WO2005117327A3 - A system, method, and computer program product for updating the states of a firewall - Google Patents

A system, method, and computer program product for updating the states of a firewall Download PDF

Info

Publication number
WO2005117327A3
WO2005117327A3 PCT/IB2005/001490 IB2005001490W WO2005117327A3 WO 2005117327 A3 WO2005117327 A3 WO 2005117327A3 IB 2005001490 W IB2005001490 W IB 2005001490W WO 2005117327 A3 WO2005117327 A3 WO 2005117327A3
Authority
WO
WIPO (PCT)
Prior art keywords
computer program
program product
firewall
updating
states
Prior art date
Application number
PCT/IB2005/001490
Other languages
French (fr)
Other versions
WO2005117327A2 (en
Inventor
Franck Le
Stefano Faccin
Original Assignee
Nokia Inc
Franck Le
Stefano Faccin
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Nokia Inc, Franck Le, Stefano Faccin filed Critical Nokia Inc
Priority to EP05744303A priority Critical patent/EP1756705A2/en
Publication of WO2005117327A2 publication Critical patent/WO2005117327A2/en
Publication of WO2005117327A3 publication Critical patent/WO2005117327A3/en

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/02Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
    • H04L63/0227Filtering policies
    • H04L63/0263Rule management
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/02Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
    • H04L63/029Firewall traversal, e.g. tunnelling or, creating pinholes
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/08Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0823Network architectures or network communication protocols for network security for authentication of entities using certificates

Abstract

The preferred embodiment of the present invention is a method and computer program product that specifies an array of elements to be incorporated into a firewall configuration protocol. When added to the configuration protocol, these added attributes allow the existing packet filtering mechanism to accommodate a terminal device that has moved and received a new IP address in a timely and efficient manner.
PCT/IB2005/001490 2004-05-28 2005-05-27 A system, method, and computer program product for updating the states of a firewall WO2005117327A2 (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
EP05744303A EP1756705A2 (en) 2004-05-28 2005-05-27 A system, method, and computer program product for updating the states of a firewall

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
US57613304P 2004-05-28 2004-05-28
US60/576,133 2004-05-28

Publications (2)

Publication Number Publication Date
WO2005117327A2 WO2005117327A2 (en) 2005-12-08
WO2005117327A3 true WO2005117327A3 (en) 2006-03-30

Family

ID=35451567

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/IB2005/001490 WO2005117327A2 (en) 2004-05-28 2005-05-27 A system, method, and computer program product for updating the states of a firewall

Country Status (3)

Country Link
US (1) US7877599B2 (en)
EP (1) EP1756705A2 (en)
WO (1) WO2005117327A2 (en)

Families Citing this family (37)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7877599B2 (en) * 2004-05-28 2011-01-25 Nokia Inc. System, method and computer program product for updating the states of a firewall
KR100728277B1 (en) * 2005-05-17 2007-06-13 삼성전자주식회사 System and method for dynamic network security
EP1763200B1 (en) * 2005-09-08 2016-01-06 Swisscom AG Computersystem and method for transmitting context-based data
US7724703B2 (en) 2005-10-13 2010-05-25 Belden, Inc. System and method for wireless network monitoring
CN100442778C (en) * 2006-01-12 2008-12-10 华为技术有限公司 Method, system for carrying out anti-attack filtration on data stream and its re-positioning device
JP4509955B2 (en) * 2006-03-13 2010-07-21 株式会社東芝 VPN communication detection method and apparatus
US7558266B2 (en) * 2006-05-03 2009-07-07 Trapeze Networks, Inc. System and method for restricting network access using forwarding databases
US8966018B2 (en) 2006-05-19 2015-02-24 Trapeze Networks, Inc. Automated network device configuration and network deployment
US8601102B1 (en) * 2006-05-31 2013-12-03 Juniper Networks, Inc. Dynamic access management for network security
US8818322B2 (en) 2006-06-09 2014-08-26 Trapeze Networks, Inc. Untethered access point mesh system and method
US9258702B2 (en) 2006-06-09 2016-02-09 Trapeze Networks, Inc. AP-local dynamic switching
US20080022387A1 (en) * 2006-06-23 2008-01-24 Kwok-Yan Leung Firewall penetrating terminal system and method
US8239930B2 (en) * 2006-10-25 2012-08-07 Nokia Corporation Method for controlling access to a network in a communication system
US8099774B2 (en) * 2006-10-30 2012-01-17 Microsoft Corporation Dynamic updating of firewall parameters
US7937353B2 (en) * 2007-01-15 2011-05-03 International Business Machines Corporation Method and system for determining whether to alter a firewall configuration
CN101884231A (en) * 2007-12-06 2010-11-10 艾利森电话股份有限公司 Firewall configuration in a base station
US20090158386A1 (en) * 2007-12-17 2009-06-18 Sang Hun Lee Method and apparatus for checking firewall policy
US9473457B2 (en) * 2009-10-22 2016-10-18 International Business Machines Corporation Interactive management of web application firewall rules
US8627448B2 (en) * 2010-11-02 2014-01-07 Jose Renato Santos Selective invalidation of packet filtering results
US8560648B2 (en) * 2010-11-10 2013-10-15 Microsoft Corporation Location control service
US8549609B2 (en) * 2011-05-31 2013-10-01 Red Hat, Inc. Updating firewall rules
US9313238B2 (en) * 2011-12-26 2016-04-12 Vonage Network, Llc Systems and methods for communication setup via reconciliation of internet protocol addresses
US8634322B2 (en) * 2012-02-18 2014-01-21 Bank Of America Corporation Apparatus and methods for adaptive network throttling
US9088541B2 (en) 2013-05-31 2015-07-21 Catbird Networks, Inc. Systems and methods for dynamic network security control and configuration
US9769174B2 (en) 2013-06-14 2017-09-19 Catbird Networks, Inc. Systems and methods for creating and modifying access control lists
US9912549B2 (en) 2013-06-14 2018-03-06 Catbird Networks, Inc. Systems and methods for network analysis and reporting
US11196636B2 (en) 2013-06-14 2021-12-07 Catbird Networks, Inc. Systems and methods for network data flow aggregation
WO2015013315A1 (en) * 2013-07-22 2015-01-29 Intellivision Technologies Corp. System and method for scalable video cloud services
US10979674B2 (en) 2013-07-22 2021-04-13 Intellivision Cloud-based segregated video storage and retrieval for improved network scalability and throughput
US11601620B2 (en) 2013-07-22 2023-03-07 Intellivision Technologies Corp. Cloud-based segregated video storage and retrieval for improved network scalability and throughput
CN104683295B (en) * 2013-11-27 2020-02-14 中兴通讯股份有限公司 Method, device and system for configuring data packet filtering rules
EP2903209B1 (en) * 2014-01-30 2018-11-14 Siemens Aktiengesellschaft Method for updating message filter rules of a network access control unit of an industrial communication network, address management unit and converter unit
RU2679179C1 (en) 2014-09-05 2019-02-06 Кэтбёрд Нэтворкс, Инк. Systems and methods for creating and modifying access lists
US10171422B2 (en) * 2016-04-14 2019-01-01 Owl Cyber Defense Solutions, Llc Dynamically configurable packet filter
US10158606B2 (en) * 2016-08-16 2018-12-18 The Boeing Company Firewall filter rules generation
US10205736B2 (en) 2017-02-27 2019-02-12 Catbird Networks, Inc. Behavioral baselining of network systems
CN112702311B (en) * 2020-11-30 2022-10-14 锐捷网络股份有限公司 Port-based message filtering method and device

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20030097590A1 (en) * 2001-11-19 2003-05-22 Tuomo Syvanne Personal firewall with location dependent functionality
US20030118038A1 (en) * 2001-11-29 2003-06-26 Mika Jalava Personalized firewall

Family Cites Families (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
AU1748797A (en) * 1996-01-16 1997-08-11 Raptor Systems, Inc. Key management for network communication
NO305420B1 (en) * 1997-09-02 1999-05-25 Ericsson Telefon Ab L M Device by computer communication system, especially by communication through firewalls
US6076168A (en) * 1997-10-03 2000-06-13 International Business Machines Corporation Simplified method of configuring internet protocol security tunnels
US7020464B2 (en) * 2001-10-09 2006-03-28 Microsoft Corporation System and method for providing agent-free and no-packet overhead mobility support with transparent session continuity for mobile devices
US7451234B1 (en) * 2003-05-24 2008-11-11 At&T Mobility Ii Llc Systems and methods for updating dynamic IP addresses in a firewall using a DDNS server
US7340771B2 (en) * 2003-06-13 2008-03-04 Nokia Corporation System and method for dynamically creating at least one pinhole in a firewall
US7886348B2 (en) * 2003-10-03 2011-02-08 Verizon Services Corp. Security management system for monitoring firewall operation
US7372840B2 (en) * 2003-11-25 2008-05-13 Nokia Corporation Filtering of dynamic flows
US7877599B2 (en) * 2004-05-28 2011-01-25 Nokia Inc. System, method and computer program product for updating the states of a firewall

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20030097590A1 (en) * 2001-11-19 2003-05-22 Tuomo Syvanne Personal firewall with location dependent functionality
US20030118038A1 (en) * 2001-11-29 2003-06-26 Mika Jalava Personalized firewall

Also Published As

Publication number Publication date
EP1756705A2 (en) 2007-02-28
US7877599B2 (en) 2011-01-25
US20050268335A1 (en) 2005-12-01
WO2005117327A2 (en) 2005-12-08

Similar Documents

Publication Publication Date Title
WO2005117327A3 (en) A system, method, and computer program product for updating the states of a firewall
AU2002368118A1 (en) Internet communication system, internet communication method, session management server, radio communication device, communication relay server, and program
AU2003252490A1 (en) Client terminal, software control method, and control program
WO2007050894A3 (en) A method and apparatus for processing binduati state in wireless communication systems
WO2007140702A8 (en) Multicast service processing method and access equipment
PL1861982T3 (en) Packet radio network and method for activation of a packet data protocol context
AU2003251842A1 (en) High data rate stateful protocol processing
AU2003208983A1 (en) Software content downloading methods in radio communication networks
EP1653676A4 (en) Communication system, communication method, communication terminal device, control method thereof, and program
WO2010030169A3 (en) A honeypot host
WO2006044685A3 (en) Apparatus and method for firewall traversal
EP1672512A4 (en) Message display terminal, gateway server, message display terminal program, and gateway server program
AU2003271155A1 (en) Communication device, communication device control method, and communication device control program
EP1950664A4 (en) Mobile terminal device, url management method used for the same, and program thereof
EP1914675A4 (en) Electronic settlement system, method therefor, settlement server used therein, communication terminal, and program
WO2006115740A3 (en) Method of access to a channelized network from a packet data network
WO2005038615A3 (en) Methods and apparatus for offloading tcp/ip processing using a protocol driver interface filter driver
AU2003213343A1 (en) Communication device, communication system, communication method, and program thereof
AU2003211769A1 (en) Server device, communication device, and program for managing contents usage
HK1115487A1 (en) Method, communication terminal and system for initiating an ip communication in an ip communication system
WO2007127499A3 (en) Method and apparatus for seamless and efficient wireless handoffs
WO2003038630A1 (en) Electronic device monitoring method, electronic device, computer, and program thereof
IL178267A0 (en) Relay device, packet filtering method, and packet filtering program
WO2006073549A3 (en) Apparatus for transmitting data packets and supporting method and data structure
WO2007057738A3 (en) Method, apparatus and computer program product providing packet filter synchronization

Legal Events

Date Code Title Description
AK Designated states

Kind code of ref document: A2

Designated state(s): AE AG AL AM AT AU AZ BA BB BG BR BW BY BZ CA CH CN CO CR CU CZ DE DK DM DZ EC EE EG ES FI GB GD GE GH GM HR HU ID IL IN IS JP KE KG KM KP KR KZ LC LK LR LS LT LU LV MA MD MG MK MN MW MX MZ NA NG NI NO NZ OM PG PH PL PT RO RU SC SD SE SG SK SL SM SY TJ TM TN TR TT TZ UA UG US UZ VC VN YU ZA ZM ZW

AL Designated countries for regional patents

Kind code of ref document: A2

Designated state(s): BW GH GM KE LS MW MZ NA SD SL SZ TZ UG ZM ZW AM AZ BY KG KZ MD RU TJ TM AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HU IE IS IT LT LU MC NL PL PT RO SE SI SK TR BF BJ CF CG CI CM GA GN GQ GW ML MR NE SN TD TG

121 Ep: the epo has been informed by wipo that ep was designated in this application
NENP Non-entry into the national phase

Ref country code: DE

WWW Wipo information: withdrawn in national office

Country of ref document: DE

WWE Wipo information: entry into national phase

Ref document number: 2005744303

Country of ref document: EP

WWP Wipo information: published in national office

Ref document number: 2005744303

Country of ref document: EP