US5537099A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Receiving port security in a network concentrator
Assignee: Avaya Holdings Ltd
•
Filing: 1994-05-18
•
Granted: 1996-07-16
•
Expires: 2014-05-18
Abstract
Abstract A method and apparatus for preventing intrusive access to a network. The method and apparatus are implemented in a network having a star topology. Utilizing a network management module of a network concentrator as a centralized functional base, unauthorized Data Terminal Elements (DTEs) may be prevented from transmitting messages on a network. By providing a centrally located means by which a set of unique DTE addresses can be associated with a particular port on the network concentrator, valid DTE addresses can be associated with a message packet that contains the address of the transmitting DTE. If the DTE address matches those associated with the port from which it was received, the message packet is authorized. If the DTE address does not match those addresses associated with from which it was received, the message packet is unauthorized. When an unauthorized message packet is received, the port from which the frame was received, is partitioned. The centralized approach utilizing a network manager as a functional base has certain advantages in comparison to distributed security implementations. Such advantages include lower cost and the ease of using existing network management functionality.
Inventors
- 👤 Chao-Yu Liang
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-02 22:44
CPC Classifications
H; H04; H04L; H04L12/00; H04L12/28; H04L12/44; H04L12/02; H04L12/22; H04L63/00; H04L63/02; H04L63/0227
Claims Analysis
Total Claims: 8
Claim 1
Independent Claim
177 words
A network concentrator comprising: a) a module having a first port and a second port, said first port coupled to receive a first message packet, and said first message packet having a first source address; b) an internal bus coupled to said module to permit communications with said first port and second port; c) a security circuit coupled to said internal bus, said security circuit for checking said first source address of said first packet, said security circuit for accessing a first address mask from a plurality of address masks, each address mask of said plurality of address masks corresponding to a different port of said network concentrator, said security circuit for using said first address mask to determine that said first packet is an unqualified message packet if said first source address is an unqualified source address, if said security circuit detects said first message packet as being an unqualified message packet, said security circuit generating a partition signal for said first port, and said module partitioning said first port responsive to receiving said partition signal.
Claim 2
Dependent Claim
177 words
A network concentrator comprising: a) a module having a first port and a second port, said first port coupled to receive a first message packet, and said first message packet having a first source address; b) an internal bus coupled to said module to permit communications with said first port and second port; c) a security circuit coupled to said internal bus, said security circuit for checking said first source address of said first packet, said security circuit for accessing a first address mask from a plurality of address masks, each address mask of said plurality of address masks corresponding to a different port of said network concentrator, said security circuit for using said first address mask to determine that said first packet is an unqualified message packet if said first source address is an unqualified source address, if said security circuit detects said first message packet as being an unqualified message packet, said security circuit generating a partition signal for said first port, and said module partitioning said first port responsive to receiving said partition signal.
Claim 3
Dependent Claim
127 words
The network concentrator of claim 1 wherein said first port has a first port identifier, and said security circuit further including: a port identifying circuit for identifying said first port as a port through which said first message packet is received; a source address identifying circuit for identifying said first source address; a matching circuit coupled to said port identifying circuit and said source address identifying circuit, said matching circuit for determining if said first message packet is a qualified or an unqualified message packet, and a partition signal generating circuit coupled to said matching circuit and said module, if said matching circuit determines that said first message packet is an unqualified message packet, said partition signal generating circuit generating said partition signal for said first port.
Claim 4
Dependent Claim
143 words
The network concentrator of claim 2 wherein said matching circuit further comprising: a port mask storage circuit for storing said first address mask for said first port, said first address mask having a source address corresponding to said first port, and a mask checking circuit coupled to said port mask storage circuit and said source address identifying circuit, said mask checking circuit for retrieving said first address mask corresponding to said first port, said mask checking circuit for comparing said first address mask with said first source address, said mask checking circuit for identifying said first message packet as being a qualified message packet if said first address mask matches said first source address, and said mask checking circuit for identifying said first message packet as being an unqualified message packet if said first address mask does not match said first source address.
Claim 5
Dependent Claim
158 words
A network for securing transmission of a message packet on said network, said network comprising: a) a first data terminal element (DTE), said first DTE for transmitting a first message packet, said first message packet including a first source address, and b) a concentrator having a module having a first port and a second port, said first port coupled to receive said first message packet, a routing circuit coupled to said said first port and said second port, said routing circuit for routing said first message packet, and a security circuit coupled to said routing circuit, said security circuit having a storing circuit for storing a set of qualified source addresses, said security circuit for identifying said first source address, said security circuit for generating a first partition signal to partition said first port if said first source address does not match a qualified source address corresponding to said first port in said set of qualified source addresses.
Claim 6
Dependent Claim
158 words
A network for securing transmission of a message packet on said network, said network comprising: a) a first data terminal element (DTE), said first DTE for transmitting a first message packet, said first message packet including a first source address, and b) a concentrator having a module having a first port and a second port, said first port coupled to receive said first message packet, a routing circuit coupled to said said first port and said second port, said routing circuit for routing said first message packet, and a security circuit coupled to said routing circuit, said security circuit having a storing circuit for storing a set of qualified source addresses, said security circuit for identifying said first source address, said security circuit for generating a first partition signal to partition said first port if said first source address does not match a qualified source address corresponding to said first port in said set of qualified source addresses.
Claim 7
Dependent Claim
201 words
In a network concentrator, a method of preventing unauthorized communications of an unauthorized message packet, said network concentrator having a module and a security circuit, said module having a first port and a second port, said first port coupling to receive a first message packet, said first message packet having a first source address, and said security circuit coupling to said first port and said second port, said method of preventing unauthorized communications of an unauthorized message packet comprising the steps of: a) receiving said first message packet at said first port; b) testing said first source address, including accessing a port identifier associated with said first message packet and said first port, accessing a port mask from a plurality of port masks using said port identifier, said port mask corresponding to said first port, said plurality of port masks including a second port mask corresponding to said second port, and comparing said first source address with said port mask; c) determining if said first message packet is an unauthorized message packet using said first source address; d) if said message packet is an unauthorized message packet, generating a partition signal to partition said first port and partitioning said first port.
Claim 8
Dependent Claim
201 words
In a network concentrator, a method of preventing unauthorized communications of an unauthorized message packet, said network concentrator having a module and a security circuit, said module having a first port and a second port, said first port coupling to receive a first message packet, said first message packet having a first source address, and said security circuit coupling to said first port and said second port, said method of preventing unauthorized communications of an unauthorized message packet comprising the steps of: a) receiving said first message packet at said first port; b) testing said first source address, including accessing a port identifier associated with said first message packet and said first port, accessing a port mask from a plurality of port masks using said port identifier, said port mask corresponding to said first port, said plurality of port masks including a second port mask corresponding to said second port, and comparing said first source address with said port mask; c) determining if said first message packet is an unauthorized message packet using said first source address; d) if said message packet is an unauthorized message packet, generating a partition signal to partition said first port and partitioning said first port.
References Cited (Backward Citations)
US4383257A
Cited
JPS5963839A
Cited
US4627052A
Cited
US4672572A
Cited
US4692918A
Cited
US4901348A
Cited
US4897074A
Cited
US4974190A
Cited
US4930159A
Cited
US4942606A
Cited
US5113442A
Cited
EP0431751A1
Cited
US5173939A
Cited
US5274368A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1999-07-16 | 2000-01-15 | 2000-07-16 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2003-07-16 | 2004-01-15 | 2004-07-16 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2007-07-16 | 2008-01-15 | 2008-07-16 | $7700.00 | Window Closed / Lapsed |