US 12,476,980 B2
Secure monitoring for trusted/untrusted network node access in cloud-based telecommunication and enterprise network
Bharath Kumar Ravichandran, Tokyo (JP); John Carse, Tokyo (JP); and Pradheepkumar Singaravelu, Tokyo (JP)
Assigned to RAKUTEN MOBILE, INC., Tokyo (JP)
Appl. No. 18/010,675
Filed by RAKUTEN MOBILE, INC., Tokyo (JP)
PCT Filed Sep. 30, 2022, PCT No. PCT/US2022/045307
§ 371(c)(1), (2) Date Dec. 15, 2022,
PCT Pub. No. WO2023/214987, PCT Pub. Date Nov. 9, 2023.
Claims priority of provisional application 63/339,108, filed on May 6, 2022.
Claims priority of provisional application 63/338,532, filed on May 5, 2022.
Claims priority of provisional application 63/338,570, filed on May 5, 2022.
Prior Publication US 2024/0106826 A1, Mar. 28, 2024
Int. Cl. H04L 9/40 (2022.01)
CPC H04L 63/108 (2013.01) [H04L 9/40 (2022.05); H04L 63/08 (2013.01); H04L 63/0892 (2013.01); H04L 63/101 (2013.01); H04L 63/102 (2013.01); H04L 63/1433 (2013.01)] 18 Claims
OG exemplary drawing
 
1. A method of registering a node for zero trust remote access in a network system, the method comprising:
receiving a request to subscribe a node to a zero trust remote access system (ZTRAS) for a network;
generating a ZTRAS subscribed subscription identification (ID) for the node based on one or more parameters of the node, to thereby provide a ZTRAS subscribed node, wherein the ZTRAS subscribed subscription identification comprises an indication of a type of the node;
configuring the ZTRAS subscribed node with security logging based on ZTRAS subscription, wherein the configuring the ZTRAS subscribed node with security logging comprises:
calculating a first trust percentage for the ZTRAS subscribed node,
based on the first trust percentage being less than a threshold value, rejecting service initialization of the ZTRAS subscribed node,
based on a request to configure the ZTRAS subscribed node with security logging, configuring the ZTRAS subscribed node with security logging based on the request, and
calculating a second trust percentage for the ZTRAS subscribed node based on the configured security logging;
initiating a service of the ZTRAS subscribed node based on a trust percentage calculated for the ZTRAS subscribed node according to a security configuration of the node; and
receiving logs from the ZTRAS subscribed node based on the configured security logging, wherein the logs are received at a frequency based on the type of the node,
wherein the logs comprise at least one of security, audit, authentication, and authorization logs.