US5161192A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Repeaters for secure local area networks
Assignee: 3Com Ireland
•
Filing: 1990-11-07
•
Granted: 1992-11-03
•
Expires: 2010-11-07
Abstract
Abstract A multiport repeater for a local area network installation has (in addition to its conventional functions) means for storing access rules for the items of equipment connected to it. It reads a portion of each frame, which may be all or part of the destination address segment and/or of the source address segment and/or of the control segment of each incoming data frame, or it could be a frame or protocol identifier incorporated in opening bytes of the data segment. It compares the data that it reads with the stored access rules to determine whether the frame is permitted or not. If not, the repeater modifies the frame which it is in the course of re-transmitting, for example by overwriting it with meaningless digits or by encrypting it. It may also report the source address, destination address and reason for deciding to modify the frame to the network controller.
Inventors
- 👤 Steven H. Carter
- 👤 Terence D. Lockyer
- 👤 Christopher J. Gahan
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-25 17:25
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/02; H04L63/0227; H04L12/00; H04L12/02; H04L12/22; H04L12/28; H04L12/46; H04L12/4604; H04L12/462; H04L12/4625; H04L45/00; H04L45/74; H04L45/742; H04L63/0263; H04L9/00; H04L9/40; H04L69/00; H04L69/18
Claims Analysis
Total Claims: 19
Claim 1
Independent Claim
179 words
A repeater for use in a local area data network for providing communication between a plurality of network connected devices connected to the repeater, which data network receives data frames of preset format, each of which includes at predetermined positions in the frame segments selected from (i) a destination address segment, a source address segment and a control segment and (ii) a destination address segment, a source address segment, a control segment and at least one further segment selected from a frame identifier segment and a protocol identifier segment, the repeater including: means for receiving incoming data frames and for retransmitting them during a time interval that begins before the complete frame of data has been received; means for storing access rules for said network connected devices; means for reading at least one of said segments of each incoming data frame and comparing each segment so read with the stored access rules to determine whether the frame is permitted or not; and means for corrupting the frame in retransmission if the repeater determines that the frame is not permitted.
Claim 2
Dependent Claim
179 words
A repeater for use in a local area data network for providing communication between a plurality of network connected devices connected to the repeater, which data network receives data frames of preset format, each of which includes at predetermined positions in the frame segments selected from (i) a destination address segment, a source address segment and a control segment and (ii) a destination address segment, a source address segment, a control segment and at least one further segment selected from a frame identifier segment and a protocol identifier segment, the repeater including: means for receiving incoming data frames and for retransmitting them during a time interval that begins before the complete frame of data has been received; means for storing access rules for said network connected devices; means for reading at least one of said segments of each incoming data frame and comparing each segment so read with the stored access rules to determine whether the frame is permitted or not; and means for corrupting the frame in retransmission if the repeater determines that the frame is not permitted.
Claim 3
Dependent Claim
29 words
A repeater as claimed in claim 1 including means for reading and comparing both the said destination address segment and the said source address segment of the incoming frame.
Claim 4
Dependent Claim
42 words
A repeater as claimed in claim 1 in which the said means for corrupting the data frame comprises means for overwriting the data frame with a series of binary digits selected from all 1's, all 0's, cyclically repeated sequences and pseudo-random sequences.
Claim 5
Dependent Claim
35 words
A repeater as claimed in claim 1 in which said access rules are self-learned on the basis of the identity of network connected devices connected to ports of said repeater during an initial learning period.
Claim 6
Dependent Claim
22 words
A repeater as claimed in claim 1 in which the said access rules are written to the repeater by a network manager.
Claim 7
Dependent Claim
35 words
A repeater as claimed in claim 1 in which the said access rules are written to the repeater from an input device coupled to the repeater and removed once the access rules have been written.
Claim 8
Dependent Claim
28 words
A repeater as claimed in claim 1 in which the said access rules are written to the repeater by an input device protected from misuse by password protection.
Claim 9
Dependent Claim
50 words
A repeater as claimed in claim 1 in which, when an unauthorized frame is detected, in addition to the frame being corrupted, at least one port selected from the port on which the frame was received and the port to which addressed network connected devices are connected is switched off.
Claim 10
Dependent Claim
30 words
A repeater as claimed in claim 1 including means for switching off any input port on which a number of consecutive frames in excess of a predetermined limit are received.
Claim 11
Dependent Claim
179 words
A repeater for use in a local area data network for providing communication between a plurality of network connected devices connected to the repeater, which data network receives data frames of present format, each of which includes at predetermined positions in the frame segments selected from (i) a destination address segment, a source address segment and a control segment and (ii) a destination address segment, a source address segment, a control segment and at least one further segment selected from a frame identifier segment and a protocol identifier segment, the repeater including: means for receiving incoming data frames and for retransmitting them during a time interval that begins before the complete frame of data has been received; means for storing access rules for said network connected devices; means for reading at least one of said segments of each incoming data frame and comparing each segment so read with the stored access rules to determine whether the frame is permitted or not; and means for encrypting the frame in retransmission if the repeater determines that the frame is not permitted.
Claim 12
Dependent Claim
179 words
A repeater for use in a local area data network for providing communication between a plurality of network connected devices connected to the repeater, which data network receives data frames of present format, each of which includes at predetermined positions in the frame segments selected from (i) a destination address segment, a source address segment and a control segment and (ii) a destination address segment, a source address segment, a control segment and at least one further segment selected from a frame identifier segment and a protocol identifier segment, the repeater including: means for receiving incoming data frames and for retransmitting them during a time interval that begins before the complete frame of data has been received; means for storing access rules for said network connected devices; means for reading at least one of said segments of each incoming data frame and comparing each segment so read with the stored access rules to determine whether the frame is permitted or not; and means for encrypting the frame in retransmission if the repeater determines that the frame is not permitted.
Claim 13
Dependent Claim
27 words
A repeater as claimed in claim 10, including means for reading and comparing both said destination address segment and said source address segment of the incoming frame.
Claim 14
Dependent Claim
35 words
A repeater as claimed in claim 10, in which said access rules are self-learned on the basis of the identity of network connected devices connected to ports of said repeater during an initial learning period.
Claim 15
Dependent Claim
21 words
A repeater as claimed in claim 10 in which said access rules are written to the repeater by a network manager.
Claim 16
Dependent Claim
34 words
A repeater as claimed in claim 10 in which said access rules are written to the repeater from an input device coupled to the repeater and removed once the access rules have been written.
Claim 17
Dependent Claim
27 words
A repeater as claimed in claim 10 in which said access rules are written to the repeater by an input device protected from misuse by password protection.
Claim 18
Dependent Claim
50 words
A repeater as claimed in claim 10 in which, when an unauthorized frame is detected, in addition to the frame being encrypted, at least one port selected from the port on which the frame was received and the port to which addressed network connected devices are connected is switched off.
Claim 19
Dependent Claim
30 words
A repeater as claimed in claim 10 including means for switching off any input port on which a number of consecutive frames in excess of a predetermined limit are received.
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1995-11-03 | 1996-05-04 | 1996-11-03 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 1999-11-03 | 2000-05-04 | 2000-11-03 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2003-11-03 | 2004-05-04 | 2004-11-03 | $7700.00 | Window Closed / Lapsed |