US5311593A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Security system for a network concentrator
Assignee: HP Inc
•
Filing: 1992-05-13
•
Granted: 1994-05-10
•
Expires: 2012-05-13
Abstract
Abstract A method and apparatus for providing secure communication on open networks. Each port of the network is provided with a security entity which monitors the communication between one port to the other. End stations connected to the ports communicate with other end stations by transmitting data to the port and receiving data from the port. The data is sent out in data packets with a destination address and a source address. Each port has its own unique address. The security entity checks data packets coming into the port for a destination address. The destination address of incoming data packets is compared with the port address of the affiliated port. Also, outgoing data packets from an end station to a port are also monitored by the security entity. The security entity compares the destination and source address of the data packet with the affiliated port address. The security entity cyphers and decyphers a data portion of the data packet depending on whether or not the source address, destination address and port address match. In this way, end stations not destined to read the data portions are thus prevented from doing so. Also end stations which are not authorized to transmit onto the network are prevented from having any users on the network understand their data.
Inventors
- 👤 Ilan Carmi
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-31 22:51
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/04; H04L63/0428; H04L63/14; H04L63/1408; H04L63/10; H04L63/105
Claims Analysis
Total Claims: 17
Claim 1
Independent Claim
215 words
A secure communication network comprising: a plurality of end stations; a plurality of end station link means for providing a communication path to and from each of said plurality of said end stations; concentrator means for connecting said plurality of end station link means and for transferring data packets between said plurality of end stations, said concentrator means having a plurality of ports, each of said plurality of ports having a unique affiliated port address, each of said plurality of ports being affiliated with a specific one of said plurality of end stations and end station link means said concentrator means receiving a data packet from one end station of said plurality of end stations through an affiliated port of said one end station, and then transmitting the data packet through affiliated ports of other end stations to said other end stations, the data packet having a destination address, a source address and a data portion; and a plurality of security means for cyphering and decyphering said data packet passing into and out of each of said ports based on a comparison of said destination address and said source address with said affiliated port address of said each port, each of said plurality of said security means being affiliated with a port of said concentrator.
Claim 2
Dependent Claim
215 words
A secure communication network comprising: a plurality of end stations; a plurality of end station link means for providing a communication path to and from each of said plurality of said end stations; concentrator means for connecting said plurality of end station link means and for transferring data packets between said plurality of end stations, said concentrator means having a plurality of ports, each of said plurality of ports having a unique affiliated port address, each of said plurality of ports being affiliated with a specific one of said plurality of end stations and end station link means said concentrator means receiving a data packet from one end station of said plurality of end stations through an affiliated port of said one end station, and then transmitting the data packet through affiliated ports of other end stations to said other end stations, the data packet having a destination address, a source address and a data portion; and a plurality of security means for cyphering and decyphering said data packet passing into and out of each of said ports based on a comparison of said destination address and said source address with said affiliated port address of said each port, each of said plurality of said security means being affiliated with a port of said concentrator.
Claim 3
Dependent Claim
114 words
A network in accordance with claim 1, wherein: each of said plurality of security means compares said affiliated port address with said destination address of an incoming data packet of an affiliated port, said each security means cyphering a data portion of said incoming data packet if said destination address does not match said affiliated port address, said each security means also comparing said affiliated port address with a source address of an outgoing data packet received from said affiliated end station, said each security means decyphering a data portion of said outgoing data packet if said source address of said outgoing data packet does not match said port address of said affiliated port.
Claim 4
Dependent Claim
102 words
A network in accordance with claim 1, wherein: each of said security means compares said affiliated port address with a source address of an outgoing data packet from said affiliated end station, said each security means cyphering a data portion of said outgoing data packet if said source address matches said affiliated port address, said each security means comparing said affiliated port address with a destination address of an incoming data packet for said affiliated port, said security means decyphering a data portion of said incoming data packet if said destination address of said incoming data packet matches said affiliated port address.
Claim 5
Dependent Claim
62 words
A network in accordance with claim 3, wherein: said security means delivers said outgoing data packet unmodified to another port if said source address does not match said affiliated port address; and said security means transmits said incoming data packet unmodified to said affiliated end station if said destination address of said incoming data packet does not match said affiliated port address.
Claim 6
Dependent Claim
164 words
A network in accordance with claim 1, wherein: each of said plurality of security means compares said affiliated port address with a destination address of an incoming data packet of an affiliated port, said each security means cyphering a data portion of said incoming data packet if said destination address does not match said affiliated port address, and said security means decyphering a data portion of said incoming data packet if said destination address of said incoming data packet matches said affiliated port address, said each security means also comparing said affiliated port address with a source address of an outgoing data packet received from said affiliated end station, said each security means decyphering a data portion of said outgoing data packet if said source address of said outgoing data packet does not match said port address of said affiliated port, and said each security means cyphering a data portion of said outgoing data packet if said source address matches said affiliated port address.
Claim 7
Dependent Claim
30 words
A network in accordance with claim 1, wherein: said concentrator means deliberately transmits the data packet to a port of an end station not authorized to receive the data packet.
Claim 8
Dependent Claim
141 words
A secured network communication method comprising the steps of: providing a plurality of end stations; connecting each of said end stations to an affiliated port of a plurality of ports of a concentrator, assigning each of said plurality of ports a unique affiliated port address; communicating between said plurality of end stations by passing data packets from one of said plurality of end stations through an affiliated port of said one end station, and then transmitted a data packet through affiliated ports of other end stations to said other end stations; assigning each of said data packets a destination address and a source address; and cyphering and decyphering said data packets passing into and out of each of said ports based on a comparison of said destination address and said source address with said affiliated port address of said each port.
Claim 9
Dependent Claim
141 words
A secured network communication method comprising the steps of: providing a plurality of end stations; connecting each of said end stations to an affiliated port of a plurality of ports of a concentrator, assigning each of said plurality of ports a unique affiliated port address; communicating between said plurality of end stations by passing data packets from one of said plurality of end stations through an affiliated port of said one end station, and then transmitted a data packet through affiliated ports of other end stations to said other end stations; assigning each of said data packets a destination address and a source address; and cyphering and decyphering said data packets passing into and out of each of said ports based on a comparison of said destination address and said source address with said affiliated port address of said each port.
Claim 10
Dependent Claim
104 words
A method in accordance with claim 7, further comprising: comparing a destination address of an incoming data packet for each port of said plurality of ports with said affiliated port address; cyphering a data portion of said incoming data packet if said destination address of said incoming data packet does not match said affiliated port address; comparing a source address of an outgoing data packet from each of said plurality of end stations with said affiliated port address; and decyphering a data portion of said outgoing data packet if said source address of said outgoing data packet does not match said affiliated port address.
Claim 11
Dependent Claim
57 words
A method in accordance with claim 8, further comprising: transferring said incoming data packet unmodified to said each port if said data address of said incoming data packet matches said affiliated port address; and transferring said outgoing data packet unmodified to another port if said source address of said outgoing data packet matches said affiliated port address.
Claim 12
Dependent Claim
99 words
A method in accordance with claim 7, further comprising: comparing a source address of an outgoing data packet from each of said plurality of end station with said affiliated port address; cyphering a data portion of said outgoing data packet if said source address of said outgoing data packet matches said affiliated port address; comparing a destination address of an incoming data packet for each of said plurality of ports with said affiliated port address; and decyphering a data portion of said incoming data packet if said destination address of said incoming data packet matches said affiliated port address.
Claim 13
Dependent Claim
150 words
A method in accordance with claim 7, further comprising: comparing a destination address of an incoming data packet for each port of said plurality of ports with an affiliated port address; decyphering a data portion of said incoming data packet if said destination address of said incoming data packet matches said affiliated port address; cyphering a data portion of said incoming data packet if said destination address of said incoming data packet does not match said affiliated port address; comparing a source address of an outgoing data packet from each of said plurality of end stations with an affiliated port address; decyphering a data portion of said outgoing data packet if said source address of said outgoing data packet does not match said affiliated port address; and cyphering a data portion of said outgoing data packet if said source address of said outgoing data packet matches said affiliated port address.
Claim 14
Dependent Claim
28 words
A method in accordance with claim 7, wherein: the data packet is deliberately past through a port of an end station not authorized to receive the data packet.
Claim 15
Dependent Claim
31 words
A method in accordance with claim 7, wherein: the data packet is past into and out of successive ports of said plurality of end stations until reaching a destination end station.
Claim 16
Dependent Claim
18 words
A method in accordance with claim 7, wherein: the data packet is past in a token ring topology.
Claim 17
Dependent Claim
24 words
A method in accordance with claim 7, wherein: the data packet is past substantially simultaneously to said affiliated ports of said other end stations.
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1997-05-09 | 1997-11-08 | 1998-05-10 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2001-05-09 | 2001-11-08 | 2002-05-10 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2005-05-09 | 2005-11-08 | 2006-05-10 | $7700.00 | Window Closed / Lapsed |