Patent US5282194A successfully refreshed from Google Patents.
← Back to Patent Explorer
US5282194A Expired / Lapsed US ⏱️ 0.0 years remaining

Interactive protocol analysis system

Assignee: Lockheed Martin Corp
•
Filing: 1992-08-17
•
Granted: 1994-01-25
•
Expires: 2012-08-17
📄 Original PDF 🌐 Google Patents 🔄 Sync Now

Abstract

Abstract A method and apparatus for analyzing a bit stream having an unknown format that is conveyed through a communications network. The method includes the steps of: (a) storing a plurality of sequentially occurring bits received from a communications network; (b) analyzing a plurality of the stored bits to detect periodicities in the bits; and (c) determining if the detected periodicities exhibit characteristics associated with a known type of data communications format, particularly a synchronous time-division-multiplexed (TDM) data communications format or a packetized data communications format. The step of analyzing includes a step of performing a statistical analysis of the stored bits.

Inventors

  • 👤 Thomas J. Harley, Jr.
  • 👤 Gregory L. Nelson

Bibliographic Details

Application Number —
Jurisdiction US
Data Source google_patents
Last Synchronized 2026-10-27 15:21
CPC Classifications
G; G06; G06F; G06F17/00; G06F17/10; G06F17/18; H; H04; H04L; H04L43/00; H04L43/18; H04L43/04; H04L43/045

Claims Analysis

Total Claims: 22
Claim 1
Independent Claim 119 words
A method for analyzing a bit stream that is conveyed through a communications network, comprising the steps of: storing a plurality of sequentially occurring bits received from a communications network, the bits having an unknown format; analyzing, with a data processor means, a plurality of the stored bits to detect at least a frequency of occurrence of one or more bit patterns within the plurality of stored bits, a bit pattern being comprised of a plurality of bits; and outputting a result of the step of analyzing in a format that is selected to enable a determination of whether a detected frequency of occurrence of at least one bit pattern exhibits a characteristic associated with a data communications format.
Claim 2
Independent Claim 119 words
A method for analyzing a bit stream that is conveyed through a communications network, comprising the steps of: storing a plurality of sequentially occurring bits received from a communications network, the bits having an unknown format; analyzing, with a data processor means, a plurality of the stored bits to detect at least a frequency of occurrence of one or more bit patterns within the plurality of stored bits, a bit pattern being comprised of a plurality of bits; and outputting a result of the step of analyzing in a format that is selected to enable a determination of whether a detected frequency of occurrence of at least one bit pattern exhibits a characteristic associated with a data communications format.
Claim 3
Dependent Claim 46 words
A method a set forth in claim 1 wherein the step of outputting outputs the result in format selected to enable a determination of whether a detected frequency of occurrence is representative of a predetermined bit pattern associated with a synchronous time-division-multiplexed (TDM) data communications format.
Claim 4
Dependent Claim 44 words
A method as set forth in claim 1 wherein the step of outputting outputs the result in format selected to enable a determination of whether a detected frequency of occurrence is representative of a predetermined bit pattern associated with a packetized data communications format.
Claim 5
Dependent Claim 63 words
A method as set forth in claim 1 wherein the step of analyzing includes the steps of: specifying a number of consecutive bits to form a bit group; and specifying a content of the bit group; and wherein the step of outputting includes a step of, displaying a sequence of bits that include an occurrence of the bit group having the specified content.
Claim 6
Dependent Claim 52 words
A method as set forth in claim 4 wherein the step of displaying a sequence of bits includes a step of displaying a predetermined number of bits that precede the bit group having the specified content, and displaying a predetermined number of bits that follow the bit group having the specified content.
Claim 7
Dependent Claim 89 words
A method as set forth in claim 5 wherein the step of displaying uses a format selected from the group consisting essentially of: a binary format wherein individual bits are displayed as either a "1" or a "0"; a numerical format wherein a plurality of consecutively occurring bits are displayed as a numerical equivalent thereof; a character format wherein a plurality of consecutively occurring bits are displayed as an equivalent character according to some character-encoding technique; a graphical format including gray-scale and color representations of values; and combinations thereof.
Claim 8
Dependent Claim 103 words
A method as set forth in claim 4 wherein the step of displaying includes the steps of: displaying a plurality of sequences of bits that include an occurrence of the bit group having the specified content, each of the plurality of sequences being displayed along one row of a display screen means having a plurality of rows and columns of display screen locations; displaying in each sequence of bits a predetermined number of bits that precede the bit group having the specified content; displaying in each sequence of bits a predetermined number of bits that follow the bit group having the specified content.
Claim 9
Dependent Claim 35 words
A method as set forth in claim 7, wherein the bit group of each sequence of bits, except the first sequence, is displayed directly below the bit group of an immediately preceding sequence of bits.
Claim 10
Dependent Claim 60 words
A method as set forth in claim 7 wherein the step of determining includes the steps of: specifying one or more two-dimensional arrays of displayed bits by specifying display screen row and column location coordinates; and further analyzing bits within the one or more two-dimensional arrays so as to identify bit sequences that are associated with a data communications format.
Claim 11
Dependent Claim 30 words
A method as set forth in claim 9 wherein the step of further analyzing includes a step of computing cyclic redundancy check values for bits within a two dimensional array.
Claim 12
Dependent Claim 28 words
A method as set forth in claim 9 wherein the step of further analyzing includes a step of computing parity values for bits within a two dimensional array.
Claim 13
Dependent Claim 25 words
A method as set forth in claim 1 wherein the step of analyzing includes a step of performing a statistical analysis of the stored bits.
Claim 14
Dependent Claim 66 words
A method as set forth in claim 12 wherein the step of performing a statistical analysis employs a technique selected from the group consisting essentially of: a) a Pattern Histogram Function; b) a Pattern Pair Histogram Function; c) a Pattern versus Period Histogram Function; d) a Pattern Group Histogram Function; e) a Pattern Group versus Time Function; f) a Bit Run-Length Histogram Function; and combinations thereof.
Claim 15
Dependent Claim 41 words
A method as set forth in claim 13 wherein the techniques (a) through (c) each include an initial step of specifying a number of bits that defines a bit group, a number of bits between two bit groups, and a phase.
Claim 16
Dependent Claim 27 words
A method as set forth in claim 13 wherein the techniques (d) and (e) each include an initial step of specifying a bit pattern and a phase.
Claim 17
Dependent Claim 28 words
A method as set forth in claim 9 wherein the step of further analyzing includes a step of sorting predetermined groups of bits by an associated numeric value.
Claim 18
Dependent Claim 34 words
A method as set forth in claim 9 wherein the step of further analyzing includes a step of editing a displayed sequence of bits to delete specified ones of the bits from the display.
Claim 19
Dependent Claim 25 words
A method as set forth in claim 17 wherein the step of further analyzing includes a step of restoring previously deleted bits to the display.
Claim 20
Independent Claim 228 words
A system for analyzing a bit stream conveyed through a communications network, comprising: network adapter means for coupling to a communications network for receiving a bit stream therefrom; storage means having an input coupled to an output of said network adapter means for storing a plurality of sequentially occurring bits received from the communications network; processing means having an input coupled to an output of said storage means for statistically analyzing a plurality of the stored bits to detect a frequency of occurrence of one or more bit patterns within the plurality of stored bits, a bit pattern being comprised of a plurality of bits, said processing means further including means for executing a stored program to perform one or more operations on one or more groups of the stored bits to identify characteristics associated with a data communications format; and operator interface means including means for providing, to said processing means, commands from an operator of the system, the commands specifying a type of statistical analysis to be performed on the plurality of stored bits and also specifying an operation to be performed on the stored bits, said operator interface means further including output means having an input coupled to an output of said processing means for outputting a result of a specified type of statistical analysis and a result of a performance of a specified operation.
Claim 21
Independent Claim 228 words
A system for analyzing a bit stream conveyed through a communications network, comprising: network adapter means for coupling to a communications network for receiving a bit stream therefrom; storage means having an input coupled to an output of said network adapter means for storing a plurality of sequentially occurring bits received from the communications network; processing means having an input coupled to an output of said storage means for statistically analyzing a plurality of the stored bits to detect a frequency of occurrence of one or more bit patterns within the plurality of stored bits, a bit pattern being comprised of a plurality of bits, said processing means further including means for executing a stored program to perform one or more operations on one or more groups of the stored bits to identify characteristics associated with a data communications format; and operator interface means including means for providing, to said processing means, commands from an operator of the system, the commands specifying a type of statistical analysis to be performed on the plurality of stored bits and also specifying an operation to be performed on the stored bits, said operator interface means further including output means having an input coupled to an output of said processing means for outputting a result of a specified type of statistical analysis and a result of a performance of a specified operation.
Claim 22
Dependent Claim 82 words
A system for analyzing a bit stream conveyed through a communications network as set forth in claim 19, and further including an expert system means having an input coupled to said output means, said expert system means including a knowledge base of data communications formats and protocols, and further including means for interpreting said output of said output means, in accordance with said knowledge base, to identify a communications protocol that is associated with the bit stream received from the communications network.

References Cited (Backward Citations)

US4312074A Cited
US4679191A Cited
US4672611A Cited
US4792753A Cited
US4775973A Cited
US4887260A Cited
US5040111A Cited
US4920537A Cited
US4916694A Cited
US5097469A Cited

USPTO Annuity & Maintenance Windows

Annuity Stage Window Opens Payment Deadline Surcharge Period Until Estimated Fee Status
3.5 Years (Year 4) 1997-01-24 1997-07-26 1998-01-25 $2000.00 Window Closed / Lapsed
7.5 Years (Year 8) 2001-01-24 2001-07-26 2002-01-25 $3760.00 Window Closed / Lapsed
11.5 Years (Year 12) 2005-01-24 2005-07-26 2006-01-25 $7700.00 Window Closed / Lapsed

Assigned Categories & Tags

No categories assigned to this patent yet.

Assign Category Tag