US5282194A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Interactive protocol analysis system
Assignee: Lockheed Martin Corp
•
Filing: 1992-08-17
•
Granted: 1994-01-25
•
Expires: 2012-08-17
Abstract
Abstract A method and apparatus for analyzing a bit stream having an unknown format that is conveyed through a communications network. The method includes the steps of: (a) storing a plurality of sequentially occurring bits received from a communications network; (b) analyzing a plurality of the stored bits to detect periodicities in the bits; and (c) determining if the detected periodicities exhibit characteristics associated with a known type of data communications format, particularly a synchronous time-division-multiplexed (TDM) data communications format or a packetized data communications format. The step of analyzing includes a step of performing a statistical analysis of the stored bits.
Inventors
- 👤 Thomas J. Harley, Jr.
- 👤 Gregory L. Nelson
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-27 12:25
CPC Classifications
G; G06; G06F; G06F17/00; G06F17/10; G06F17/18; H; H04; H04L; H04L43/00; H04L43/18; H04L43/04; H04L43/045
Claims Analysis
Total Claims: 22
Claim 1
Independent Claim
119 words
A method for analyzing a bit stream that is conveyed through a communications network, comprising the steps of: storing a plurality of sequentially occurring bits received from a communications network, the bits having an unknown format; analyzing, with a data processor means, a plurality of the stored bits to detect at least a frequency of occurrence of one or more bit patterns within the plurality of stored bits, a bit pattern being comprised of a plurality of bits; and outputting a result of the step of analyzing in a format that is selected to enable a determination of whether a detected frequency of occurrence of at least one bit pattern exhibits a characteristic associated with a data communications format.
Claim 2
Independent Claim
119 words
A method for analyzing a bit stream that is conveyed through a communications network, comprising the steps of: storing a plurality of sequentially occurring bits received from a communications network, the bits having an unknown format; analyzing, with a data processor means, a plurality of the stored bits to detect at least a frequency of occurrence of one or more bit patterns within the plurality of stored bits, a bit pattern being comprised of a plurality of bits; and outputting a result of the step of analyzing in a format that is selected to enable a determination of whether a detected frequency of occurrence of at least one bit pattern exhibits a characteristic associated with a data communications format.
Claim 3
Dependent Claim
46 words
A method a set forth in claim 1 wherein the step of outputting outputs the result in format selected to enable a determination of whether a detected frequency of occurrence is representative of a predetermined bit pattern associated with a synchronous time-division-multiplexed (TDM) data communications format.
Claim 4
Dependent Claim
44 words
A method as set forth in claim 1 wherein the step of outputting outputs the result in format selected to enable a determination of whether a detected frequency of occurrence is representative of a predetermined bit pattern associated with a packetized data communications format.
Claim 5
Dependent Claim
63 words
A method as set forth in claim 1 wherein the step of analyzing includes the steps of: specifying a number of consecutive bits to form a bit group; and specifying a content of the bit group; and wherein the step of outputting includes a step of, displaying a sequence of bits that include an occurrence of the bit group having the specified content.
Claim 6
Dependent Claim
52 words
A method as set forth in claim 4 wherein the step of displaying a sequence of bits includes a step of displaying a predetermined number of bits that precede the bit group having the specified content, and displaying a predetermined number of bits that follow the bit group having the specified content.
Claim 7
Dependent Claim
89 words
A method as set forth in claim 5 wherein the step of displaying uses a format selected from the group consisting essentially of: a binary format wherein individual bits are displayed as either a "1" or a "0"; a numerical format wherein a plurality of consecutively occurring bits are displayed as a numerical equivalent thereof; a character format wherein a plurality of consecutively occurring bits are displayed as an equivalent character according to some character-encoding technique; a graphical format including gray-scale and color representations of values; and combinations thereof.
Claim 8
Dependent Claim
103 words
A method as set forth in claim 4 wherein the step of displaying includes the steps of: displaying a plurality of sequences of bits that include an occurrence of the bit group having the specified content, each of the plurality of sequences being displayed along one row of a display screen means having a plurality of rows and columns of display screen locations; displaying in each sequence of bits a predetermined number of bits that precede the bit group having the specified content; displaying in each sequence of bits a predetermined number of bits that follow the bit group having the specified content.
Claim 9
Dependent Claim
35 words
A method as set forth in claim 7, wherein the bit group of each sequence of bits, except the first sequence, is displayed directly below the bit group of an immediately preceding sequence of bits.
Claim 10
Dependent Claim
60 words
A method as set forth in claim 7 wherein the step of determining includes the steps of: specifying one or more two-dimensional arrays of displayed bits by specifying display screen row and column location coordinates; and further analyzing bits within the one or more two-dimensional arrays so as to identify bit sequences that are associated with a data communications format.
Claim 11
Dependent Claim
30 words
A method as set forth in claim 9 wherein the step of further analyzing includes a step of computing cyclic redundancy check values for bits within a two dimensional array.
Claim 12
Dependent Claim
28 words
A method as set forth in claim 9 wherein the step of further analyzing includes a step of computing parity values for bits within a two dimensional array.
Claim 13
Dependent Claim
25 words
A method as set forth in claim 1 wherein the step of analyzing includes a step of performing a statistical analysis of the stored bits.
Claim 14
Dependent Claim
66 words
A method as set forth in claim 12 wherein the step of performing a statistical analysis employs a technique selected from the group consisting essentially of: a) a Pattern Histogram Function; b) a Pattern Pair Histogram Function; c) a Pattern versus Period Histogram Function; d) a Pattern Group Histogram Function; e) a Pattern Group versus Time Function; f) a Bit Run-Length Histogram Function; and combinations thereof.
Claim 15
Dependent Claim
41 words
A method as set forth in claim 13 wherein the techniques (a) through (c) each include an initial step of specifying a number of bits that defines a bit group, a number of bits between two bit groups, and a phase.
Claim 16
Dependent Claim
27 words
A method as set forth in claim 13 wherein the techniques (d) and (e) each include an initial step of specifying a bit pattern and a phase.
Claim 17
Dependent Claim
28 words
A method as set forth in claim 9 wherein the step of further analyzing includes a step of sorting predetermined groups of bits by an associated numeric value.
Claim 18
Dependent Claim
34 words
A method as set forth in claim 9 wherein the step of further analyzing includes a step of editing a displayed sequence of bits to delete specified ones of the bits from the display.
Claim 19
Dependent Claim
25 words
A method as set forth in claim 17 wherein the step of further analyzing includes a step of restoring previously deleted bits to the display.
Claim 20
Independent Claim
228 words
A system for analyzing a bit stream conveyed through a communications network, comprising: network adapter means for coupling to a communications network for receiving a bit stream therefrom; storage means having an input coupled to an output of said network adapter means for storing a plurality of sequentially occurring bits received from the communications network; processing means having an input coupled to an output of said storage means for statistically analyzing a plurality of the stored bits to detect a frequency of occurrence of one or more bit patterns within the plurality of stored bits, a bit pattern being comprised of a plurality of bits, said processing means further including means for executing a stored program to perform one or more operations on one or more groups of the stored bits to identify characteristics associated with a data communications format; and operator interface means including means for providing, to said processing means, commands from an operator of the system, the commands specifying a type of statistical analysis to be performed on the plurality of stored bits and also specifying an operation to be performed on the stored bits, said operator interface means further including output means having an input coupled to an output of said processing means for outputting a result of a specified type of statistical analysis and a result of a performance of a specified operation.
Claim 21
Independent Claim
228 words
A system for analyzing a bit stream conveyed through a communications network, comprising: network adapter means for coupling to a communications network for receiving a bit stream therefrom; storage means having an input coupled to an output of said network adapter means for storing a plurality of sequentially occurring bits received from the communications network; processing means having an input coupled to an output of said storage means for statistically analyzing a plurality of the stored bits to detect a frequency of occurrence of one or more bit patterns within the plurality of stored bits, a bit pattern being comprised of a plurality of bits, said processing means further including means for executing a stored program to perform one or more operations on one or more groups of the stored bits to identify characteristics associated with a data communications format; and operator interface means including means for providing, to said processing means, commands from an operator of the system, the commands specifying a type of statistical analysis to be performed on the plurality of stored bits and also specifying an operation to be performed on the stored bits, said operator interface means further including output means having an input coupled to an output of said processing means for outputting a result of a specified type of statistical analysis and a result of a performance of a specified operation.
Claim 22
Dependent Claim
82 words
A system for analyzing a bit stream conveyed through a communications network as set forth in claim 19, and further including an expert system means having an input coupled to said output means, said expert system means including a knowledge base of data communications formats and protocols, and further including means for interpreting said output of said output means, in accordance with said knowledge base, to identify a communications protocol that is associated with the bit stream received from the communications network.
References Cited (Backward Citations)
US4312074A
Cited
US4679191A
Cited
US4672611A
Cited
US4792753A
Cited
US4775973A
Cited
US4887260A
Cited
US5040111A
Cited
US4920537A
Cited
US4916694A
Cited
US5097469A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1997-01-24 | 1997-07-26 | 1998-01-25 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2001-01-24 | 2001-07-26 | 2002-01-25 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2005-01-24 | 2005-07-26 | 2006-01-25 | $7700.00 | Window Closed / Lapsed |