Patent US5305385A successfully refreshed from Google Patents.
US5305385A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Network message security method and apparatus
Assignee: Nokia Canada Inc
•
Filing: 1992-11-25
•
Granted: 1994-04-19
•
Expires: 2012-11-25
Abstract
Abstract A security system for local area networks (LAN) to prevent eavesdropping of or to control access to LAN traffic at repeater or concentrator ports. The security system determines which repeater ports are to have security activated according to a given set of criteria. For ports with security activated, the contents of the data field of data frame transmitted from the repeater port to the local device are replaced with an arbitrary bit pattern.
Inventors
- 👤 Brian Schanning
- 👤 Sadredin Tavana
- 👤 Steven E. Archambault
- 👤 Carl G. Hayssen, III
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-29 17:37
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/14; H04L63/1441
Claims Analysis
Total Claims: 32
Claim 1
Independent Claim
64 words
In a local area network having a plurality of input/output devices coupled to a multiport repeater, a method for securing data on the network comprising the steps of: receiving at the repeater a data frame having a data field and a frame check sequence field; and replacing a content of said data field with a substitute bit pattern to form a secured data field.
Claim 2
Dependent Claim
64 words
In a local area network having a plurality of input/output devices coupled to a multiport repeater, a method for securing data on the network comprising the steps of: receiving at the repeater a data frame having a data field and a frame check sequence field; and replacing a content of said data field with a substitute bit pattern to form a secured data field.
Claim 3
Dependent Claim
33 words
The method for securing data of claim 1, further comprising the step of replacing said content of said data field with said substitute bit pattern on all frames transmitted out a given port.
Claim 4
Dependent Claim
22 words
The method for securing data of claim 1, further comprising the step of transmitting said secured data frame to a given port.
Claim 5
Dependent Claim
38 words
The method for securing data of claim 1, wherein said data frame includes a destination address field and further comprising the step of: examining said destination address field to determine if said data field is to be secured.
Claim 6
Dependent Claim
38 words
The method for securing data of claim 1, wherein said data frame includes a source address field and further comprising the step of: examining said source address field to determine if said data field is to be secured.
Claim 7
Dependent Claim
35 words
The method for securing data of claim 1, further comprising the steps of examining a repeater port identification at which said data frame was received to determine if said data field is to be secured.
Claim 8
Dependent Claim
18 words
The method for securing data of claim 1, further comprising the step of faithfully transmitting unsecured data frames.
Claim 9
Dependent Claim
36 words
The method for securing data of claim 1, further comprising the step of examining a first bit after a start frame delimiter of said data frame to determine if said data field is to be secured.
Claim 10
Dependent Claim
56 words
In a local area network having a plurality of input/output devices coupled to a multiport repeater, a repeater structure for securing data on the local area network comprising: means for replacing a content of a data field of a data frame received at said repeater with a substitute bit pattern to form a secured data field.
Claim 11
Dependent Claim
56 words
In a local area network having a plurality of input/output devices coupled to a multiport repeater, a repeater structure for securing data on the local area network comprising: means for replacing a content of a data field of a data frame received at said repeater with a substitute bit pattern to form a secured data field.
Claim 12
Dependent Claim
66 words
The repeater structure of claim 9, further comprising: means, coupled to an input of said repeater, for identifying a given one of a plurality of data frames received at said repeater to be secured; and means, coupled to said means for identifying and to said means for replacing a content of said data field, for activating said means for replacing a content of said data field.
Claim 13
Dependent Claim
118 words
In a local area network having a plurality of input/output devices coupled to a multiport repeater, a repeater structure for securing data on the local area network comprising: means for replacing a content of a data field of a data frame received at said repeater with a substitute bit pattern to form a secured data field; a security selection logic circuit, coupled to a local area network management system, to said means for replacing a content of a data field and to a receive port of said repeater, having: (i) means for identifying given ones of a plurality of data frames received at said receive port to be secured; and (ii) means for activating said means for replacing.
Claim 14
Dependent Claim
118 words
In a local area network having a plurality of input/output devices coupled to a multiport repeater, a repeater structure for securing data on the local area network comprising: means for replacing a content of a data field of a data frame received at said repeater with a substitute bit pattern to form a secured data field; a security selection logic circuit, coupled to a local area network management system, to said means for replacing a content of a data field and to a receive port of said repeater, having: (i) means for identifying given ones of a plurality of data frames received at said receive port to be secured; and (ii) means for activating said means for replacing.
Claim 15
Dependent Claim
31 words
The repeater structure of claim 11, further comprising a means for replacing, with said substitute bit pattern, a remaining content of said data frame located after a frame check sequence field.
Claim 16
Dependent Claim
59 words
The repeater structure of claim 11, wherein said means for replacing a content of a data field comprises: a bit pattern generator; and a multiplexer, having an input coupled to said bit pattern generator, to said security selection logic circuit and to an encoder of said repeater, and having an output coupled to a transmit port of said repeater.
Claim 17
Dependent Claim
32 words
The repeater structure of claim 11, wherein said means for replacing a content of a data field is disposed between an encoder of said repeater and a transmit port of said repeater.
Claim 18
Dependent Claim
32 words
The repeater structure of claim 11, wherein said means for replacing a content of a data field is disposed between a decoder of said repeater and an elasticity buffer of said repeater.
Claim 19
Dependent Claim
32 words
The repeater structure of claim 11, wherein said means for replacing a content of a data field is disposed between an elasticity buffer of said repeater and an encoder of said repeater.
Claim 20
Dependent Claim
30 words
The method for securing data of claim 1, further comprising the step of examining a characteristic of said data frame to determine if said data frame is to be secured.
Claim 21
Dependent Claim
32 words
The method for securing data of claim 1, wherein said step of replacing a content of a data field further comprises the step of: cryptographically replacing the content of said data field.
Claim 22
Dependent Claim
124 words
A secure repeater for use in a local area data network that utilizes data frames of preset format having in a predetermined position in the frame a destination address segment, the repeater including: means for receiving incoming data frames and for retransmitting data frames during a time interval that begins before a complete frame of data has been received; means for storing identifications for transmitting/receiving devices connected to the repeater; means for reading at least one portion of the destination address segment of each incoming data frame and comparing the portion so read with the identification to determine whether the frame is permitted; and means for corrupting the frame in retransmission to predetermined ones of the transmitting/receiving devices if the frame is not permitted.
Claim 23
Dependent Claim
124 words
A secure repeater for use in a local area data network that utilizes data frames of preset format having in a predetermined position in the frame a destination address segment, the repeater including: means for receiving incoming data frames and for retransmitting data frames during a time interval that begins before a complete frame of data has been received; means for storing identifications for transmitting/receiving devices connected to the repeater; means for reading at least one portion of the destination address segment of each incoming data frame and comparing the portion so read with the identification to determine whether the frame is permitted; and means for corrupting the frame in retransmission to predetermined ones of the transmitting/receiving devices if the frame is not permitted.
Claim 24
Dependent Claim
39 words
A repeater, as claimed in claim 19, wherein the data frames include a source address segment, the repeater including means for reading and comparing both the destination address segment and the said source address segment of the incoming frame.
Claim 25
Dependent Claim
41 words
A repeater, as claimed in claim 19, wherein the said means for corrupting the data frame comprises means for overwriting said data frame with a series of binary digits selected from all 1's, all 0's, cyclically repeated sequences and pseudo-random sequences.
Claim 26
Dependent Claim
20 words
A repeater, as claimed in claim 19, wherein the said means for corrupting the data frame comprises an encrypting means.
Claim 27
Dependent Claim
27 words
A repeater, as claimed in claim 19, wherein the said identifications are established on the basis of the identity of equipment connected to ports of the repeater.
Claim 28
Dependent Claim
125 words
Apparatus having a number of ports coupled to a plurality of data transmitting/receiving devices to communicate data received at one of the number of ports from a sending one of the plurality of data transmitting/receiving devices for retransmission from the other of the number of ports to other, including a receiving one, of the plurality of data transmitting/receiving devices, the apparatus including structure for securing the data, comprising: means for examining the data; means, coupled to the examining means, for determining which of the other of the number of ports are selected to retransmit the data; and means coupled to the determining means for replacing a portion of the data communicated from the other of the number of ports not selected to retransmit the data.
Claim 29
Dependent Claim
125 words
Apparatus having a number of ports coupled to a plurality of data transmitting/receiving devices to communicate data received at one of the number of ports from a sending one of the plurality of data transmitting/receiving devices for retransmission from the other of the number of ports to other, including a receiving one, of the plurality of data transmitting/receiving devices, the apparatus including structure for securing the data, comprising: means for examining the data; means, coupled to the examining means, for determining which of the other of the number of ports are selected to retransmit the data; and means coupled to the determining means for replacing a portion of the data communicated from the other of the number of ports not selected to retransmit the data.
Claim 30
Dependent Claim
58 words
The apparatus of claim 24, wherein the data includes identification of the receiving one of the plurality of data transmitting/receiving devices, the determining means operating in response to the identification of the receiving one of the plurality of data transmitting/receiving devices for determining which of the other of the number of ports are selected to retransmit the data.
Claim 31
Dependent Claim
58 words
The apparatus of claim 24, wherein the data includes identification of the sending one of the plurality of data transmitting/receiving devices, the determining means operating in response to the identification of the sending one of the plurality of data transmiting/receiving devices for determining which of the other of the number of ports are selected to retransmit the data.
Claim 32
Dependent Claim
55 words
The apparatus of claim 24, the apparatus having means identifying the one of the number of ports to the determining means, the determining means operating in response to the identification of the one of the number of ports to determine which of the other of the number of ports are selected to transmit the data.
References Cited (Backward Citations)
US4447672A
Cited
US4531238A
Cited
US4751733A
Cited
US4901348A
Cited
US5007088A
Cited
US4926481A
Cited
US4979832A
Cited
CA2029577A1
Cited
EP0431751A1
Cited
US5161192A
Cited
US5177788A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1997-04-18 | 1997-10-18 | 1998-04-19 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2001-04-18 | 2001-10-18 | 2002-04-19 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2005-04-18 | 2005-10-18 | 2006-04-19 | $7700.00 | Window Closed / Lapsed |