CN1086086C - 用于防止未经授权的通信的安全系统和方法 - Google Patents

用于防止未经授权的通信的安全系统和方法 Download PDF

Info

Publication number
CN1086086C
CN1086086C CN95191513A CN95191513A CN1086086C CN 1086086 C CN1086086 C CN 1086086C CN 95191513 A CN95191513 A CN 95191513A CN 95191513 A CN95191513 A CN 95191513A CN 1086086 C CN1086086 C CN 1086086C
Authority
CN
China
Prior art keywords
network
motherboard
computer
computer network
communication
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Expired - Fee Related
Application number
CN95191513A
Other languages
English (en)
Other versions
CN1140519A (zh
Inventor
艾德华·J·盖伯
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Panasonic Holdings Corp
Panasonic Corp of North America
Original Assignee
Matsushita Electric Corp of America
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Matsushita Electric Corp of America filed Critical Matsushita Electric Corp of America
Publication of CN1140519A publication Critical patent/CN1140519A/zh
Application granted granted Critical
Publication of CN1086086C publication Critical patent/CN1086086C/zh
Anticipated expiration legal-status Critical
Expired - Fee Related legal-status Critical Current

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/66—Arrangements for connecting between networks having differing types of switching systems, e.g. gateways
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/02—Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
    • H04L63/0209—Architectural arrangements, e.g. perimeter networks or demilitarized zones
    • A—HUMAN NECESSITIES
    • A61—MEDICAL OR VETERINARY SCIENCE; HYGIENE
    • A61F—FILTERS IMPLANTABLE INTO BLOOD VESSELS; PROSTHESES; DEVICES PROVIDING PATENCY TO, OR PREVENTING COLLAPSING OF, TUBULAR STRUCTURES OF THE BODY, e.g. STENTS; ORTHOPAEDIC, NURSING OR CONTRACEPTIVE DEVICES; FOMENTATION; TREATMENT OR PROTECTION OF EYES OR EARS; BANDAGES, DRESSINGS OR ABSORBENT PADS; FIRST-AID KITS
    • A61F9/00—Methods or devices for treatment of the eyes; Devices for putting-in contact lenses; Devices to correct squinting; Apparatus to guide the blind; Protective devices for the eyes, carried on the body or in the hand
    • A61F9/0008—Introducing ophthalmic products into the ocular cavity or retaining products therein
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L69/00—Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
    • H04L69/08—Protocols for interworking; Protocol conversion
    • H04L69/085—Protocols for interworking; Protocol conversion specially adapted for interworking of IP-based networks with other networks
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/40—Network security protocols
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L69/00—Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
    • H04L69/08—Protocols for interworking; Protocol conversion

Abstract

提供一种用于将第一计算机网络(10)连接到第二计算机网络(26)的安全系统。所述安全系统具有一对计算机母板(12、20)，每个母板都具有一个网络接口适配器(14或22)，用于接收和传送由一个计算机网络至传送适配器的通信，以便通过其它计算机母板(20)上的传送适配器(18)和网络接口适配器(22)将其发送到其它计算机网络(24)上。每个母板(12或20)还提供协议转换软件，将第一协议转换成第二协议并从传输到另一母板的通信上除去源和目的地址信息。应用程序接口切片软件或动态链接库软件提供两个母板间的通信控制，以传送必要的程序码来请求或接受另一个计算机网络的服务。

Description

用于防止未经授权的通信的安全系统和方法
本发明涉及一种安全系统用于防止一个计算机网络和另一个计算机网络间非经授权的通信，特别是涉及防止从一个公用网络(如互联网，Internet)未经授权地去访问一个专用的计算机网络。
近来在技术上的发展已使得存取公众可用的计算机网络如互联网变得更容易了。专用计算机网络和连上互联网的用户间的信息交换造成了对如何保护这种专用网络上的信息不被外界互联网用户未经授权地存取及不被专用用户未经授权地输出到外界的一种挑战。例如，为同一单位工作的一组个人用户可能需要存取共有数据但必须保护上述信息以免泄露给外人。最近已公布，即使是五角大楼的计算机系统也容易被称为“破坏者”的公用互联网用户入侵。入侵专用计算机网络后，破坏者已能删除文件或磁盘、取消程序、截取敏感的信息，甚至将计算机病毒、特洛伊木马码、及(或)错误引入到这些专用网络。
另一个相关问题是有关专用计算机网络间的安全性问题。例如许多公司在国内有许多分公司，每个分公司可能有它的计算机网络，并且这些局域计算机网络被相互联接在一个覆盖全公司的计算机网络里，在使用这种计算机网络时就有必要防止从一个局域计算机网络未经授权地去访问另一个局域计算机网络。
传输控制协议/网络互联协议(TCP/IP)的协议组合提供了一种计算机网络节点间和计算机网络间的标准的通信格式，以便于在互联网上进行通信。这个协议组合也适用于专用计算机网络内部及相互间。专用计算机网络常被连接到其它专用计算机网络，例如在一个公司中，多个用户组以其相对应的多个计算机网络存在组织中，被另一个专用网络入侵及计算机被误用的危险是存在的：例如一个不满的员工可从公司组织中一个局域网络入侵到公司另一个组织的专用网络并且造成文件被更改或删除，或者将病毒、特洛伊木马码、或错误引入到那个网络内的节点。
专用计算机网络有各种形式和多种用途：如信用卡计算机网络，用于把网络通信业务导向银行以便授权及交易公告；一些大学的计算机网络，用于维护学生信息或科学研究信息；也有专用的公司计算机网络，它包含各项专门信息。将来，由于对家用电视及多媒体服务进行计算机化，会有更多通向计算机网络的链接。对家用计算机用户而言，提供一个安全系统以对抗所谓破坏者，将会是同等地重要。
近来安全系统常被证明不是在防止专用计算机网络被入侵上有效性不够，就是在存取通信服务以和其它网络通信上有重大限制。总之，现存安全系统使得一些计算机网络间重要的通信服务失去效用。例如，以互联网为例，如文件传输协议(FTP)、琐细文件传输协议(TFTP)及HTTP之类的文件传输应用程序等重要通信服务，和电信网络应用之类的终端模拟服务等已因安全之故而被取消。然而，当此类服务被取消后，大部分和其它计算机网络通信的功能都不见了，专用网络剩下的只有诸如简易邮件传输协议(SMTP)和POP3等应用程序所提供的基本电子邮件(E-mail)服务。即使将此类文件传输和模拟服务取消，专用网络还是无法避免破坏者从公用互联网或其它专用网络的入侵。一个外部人员可从包含重要数据的电子邮件中所使用的发送邮件及页面描述文件中获得头信息，以模拟一合法用户进入特权文件。
这类安全系统已有多种方式来实现，例如使用屏蔽路由器将往返于专用网络的传输限制在特定位置或特定类别上。然而这些限制本身也严重限制了和公用互联网或其它网络的通信服务。
基于主机的防火墙，亦称双宅防火墙(dual-homed firewalls)，通过在专用网络和公用互联网间插入一个单独的计算机系统而提供了另一级安全保护。在某些双宅防火墙中，互联网协议(IP)包送递功能被取消，以防止防火墙自动地依据IP包所提供的地址来为其选择路由。此类双宅防火墙也有一组特别的传输控制协议(TCP)应用软件(如代理商)以与专用网络外的用户通信。按此种方式，防火墙维护整个进出专用网络的通信控制。例如，一个专用网络上的用户可以使用如Telnet类的应用软件来进入基于主机的防火墙系统，然后专用网络用户会被要求输入端点的互联网地址，防火墙于是在专用网络用户和端点间建立一个通道并监视各点间的连接。基于主机的防火墙的一个缺点就是持续需要增加防火墙系统的大小来支援专用网络和公用互联网间增加的流量。基于主机的防火墙的另一个缺点是，破坏者为了访问专用网络只需克服单一计算机系统的安全防御功能。
另一种防火墙系统被称为棱堡主机(bastion hosts)，也是一种应用层防火墙，通过提供一个主机次网络来控制进出专用网络的通信业务以克服这些基于主机的防火墙的缺点。这个次网络当容量须增加时可以通过增加主机予以扩充。对于棱堡主机，公用网络只允许存取到外部路由器R2，而专用网络可允许存取到内部路由器R1。在路由器间提供了一组代理主机，用以控制对各种应用软件的访问，这些应用软件用于和专用及公用网络的通信。此系统的一个缺点是，必须针对每个允许经由次网络的应用特别编写代码，这样如果要改变应用程序的适用性就会增加成本且费时。另一个缺点是作为系统的主机，需维护一个次网络和多个计算机系统，从而导致成本及复杂度增加。
相对应地，本发明的一个目的在于提供一种安全系统以将一专用计算机网络连接到另一个提供全方位计算机网络服务的专用或公用计算机网络，且维护专用计算机网络的安全以免破坏者从公用或其它专用计算机网络未授权的访问。
本发明的另一个目的是提供一种安全系统，由可得到的标准硬件和软件部件构成而无需高成本的特别程序代码或硬件。
本发明的另一个目的是提供一种安全系统可整个包含在一个单元中并可从中控制。
本发明的再一目的是提供一种安全系统，防止连到专用计算机网络的Unix和MVS主机被连到专用局域网络(LAN)或广域网络(WAN)的专用网络用户未经授权地存取资料。
本发明更深一层目的是提供一种安全系统，其具有两个计算机母板用以从一个计算机母板到另一个备份重要的网络通信信息。
本发明的另一个目的是提供未受公用互联网注册程序限制的专用网络的非限制性TCP/IP地址使用，由此允许域名、次网络掩蔽(mask)，和ICP/IP网络/主机名称地址可独立地在专用网络中被确定。
本发明的另一个目的是提供第一和第二计算机网络间的一种通信链接，其中用于第一计算机网络内部通信的次网络掩蔽可独立地从第二网络接口的次网络掩蔽来建立。
相应地，本发明的这些和其它目的提供一种安全装置以防止第一计算机网络和第二计算机网络间未经授权的通信。我们发现可提供一种安全系统来达到网络间的安全，此系统包括一个第一网络母板和一个第二个网络母板。每个母板具有一个网络接口适配器以分别和第一和第二计算机网络通信。每个网络母板还有一个传送适配器用以将在其自己的网络接口适配器接收到的通信传送到其它网络母板上的传送适配器。传送适配器必须相配合且一致。实施这种安全系统所需的所有必要的硬件和软件是可从多个来源得到的而且并不需要特别设计的硬件或软件。
由连到第一和第二计算机网络母板的网络接口适配器按传输控制协议/网络互联协议(TCP/IP)格式或按装在互联网包交换IP(IPX)的网络互联协议接收的通信，会被转换成网间包交换(IPX)格式通信，以便分别进一步地传输到连到其它公用或专用计算机网络的网络母板。这种转换过程除去了上层TCP协议层和次网络掩蔽，并防止含有IP头信息、IP目的地址和IP源地址的原有IP数据报被进一步传输到其它网络。路由服务：IP包传递、TCP/IP路由信息协议(RIP)、地址解析协议(ARP)和网间控制报文协议(ICMP)都被禁止以免在网络接口适配器和每个网络母板的传送适配器间传送。去掉原有IP数据报头和取消路由选择服务功能防止了第一和第二计算机网络的未经授权的用户获得必要的IP地址和相对应的实际地址用以在其它网络节点上作通信导向。
第二网络母板进一步提供API切片(API Shim)软件和客户机/服务器软件以允许通过请求第一个网络的节点的通信服务进出第二个计算机网络；此外，动态链接程序库可用于取代或额外增加于API切片软件以允许这种通信。
第二个网络母板进一步建立一个域名、IP地址、及一个次网络掩蔽以允许第二个网络的用户寻找及连接到第二个网络母板。该域名、IP地址及次网络掩蔽是独立于在进入第一个网络主机板的网络接口适配器中使用的原有域名、IP地址及次网络掩蔽。次网络掩蔽的独立性允许一个专用网络连接到本发明的安全系统，以包含尽可能多的节点并独立于由第二个网络母板呈现在公用网络方面的次网络掩蔽。
图1示出了本发明的安全系统的方块图以及与专用及公用互联计算机网络的连接。
本发明的一个实施例如图1所示。在图1中，两个母板12和20共享一共用电源28。母板20连到一公用网络26，如互联网，而母板12连到一专用网络10。另外，母板20可连到另一个专用计算机网络26，例如公司的其它分公司。另外，多个专用及/或公用网络可依照本发明互联。每个公用或专用网络是一组互联节点，节点是任何可共址或共连的装置，其可以是计算机如工作站、文件服务器、Unix或MVS主机或其它数字装置如路由器、打印机、控制器、外设等。
母板12、20分别各自有一对网络适配器14、16和18、22。网络适配器14和22是网络接口适配器，用以分别接收和传输来往专用和公用网络10和26的通信。网络适配器16和18是用以在母板12和20间通信的传送适配器。传送适配器16和18可以是任何以太网络(Ethernet)型式或ARC网(ARCnet)形式的卡，只要它们是一致且相配合的。传送适配器16和18不能在同一个母板上。
每个母板具有标准元件如微处理器、硬盘、随机存贮器(最好有32MB或更多)、ROMBIOS和一个视频卡。此外，每个母板具有自己单独的网络操作软件，其可能是例如Novell Netware(R)或MicrosoftNT(TM)。母板12和20的相互结合使用减少了挤塞及CPU的使用且分隔了专用和公用网络。此外，两个母板可以是(如所述母板12和20)，除了共用电源28外包含最少元件的分离的独立计算机系统。
母板20的网络接口适配器22最好是一个令牌环(token-ring)或以太网卡，该卡通过路由器24经共用存取供应线56K、T1或T3或其它类似线路(以虚线表示)而连到互联网26或其它专用网络。将网络接口适配器22捆扎到互联网或其它专用网络的软件提供了域名服务器信息、一个互联网tcp/ip地址和一个允许公用网络用户去寻找及附连到安全系统前端的次网络掩蔽。例如，Novell Netware(R)版本3.12或4.X和Novell Networe(R)IP(R)或微软NT3.5+(TM)或微软NT3.5+(TM)可用于建立一个通向互联网的不同的TCP/IP连接。网络操作软件提供用户数据报协议(UDP)及传输控制协议(TCP)服务以和互联网或其它专用网络26作来往通信。UDP提供一种不需连接的传递服务以传送和接收来自互联网的发送和接收节点间特殊进程的信息包。TCP在网络互联协议的不需连接包传递服务外加进可靠的流传递。
母板12的网络接口适配器14可以是个令牌环卡、一个以太网络卡或一个ARC网络卡以连到专用网络10，而网络10可以是个局网络或广域网络。将网络接口适配器14捆扎到专用网络10的软件提供TCP/IP服务或IP(IPX)服务以便和专用网络10进行通信。适合网络接口适配器14的网络软件可以是Novell Netware(R)多重协议路由器(MPR)软件或与Novell Netware(R)IP(R)结合使用的Novell Netware(R)版本3.12或4.X。也可以使用其它软件文件服务器软件包如微软WindowsNTA3.5+.，这种软件提供TCP/IP地址和一个次网络掩蔽，它们和用于公用方面母板20上的网络接口适配器的域名服务器、ICP/IP地址和次网络掩蔽等无关且不同，而且也允许专用网络用户寻找及附连到公用网络方面的母板20上。
由专用网络10通过网络接口适配器14接收的TCP/IP格式或IP(IPX)格式的通信，会被转换成互联网包交换(IPX)通信以由传送适配器16传输到公用网络方面的母板20的传送适配器18上。同样地，从公用网络26由网络接口适配器22按TCP/IP格式接收到的通信也会被转换成互联网包交换通信以由传送适配器18传输到专用网络方面的母板12的传送适配器16。转换成IPX格式时从传输于每个母板上网络接口适配器和传送适配器间的通信中去掉上层TCP协议层、包含头信息的原有IP数据报头、源IP地址和目的IP地址。
每个母板上网络操作软件所提供的捆扎指令用于分别取消所有路由选择服务功能，如地址解析协议(ARP)，路由信息协议(RIP)和网络接口适配器14、22与传送适配器16、18间的互联网控制消息协议(ICMP)。IP数据报头的去除和路由服务的取消阻止了连到专用网络装置的物理地址(和以太网络卡一起使用时也称“媒体存取控制”地址)传输。
在公用网络母板20上由网络接口适配器22所使用的网络操作软件最好提供以针对用户实际位置的节点地址或被用以附连的计算机节点地址来辨别每个进入母板20的用户的可能性。当以太网络卡被用作传送适配器时，这项信息会被保留。以太网络卡的使用会允许使用节点地址当作另一个安全特征来阻止多个专用网络用户从非其特定工作站存取母板20。然而当ARC网络卡被用作传送适配器时，这个功能将不可使用，因为节点地址信息不会被保留。
应用程序接口切片(API Shims)或动态链接程序库(DLL)被用于允许从专用网络10来的用户连到母板20以和互联网作进一步的通信。它们提供另外的机制以在称作客户工作站的专用网络装置到当作服务器母板20之间传送可执行码，以便于与互联网作应用程序或文件传输。商用API切片和诸如Winsock相兼容版本1.1X(TM)系列的DLL的使用和在传送适配器16和18间的IPX ODI连接，允许从母板20要求执行应用的可执行码的传输。
除了用于向母板20的API切片或DLL传送可执行码外，此外，客户服务器软件如NCSA马赛克，康乃而大学CELLO，Ameritech/NOTISWINGOPHER，Pegasus EMAIL等被用于通过公用网络母板20向专用网络用户提供互联网服务。这将允许专用网络上的用户使用全部互联网络服务如模拟协议Telnet，Telnet 3270，Telnet5250及传输协议HTTP、FTP、TFTP、不具名FTP、SMTP及P0P3，来观看公用网络。然而，这种在母板20上的客户服务器软件不允许在LAN或WAN上未经授权的专用网络用户去访问专用网络上的Unix(R)、MVS(R)或VM(R)主机，因为访问它们所必需的较高层模拟服务如Telnet已在传送适配器16和18间被取消功能了。
在母板20上最好有额外提供的软件，包含病毒监视检查软件、口令软件，用于扫描用户和监督者帐号以通过发现已知的危险口令来分辨出网络安全中的潜在漏洞并允许加密自动退出软件，以应付不具活性的工作站、安全及存取审核软件，用于审核特别的用户和工作站及公用网络上的目录和文件存取，且也在用户工作站上相似结构的安全服务间提供加密。最好也允许安装在母板20上面同时安装加密及非加密过程的软件如PGP。
为了多个专用或公用计算机网络的互联，应该在每对计算机网络间的介面上提供依照本发明的安全系统。例如，当有三个计算机网络要互联时，可将如图1所示的实施例的安全系统放置在专用网络10和每个第二及第三计算机网络间。
如何在专用网络和公用互联网间使用本发明来引导通信而防止公用互联网用户获得直接和专用网络工作站通信所需的重要地址信息的举例如下：专用网络母板12的网络接口适配器14从专用网络10上的工作站接收到一个TCP/IP格式通信，请求互联网络存取服务。母板20向连到专用网络的工作站提供互联网络存取服务如Telnet模拟协议，文件传输协议如FTP、TFTP和电子邮件服务如SMTP等，其方式是经由可由母板12通过传送适配器16和18间的接口呼叫的API切片或DLL。
向外的通信有一用于辨别是哪个工作站发出通信的IP源地址及一个用于辨认网络接口适配器14的IP目的地址。通信被转换成IPX格式以传输到母板12上的传送适配器16以便进一步传输到公用网络母板20上的传送适配器的18。在将通信转换成IPX格式时从通信中去掉了原有的IP源和目的地址。另外，所有在两个母板间的路由选择服务如ARP、RIP和ICMP都被取消以防止链接连到专用网络的工作站的IP地址与其对应的实际地址的路由更新的传输；对于此方式，从专用网络向外的通信不提供可使公用网络用户直接和专用网络工作站通信的寻址信息。
母板20通过传送适配器18接收IPX通信并重新将其转换为TCP/IP格式的通信，其具有一TCP/IP源地址、一次网络掩蔽和域名以辨别网络接口适配器22为通信的起始。在母板20之前的通信必须通过额外的安全软件如密码控制或保护来传送并存取软件。通信随后被传输到互联网并由母板20等待应答。当接收到应答后，母板20把应答从TCP/IP格式转换回IPX格式并经由传送适配器18至传送适配器16传送回到母板12。母板12进一步地将应答转换成TCP/IP格式以便进行返回到公用网络10的通信。来自公用网络的应答的原有IP源和目的地址同样地在这个转换过程中被去掉。对于回来的通信，路由选择服务也被取消，于是防止了链接连到公用网络的装置的IP地址与其对应实际地址的路由更新的传输。于是，从公用网络回来的通信不提供可使专用网络用户直接和专用网络工作站通信的寻址信息。对于此方式，专用网络用户也被无法获得连到公用网络的装置的寻址信息，所以也无法直接与它们通信，以从专用网络上未经授权地输出数据。
虽然本发明在此依照所附较佳实施例作了详细说明，本领域技术人员可对其做出许多修改或变动。相对应地，所附加的权利要求将涵盖所有此类的修改和变动。

Claims (8)

1.一种防止第一计算机网络和第二计算机网络之间未经授权的通信的安全系统，包含：
一个第一计算机网络母板和一个第二计算机网络母板，该第一和第二网络母板各自分别具有网络接口适配器用以和该第一和第二计算机网络通信；
每个所述网络母板还具有传送适配器用以和所述其它网络母板的所述传送适配器通信，所述传送适配器是彼此一致且相配合的，每个所述网络母板具有网络操作软件来防止每个所述网络母板的所述网络接口适配器与所述传送适配器间路由选择服务信息的传输，每个所述网络母板还具有协议转换软件来防止较上层的协议信息和起始的源和目的地址信息在每个所述网络母板的所述网络接口适配器与所述传送适配器间传送；且至少所述网络母板其中之一具有应用程序界面切片软件以向连接到所述至少一网络母板的计算机提供应用层的通信服务。
2.如权利要求1所述的安全系统，其中所述第二计算机网络是公用的，且所述第二网络母板具有API切片软件用以向连接到所述第二个网络母板的所述网络接口适配器的计算机提供应用层面的通信服务。
3.如权利要求1所述的安全系统，其中每个所述第一和所述第二计算机网络是专用的，且每个所述网络母板具有API切片软件以向连接到每个所述网络母板的所述网络接口适配器的计算机提供应用层的通信服务。
4.如权利要求1所述的安全系统，其中每个所述网络母板位于一个共用单元内且分享一个共用电源。
5.如权利要求1所述的安全系统，其中每个所述网络母板包含一个磁性储存设备和用以从每个所述磁性储存设备将信息备份到每个其它的所述磁性储存设备上的装置。
6.如权利要求5所述的安全系统，其中所述磁性储存装置具相同容量。
7.一种防止在一个第一计算机网络和一个第二计算机网络间未经授权通信的方法，此种方法包含步骤：
从第一计算机网络的第一母板接收一个按第一网络协议格式的通信；
防止来自所述第一计算机网络的路由选择服务通信的传输；
将所述通信转换成一个第二个网络协议格式，由此将起始的源和目的地址信息从该通信中去除；
将所述通信传输到一个第二母板；
在所述第二个母板，再将所述通信转换成所述第一个网络协议格式；
将所述再转换的通信传输到第二所述计算机网络；
借此防止连接到所述第一或第二计算机网络的用户获得路由选择服务信息和地址信息，因而防止连接到所述第一和所述第二计算机网络的计算机间作未经授权的通信。
8.如权利要求7所述的方法，进一步包含在所述第二网络母板，借连接到所述第一网络母板的装置来控制对所述第二计算机网络的访问的步骤。
CN95191513A 1994-12-07 1995-06-08 用于防止未经授权的通信的安全系统和方法 Expired - Fee Related CN1086086C (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
US08/350,541 1994-12-07
US08/350,541 US5550984A (en) 1994-12-07 1994-12-07 Security system for preventing unauthorized communications between networks by translating communications received in ip protocol to non-ip protocol to remove address and routing services information

Publications (2)

Publication Number Publication Date
CN1140519A CN1140519A (zh) 1997-01-15
CN1086086C true CN1086086C (zh) 2002-06-05

Family

ID=23377168

Family Applications (1)

Application Number Title Priority Date Filing Date
CN95191513A Expired - Fee Related CN1086086C (zh) 1994-12-07 1995-06-08 用于防止未经授权的通信的安全系统和方法

Country Status (11)

Country Link
US (1) US5550984A (zh)
EP (1) EP0744107A4 (zh)
JP (1) JP3009737B2 (zh)
KR (1) KR100225574B1 (zh)
CN (1) CN1086086C (zh)
AU (1) AU687575B2 (zh)
CA (1) CA2182777C (zh)
IL (1) IL114178A (zh)
RU (1) RU2152691C1 (zh)
TW (1) TW279292B (zh)
WO (1) WO1996018253A1 (zh)

Families Citing this family (404)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5870474A (en) * 1995-12-04 1999-02-09 Scientific-Atlanta, Inc. Method and apparatus for providing conditional access in connection-oriented, interactive networks with a multiplicity of service providers
US5577209A (en) * 1991-07-11 1996-11-19 Itt Corporation Apparatus and method for providing multi-level security for communication among computers and terminals on a network
EP0746926B1 (en) * 1992-12-14 2003-10-29 The Commonwealth Of Australia Complex document security
US5864683A (en) * 1994-10-12 1999-01-26 Secure Computing Corporartion System for providing secure internetwork by connecting type enforcing secure computers to external network for limiting access to data based on user and process access rights
US5675741A (en) * 1994-10-25 1997-10-07 Cabletron Systems, Inc. Method and apparatus for determining a communications path between two nodes in an Internet Protocol (IP) network
FR2727269B1 (fr) * 1994-11-21 1997-01-17 Allegre Francois Systeme de controle d'acces a des machines informatiques connectees en reseau prive
US5819091A (en) * 1994-12-22 1998-10-06 Arendt; James Wendell User level control of degree of client-side processing
US5822324A (en) * 1995-03-16 1998-10-13 Bell Atlantic Network Services, Inc. Simulcasting digital video programs for broadcast and interactive services
US5651010A (en) * 1995-03-16 1997-07-22 Bell Atlantic Network Services, Inc. Simultaneous overlapping broadcasting of digital programs
US6246767B1 (en) 1995-04-03 2001-06-12 Scientific-Atlanta, Inc. Source authentication of download information in a conditional access system
US20040136532A1 (en) * 1995-04-03 2004-07-15 Pinder Howard G. Partial dual-encrypted stream utilizing program map tables
US6937729B2 (en) * 1995-04-03 2005-08-30 Scientific-Atlanta, Inc. Representing entitlements to service in a conditional access system
US6252964B1 (en) * 1995-04-03 2001-06-26 Scientific-Atlanta, Inc. Authorization of services in a conditional access system
US7224798B2 (en) * 1995-04-03 2007-05-29 Scientific-Atlanta, Inc. Methods and apparatus for providing a partial dual-encrypted stream in a conditional access overlay system
US8548166B2 (en) 1995-04-03 2013-10-01 Anthony J. Wasilewski Method for partially encrypting program data
US5674003A (en) * 1995-04-28 1997-10-07 Andersen; David B. Mechanisms for accessing unique features of telephony networks from a protocol-Independent data transport interface
US5867660A (en) * 1995-05-11 1999-02-02 Bay Networks, Inc. Method and apparatus for communicating between a network workstation and an internet
US5802320A (en) * 1995-05-18 1998-09-01 Sun Microsystems, Inc. System for packet filtering of data packets at a computer network interface
JP3262689B2 (ja) 1995-05-19 2002-03-04 富士通株式会社 遠隔操作システム
US5696898A (en) * 1995-06-06 1997-12-09 Lucent Technologies Inc. System and method for database access control
US6901433B2 (en) * 1995-06-07 2005-05-31 Microsoft Corporation System for providing users with a filtered view of interactive network directory obtains from remote properties cache that provided by an on-line service
US7272639B1 (en) 1995-06-07 2007-09-18 Soverain Software Llc Internet server access control and monitoring systems
US5742845A (en) 1995-06-22 1998-04-21 Datascape, Inc. System for extending present open network communication protocols to communicate with non-standard I/O devices directly coupled to an open network
US5657390A (en) * 1995-08-25 1997-08-12 Netscape Communications Corporation Secure socket layer application program apparatus and method
US5757924A (en) * 1995-09-18 1998-05-26 Digital Secured Networks Techolognies, Inc. Network security device which performs MAC address translation without affecting the IP address
US5889943A (en) * 1995-09-26 1999-03-30 Trend Micro Incorporated Apparatus and method for electronic mail virus detection and elimination
US5774670A (en) 1995-10-06 1998-06-30 Netscape Communications Corporation Persistent client state in a hypertext transfer protocol based client-server system
JP3982848B2 (ja) * 1995-10-19 2007-09-26 富士通株式会社 セキュリティレベル制御装置及びネットワーク通信システム
US5724355A (en) * 1995-10-24 1998-03-03 At&T Corp Network access to internet and stored multimedia services from a terminal supporting the H.320 protocol
WO1997015885A1 (en) 1995-10-25 1997-05-01 Open Market, Inc. Managing transfers of information in a communications network
US5680461A (en) * 1995-10-26 1997-10-21 Sun Microsystems, Inc. Secure network protocol system and method
US5793763A (en) * 1995-11-03 1998-08-11 Cisco Technology, Inc. Security system for network address translation systems
US7113508B1 (en) * 1995-11-03 2006-09-26 Cisco Technology, Inc. Security system for network address translation systems
US6571338B1 (en) * 1995-12-20 2003-05-27 Sun Microsystems Inc. Maintaining packet security in a computer network
JPH09186723A (ja) * 1995-12-29 1997-07-15 Hitachi Ltd ネットワーク通信処理方式
WO1997026734A1 (en) * 1996-01-16 1997-07-24 Raptor Systems, Inc. Transferring encrypted packets over a public network
WO1997026735A1 (en) * 1996-01-16 1997-07-24 Raptor Systems, Inc. Key management for network communication
US5781550A (en) * 1996-02-02 1998-07-14 Digital Equipment Corporation Transparent and secure network gateway
US5826014A (en) * 1996-02-06 1998-10-20 Network Engineering Software Firewall system for protecting network elements connected to a public network
US5898830A (en) * 1996-10-17 1999-04-27 Network Engineering Software Firewall providing enhanced network security and user transparency
US5913024A (en) 1996-02-09 1999-06-15 Secure Computing Corporation Secure server utilizing separate protocol stacks
US5918018A (en) 1996-02-09 1999-06-29 Secure Computing Corporation System and method for achieving network separation
US5684951A (en) * 1996-03-20 1997-11-04 Synopsys, Inc. Method and system for user authorization over a multi-user computer system
US5740361A (en) * 1996-06-03 1998-04-14 Compuserve Incorporated System for remote pass-phrase authentication
US8229844B2 (en) 1996-06-05 2012-07-24 Fraud Control Systems.Com Corporation Method of billing a purchase made over a computer network
US7555458B1 (en) 1996-06-05 2009-06-30 Fraud Control System.Com Corporation Method of billing a purchase made over a computer network
US20030195846A1 (en) 1996-06-05 2003-10-16 David Felger Method of billing a purchase made over a computer network
US5812398A (en) 1996-06-10 1998-09-22 Sun Microsystems, Inc. Method and system for escrowed backup of hotelled world wide web sites
US5894551A (en) * 1996-06-14 1999-04-13 Huggins; Frank Single computer system having multiple security levels
US5812668A (en) * 1996-06-17 1998-09-22 Verifone, Inc. System, method and article of manufacture for verifying the operation of a remote transaction clearance system utilizing a multichannel, extensible, flexible architecture
US5798706A (en) * 1996-06-18 1998-08-25 Raptor Systems, Inc. Detecting unauthorized network communication
US5903732A (en) * 1996-07-03 1999-05-11 Hewlett-Packard Company Trusted gateway agent for web server programs
US5805820A (en) * 1996-07-15 1998-09-08 At&T Corp. Method and apparatus for restricting access to private information in domain name systems by redirecting query requests
US5872847A (en) * 1996-07-30 1999-02-16 Itt Industries, Inc. Using trusted associations to establish trust in a computer network
US6993582B2 (en) * 1996-07-30 2006-01-31 Micron Technology Inc. Mixed enclave operation in a computer network
US6272538B1 (en) 1996-07-30 2001-08-07 Micron Technology, Inc. Method and system for establishing a security perimeter in computer networks
CA2212121C (en) 1996-08-02 2010-03-30 Symbol Technologies, Inc. Improvements in data retrieval
US5828833A (en) * 1996-08-15 1998-10-27 Electronic Data Systems Corporation Method and system for allowing remote procedure calls through a network firewall
US6003084A (en) * 1996-09-13 1999-12-14 Secure Computing Corporation Secure network proxy for connecting entities
US6072942A (en) * 1996-09-18 2000-06-06 Secure Computing Corporation System and method of electronic mail filtering using interconnected nodes
US5950195A (en) * 1996-09-18 1999-09-07 Secure Computing Corporation Generalized security policy management system and method
US5983350A (en) * 1996-09-18 1999-11-09 Secure Computing Corporation Secure firewall supporting different levels of authentication based on address or encryption status
US5951698A (en) * 1996-10-02 1999-09-14 Trend Micro, Incorporated System, apparatus and method for the detection and removal of viruses in macros
US6968319B1 (en) * 1996-10-18 2005-11-22 Microsoft Corporation Electronic bill presentment and payment system with bill dispute capabilities
US6385655B1 (en) 1996-10-24 2002-05-07 Tumbleweed Communications Corp. Method and apparatus for delivering documents over an electronic network
US6192407B1 (en) 1996-10-24 2001-02-20 Tumbleweed Communications Corp. Private, trackable URLs for directed document delivery
US6502191B1 (en) 1997-02-14 2002-12-31 Tumbleweed Communications Corp. Method and system for binary data firewall delivery
US5958015A (en) * 1996-10-29 1999-09-28 Abirnet Ltd. Network session wall passively listening to communication session, with use of access rules, stops further communication between network devices by emulating messages to the devices
US6690669B1 (en) * 1996-11-01 2004-02-10 Hitachi, Ltd. Communicating method between IPv4 terminal and IPv6 terminal and IPv4-IPv6 converting apparatus
EP0988642A4 (en) * 1996-11-12 2001-08-01 Starguide Digital Networks HIGH BANDWIDTH BROADCASTING SYSTEM GIVING MULTI-DESTINATION BROADCASTING LOCALIZED ACCESS TO BROADCAST CONTENT
AU752757B2 (en) * 1996-11-12 2002-09-26 Starguide Digital Networks, Inc. High bandwidth broadcast system having localized multicast access to boardcast content
US6101180A (en) 1996-11-12 2000-08-08 Starguide Digital Networks, Inc. High bandwidth broadcast system having localized multicast access to broadcast content
US6499108B1 (en) 1996-11-19 2002-12-24 R. Brent Johnson Secure electronic mail system
US6578146B2 (en) * 1996-11-19 2003-06-10 R. Brent Johnson System, method and article of manufacture to remotely configure and utilize an emulated device controller via an encrypted validation communication protocol
US5970149A (en) * 1996-11-19 1999-10-19 Johnson; R. Brent Combined remote access and security system
US5878417A (en) * 1996-11-20 1999-03-02 International Business Machines Corporation Method and apparatus for network security in browser based interfaces
US7035906B1 (en) 1996-11-29 2006-04-25 Ellis Iii Frampton E Global network computers
US7506020B2 (en) 1996-11-29 2009-03-17 Frampton E Ellis Global network computers
US7805756B2 (en) * 1996-11-29 2010-09-28 Frampton E Ellis Microchips with inner firewalls, faraday cages, and/or photovoltaic cells
US7926097B2 (en) 1996-11-29 2011-04-12 Ellis Iii Frampton E Computer or microchip protected from the internet by internal hardware
US8225003B2 (en) 1996-11-29 2012-07-17 Ellis Iii Frampton E Computers and microchips with a portion protected by an internal hardware firewall
US6732141B2 (en) 1996-11-29 2004-05-04 Frampton Erroll Ellis Commercial distributed processing by personal computers over the internet
US6167428A (en) 1996-11-29 2000-12-26 Ellis; Frampton E. Personal computer microprocessor firewalls for internet distributed processing
US7024449B1 (en) 1996-11-29 2006-04-04 Ellis Iii Frampton E Global network computers
US6725250B1 (en) * 1996-11-29 2004-04-20 Ellis, Iii Frampton E. Global network computers
WO1999032972A1 (en) * 1997-12-19 1999-07-01 Ellis Frampton E Iii Firewall security protection of parallel processing in a global computer networking environment
US8312529B2 (en) 1996-11-29 2012-11-13 Ellis Frampton E Global network computers
US20050180095A1 (en) * 1996-11-29 2005-08-18 Ellis Frampton E. Global network computers
US7634529B2 (en) * 1996-11-29 2009-12-15 Ellis Iii Frampton E Personal and server computers having microchips with multiple processing units and internal firewalls
US5778174A (en) * 1996-12-10 1998-07-07 U S West, Inc. Method and system for providing secured access to a server connected to a private computer network
US5915087A (en) * 1996-12-12 1999-06-22 Secure Computing Corporation Transparent security proxy for unreliable message exchange protocols
US5898831A (en) * 1996-12-16 1999-04-27 Motorola, Inc. Interactive appliance security system and method
US5864666A (en) * 1996-12-23 1999-01-26 International Business Machines Corporation Web-based administration of IP tunneling on internet firewalls
US6832256B1 (en) * 1996-12-27 2004-12-14 Intel Corporation Firewalls that filter based upon protocol commands
US6041355A (en) * 1996-12-27 2000-03-21 Intel Corporation Method for transferring data between a network of computers dynamically based on tag information
WO1998032065A2 (en) * 1997-01-03 1998-07-23 Fortress Technologies, Inc. Improved network security device
WO1998031124A1 (en) * 1997-01-10 1998-07-16 Hanson Gordon L Reverse proxy server
US5961593A (en) * 1997-01-22 1999-10-05 Lucent Technologies, Inc. System and method for providing anonymous personalized browsing by a proxy system in a network
US6549952B1 (en) 1997-01-28 2003-04-15 International Business Machines Corporation Passing environment variables from an hypertext protocol server application programming interface
US6055575A (en) * 1997-01-28 2000-04-25 Ascend Communications, Inc. Virtual private network system and method
US5896499A (en) * 1997-02-21 1999-04-20 International Business Machines Corporation Embedded security processor
US6169805B1 (en) 1997-02-28 2001-01-02 International Business Machines Corporation System and method of operation for providing user's security on-demand over insecure networks
IL131831A (en) 1997-03-12 2002-12-01 Nomadix Inc Translator or roaming router
GB2323246B (en) 1997-03-15 2002-03-20 Ibm Internet telephony signal conversion
US6075796A (en) 1997-03-17 2000-06-13 At&T Methods and apparatus for providing improved quality of packet transmission in applications such as internet telephony
US6032193A (en) * 1997-03-20 2000-02-29 Niobrara Research And Development Corporation Computer system having virtual circuit address altered by local computer to switch to different physical data link to increase data transmission bandwidth
US6154843A (en) * 1997-03-21 2000-11-28 Microsoft Corporation Secure remote access computing system
US6061448A (en) * 1997-04-01 2000-05-09 Tumbleweed Communications Corp. Method and system for dynamic server document encryption
US5943478A (en) * 1997-04-04 1999-08-24 Flash Communications, Inc. System for immediate popup messaging across the internet
US6260148B1 (en) 1997-04-04 2001-07-10 Microsoft Corporation Methods and systems for message forwarding and property notifications using electronic subscriptions
US6067579A (en) * 1997-04-22 2000-05-23 Bull Hn Information Systems Inc. Method for reducing message translation and traffic through intermediate applications and systems in an internet application
US6108786A (en) * 1997-04-25 2000-08-22 Intel Corporation Monitor network bindings for computer security
US6205489B1 (en) 1999-01-05 2001-03-20 Whowhere, Inc. Method for providing an internet protocol address with a domain name server
US6172986B1 (en) * 1997-05-13 2001-01-09 Hitachi, Ltd. Mobile node, mobile agent and network system
US5805803A (en) * 1997-05-13 1998-09-08 Digital Equipment Corporation Secure web tunnel
US5861883A (en) * 1997-05-13 1999-01-19 International Business Machines Corp. Method and system for portably enabling awareness, touring, and conferencing over the world-wide web using proxies and shared-state servers
US6868089B1 (en) * 1997-05-13 2005-03-15 Hitachi, Ltd. Mobile node, mobile agent-and network system
DE19722915A1 (de) * 1997-05-31 1998-12-03 Alsthom Cge Alcatel Digitaler Dekoder eines Übertragungssystems
US5982783A (en) * 1997-06-16 1999-11-09 Lucent Technologies Inc. Switch distribution via an intermediary switching network
US7515712B2 (en) * 1997-08-01 2009-04-07 Cisco Technology, Inc. Mechanism and apparatus for encapsulation of entitlement authorization in conditional access system
US6061796A (en) * 1997-08-26 2000-05-09 V-One Corporation Multi-access virtual private network
NO305420B1 (no) * 1997-09-02 1999-05-25 Ericsson Telefon Ab L M Anordning ved datakommunikasjonssystem, spesielt ved kommunikasjon via brannmurer
US6199181B1 (en) 1997-09-09 2001-03-06 Perfecto Technologies Ltd. Method and system for maintaining restricted operating environments for application programs or operating systems
US6128603A (en) * 1997-09-09 2000-10-03 Dent; Warren T. Consumer-based system and method for managing and paying electronic billing statements
US7143438B1 (en) * 1997-09-12 2006-11-28 Lucent Technologies Inc. Methods and apparatus for a computer network firewall with multiple domain support
US6671810B1 (en) 1997-09-18 2003-12-30 Intel Corporation Method and system for establishing secure communication over computer networks
US6651166B1 (en) 1998-04-09 2003-11-18 Tumbleweed Software Corp. Sender driven certification enrollment system
WO1999023538A1 (en) * 1997-10-28 1999-05-14 Georgia Tech Research Corporation Adaptive data security system and method
US6275855B1 (en) 1997-11-02 2001-08-14 R. Brent Johnson System, method and article of manufacture to enhance computerized alert system information awareness and facilitate real-time intervention services
US6321374B1 (en) 1997-11-07 2001-11-20 International Business Machines Corporation Application-independent generator to generate a database transaction manager in heterogeneous information systems
US6061739A (en) * 1997-11-26 2000-05-09 International Business Machines Corp. Network address assignment using physical address resolution protocols
US9900305B2 (en) 1998-01-12 2018-02-20 Soverain Ip, Llc Internet server access control and monitoring systems
US6205551B1 (en) 1998-01-29 2001-03-20 Lucent Technologies Inc. Computer security using virus probing
US6055236A (en) * 1998-03-05 2000-04-25 3Com Corporation Method and system for locating network services with distributed network address translation
US7032242B1 (en) 1998-03-05 2006-04-18 3Com Corporation Method and system for distributed network address translation with network security features
US7450560B1 (en) 1998-03-05 2008-11-11 3Com Corporation Method for address mapping in a network access system and a network access device for use therewith
US6353614B1 (en) 1998-03-05 2002-03-05 3Com Corporation Method and protocol for distributed network address translation
US6321336B1 (en) 1998-03-13 2001-11-20 Secure Computing Corporation System and method for redirecting network traffic to provide secure communication
US6453419B1 (en) 1998-03-18 2002-09-17 Secure Computing Corporation System and method for implementing a security policy
US6182226B1 (en) 1998-03-18 2001-01-30 Secure Computing Corporation System and method for controlling interactions between networks
US6141755A (en) * 1998-04-13 2000-10-31 The United States Of America As Represented By The Director Of The National Security Agency Firewall security apparatus for high-speed circuit switched networks
US6865672B1 (en) 1998-05-18 2005-03-08 Spearhead Technologies, Ltd. System and method for securing a computer communication network
US6614894B1 (en) 1998-06-05 2003-09-02 Inet Technologies, Inc. System and method for mass call onset detection in a communications network
US6411604B1 (en) 1998-06-05 2002-06-25 Inet Technologies, Inc. System and method for correlating transaction messages in a communications network
US6529594B1 (en) 1998-06-05 2003-03-04 Inet Technologies, Inc. System and method for generating quality of service statistics for an international communications network
US20020065772A1 (en) * 1998-06-08 2002-05-30 Saliba Bassam A. System, method and program for network user access
US20050192900A1 (en) * 1998-06-08 2005-09-01 Microsoft Corporation Parcel manager for distributed electronic billing system
US6359976B1 (en) 1998-06-08 2002-03-19 Inet Technologies, Inc. System and method for monitoring service quality in a communications network
US6249572B1 (en) 1998-06-08 2001-06-19 Inet Technologies, Inc. Transaction control application part (TCAP) call detail record generation in a communications network
US6381306B1 (en) 1998-06-08 2002-04-30 Inet Technologies, Inc. System and method for monitoring service quality in a communications network
US6311269B2 (en) 1998-06-15 2001-10-30 Lockheed Martin Corporation Trusted services broker for web page fine-grained security labeling
WO1999066383A2 (en) * 1998-06-15 1999-12-23 Dmw Worldwide, Inc. Method and apparatus for assessing the security of a computer system
US6182227B1 (en) 1998-06-22 2001-01-30 International Business Machines Corporation Lightweight authentication system and method for validating a server access request
US6269099B1 (en) 1998-07-01 2001-07-31 3Com Corporation Protocol and method for peer network device discovery
DE19929515A1 (de) * 1998-07-01 2000-01-05 Nat Semiconductor Corp Sicherer Anschlußzugriff auf ein Gerät eines lokalen Netzwerks
DE19831190C1 (de) * 1998-07-11 1999-10-28 Tracto Technik Vorrichtung und Verfahren zum Längsunterteilen erdverlegter Rohre
US6151675A (en) * 1998-07-23 2000-11-21 Tumbleweed Software Corporation Method and apparatus for effecting secure document format conversion
FR2781952B1 (fr) * 1998-07-28 2000-09-08 Cegelec Procede d'attribution d'adresses informatiques entre unites d'un systeme de conduite d'installation industrielle
US6771597B2 (en) 1998-07-31 2004-08-03 International Business Machines Corporation Method and apparatus for transmitting messages
DE69938868D1 (de) * 1998-08-04 2008-07-17 At & T Corp Verfahren zur zuweisung von netzressourcen
US6553417B1 (en) 1998-08-05 2003-04-22 International Business Machines Corporation Internet data access acknowledgment applet and method
US6088796A (en) * 1998-08-06 2000-07-11 Cianfrocca; Francis Secure middleware and server control system for querying through a network firewall
US6717949B1 (en) 1998-08-31 2004-04-06 International Business Machines Corporation System and method for IP network address translation using selective masquerade
AU9093798A (en) * 1998-09-10 2000-04-03 Sanctum, Inc. Method and system for protecting operations of trusted internal networks
US6378074B1 (en) 1998-10-05 2002-04-23 Sentry Technologies Pte Ltd Method for security partitioning of a computer system
US6675226B1 (en) * 1998-11-17 2004-01-06 Rockwell Automation Technologies, Inc. Network interface for industrial controller providing application programmer interface
US8713641B1 (en) 1998-12-08 2014-04-29 Nomadix, Inc. Systems and methods for authorizing, authenticating and accounting users having transparent computer access to a network using a gateway device
US8266266B2 (en) 1998-12-08 2012-09-11 Nomadix, Inc. Systems and methods for providing dynamic network authorization, authentication and accounting
US7194554B1 (en) 1998-12-08 2007-03-20 Nomadix, Inc. Systems and methods for providing dynamic network authorization authentication and accounting
US7107614B1 (en) 1999-01-29 2006-09-12 International Business Machines Corporation System and method for network address translation integration with IP security
US6615357B1 (en) 1999-01-29 2003-09-02 International Business Machines Corporation System and method for network address translation integration with IP security
US7917744B2 (en) * 1999-02-03 2011-03-29 Cybersoft, Inc. Apparatus and methods for intercepting, examining and controlling code, data and files and their transfer in instant messaging and peer-to-peer applications
US7389540B2 (en) * 1999-02-03 2008-06-17 Cybersoft, Inc. Apparatus and methods for intercepting, examining and controlling code, data and files and their transfer
US6763467B1 (en) 1999-02-03 2004-07-13 Cybersoft, Inc. Network traffic intercepting method and system
WO2000054476A1 (en) * 1999-03-10 2000-09-14 Inet Technologies, Inc. System and method for protecting networks from inadvertent, fraudulent and/or malicious signaling
US6434627B1 (en) 1999-03-15 2002-08-13 Cisco Technology, Inc. IP network for accomodating mobile users with incompatible network addressing
US8060926B1 (en) 1999-03-16 2011-11-15 Novell, Inc. Techniques for securely managing and accelerating data delivery
US7904951B1 (en) 1999-03-16 2011-03-08 Novell, Inc. Techniques for securely accelerating external domains locally
US6081900A (en) * 1999-03-16 2000-06-27 Novell, Inc. Secure intranet access
SE521144C2 (sv) * 1999-03-17 2003-10-07 Ericsson Telefon Ab L M Anordning och förfarande som sammankopplar Internet med ett eller flera intranät och/eller extranät
US7349391B2 (en) * 1999-03-19 2008-03-25 F5 Networks, Inc. Tunneling between a bus and a network
US7505455B1 (en) 1999-03-19 2009-03-17 F5 Networks, Inc. Optimizations for tunneling between a bus and a network
US6393484B1 (en) * 1999-04-12 2002-05-21 International Business Machines Corp. System and method for controlled access to shared-medium public and semi-public internet protocol (IP) networks
US6731642B1 (en) 1999-05-03 2004-05-04 3Com Corporation Internet telephony using network address translation
JP3136140B2 (ja) * 1999-06-03 2001-02-19 松下電送システム株式会社 インターネット接続型ｓｏｈｏゲートウェイ装置
US6957346B1 (en) * 1999-06-15 2005-10-18 Ssh Communications Security Ltd. Method and arrangement for providing security through network address translations using tunneling and compensations
US6584508B1 (en) * 1999-07-13 2003-06-24 Networks Associates Technology, Inc. Advanced data guard having independently wrapped components
US7339690B2 (en) * 1999-07-14 2008-03-04 Fargo Electronics, Inc. Identification card printer with client/server
US9300921B2 (en) 1999-07-20 2016-03-29 Comcast Cable Communications, Llc Video security systems and methods
US8520068B2 (en) * 1999-07-20 2013-08-27 Comcast Cable Communications, Llc Video security system
US6690411B2 (en) 1999-07-20 2004-02-10 @Security Broadband Corp. Security system
US7015806B2 (en) * 1999-07-20 2006-03-21 @Security Broadband Corporation Distributed monitoring for a video security system
KR20010011667A (ko) * 1999-07-29 2001-02-15 이종우 보안 기능을 갖는 키보드 및 이를 이용한 시스템
US6356529B1 (en) * 1999-08-12 2002-03-12 Converse, Ltd. System and method for rapid wireless application protocol translation
US6523068B1 (en) 1999-08-27 2003-02-18 3Com Corporation Method for encapsulating and transmitting a message includes private and forwarding network addresses with payload to an end of a tunneling association
US6496867B1 (en) 1999-08-27 2002-12-17 3Com Corporation System and method to negotiate private network addresses for initiating tunneling associations through private and/or public networks
GB2354847A (en) 1999-09-28 2001-04-04 Ibm Publish/subscribe data processing with subscription points for customised message processing
US7454791B1 (en) * 1999-09-23 2008-11-18 International Business Machines Corporation Method and system for checking the security on a distributed computing environment
AU1224101A (en) 1999-10-22 2001-05-08 Nomadix, Inc. Gateway device having an xml interface and associated method
US6768743B1 (en) 1999-10-26 2004-07-27 3Com Corporation Method and system for address server redirection for multiple address networks
US6708219B1 (en) 1999-10-26 2004-03-16 3Com Corporation Method and system for dual-network address utilization
US6781982B1 (en) * 1999-10-26 2004-08-24 3Com Corporation Method and system for allocating persistent private network addresses between private networks
US6675193B1 (en) * 1999-10-29 2004-01-06 Invensys Software Systems Method and system for remote control of a local system
IL133116A0 (en) * 1999-11-24 2001-03-19 Net Safe Comm Ltd Method and apparatus for providing secure multiple-network access at a single workstation
US6728886B1 (en) * 1999-12-01 2004-04-27 Trend Micro Incorporated Distributed virus scanning arrangements and methods therefor
US6996621B1 (en) 1999-12-07 2006-02-07 3Com Corporation Method for supporting secondary address delivery on remote access servers
US20010025377A1 (en) * 1999-12-30 2001-09-27 Hinderks Larry W. High bandwidth transmission system and method having local insertion, delay play and demand play
WO2001050353A1 (en) * 2000-01-04 2001-07-12 Ma'at System and method for anonymous observation and use of premium content
US7324948B2 (en) * 2000-01-14 2008-01-29 Carl Teo Balbach Context-specific contact information
US7089588B2 (en) * 2000-01-19 2006-08-08 Reynolds And Reynolds Holdings, Inc. Performance path method and apparatus for exchanging data among systems using different data formats
US7822683B2 (en) * 2000-01-21 2010-10-26 Microsoft Corporation System and method for secure third-party development and hosting within a financial services network
US7171492B1 (en) 2000-02-24 2007-01-30 Utstarcom, Inc. Method and application programming interface for assigning multiple network addresses
US6990481B1 (en) 2000-02-25 2006-01-24 Coraid, Inc. System and method for content management over network storage devices
US6948074B1 (en) 2000-03-09 2005-09-20 3Com Corporation Method and system for distributed generation of unique random numbers for digital tokens
US6353891B1 (en) 2000-03-20 2002-03-05 3Com Corporation Control channel security for realm specific internet protocol
US7127526B1 (en) * 2000-03-20 2006-10-24 Nortel Networks Limited Method and apparatus for dynamically loading and managing software services on a network device
US6631417B1 (en) 2000-03-29 2003-10-07 Iona Technologies Plc Methods and apparatus for securing access to a computer
US7814208B2 (en) * 2000-04-11 2010-10-12 Science Applications International Corporation System and method for projecting content beyond firewalls
US7146422B1 (en) 2000-05-01 2006-12-05 Intel Corporation Method and apparatus for validating documents based on a validation template
US6732175B1 (en) 2000-04-13 2004-05-04 Intel Corporation Network apparatus for switching based on content of application data
US6578140B1 (en) * 2000-04-13 2003-06-10 Claude M Policard Personal computer having a master computer system and an internet computer system and monitoring a condition of said master and internet computer systems
US6718385B1 (en) * 2000-05-19 2004-04-06 Galaxy Computer Services, Inc. System for controlling movement of information using an information diode between a source network and a destination network
US20040073617A1 (en) 2000-06-19 2004-04-15 Milliken Walter Clark Hash-based systems and methods for detecting and preventing transmission of unwanted e-mail
US7441270B1 (en) 2000-07-06 2008-10-21 Intel Corporation Connectivity in the presence of barriers
AU2001273489A1 (en) * 2000-07-28 2002-02-13 Dialpad Communications, Inc. Data exchange with computers within a secure network
US6668282B1 (en) 2000-08-02 2003-12-23 International Business Machines Corporation System and method to monitor and determine if an active IPSec tunnel has become disabled
US6915436B1 (en) 2000-08-02 2005-07-05 International Business Machines Corporation System and method to verify availability of a back-up secure tunnel
US6944673B2 (en) * 2000-09-08 2005-09-13 The Regents Of The University Of Michigan Method and system for profiling network flows at a measurement point within a computer network
US20020032871A1 (en) * 2000-09-08 2002-03-14 The Regents Of The University Of Michigan Method and system for detecting, tracking and blocking denial of service attacks over a computer network
EP1334430A4 (en) * 2000-09-29 2005-04-20 Ugs Plm Solutions Inc COMPUTER PROGRAM FOR MAINTAINING CONTINUOUS FIREWALL BEAM CONNECTIONS
US7028051B1 (en) * 2000-09-29 2006-04-11 Ugs Corp. Method of real-time business collaboration
US7218634B1 (en) * 2000-10-10 2007-05-15 Nortel Networks Limited Assisted power-up and hand-off system and method
US6993506B2 (en) 2000-12-05 2006-01-31 Jgr Acquisition, Inc. Method and device utilizing polymorphic data in e-commerce
JP2002197051A (ja) * 2000-12-11 2002-07-12 Internatl Business Mach Corp <Ibm> 通信先を決定するための通信アダプタの選択方法、通信アダプタの設定方法、コンピュータ装置、携帯情報機器、および記憶媒体
US6980564B1 (en) * 2001-01-02 2005-12-27 Nortel Networks Limited Modular data communication equipment system
US8510476B2 (en) * 2001-02-15 2013-08-13 Brooks Automation, Inc. Secure remote diagnostic customer support network
US7404212B2 (en) * 2001-03-06 2008-07-22 Cybersoft, Inc. Apparatus and methods for intercepting, examining and controlling code, data and files and their transfer
US7512407B2 (en) * 2001-03-26 2009-03-31 Tencent (Bvi) Limited Instant messaging system and method
US7730528B2 (en) * 2001-06-01 2010-06-01 Symantec Corporation Intelligent secure data manipulation apparatus and method
WO2003009563A1 (en) * 2001-07-20 2003-01-30 Cyberdfnz Inc. Processes and systems for secured information exchange using computer hardware
US7293179B2 (en) * 2001-08-01 2007-11-06 Johnson R Brent System and method for virtual tape management with remote archival and retrieval via an encrypted validation communication protocol
US7308710B2 (en) * 2001-09-28 2007-12-11 Jp Morgan Chase Bank Secured FTP architecture
US20030105830A1 (en) * 2001-12-03 2003-06-05 Duc Pham Scalable network media access controller and methods
EP1320239B1 (en) * 2001-12-13 2007-02-07 Sony Corporation System and method for access control in storage area networks
US7120791B2 (en) * 2002-01-25 2006-10-10 Cranite Systems, Inc. Bridged cryptographic VLAN
US7188364B2 (en) 2001-12-20 2007-03-06 Cranite Systems, Inc. Personal virtual bridged local area networks
US7986937B2 (en) * 2001-12-20 2011-07-26 Microsoft Corporation Public access point
US7334049B1 (en) * 2001-12-21 2008-02-19 Cisco Technology, Inc. Apparatus and methods for performing network address translation (NAT) in a fully connected mesh with NAT virtual interface (NVI)
US6658091B1 (en) * 2002-02-01 2003-12-02 @Security Broadband Corp. LIfestyle multimedia security system
US7430762B2 (en) 2002-03-01 2008-09-30 Fargo Electronics, Inc. Identification card manufacturing security
US7693947B2 (en) 2002-03-08 2010-04-06 Mcafee, Inc. Systems and methods for graphically displaying messaging traffic
US20030172291A1 (en) 2002-03-08 2003-09-11 Paul Judge Systems and methods for automated whitelisting in monitored communications
US7694128B2 (en) 2002-03-08 2010-04-06 Mcafee, Inc. Systems and methods for secure communication delivery
US20060015942A1 (en) 2002-03-08 2006-01-19 Ciphertrust, Inc. Systems and methods for classification of messaging entities
US8578480B2 (en) 2002-03-08 2013-11-05 Mcafee, Inc. Systems and methods for identifying potentially malicious messages
US6941467B2 (en) 2002-03-08 2005-09-06 Ciphertrust, Inc. Systems and methods for adaptive message interrogation through multiple queues
US7903549B2 (en) 2002-03-08 2011-03-08 Secure Computing Corporation Content-based policy compliance systems and methods
US7124438B2 (en) * 2002-03-08 2006-10-17 Ciphertrust, Inc. Systems and methods for anomaly detection in patterns of monitored communications
US7458098B2 (en) 2002-03-08 2008-11-25 Secure Computing Corporation Systems and methods for enhancing electronic communication security
US7870203B2 (en) 2002-03-08 2011-01-11 Mcafee, Inc. Methods and systems for exposing messaging reputation to an end user
US8561167B2 (en) 2002-03-08 2013-10-15 Mcafee, Inc. Web reputation scoring
US8132250B2 (en) 2002-03-08 2012-03-06 Mcafee, Inc. Message profiling systems and methods
US6868493B2 (en) * 2002-03-13 2005-03-15 Honeywell International, Inc. System and method for panel linking in a security system
US20030177387A1 (en) * 2002-03-15 2003-09-18 Cyrill Osterwalder Secured web entry server
US7805766B2 (en) * 2002-06-21 2010-09-28 Thomson Licensing Broadcast router having a shared configuration repository
US6931530B2 (en) 2002-07-22 2005-08-16 Vormetric, Inc. Secure network file access controller implementing access control and auditing
US7334124B2 (en) * 2002-07-22 2008-02-19 Vormetric, Inc. Logical access block processing protocol for transparent secure file storage
US6678828B1 (en) * 2002-07-22 2004-01-13 Vormetric, Inc. Secure network file access control system
US20040030904A1 (en) * 2002-08-12 2004-02-12 Zeromile Corp. Novel method and system for using optical disk drive as biometric card reader for secure online user authentication
US8260593B2 (en) 2002-09-18 2012-09-04 Siemens Product Lifecycle Management Software Inc. System and method for simulating human movement
US7143288B2 (en) * 2002-10-16 2006-11-28 Vormetric, Inc. Secure file system server architecture and methods
US7620815B2 (en) 2003-02-21 2009-11-17 Fargo Electronics, Inc. Credential production using a secured consumable supply
US7864780B1 (en) 2003-04-29 2011-01-04 Cisco Technology, Inc. Apparatus and methods for handling name resolution over IPV6 using NAT-PT and DNS-ALG
AU2004237046B2 (en) * 2003-05-02 2008-02-28 Giritech A/S Pervasive, user-centric network security enabled by dynamic datagram switch and an on-demand authentication and encryption scheme through mobile intelligent data carriers
EP1480406A1 (en) * 2003-05-19 2004-11-24 Sony International (Europe) GmbH Confinement of data transfers to a local area network
WO2005010644A2 (en) * 2003-07-31 2005-02-03 Eutech Cybernetics Pte Ltd System and method for increased network security
US7715326B2 (en) * 2003-08-22 2010-05-11 Eutech Cybernetics Pte. Ltd. Webserver alternative for increased security
US7343485B1 (en) * 2003-09-03 2008-03-11 Cisco Technology, Inc. System and method for maintaining protocol status information in a network device
US8788823B1 (en) 2003-09-03 2014-07-22 Cisco Technology, Inc. System and method for filtering network traffic
CN1879117A (zh) * 2003-09-11 2006-12-13 法格电子公司 证卡制造系统的供应品定购和诊断报告
US8396216B2 (en) 2003-11-21 2013-03-12 Howard G. Pinder Partial dual-encryption using program map tables
US7305552B2 (en) * 2003-11-26 2007-12-04 Siemens Communications, Inc. Screen saver displaying identity content
US8065720B1 (en) 2004-01-06 2011-11-22 Novell, Inc. Techniques for managing secure communications
US11201755B2 (en) 2004-03-16 2021-12-14 Icontrol Networks, Inc. Premises system management using status signal
US11677577B2 (en) 2004-03-16 2023-06-13 Icontrol Networks, Inc. Premises system management using status signal
US11811845B2 (en) 2004-03-16 2023-11-07 Icontrol Networks, Inc. Communication protocols over internet protocol (IP) networks
US20160065414A1 (en) 2013-06-27 2016-03-03 Ken Sundermeyer Control system user interface
US9141276B2 (en) 2005-03-16 2015-09-22 Icontrol Networks, Inc. Integrated interface for mobile device
US9609003B1 (en) 2007-06-12 2017-03-28 Icontrol Networks, Inc. Generating risk profile using data of home monitoring and security system
US10380871B2 (en) 2005-03-16 2019-08-13 Icontrol Networks, Inc. Control system user interface
US11582065B2 (en) 2007-06-12 2023-02-14 Icontrol Networks, Inc. Systems and methods for device communication
US10200504B2 (en) 2007-06-12 2019-02-05 Icontrol Networks, Inc. Communication protocols over internet protocol (IP) networks
US10444964B2 (en) 2007-06-12 2019-10-15 Icontrol Networks, Inc. Control system user interface
US8988221B2 (en) 2005-03-16 2015-03-24 Icontrol Networks, Inc. Integrated security system with parallel processing architecture
US10375253B2 (en) 2008-08-25 2019-08-06 Icontrol Networks, Inc. Security system with networked touchscreen and gateway
US10339791B2 (en) 2007-06-12 2019-07-02 Icontrol Networks, Inc. Security network integrated with premise security system
US11916870B2 (en) 2004-03-16 2024-02-27 Icontrol Networks, Inc. Gateway registry methods and systems
US11368327B2 (en) 2008-08-11 2022-06-21 Icontrol Networks, Inc. Integrated cloud system for premises automation
US8635350B2 (en) 2006-06-12 2014-01-21 Icontrol Networks, Inc. IP device discovery systems and methods
US10522026B2 (en) 2008-08-11 2019-12-31 Icontrol Networks, Inc. Automation system user interface with three-dimensional display
US11316958B2 (en) 2008-08-11 2022-04-26 Icontrol Networks, Inc. Virtual device systems and methods
US11159484B2 (en) 2004-03-16 2021-10-26 Icontrol Networks, Inc. Forming a security network including integrated security system components and network devices
US11368429B2 (en) 2004-03-16 2022-06-21 Icontrol Networks, Inc. Premises management configuration and control
US9729342B2 (en) 2010-12-20 2017-08-08 Icontrol Networks, Inc. Defining and implementing sensor triggered response rules
US10142392B2 (en) 2007-01-24 2018-11-27 Icontrol Networks, Inc. Methods and systems for improved system performance
US20090077623A1 (en) 2005-03-16 2009-03-19 Marc Baum Security Network Integrating Security System and Network Devices
US11277465B2 (en) 2004-03-16 2022-03-15 Icontrol Networks, Inc. Generating risk profile using data of home monitoring and security system
US10721087B2 (en) 2005-03-16 2020-07-21 Icontrol Networks, Inc. Method for networked touchscreen with integrated interfaces
US8963713B2 (en) 2005-03-16 2015-02-24 Icontrol Networks, Inc. Integrated security network with security alarm signaling system
US10382452B1 (en) 2007-06-12 2019-08-13 Icontrol Networks, Inc. Communication protocols in integrated systems
US11489812B2 (en) 2004-03-16 2022-11-01 Icontrol Networks, Inc. Forming a security network including integrated security system components and network devices
EP1738540B1 (en) 2004-03-16 2017-10-04 Icontrol Networks, Inc. Premises management system
US10156959B2 (en) 2005-03-16 2018-12-18 Icontrol Networks, Inc. Cross-client sensor user interface in an integrated security network
US10313303B2 (en) 2007-06-12 2019-06-04 Icontrol Networks, Inc. Forming a security network including integrated security system components and network devices
US7711796B2 (en) 2006-06-12 2010-05-04 Icontrol Networks, Inc. Gateway registry methods and systems
US11113950B2 (en) 2005-03-16 2021-09-07 Icontrol Networks, Inc. Gateway integrated with premises security system
US9191228B2 (en) 2005-03-16 2015-11-17 Icontrol Networks, Inc. Cross-client sensor user interface in an integrated security network
US10237237B2 (en) 2007-06-12 2019-03-19 Icontrol Networks, Inc. Communication protocols in integrated systems
US11343380B2 (en) 2004-03-16 2022-05-24 Icontrol Networks, Inc. Premises system automation
US11244545B2 (en) 2004-03-16 2022-02-08 Icontrol Networks, Inc. Cross-client sensor user interface in an integrated security network
US9531593B2 (en) 2007-06-12 2016-12-27 Icontrol Networks, Inc. Takeover processes in security network integrated with premise security system
CN1973469A (zh) 2004-05-03 2007-05-30 法格电子公司 受管理的证件发行
US7669240B2 (en) * 2004-07-22 2010-02-23 International Business Machines Corporation Apparatus, method and program to detect and control deleterious code (virus) in computer network
US20060059129A1 (en) * 2004-09-10 2006-03-16 Hideyuki Azuma Public relations communication methods and systems
US20060069730A1 (en) * 2004-09-10 2006-03-30 Hideyuki Azuma Public relations communication methods and systems
US8635690B2 (en) 2004-11-05 2014-01-21 Mcafee, Inc. Reputation based message processing
US9083748B2 (en) * 2004-12-16 2015-07-14 Hewlett-Packard Development Company, L.P. Modelling network to assess security properties
US20110128378A1 (en) 2005-03-16 2011-06-02 Reza Raji Modular Electronic Display Platform
US9306809B2 (en) 2007-06-12 2016-04-05 Icontrol Networks, Inc. Security system with networked touchscreen
US10999254B2 (en) 2005-03-16 2021-05-04 Icontrol Networks, Inc. System for data routing in networks
US11615697B2 (en) 2005-03-16 2023-03-28 Icontrol Networks, Inc. Premise management systems and methods
US11700142B2 (en) 2005-03-16 2023-07-11 Icontrol Networks, Inc. Security network integrating security system and network devices
US20170180198A1 (en) 2008-08-11 2017-06-22 Marc Baum Forming a security network including integrated security system components
US11496568B2 (en) 2005-03-16 2022-11-08 Icontrol Networks, Inc. Security system with networked touchscreen
US20120324566A1 (en) 2005-03-16 2012-12-20 Marc Baum Takeover Processes In Security Network Integrated With Premise Security System
JP4575219B2 (ja) 2005-04-12 2010-11-04 株式会社東芝 セキュリティゲートウェイシステムとその方法およびプログラム
US7937480B2 (en) 2005-06-02 2011-05-03 Mcafee, Inc. Aggregation of reputation data
US8099187B2 (en) 2005-08-18 2012-01-17 Hid Global Corporation Securely processing and tracking consumable supplies and consumable material
DE102005046935B4 (de) * 2005-09-30 2009-07-23 Nokia Siemens Networks Gmbh & Co.Kg Netzwerkzugangsknotenrechner zu einem Kommunikationsnetzwerk, Kommunikationssystem und Verfahren zum Zuweisen einer Schutzvorrichtung
RU2005139594A (ru) * 2005-12-19 2007-06-27 Григорий Гемфриевич Дмитриев (RU) Устройство разграничения доступа между двумя сетями передачи данных в протоколе ip-межсетевой экран без операционной системы (варианты)
US20070214232A1 (en) * 2006-03-07 2007-09-13 Nokia Corporation System for Uniform Addressing of Home Resources Regardless of Remote Clients Network Location
US10079839B1 (en) 2007-06-12 2018-09-18 Icontrol Networks, Inc. Activation of gateway device
US8763114B2 (en) 2007-01-24 2014-06-24 Mcafee, Inc. Detecting image spam
US8179798B2 (en) 2007-01-24 2012-05-15 Mcafee, Inc. Reputation based connection throttling
US11706279B2 (en) 2007-01-24 2023-07-18 Icontrol Networks, Inc. Methods and systems for data communication
US7949716B2 (en) 2007-01-24 2011-05-24 Mcafee, Inc. Correlation and analysis of entity attributes
US7779156B2 (en) 2007-01-24 2010-08-17 Mcafee, Inc. Reputation based load balancing
US8214497B2 (en) 2007-01-24 2012-07-03 Mcafee, Inc. Multi-dimensional reputation scoring
JP4571159B2 (ja) * 2007-02-21 2010-10-27 三菱電機株式会社 ネットワークのセキュリティ保護装置
US7633385B2 (en) 2007-02-28 2009-12-15 Ucontrol, Inc. Method and system for communicating with and controlling an alarm system from a remote server
US8451986B2 (en) 2007-04-23 2013-05-28 Icontrol Networks, Inc. Method and system for automatically providing alternate network access for telecommunications
US10616075B2 (en) 2007-06-12 2020-04-07 Icontrol Networks, Inc. Communication protocols in integrated systems
US11237714B2 (en) 2007-06-12 2022-02-01 Control Networks, Inc. Control system user interface
US11212192B2 (en) 2007-06-12 2021-12-28 Icontrol Networks, Inc. Communication protocols in integrated systems
US11423756B2 (en) 2007-06-12 2022-08-23 Icontrol Networks, Inc. Communication protocols in integrated systems
US10523689B2 (en) 2007-06-12 2019-12-31 Icontrol Networks, Inc. Communication protocols over internet protocol (IP) networks
US11646907B2 (en) 2007-06-12 2023-05-09 Icontrol Networks, Inc. Communication protocols in integrated systems
US10666523B2 (en) 2007-06-12 2020-05-26 Icontrol Networks, Inc. Communication protocols in integrated systems
US10498830B2 (en) 2007-06-12 2019-12-03 Icontrol Networks, Inc. Wi-Fi-to-serial encapsulation in systems
US11316753B2 (en) 2007-06-12 2022-04-26 Icontrol Networks, Inc. Communication protocols in integrated systems
US11601810B2 (en) 2007-06-12 2023-03-07 Icontrol Networks, Inc. Communication protocols in integrated systems
US10051078B2 (en) 2007-06-12 2018-08-14 Icontrol Networks, Inc. WiFi-to-serial encapsulation in systems
US10389736B2 (en) 2007-06-12 2019-08-20 Icontrol Networks, Inc. Communication protocols in integrated systems
US11089122B2 (en) 2007-06-12 2021-08-10 Icontrol Networks, Inc. Controlling data routing among networks
US10423309B2 (en) 2007-06-12 2019-09-24 Icontrol Networks, Inc. Device integration framework
US11218878B2 (en) 2007-06-12 2022-01-04 Icontrol Networks, Inc. Communication protocols in integrated systems
US10223903B2 (en) 2010-09-28 2019-03-05 Icontrol Networks, Inc. Integrated security system with parallel processing architecture
US11831462B2 (en) 2007-08-24 2023-11-28 Icontrol Networks, Inc. Controlling data routing in premises management systems
US8185930B2 (en) 2007-11-06 2012-05-22 Mcafee, Inc. Adjusting filter or classification control settings
US8045458B2 (en) 2007-11-08 2011-10-25 Mcafee, Inc. Prioritizing network traffic
US8125796B2 (en) 2007-11-21 2012-02-28 Frampton E. Ellis Devices with faraday cages and internal flexibility sipes
US11916928B2 (en) 2008-01-24 2024-02-27 Icontrol Networks, Inc. Communication protocols over internet protocol (IP) networks
US8160975B2 (en) 2008-01-25 2012-04-17 Mcafee, Inc. Granular support vector machine with random granularity
US8589503B2 (en) 2008-04-04 2013-11-19 Mcafee, Inc. Prioritizing network traffic
US20170185278A1 (en) 2008-08-11 2017-06-29 Icontrol Networks, Inc. Automation system user interface
US11729255B2 (en) 2008-08-11 2023-08-15 Icontrol Networks, Inc. Integrated cloud system with lightweight gateway for premises automation
US11758026B2 (en) 2008-08-11 2023-09-12 Icontrol Networks, Inc. Virtual device systems and methods
US11258625B2 (en) 2008-08-11 2022-02-22 Icontrol Networks, Inc. Mobile premises automation platform
US10530839B2 (en) 2008-08-11 2020-01-07 Icontrol Networks, Inc. Integrated cloud system with lightweight gateway for premises automation
US11792036B2 (en) 2008-08-11 2023-10-17 Icontrol Networks, Inc. Mobile premises automation platform
US8082333B2 (en) * 2008-11-10 2011-12-20 Cisco Technology, Inc. DHCP proxy for static host
FR2940566B1 (fr) 2008-12-18 2011-03-18 Electricite De France Procede et dispositif de transfert securise de donnees numeriques
US8638211B2 (en) 2009-04-30 2014-01-28 Icontrol Networks, Inc. Configurable controller and interface for home SMA, phone and multimedia
CN101588363B (zh) * 2009-06-18 2011-12-14 天津大学 建立基于程序切片的Web服务安全分析模型的方法
US8209714B2 (en) * 2009-10-30 2012-06-26 At&T Intellectual Property I, L.P. System and method of problem detection in received internet data, video data, and voice data
US20110225645A1 (en) * 2010-01-26 2011-09-15 Ellis Frampton E Basic architecture for secure internet computers
US8255986B2 (en) 2010-01-26 2012-08-28 Frampton E. Ellis Methods of securely controlling through one or more separate private networks an internet-connected computer having one or more hardware-based inner firewalls or access barriers
US8429735B2 (en) 2010-01-26 2013-04-23 Frampton E. Ellis Method of using one or more secure private networks to actively configure the hardware of a computer or microchip
CA2825850A1 (en) * 2010-01-29 2011-08-04 Frampton E. Ellis The basic architecture for secure internet computers
US8621638B2 (en) 2010-05-14 2013-12-31 Mcafee, Inc. Systems and methods for classification of messaging entities
JP2010220263A (ja) * 2010-07-06 2010-09-30 Mitsubishi Electric Corp ネットワークのセキュリティ保護装置
US8836467B1 (en) 2010-09-28 2014-09-16 Icontrol Networks, Inc. Method, system and apparatus for automated reporting of account and sensor zone information to a central station
US8904036B1 (en) * 2010-12-07 2014-12-02 Chickasaw Management Company, Llc System and method for electronic secure geo-location obscurity network
US11750414B2 (en) 2010-12-16 2023-09-05 Icontrol Networks, Inc. Bidirectional security sensor communication for a premises security system
US9147337B2 (en) 2010-12-17 2015-09-29 Icontrol Networks, Inc. Method and system for logging security event data
CN102118313B (zh) * 2011-01-28 2013-04-10 杭州华三通信技术有限公司 Ip地址探测的方法及设备
DE102011000876A1 (de) * 2011-02-22 2012-08-23 Dimensio Informatics Gmbh Netzwerktrennung
RU2490703C1 (ru) * 2012-06-04 2013-08-20 Федеральное государственное казенное военное образовательное учреждение высшего профессионального образования "ВОЕННАЯ АКАДЕМИЯ СВЯЗИ имени Маршала Советского Союза С.М. Буденного" Министерства обороны Российской Федерации Способ защиты канала связи вычислительной сети
RU2578697C2 (ru) * 2013-07-31 2016-03-27 Общество с ограниченной ответственностью "НОВОТЕКС" АППАРАТНО-ПРОГРАММНЫЙ КОМПЛЕКС КОММУТАЦИИ "Lan Lzoe"
US11146637B2 (en) 2014-03-03 2021-10-12 Icontrol Networks, Inc. Media content management
US11405463B2 (en) 2014-03-03 2022-08-02 Icontrol Networks, Inc. Media content management
US9503422B2 (en) 2014-05-09 2016-11-22 Saudi Arabian Oil Company Apparatus, systems, platforms, and methods for securing communication data exchanges between multiple networks for industrial and non-industrial applications
RU2656839C1 (ru) * 2017-04-26 2018-06-06 Федеральное государственное казенное военное образовательное учреждение высшего образования "Краснодарское высшее военное училище имени генерала армии С.М. Штеменко" Способ маскирования структуры сети связи
RU191373U1 (ru) * 2019-06-13 2019-08-02 федеральное государственное казенное военное образовательное учреждение высшего образования "Краснодарское высшее военное училище имени генерала армии С.М. Штеменко" Министерства обороны Российской Федерации Мультисервисный маршрутизатор с маскированием информационных направлений

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5416842A (en) * 1994-06-10 1995-05-16 Sun Microsystems, Inc. Method and apparatus for key-management scheme for use with internet protocols at site firewalls
US5432580A (en) * 1992-11-30 1995-07-11 Fuji Photo Film Co., Ltd. Photo finishing system

Family Cites Families (25)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4058672A (en) * 1976-11-10 1977-11-15 International Telephone And Telegraph Corporation Packet-switched data communications system
DE2658065A1 (de) * 1976-12-22 1978-07-06 Ibm Deutschland Maschinelles chiffrieren und dechiffrieren
JPS56109057A (en) * 1980-02-04 1981-08-29 Hitachi Ltd Data communication system
DE3210439A1 (de) * 1982-03-22 1983-09-22 Siemens AG, 1000 Berlin und 8000 München Verfahren und schaltungsanordnung zum uebertragen von nachrichtensignalen zwischen mit unterschiedlichen uebertragungsprozeduren arbeitenden vermittlungsstellen eines ersten vermittlungsnetzes und eines zweiten vermittlungsnetzes
US4672572A (en) * 1984-05-21 1987-06-09 Gould Inc. Protector system for computer access and use
US4799153A (en) * 1984-12-14 1989-01-17 Telenet Communications Corporation Method and apparatus for enhancing security of communications in a packet-switched data communications system
US4944006A (en) * 1987-03-12 1990-07-24 Zenith Electronics Corporation Secure data packet transmission system and method
US4924513A (en) * 1987-09-25 1990-05-08 Digital Equipment Corporation Apparatus and method for secure transmission of data over an unsecure transmission channel
US5021949A (en) * 1988-02-29 1991-06-04 International Business Machines Corporation Method and apparatus for linking an SNA host to a remote SNA host over a packet switched communications network
US5105424A (en) * 1988-06-02 1992-04-14 California Institute Of Technology Inter-computer message routing system with each computer having separate routinng automata for each dimension of the network
US5249292A (en) * 1989-03-31 1993-09-28 Chiappa J Noel Data packet switch using a primary processing unit to designate one of a plurality of data stream control circuits to selectively handle the header processing of incoming packets in one data packet stream
US5113499A (en) * 1989-04-28 1992-05-12 Sprint International Communications Corp. Telecommunication access management system for a packet switching network
US5081678A (en) * 1989-06-28 1992-01-14 Digital Equipment Corporation Method for utilizing an encrypted key as a key identifier in a data packet in a computer network
US5163151A (en) * 1990-03-22 1992-11-10 Square D Company System for processing and prioritizing alarms from devices on data communications network
JP2701513B2 (ja) * 1990-03-29 1998-01-21 日本電気株式会社 回線切替制御方式
US5278955A (en) * 1990-06-18 1994-01-11 International Business Machines Corporation Open systems mail handling capability in a multi-user environment
US5086469A (en) * 1990-06-29 1992-02-04 Digital Equipment Corporation Encryption with selective disclosure of protocol identifiers
GB9015799D0 (en) * 1990-07-18 1991-06-12 Plessey Telecomm A data communication system
CA2065578C (en) * 1991-04-22 1999-02-23 David W. Carr Packet-based data compression method
US5321695A (en) * 1991-05-01 1994-06-14 Hewlett-Packard Company Port arrival identification for computer network packets
US5216670A (en) * 1991-07-03 1993-06-01 International Business Machines Corporation Message stripping protocol for a communication network
US5280581A (en) * 1992-02-27 1994-01-18 Hughes Aircraft Company Enhanced call-back authentication method and apparatus for remotely accessing a host computer from a plurality of remote sites
US5311593A (en) * 1992-05-13 1994-05-10 Chipcom Corporation Security system for a network concentrator
IL102394A (en) * 1992-07-02 1996-08-04 Lannet Data Communications Ltd Method and apparatus for secure data transmission
US5353283A (en) * 1993-05-28 1994-10-04 Bell Communications Research, Inc. General internet method for routing packets in a communications network

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5432580A (en) * 1992-11-30 1995-07-11 Fuji Photo Film Co., Ltd. Photo finishing system
US5416842A (en) * 1994-06-10 1995-05-16 Sun Microsystems, Inc. Method and apparatus for key-management scheme for use with internet protocols at site firewalls

Also Published As

Publication number Publication date
KR100225574B1 (ko) 1999-10-15
IL114178A (en) 1998-08-16
RU2152691C1 (ru) 2000-07-10
CA2182777C (en) 2000-07-18
AU687575B2 (en) 1998-02-26
MX9602964A (es) 1997-12-31
CA2182777A1 (en) 1996-06-13
EP0744107A1 (en) 1996-11-27
CN1140519A (zh) 1997-01-15
JPH09505719A (ja) 1997-06-03
AU2820295A (en) 1996-06-26
US5550984A (en) 1996-08-27
EP0744107A4 (en) 2003-03-19
WO1996018253A1 (en) 1996-06-13
TW279292B (zh) 1996-06-21
JP3009737B2 (ja) 2000-02-14
IL114178A0 (en) 1995-10-31
KR970700969A (ko) 1997-02-12

Similar Documents

Publication Publication Date Title
CN1086086C (zh) 用于防止未经授权的通信的安全系统和方法
US5896499A (en) Embedded security processor
CN101083607B (zh) 一种用于内外网络隔离的因特网访问服务器及其处理方法
US6351810B2 (en) Self-contained and secured access to remote servers
JP3262689B2 (ja) 遠隔操作システム
US7231665B1 (en) Prevention of operating system identification through fingerprinting techniques
Lodin et al. Firewalls fend off invasions from the net
CN101802837A (zh) 通过对设备的动态地址隔离来提供网络和计算机防火墙保护的系统和方法
CN1364374A (zh) 安全会话定序的代理系统及其方法
JPH09214493A (ja) ネットワークシステム
JP3687782B2 (ja) 不正侵入防止システム
WO2006073883A2 (en) System and method for preventing unauthorized access to computer devices
WO2004047402A1 (en) Management of network security domains
CA2136150C (en) Apparatus and method for providing a secure gateway for communication and data exchanges between networks
CN107979609B (zh) 后反应式防护方法及自主学习型防火墙系统
FI109154B (fi) Laite ja menetelmä tietoturvallisuuden parantamiseksi
JP2002084326A (ja) 被サービス装置、センタ装置、及びサービス装置
Cisco Glossary
Cisco Glossary
Cisco Glossary
Desai et al. System insecurity–firewalls
AU2001245048C1 (en) Electronic security system and scheme for a communications network
MXPA96002964A (en) Security system for interconnected computer networks
CN114124477A (zh) 一种业务服务系统及方法
EP1547340B1 (en) Method, system and computer program product for transmitting a media stream between client terminals

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant
C19 Lapse of patent right due to non-payment of the annual fee
CF01 Termination of patent right due to non-payment of annual fee