CA2272056A1 - A method and apparatus for updating address lists for a packet filter processor - Google Patents

A method and apparatus for updating address lists for a packet filter processor Download PDF

Info

Publication number
CA2272056A1
CA2272056A1 CA002272056A CA2272056A CA2272056A1 CA 2272056 A1 CA2272056 A1 CA 2272056A1 CA 002272056 A CA002272056 A CA 002272056A CA 2272056 A CA2272056 A CA 2272056A CA 2272056 A1 CA2272056 A1 CA 2272056A1
Authority
CA
Canada
Prior art keywords
processor
source
addresses
data packet
stored
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CA002272056A
Other languages
French (fr)
Other versions
CA2272056C (en
Inventor
Arturo Maria
Leslie Dale Owens
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
AT&T Wireless Services Inc
Original Assignee
At&T Wireless Services, Inc.
Arturo Maria
Leslie Dale Owens
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by At&T Wireless Services, Inc., Arturo Maria, Leslie Dale Owens filed Critical At&T Wireless Services, Inc.
Publication of CA2272056A1 publication Critical patent/CA2272056A1/en
Application granted granted Critical
Publication of CA2272056C publication Critical patent/CA2272056C/en
Anticipated expiration legal-status Critical
Expired - Fee Related legal-status Critical Current

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/02—Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
    • H04L63/0227—Filtering policies
    • H04L63/0236—Filtering by address, protocol, port number or service, e.g. IP-address or URL
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/40—Network security protocols

Abstract

A dedicated data packet filtering processor whose only function is to filter data packets based on a list of source IP addresses stored in high-speed memory of the processor. The processor has a specialized operating system which controls the operation of the processor. The processor examines the source IP address of each received data packet to determine if the source IP
address matches one of the stored source IP addresses, and if there is a match, either discards or forwards the data packet depending on the processor configuration. The list of source IP addresses are updated by a service provider having a central administrative site. The service provider keeps these lists up to data and periodically updates the source IP addresses stored in the random access memory of the dedicated IP filtering processors.
CA002272056A 1997-10-23 1998-10-20 A method and apparatus for updating address lists for a packet filter processor Expired - Fee Related CA2272056C (en)

Applications Claiming Priority (3)

Application Number Priority Date Filing Date Title
US08/956,990 US6158008A (en) 1997-10-23 1997-10-23 Method and apparatus for updating address lists for a packet filter processor
US08/956,990 1997-10-23
PCT/US1998/022072 WO1999021339A1 (en) 1997-10-23 1998-10-20 A method and apparatus for updating address lists for a packet filter processor

Publications (2)

Publication Number Publication Date
CA2272056A1 true CA2272056A1 (en) 1999-04-29
CA2272056C CA2272056C (en) 2003-09-23

Family

ID=25498934

Family Applications (1)

Application Number Title Priority Date Filing Date
CA002272056A Expired - Fee Related CA2272056C (en) 1997-10-23 1998-10-20 A method and apparatus for updating address lists for a packet filter processor

Country Status (3)

Country Link
US (1) US6158008A (en)
CA (1) CA2272056C (en)
WO (1) WO1999021339A1 (en)

Families Citing this family (41)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
ES2290986T3 (en) 1997-03-12 2008-02-16 Nomadix, Inc. NAME TRANSMITTER OR ROUTER.
US6779118B1 (en) * 1998-05-04 2004-08-17 Auriq Systems, Inc. User specific automatic data redirection system
US8266266B2 (en) 1998-12-08 2012-09-11 Nomadix, Inc. Systems and methods for providing dynamic network authorization, authentication and accounting
US7194554B1 (en) 1998-12-08 2007-03-20 Nomadix, Inc. Systems and methods for providing dynamic network authorization authentication and accounting
US8713641B1 (en) 1998-12-08 2014-04-29 Nomadix, Inc. Systems and methods for authorizing, authenticating and accounting users having transparent computer access to a network using a gateway device
US6772346B1 (en) * 1999-07-16 2004-08-03 International Business Machines Corporation System and method for managing files in a distributed system using filtering
WO2001022642A2 (en) * 1999-09-24 2001-03-29 Comverse Network Systems Ltd. System and method for presorting rules for filtering packets on a network
WO2001031885A2 (en) 1999-10-22 2001-05-03 Nomadix, Inc. Gateway device having an xml interface and associated method
US6477583B1 (en) * 1999-11-15 2002-11-05 Novell, Inc. Infrastructure for supporting file replications
FI110975B (en) * 1999-12-22 2003-04-30 Nokia Corp Prevention of fraud in telecommunication systems
US6496935B1 (en) * 2000-03-02 2002-12-17 Check Point Software Technologies Ltd System, device and method for rapid packet filtering and processing
US8972590B2 (en) 2000-09-14 2015-03-03 Kirsten Aldrich Highly accurate security and filtering software
US7587499B1 (en) * 2000-09-14 2009-09-08 Joshua Haghpassand Web-based security and filtering system with proxy chaining
JP3637863B2 (en) * 2000-11-01 2005-04-13 日本電気株式会社 Virtual network and virtual network connection method
US6915351B2 (en) * 2000-12-18 2005-07-05 Sun Microsystems, Inc. Community separation control in a closed multi-community node
EP1371242A1 (en) * 2001-03-14 2003-12-17 Nokia Corporation Method for activating a connection in a communications system, mobile station, network element and packet filter
US7035847B2 (en) * 2001-03-16 2006-04-25 Novell, Inc. Server for synchronization of files
US6920493B1 (en) * 2001-03-19 2005-07-19 Networks Associates Technology, Inc. System and method for communicating coalesced rule parameters in a distributed computing environment
JP3590936B2 (en) * 2001-10-06 2004-11-17 テラス テクノロジーズ，インコーポレイテッド E-mail service system having dynamic IP filtering module and dynamic IP address filtering method
US7325248B2 (en) * 2001-11-19 2008-01-29 Stonesoft Corporation Personal firewall with location dependent functionality
US7360242B2 (en) * 2001-11-19 2008-04-15 Stonesoft Corporation Personal firewall with location detection
EP1317111B8 (en) * 2001-11-29 2009-11-25 Stonesoft Corporation A personalized firewall
EP1383327B1 (en) * 2002-06-11 2013-12-25 Panasonic Corporation Content distributing system and data-communication controlling device
US7302488B2 (en) * 2002-06-28 2007-11-27 Microsoft Corporation Parental controls customization and notification
US7490348B1 (en) 2003-03-17 2009-02-10 Harris Technology, Llc Wireless network having multiple communication allowances
DE60321834D1 (en) * 2003-08-29 2008-08-07 Nokia Corp PERSONALIZED FIREWALL
US7697545B1 (en) * 2004-07-14 2010-04-13 Computer Associates Think, Inc. Discovery of component relationships in distributed data processing networks
US20060041935A1 (en) * 2004-08-17 2006-02-23 Conley James W Methodology for configuring network firewall
GB2425912A (en) * 2005-05-04 2006-11-08 Psytechnics Ltd Packet filtering
CA2620828A1 (en) * 2005-09-19 2007-03-29 Schweitzer Engineering Laboratories, Inc. Method and apparatus for routing data streams among intelligent electronic devices
JP4489676B2 (en) * 2005-09-28 2010-06-23 富士通株式会社 Communications system
US7802296B2 (en) * 2006-08-23 2010-09-21 Cisco Technology, Inc. Method and system for identifying and processing secure data frames
US7755872B2 (en) * 2006-09-14 2010-07-13 Schweitzer Engineering Laboratories, Inc. System, method and device to preserve protection communication active during a bypass operation
US8046492B1 (en) * 2007-11-06 2011-10-25 Juniper Networks, Inc. Offset independent filtering
US8488601B1 (en) * 2011-07-12 2013-07-16 Qlogic, Corporation Method and system for link aggregation
US8467395B1 (en) 2011-07-12 2013-06-18 Qlogic, Corporation Method and system for link aggregation
US10263916B2 (en) 2012-12-03 2019-04-16 Hewlett Packard Enterprise Development Lp System and method for message handling in a network device
FR3003054B1 (en) * 2013-03-06 2016-08-19 Sagem Defense Securite METHOD AND DEVICE FOR FILTERING TRANSACTIONS FOR SYSTEM ON CHIP
US10924452B1 (en) * 2013-08-30 2021-02-16 Amazon Technologies, Inc. Auditing IP address assignments
US11258762B2 (en) * 2019-06-26 2022-02-22 Blackberry Limited Method and system for updating of an application layer for a third-party telematics provider
US11329956B2 (en) 2020-07-28 2022-05-10 Bank Of America Corporation Scalable encryption framework using virtualization and adaptive sampling

Family Cites Families (22)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4184117A (en) * 1956-04-16 1980-01-15 The United States Of America As Represented By The Secretary Of The Army Communication security method and system
US5172111A (en) * 1987-08-31 1992-12-15 Olivo Jr John W Stored media screening device
US4888796A (en) * 1987-08-31 1989-12-19 Olivo Jr John W Program material screening device
DE69029759T2 (en) * 1989-05-15 1997-07-17 Ibm Flexible interface for authentication services in a distributed data processing system
DE69316009T2 (en) * 1992-06-12 1998-04-23 Dow Chemical Co SAFE FRONT END CONNECTION SYSTEM AND METHOD FOR PROCESS CONTROLLER
KR960014983B1 (en) * 1992-08-31 1996-10-23 가부시끼가이샤 도시바 Local area network bridge apparatus with dedicated packet fittering mechanism
DE69332703T2 (en) * 1992-12-10 2003-08-21 Matsushita Electric Ind Co Ltd Server and client
US5448698A (en) * 1993-04-05 1995-09-05 Hewlett-Packard Company Inter-processor communication system in which messages are stored at locations specified by the sender
US5606668A (en) * 1993-12-15 1997-02-25 Checkpoint Software Technologies Ltd. System for securing inbound and outbound data packet flow in a computer network
US5615340A (en) * 1994-07-21 1997-03-25 Allied Telesyn Int'l Corp. Network interfacing apparatus and method using repeater and cascade interface with scrambling
US5627886A (en) * 1994-09-22 1997-05-06 Electronic Data Systems Corporation System and method for detecting fraudulent network usage patterns using real-time network monitoring
US5553315A (en) * 1994-11-08 1996-09-03 Motorola, Inc. Method of maintaining access authorization using a bulletin board communication resource
US5632011A (en) * 1995-05-22 1997-05-20 Sterling Commerce, Inc. Electronic mail management system for operation on a host computer system
US5678041A (en) * 1995-06-06 1997-10-14 At&T System and method for restricting user access rights on the internet based on rating information stored in a relational database
US5696898A (en) * 1995-06-06 1997-12-09 Lucent Technologies Inc. System and method for database access control
US5757924A (en) * 1995-09-18 1998-05-26 Digital Secured Networks Techolognies, Inc. Network security device which performs MAC address translation without affecting the IP address
AU1748797A (en) * 1996-01-16 1997-08-11 Raptor Systems, Inc. Key management for network communication
US5684951A (en) * 1996-03-20 1997-11-04 Synopsys, Inc. Method and system for user authorization over a multi-user computer system
US5828833A (en) * 1996-08-15 1998-10-27 Electronic Data Systems Corporation Method and system for allowing remote procedure calls through a network firewall
US5802319A (en) * 1996-10-23 1998-09-01 Hewlett-Packard Company Method and apparatus for employing an intelligent agent to cause a packet to be sent to update a bridge's filtering database when a station is moved in a network
US5889958A (en) * 1996-12-20 1999-03-30 Livingston Enterprises, Inc. Network access control system and process
US6035423A (en) * 1997-12-31 2000-03-07 Network Associates, Inc. Method and system for providing automated updating and upgrading of antivirus applications using a computer network

Also Published As

Publication number Publication date
US6158008A (en) 2000-12-05
WO1999021339A1 (en) 1999-04-29
CA2272056C (en) 2003-09-23

Similar Documents

Publication Publication Date Title
CA2272056A1 (en) A method and apparatus for updating address lists for a packet filter processor
CA2272054A1 (en) A method and apparatus for filtering packets using a dedicated processor
AU707905B2 (en) Internet protocol filter
US5668952A (en) Method for resolving network address by sending reresolve request to nodes at selected time period after establishing address table, and updating the table with received reply thereto
HK1026316A1 (en) Method and system for data communication on the internet
CA2226814A1 (en) System and method for providing peer level access control on a network
WO2004036335A3 (en) Method and apparatus for providing automatic ingress filtering
WO2000002114A3 (en) Firewall apparatus and method of controlling network data packet traffic between internal and external networks
WO1997002734A3 (en) Internet protocol (ip) work group routing
WO1998041913A3 (en) Method and system for content filtering information retrieved from an internet computer network
WO2005036831A1 (en) Frame relay device
AU2347099A (en) System and method for using domain names to route data sent to a destination on a network
CA2383897A1 (en) Facilitating data transmission
WO1998020646A3 (en) A system and a method for accessing services
KR20090006632A (en) Virtual firewall system and the control method for using based on commonness security policy
CA2213043A1 (en) Non-broadcast multi-access network system capable of carrying out transmission of a next hop resolution protocol packet without setting internet protocol addresses
Cisco AppleTalk Commands
Cisco AppleTalk Commands
Cisco AppleTalk Commands
Cisco AppleTalk Commands
Cisco AppleTalk Commands
Cisco AppleTalk Commands
Cisco AppleTalk Commands
Cisco appletalk event-logging to appletalk zone
Cisco AppleTalk Commands

Legal Events

Date Code Title Description
EEER Examination request
MKLA Lapsed