US5559883A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method and apparatus for secure data packet bus communication
Assignee: CHIPCIM Corp
•
Filing: 1993-08-19
•
Granted: 1996-09-24
•
Expires: 2013-08-19
Abstract
Abstract A method and system for secured data communication where a plurality of users communicate through ports on a common communication channel. The users communicate by transmitting and receiving data packets. The data packets are transmitted with a variety of fields of information, including but not limited to a destination address, a source address and a source port ID. A security module is connected to the common communication channel and reads the data packet contents and the source port ID. The security module then checks this information to see if the data packet is eligible to be transmitted on the common communication channel and to check which ports are eligible to receive the data packet. If the data packet is not eligible to be transmitted on the common communication channel, the security module destroys the data packet. The security module also sends out a security message on a security channel indicating which ports are eligible to receive the data packet. Each port reads the security message on the security channel and either passes the data packet to the respective user or blocks the data packet if the port is not one of the eligible ports.
Inventors
- 👤 Richard Williams
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-27 04:32
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/02; H04L63/0227; H04L12/00; H04L12/02; H04L12/22; H04L12/28; H04L12/46
Claims Analysis
Total Claims: 13
Claim 1
Independent Claim
252 words
A method for providing secure data communication, the method comprising the steps of: providing a communication channel; providing a plurality of ports on said communication channel; providing a plurality of users, each of said users being connected to one of said plurality of ports and communicating between each other through said plurality of ports and over said communication channel; transmitting a data packet over said communication channel from one port to another port for said communicating, the data packet being transmitted with a destination address; providing a security module connected to said communication channel and to said plurality of ports; said security module reading the contents of the data packet; said security module retrieving previously stored information regarding eligibility of said plurality of ports to receive the data packet; said security module sending an security message to said plurality of ports, said security message indicating a group of said plurality of ports eligible to receive the data packet; each of said plurality of ports reading said security message; said each of said plurality of ports comparing said security message with a plurality of ID codes of said respective port, and determining if said respective port is one of said eligible ports indicated by said security message; said respective port blocking the data packet from reaching a respective connected user if said respective port is not one of said eligible ports; said respective port passing the data packet to said respective connected user if said respective port is one of said eligible ports.
Claim 2
Independent Claim
252 words
A method for providing secure data communication, the method comprising the steps of: providing a communication channel; providing a plurality of ports on said communication channel; providing a plurality of users, each of said users being connected to one of said plurality of ports and communicating between each other through said plurality of ports and over said communication channel; transmitting a data packet over said communication channel from one port to another port for said communicating, the data packet being transmitted with a destination address; providing a security module connected to said communication channel and to said plurality of ports; said security module reading the contents of the data packet; said security module retrieving previously stored information regarding eligibility of said plurality of ports to receive the data packet; said security module sending an security message to said plurality of ports, said security message indicating a group of said plurality of ports eligible to receive the data packet; each of said plurality of ports reading said security message; said each of said plurality of ports comparing said security message with a plurality of ID codes of said respective port, and determining if said respective port is one of said eligible ports indicated by said security message; said respective port blocking the data packet from reaching a respective connected user if said respective port is not one of said eligible ports; said respective port passing the data packet to said respective connected user if said respective port is one of said eligible ports.
Claim 3
Dependent Claim
78 words
A method according to claim 1, wherein: the data packet is transmitted with a source port ID; said security module reads the data packet and said source port ID of the data packet; said security module retrieves previously stored information regarding eligibility of said source port ID and the data packet to transmit over said communication channel; said security module renders undeliverable the data packet if the data packet is not eligible to transmit onto said communication channel.
Claim 4
Dependent Claim
24 words
A method according to claim 1, wherein: said transmitting of said data packets over said communication channel is performed in accordance with "ETHERNET" protocol.
Claim 5
Dependent Claim
28 words
A method according to claim 1, wherein: said blocking of the data packet is performed by replacing a data/info portion of the data packet with a jam pattern.
Claim 6
Independent Claim
132 words
A method for providing secure data communication, the method comprising the steps of: providing a communication channel; providing a plurality of ports on said communication channel; transmitting a data packet over said communication channel from one port to another port, the data packet being transmitted with a source port ID; providing a security module connected to said communication channel and to said plurality of ports; said security module reading the data packet and said source port ID of the data packet; said security module retrieving previously stored information regarding eligibility of said source port ID and the data packet to transmit over said communication channel; said security module destroying the data packet if one of the data packet and said source port ID are not eligible to transmit onto said communication channel.
Claim 7
Independent Claim
132 words
A method for providing secure data communication, the method comprising the steps of: providing a communication channel; providing a plurality of ports on said communication channel; transmitting a data packet over said communication channel from one port to another port, the data packet being transmitted with a source port ID; providing a security module connected to said communication channel and to said plurality of ports; said security module reading the data packet and said source port ID of the data packet; said security module retrieving previously stored information regarding eligibility of said source port ID and the data packet to transmit over said communication channel; said security module destroying the data packet if one of the data packet and said source port ID are not eligible to transmit onto said communication channel.
Claim 8
Dependent Claim
190 words
A method according to claim 5, further comprising: providing a plurality of users, each of said users being connected to one of said plurality of ports and communicating between each other through said plurality of ports and over said communication channel; said security module reading said data packet; said security module retrieving previously stored information regarding eligibility of said plurality of ports to receive the data packet; said security module sending an security message to said plurality of ports, said security message indicating a group of said plurality of ports eligible to receive the data packet; each of said plurality of ports reading said security message; said each of said plurality of ports comparing said security message with a plurality of ID codes of said respective port, and determining if said respective port is one of said eligible ports indicated by said security message; said respective port blocking the data packet from reaching a respective connected user if said respective port is not one of said eligible ports; said respective port passing the data packet to said respective connected user if said respective port is one of said eligible ports.
Claim 9
Dependent Claim
72 words
A method according to claim 5, further comprising: providing a security channel connecting said security module to said plurality of ports; each of said plurality of said ports transmitting said source port ID on said security channel during an initial portion of said each port transmitting the data packet, said security module transmitting said security message on said security channel after said each port is finished said transmitting said source port ID.
Claim 10
Dependent Claim
32 words
A method according to claim 5, wherein: said destroying of the data packet is performed by said security processor, rendering the data packet undeliverable, by forcing a collision with said data packet.
Claim 11
Independent Claim
326 words
A system for providing secure data communication to a plurality of users, the apparatus comprising: a communication channel; a plurality of users transmitting and receiving data packets over said communication channel, a data packet being transmitted with a source address, a destination address and a source port ID; a plurality of port means connected to said plurality of users and said communication channel, said plurality of port means being for communication between the users through said plurality of port means and over said communication channel; a security module connected to said communication channel and including security processor means for reading said source port ID and said data packet, said security processor means retrieving previously stored information regarding eligibility of said source port ID and said data packet to transmit over said communication channel, said security processor means destroying said data packet if one of said data packet and said source port ID are not eligible to transmit onto said communication channel, said security processor means also retrieving previously stored information regarding eligibility of said plurality of port means to receive said data packet, said security processor means generating an security message indicating a group of said plurality of ports eligible to receive the data packet; security channel means connected to said security processor means and for conveying said security message from said security processor means to said plurality of port means; port processor means contained in each of said plurality of port means and for reading said security message, comparing said security message with a port ID of a respective port, and determining if said respective port is one of said eligible ports indicated by said security message, said port processor means blocking said data packet from reaching a respective connected user if said respective port is not one of said eligible ports, said port processor means passing said data packet to said respective connected user if said respective port is one of said eligible ports.
Claim 12
Independent Claim
326 words
A system for providing secure data communication to a plurality of users, the apparatus comprising: a communication channel; a plurality of users transmitting and receiving data packets over said communication channel, a data packet being transmitted with a source address, a destination address and a source port ID; a plurality of port means connected to said plurality of users and said communication channel, said plurality of port means being for communication between the users through said plurality of port means and over said communication channel; a security module connected to said communication channel and including security processor means for reading said source port ID and said data packet, said security processor means retrieving previously stored information regarding eligibility of said source port ID and said data packet to transmit over said communication channel, said security processor means destroying said data packet if one of said data packet and said source port ID are not eligible to transmit onto said communication channel, said security processor means also retrieving previously stored information regarding eligibility of said plurality of port means to receive said data packet, said security processor means generating an security message indicating a group of said plurality of ports eligible to receive the data packet; security channel means connected to said security processor means and for conveying said security message from said security processor means to said plurality of port means; port processor means contained in each of said plurality of port means and for reading said security message, comparing said security message with a port ID of a respective port, and determining if said respective port is one of said eligible ports indicated by said security message, said port processor means blocking said data packet from reaching a respective connected user if said respective port is not one of said eligible ports, said port processor means passing said data packet to said respective connected user if said respective port is one of said eligible ports.
Claim 13
Dependent Claim
28 words
A system according to claim 9, wherein: said port means includes a switching means for switching said respective user between said communication channel and a jam pattern module.
References Cited (Backward Citations)
US4649548A
Cited
US4479228A
Cited
US4825354A
Cited
US4901348A
Cited
US4766402A
Cited
US4962531A
Cited
US4853950A
Cited
US4899333A
Cited
US4942574A
Cited
US4980913A
Cited
US4949340A
Cited
US5012467A
Cited
US5161192A
Cited
US5263157A
Cited
US5263158A
Cited
US5220604A
Cited
US5261102A
Cited
US5177788A
Cited
US5305385A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1999-09-24 | 2000-03-25 | 2000-09-24 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2003-09-24 | 2004-03-25 | 2004-09-24 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2007-09-24 | 2008-03-25 | 2008-09-24 | $7700.00 | Window Closed / Lapsed |