic
Ajay Verma, Cumming, GA (US); Amod Kamat, Glen Allen, VA (US); William Smith, South Chesterfield, VA (US); Daniel P. Giorgis, Glen Allen, VA (US); Hugh Eaves, Richmond, VA (US); Michael Smith, Henrico, VA (US); Patrick Sager, Midlothian, VA (US); and Upender Paravastu, Bangalore (IN)
Assigned to HONEYWELL INTERNATIONAL INC., Charlotte, NC (US)
Filed by Honeywell International Inc., Charlotte, NC (US)
Filed on Oct. 7, 2022, as Appl. No. 17/938,697.
Claims priority of application No. 202111047067 (IN), filed on Oct. 18, 2021.
Prior Publication US 2023/0124136 A1, Apr. 20, 2023
Int. Cl. H04L 9/40 (2022.01)
CPC H04L 63/0263 (2013.01) [H04L 63/0823 (2013.01); H04L 63/20 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A method comprising:
receiving, by a cloud server with one or more processors, an encapsulated IP data packet from one or more applications installed on a gateway device, wherein the one or more applications request access to a cloud-based service;
decapsulating, by the cloud server with the one or more processors, the encapsulated IP data packet from the gateway device to retrieve one or more IP data packets wrapped within the encapsulated IP data packet;
verifying, by the cloud server with the one or more processors, a security certificate of the gateway device based on a first information from at least one of the one or more IP data packets;
configuring, by the cloud server with the one or more processors, a cloud-based firewall based on a second information from the one or more applications;
routing, by the cloud server with the one or more processors, the one or more IP data packets to the cloud-based firewall for processing each IP data packet based on the second information; and
wherein in response to the one or more IP data packets being compliant with the first information provided to authenticate the gateway device and the second information provided to configure the cloud-based firewall,
routing, by the cloud server with the one or more processors, the one or more IP data packets via a cloud communication network protocol to the cloud-based service.