Patent JPS5740984A successfully refreshed from Google Patents.
← Back to Patent Explorer
US5489896A Expired / Lapsed US ⏱️ 0.0 years remaining

Network with a security capability

Assignee: Lannet Data Communications Ltd
•
Filing: 1993-02-12
•
Granted: 1996-02-06
•
Expires: 2013-02-12
📄 Original PDF 🌐 Google Patents 🔄 Sync Now

Abstract

Abstract A network having a security capability where the network includes a data bus, a plurality of stations connected to the data bus and a security unit which monitors traffic on the data bus and only enables authorized data to flow along the data bus.

Inventors

  • 👤 Dror Sofer
  • 👤 Benjamin Hanigal
  • 👤 Amnon Sadan

Bibliographic Details

Application Number —
Jurisdiction US
Data Source google_patents
Last Synchronized 2026-11-02 21:37
CPC Classifications
H; H04; H04L; H04L43/00; H04L12/00; H04L12/02; H04L12/22; H04L12/28; H04L12/40; H04L12/40006; H04L12/40013; H04L12/40032; H04L12/407; H04L12/413; H04L12/4135; H04L63/00; H04L63/02; H04L63/0227; H04L43/18

Claims Analysis

Total Claims: 27
Claim 1
Independent Claim 56 words
A network having a security capability, the network comprising: a data bus; a plurality of stations connected to the data bus; and a security unit which monitors traffic on said data bus and only enables authorized data to flow along said data bus by causing a collision on said data bus when unauthorized traffic is detected.
Claim 2
Dependent Claim 56 words
A network having a security capability, the network comprising: a data bus; a plurality of stations connected to the data bus; and a security unit which monitors traffic on said data bus and only enables authorized data to flow along said data bus by causing a collision on said data bus when unauthorized traffic is detected.
Claim 3
Dependent Claim 20 words
A network according to claim 1 and wherein said data bus and said security unit are part of a hub.
Claim 4
Dependent Claim 18 words
A network according to claim 1 and characterized in that said network is a local area network (LAN).
Claim 5
Dependent Claim 22 words
A network according to claim 3 and characterized in that said network is a carrier sensing multiple access/collision detection type of LAN.
Claim 6
Dependent Claim 31 words
A network according to claim 1 and wherein said security unit comprises a packet blocker operating in accordance with a protocol of said network and operative when unauthorized communication is requested.
Claim 7
Dependent Claim 43 words
A network according to claim 1 wherein said traffic comprises a multiplicity of data packets each having source and destination addresses and wherein said security unit comprises a plurality of correlators for determining that said source and destination addresses indicate an authorized communication.
Claim 8
Dependent Claim 37 words
A network according to claim 6 wherein each station is connected to said data bus via a port having a port address and wherein one of said correlators correlates said source address with an authorized port address.
Claim 9
Independent Claim 80 words
A method of securing a network having at least one hub, the method comprising: sending blocks of data on a data bus of said hub, wherein said blocks of data each comprise at least source and destination addresses for every block of data sent on said data bus of said hub, determining if said addresses conform to a stored set of access rules; and causing a collision on the network if the output of said step of determining is false.
Claim 10
Independent Claim 80 words
A method of securing a network having at least one hub, the method comprising: sending blocks of data on a data bus of said hub, wherein said blocks of data each comprise at least source and destination addresses for every block of data sent on said data bus of said hub, determining if said addresses conform to a stored set of access rules; and causing a collision on the network if the output of said step of determining is false.
Claim 11
Dependent Claim 31 words
A method according to claim 8 and wherein said set of access rules includes the rule that said source station address must be among a list of authorized source station addresses.
Claim 12
Dependent Claim 29 words
A method according to claim 8 and wherein said set of access rules includes the rule that said source station must be physically connected to an authorized port address.
Claim 13
Dependent Claim 29 words
A method according to claim 9 and wherein said set of access rules includes the rule that said source station must be physically connected to an authorized port address.
Claim 14
Dependent Claim 36 words
A method according to claim 8 and wherein said set of access rules includes the rule that said destination station address must be in a list of authorized destination station addresses for said source station address.
Claim 15
Dependent Claim 36 words
A method according to claim 9 and wherein said set of access rules includes the rule that said destination station address must be in a list of authorized destination station addresses for said source station address.
Claim 16
Dependent Claim 36 words
A method according to claim 10 and wherein said set of access rules includes the rule that said destination station address must be in a list of authorized destination station addresses for said source station address.
Claim 17
Dependent Claim 36 words
A method according to claim 11 and wherein said set of access rules includes the rule that said destination station address must be in a list of authorized destination station addresses for said source station address.
Claim 18
Dependent Claim 57 words
A security unit for a network having a data bus to which a plurality of stations are connected, comprising a traffic monitor which monitors traffic on said data bus and a collision mechanism which only enables authorized data to flow along said data bus by causing a collision on said data bus when unauthorized traffic is detected.
Claim 19
Dependent Claim 57 words
A security unit for a network having a data bus to which a plurality of stations are connected, comprising a traffic monitor which monitors traffic on said data bus and a collision mechanism which only enables authorized data to flow along said data bus by causing a collision on said data bus when unauthorized traffic is detected.
Claim 20
Dependent Claim 21 words
A security unit according to claim 16 and wherein said data bus and said security unit are part of a hub.
Claim 21
Dependent Claim 28 words
A security unit according to claim 16 and comprising a packet blocker operating in accordance with a protocol of said network and operative when unauthorized communication is requested.
Claim 22
Dependent Claim 44 words
A security unit according to claim 16 wherein said traffic comprises a multiplicity of data packets each having source and destination addresses and wherein said security unit comprises a plurality of correlators for determining that said source and destination addresses indicate an authorized communication.
Claim 23
Dependent Claim 38 words
A security unit according to claim 19 wherein each station is connected to said data bus via a port having a port address and wherein one of said correlators correlates said source address with an authorized port address.
Claim 24
Independent Claim 94 words
A method of securing a network comprising: sending blocks of data on a data bus of said network, wherein said blocks of data comprise at least a source address and a port address to which said source is connected; determining if said source address and said port address conform to a stored set of allowable source address and port address combinations; and denying access to the network for data blocks whose source address and port address do not conform to said stored set of allowable combinations by causing a collision on said data bus.
Claim 25
Independent Claim 94 words
A method of securing a network comprising: sending blocks of data on a data bus of said network, wherein said blocks of data comprise at least a source address and a port address to which said source is connected; determining if said source address and said port address conform to a stored set of allowable source address and port address combinations; and denying access to the network for data blocks whose source address and port address do not conform to said stored set of allowable combinations by causing a collision on said data bus.
Claim 26
Independent Claim 37 words
A method of securing a network comprising: sending blocks of data on a data bus of said network; causing a collision on the network if the blocks do not conform to a stored set of access rules.
Claim 27
Independent Claim 37 words
A method of securing a network comprising: sending blocks of data on a data bus of said network; causing a collision on the network if the blocks do not conform to a stored set of access rules.

References Cited (Backward Citations)

US4672572A Cited
US4901348A Cited
US4876717A Cited
US4930159A Cited
EP0431751A1 Cited
US5161192A Cited

USPTO Annuity & Maintenance Windows

Annuity Stage Window Opens Payment Deadline Surcharge Period Until Estimated Fee Status
3.5 Years (Year 4) 1999-02-05 1999-08-07 2000-02-06 $2000.00 Window Closed / Lapsed
7.5 Years (Year 8) 2003-02-05 2003-08-07 2004-02-06 $3760.00 Window Closed / Lapsed
11.5 Years (Year 12) 2007-02-05 2007-08-07 2008-02-06 $7700.00 Window Closed / Lapsed

Assigned Categories & Tags

No categories assigned to this patent yet.

Assign Category Tag