Ring network security system with encoding of data entering a subnetwork and decoding of data leaving a subnetwork

Claim 2

A network security system for use in a ring network having at least one node on a subnetwork, including: (a) encoding means, coupled between the ring network and the subnetwork, for receiving data from the ring network and determining if the received data is not intended to be received by a node within the subnetwork, encoding at least part of the data if so determined, and transmitting the resulting received data over the subnetwork to the at least one node; (b) decoding means, coupled between the ring network and the subnetwork, for receiving data from the at least one node, at least some of which was previously transmitted by the encoding means to the subnetwork, determining if such received data was previously encoded by the encoding means, and decoding the received data if so determined.

Claim 3

A network security system for use in a ring network having at least one hub coupled thereto, at least one of said hubs having at least one active subnetwork connected thereto, the network security system including: (a) encoding means, coupled between one of said hubs having at least one active subnetwork and one of the active subnetworks, for receiving data and determining if the received data is to be encoded based upon the destination and source of the received data, encoding at least part of the data if so determined, and transmitting the resulting data over the active subnetwork; (b) decoding means, coupled between one of said hubs having at least one active subnetwork and the one of the active subnetworks receiving data, at least some of which was previously transmitted by the encoding means to the subnetwork, for receiving data from the active subnetwork, determining if the received data was previously encoded by the encoding means based upon the destination and source of the received data, and decoding the received data if so determined.

Claim 4

A network security system for use in a ring network having at least one hub coupled thereto, at least one of said hubs having at least one active subnetwork connected thereto, the network security system including: (a) encoding means, coupled between one of said hubs having at least one active subnetwork and one of the active subnetworks, for receiving data and determining if the received data is to be encoded based upon the destination and source of the received data, encoding at least part of the data if so determined, and transmitting the resulting data over the active subnetwork; (b) decoding means, coupled between one of said hubs having at least one active subnetwork and the one of the active subnetworks receiving data, at least some of which was previously transmitted by the encoding means to the subnetwork, for receiving data from the active subnetwork, determining if the received data was previously encoded by the encoding means based upon the destination and source of the received data, and decoding the received data if so determined.

Claim 5

The network security system of claim 2, wherein each encoding means corresponds to a unique decoder means.

Claim 6

The network security system of claim 3, further including: (a) an address detection means, coupled to the encoding means and to the decoder means, for receiving data and determining the destination and source of the data; (b) an error correction code generator means, coupled to the encoding means, for generating an error correction code after encoding and decoding the data.

Claim 7

The network security system of claim 4, wherein: (a) the encoding means encodes selected components of the data by Exclusive-ORing such components with an encoding word; and (b) the decoding means decodes the encoded components by Exclusive-ORing such components with the encoding word.

Claim 8

The network security system of claim 5, wherein the encoding means further includes a pseudo-random binary sequence generator means, coupled to the encoding means and to the decoder means, for generating the encoding word.

Claim 9

The network security system of claim 6, wherein the encoding word is a pseudo-random binary sequence.

Claim 10

A network security system for securing transmission of data within a ring network having at least one hub having at least one port to which at least one node is coupled, the ring network having at least two nodes, the network security system including: a gate keeper circuit associated with at least one active port of at least one hub, coupled between the associated hub and the associated port, for determining if the data being transmitted to the associated port from the associated hub is intended for at least one of the nodes coupled to the associated port, and if not intended for at least one of the nodes coupled to the associated port, then encoding at least part of the transmitted data, and otherwise not encoding any of the transmitted data, and for determining if the data being transmitted from the associated port to the associated hub was intended for, or originated within, at least one of the nodes coupled to the associated port, and if not then decoding the encoded part of the transmitted data, and otherwise not decoding any of the transmitted data.

Claim 11

A network security system for securing transmission of data within a ring network having at least one hub having at least one port to which at least one node is coupled, the ring network having at least two nodes, the network security system including: a gate keeper circuit associated with at least one active port of at least one hub, coupled between the associated hub and the associated port, for determining if the data being transmitted to the associated port from the associated hub is intended for at least one of the nodes coupled to the associated port, and if not intended for at least one of the nodes coupled to the associated port, then encoding at least part of the transmitted data, and otherwise not encoding any of the transmitted data, and for determining if the data being transmitted from the associated port to the associated hub was intended for, or originated within, at least one of the nodes coupled to the associated port, and if not then decoding the encoded part of the transmitted data, and otherwise not decoding any of the transmitted data.

Claim 12

The network security system of claim 8, wherein the gate keeper circuit further includes: (a) an address detection means, coupled to the associated port, for receiving the data transmitted from the associated hub to the associated port and determining the destination and source of the transmitted data, and for receiving the data transmitted from the associated port to the associated hub and determining the destination and the source of the transmitted data; (b) an encoding means, coupled to the address detection means, for encoding at least part of the transmitted data if neither the source nor the destination of the data transmitted from the associated hub to the associated port is at least one of the nodes coupled to the associated port; (c) a decoding means, coupled to the address detection means, for decoding each part of the data encoded by the encoding means and transmitted from the associated port to the associated hub if neither the source nor the destination of the transmitted data is at least one of the nodes coupled to the associated port; (d) an error correction code generator means, coupled to the encoding means and to the decoding means, for generating an error correction code for the data transmitted from the associated hub to the associated port after the encoding of the transmitted data, and for generating an error correction code for the data transmitted from the associated port to the associated hub after the decoding of the transmitted data.

Claim 13

The network security system of claim 9, wherein the gate keeper circuit further includes: an error detection means, coupled to the error generator means, the error correction code generator means, and to the associated port, for receiving the data transmitted from the associated port to the associated hub, detecting errors in the received data, and transmitting an indication of the error to the error correction code generator means; and wherein the error correction code generator means generates an erroneous error correction code for the data transmitted from the associated port to the associated hub after the decoding of the transmitted data, if the error detection means transmits an indication of an error to the error correction code generator means.

Claim 14

The network security system of claim 9, wherein the gate keeper circuit further includes: an error detection means, coupled to the error generator means, the error correction code generator means, and to the associated hub, for receiving the data transmitted from the associated hub to the associated port, detecting errors in the received data, and transmitting an indication of the error to the error correction code generator means; and wherein the error correction code generator means generates an erroneous error correction code for the data transmitted from the associated hub to the associated port after the encoding of the transmitted data, if the error detection means transmits an indication of an error to the error correction code generator means.

Claim 15

The network security system of claim 9, wherein: (a) the encoding means encodes selected components of the transmitted data by Exclusivec-ORing the transmitted data with an encoding word; and (b) the decoding means decodes the encoded components the by Exclusive-ORing the transmitted data with the encoding word.

Claim 16

The network security system of claim 12, wherein the encoding word is a pseudo-random binary sequence.

Claim 19

The method of claim 14, wherein step (g) comprises repeating steps (a) through (g) until the data is circulated through the active subnetwork having the destination of the data.

Claim 20

A network security system for use in a ring network having at least one node on a subnetwork, comprising: (a) an encoder circuit coupled between the ring network and the subnetwork, for receiving data from the ring network and determining if the received data is not intended to be received by a node within the subnetwork, encoding at least part of the data if so determined, and transmitting the resulting received data over the subnetwork to the at least one node; and (b) a decoder circuit coupled between the ring network and the subnetwork, for receiving data from the at least one node, at least some of which was previously transmitted by the encoder circuit to the subnetwork, determining if such received data was previously encoded by the encoder circuit, and decoding the received data if so determined.

Claim 21

A network security system for use in a ring network having at least one node on a subnetwork, comprising: (a) an encoder circuit coupled between the ring network and the subnetwork, for receiving data from the ring network and determining if the received data is not intended to be received by a node within the subnetwork, encoding at least part of the data if so determined, and transmitting the resulting received data over the subnetwork to the at least one node; and (b) a decoder circuit coupled between the ring network and the subnetwork, for receiving data from the at least one node, at least some of which was previously transmitted by the encoder circuit to the subnetwork, determining if such received data was previously encoded by the encoder circuit, and decoding the received data if so determined.