US5822303A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Repeaters for secure local area networks
Assignee: Hewlett Packard Enterprise Development LP
•
Filing: 1995-01-30
•
Granted: 1998-10-13
•
Expires: 2015-01-30
Abstract
Abstract A multiport repeater for a local area network installation has (in addition to its conventional functions) storing access rules for the items of equipment connected to it. It reads a portion of each frame, which may be all or part of the destination address segment and/or of the source address segment and/or of the control segment of each incoming data frame, or it could be a frame or protocol identifier incorporated in opening bytes of the data segment. It compares the data that it reads with the stored access rules to determine whether the frame is permitted or not. If not, it corrupts the frame which it is in the course of re-transmitting, for example by overwriting it with meaningless digits. It may also report the source address, destination address and reason for deciding to corrupt the frame to the network controller.
Inventors
- 👤 Steven Howard Carter
- 👤 Terence Denning Lockyer
- 👤 Christopher John Gahan
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-02 10:48
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/02; H04L63/0227; H04L12/00; H04L12/02; H04L12/22; H04L12/28; H04L12/46; H04L12/4604; H04L12/462; H04L12/4625; H04L45/00; H04L45/74; H04L45/742; H04L63/0263; H04L9/00; H04L9/40; H04L69/00; H04L69/18
Claims Analysis
Total Claims: 25
Claim 1
Independent Claim
161 words
A method for providing security within a network, the network communicating data frames having identifiable destinations on communication media using a carrier sense, multiple access media access protocol with collision detection among devices within the network, said method comprising: receiving frames at a first device within the network from a device within the network, the first device having repeater functions; and performing the repeater functions on the received frames including processing the received frames in the first device, based on the identifiable destination in the received frames, such that a received frame having an authorized destination within the network is forwarded substantially unchanged on a port in the first device which is connected to a device corresponding to the authorized destination, and a modified version of the received frame is forwarded on a port in the first device which is connected to a device within the network but not corresponding to the authorized destination whilst maintaining collision detection within the network.
Claim 2
Independent Claim
161 words
A method for providing security within a network, the network communicating data frames having identifiable destinations on communication media using a carrier sense, multiple access media access protocol with collision detection among devices within the network, said method comprising: receiving frames at a first device within the network from a device within the network, the first device having repeater functions; and performing the repeater functions on the received frames including processing the received frames in the first device, based on the identifiable destination in the received frames, such that a received frame having an authorized destination within the network is forwarded substantially unchanged on a port in the first device which is connected to a device corresponding to the authorized destination, and a modified version of the received frame is forwarded on a port in the first device which is connected to a device within the network but not corresponding to the authorized destination whilst maintaining collision detection within the network.
Claim 3
Dependent Claim
34 words
The method of claim 1, including: automatically learning during a learning interval, authorized destinations within the network for ports in the first device, and using the learned authorized destinations in the step of processing.
Claim 4
Dependent Claim
19 words
The method of claim 1, including corrupting the received frame to produce the modified version of the received frame.
Claim 5
Dependent Claim
19 words
The method of claim 1, including encrypting the received frame to produce the modified version of the received frame.
Claim 6
Independent Claim
145 words
A method for providing security within a network, said network communicating data frames having identifiable sources on communication media using a carrier sense, multiple access media access protocol with collision detection among devices within the network, said method comprising: receiving frames at a first device within the network from a device within the network, said first device having repeater functions; and performing the repeater functions on the received frames including processing the received frames in the first device based on the identifiable source in the received frames, such that a received frame having an authorized source within the network is forwarded substantially unchanged on a port in the first device connected to another device within the network, and a modified version of a received frame having an unauthorized source is forwarded on a port in the first device connected to another device within the network.
Claim 7
Independent Claim
145 words
A method for providing security within a network, said network communicating data frames having identifiable sources on communication media using a carrier sense, multiple access media access protocol with collision detection among devices within the network, said method comprising: receiving frames at a first device within the network from a device within the network, said first device having repeater functions; and performing the repeater functions on the received frames including processing the received frames in the first device based on the identifiable source in the received frames, such that a received frame having an authorized source within the network is forwarded substantially unchanged on a port in the first device connected to another device within the network, and a modified version of a received frame having an unauthorized source is forwarded on a port in the first device connected to another device within the network.
Claim 8
Dependent Claim
28 words
The method of claim 5, including: automatically learning during a learning interval, authorized sources within the network, and using the learned authorized sources in the step of processing.
Claim 9
Dependent Claim
19 words
The method of claim 5, including corrupting the received frame to produce the modified version of the received frame.
Claim 10
Dependent Claim
19 words
The method of claim 5, including encrypting the received frame to produce the modified version of the received frame.
Claim 11
Independent Claim
191 words
A method for providing security within a a network, said network communicating data frames having identifiable destinations and identifiable sources on communication media using a carrier sense, multiple access media access protocol with collision detection among devices within the network, said method comprising: receiving frames at a first device within the network from a device within the network, said first device having repeater functions; performing the repeater functions including processing the received frames in the first device, based on the identifiable destination in the received frames, such that a received frame having an authorized destination within the network is forwarded substantially unchanged on a port in the first device which is connected to a device corresponding to the authorized destination, and a modified version of the received frame is forwarded on a port in the first device which is connected to a device within the network but not corresponding to the authorized destination; and processing the received frames in the first device, based on the identifiable source in the received frames, by which a port in the first device on which a frame having an unauthorized source is received is disabled.
Claim 12
Independent Claim
191 words
A method for providing security within a a network, said network communicating data frames having identifiable destinations and identifiable sources on communication media using a carrier sense, multiple access media access protocol with collision detection among devices within the network, said method comprising: receiving frames at a first device within the network from a device within the network, said first device having repeater functions; performing the repeater functions including processing the received frames in the first device, based on the identifiable destination in the received frames, such that a received frame having an authorized destination within the network is forwarded substantially unchanged on a port in the first device which is connected to a device corresponding to the authorized destination, and a modified version of the received frame is forwarded on a port in the first device which is connected to a device within the network but not corresponding to the authorized destination; and processing the received frames in the first device, based on the identifiable source in the received frames, by which a port in the first device on which a frame having an unauthorized source is received is disabled.
Claim 13
Dependent Claim
39 words
The method of claim 9, including: automatically learning during a learning interval, authorized destinations within the network for ports in the first device, and using the learned authorized destinations in the step of processing based on the identifiable destination.
Claim 14
Dependent Claim
33 words
The method of claim 9, including: automatically learning during a learning interval, authorized sources within the network, and using the learned authorized sources in the step of processing based on the identifiable source.
Claim 15
Dependent Claim
19 words
The method of claim 9, including corrupting the received frame to produce the modified version of the received frame.
Claim 16
Dependent Claim
19 words
The method of claim 9, including encrypting the received frame to produce the modified version of the received frame.
Claim 17
Dependent Claim
82 words
The method of claim 9, including: further processing the received frames in the first device, based on the identifiable source in the received frames, such that a received frame having an authorized source within the network is forwarded substantially unchanged on a port in the first device connected to another device within the network, and a modified version of a received frame having an unauthorized source is forwarded on a port in the first device connected to another device within the network.
Claim 18
Independent Claim
152 words
A method for providing security within a network, said network communicating data frames having identifiable destinations on communication media using a carrier sense, multiple access protocol with collision detection among devices within the network, said network comprising a set of devices such that every said device is capable of detecting collisions with data frames transmitted by any device of the set, said method comprising: receiving frames at a first device within the network from a device within the network; forwarding a received frame substantially unchanged on one port in the first device which is connected to a device within the network and that corresponds to the identifiable destination in the received frame; and forwarding a modified version of the received frame on at least one port in the first device which is connected to a device within the network and that does not correspond to the identifiable destination in the received frame.
Claim 19
Independent Claim
152 words
A method for providing security within a network, said network communicating data frames having identifiable destinations on communication media using a carrier sense, multiple access protocol with collision detection among devices within the network, said network comprising a set of devices such that every said device is capable of detecting collisions with data frames transmitted by any device of the set, said method comprising: receiving frames at a first device within the network from a device within the network; forwarding a received frame substantially unchanged on one port in the first device which is connected to a device within the network and that corresponds to the identifiable destination in the received frame; and forwarding a modified version of the received frame on at least one port in the first device which is connected to a device within the network and that does not correspond to the identifiable destination in the received frame.
Claim 20
Independent Claim
161 words
A method for providing security within a network, the network communicating data frames having identifiable destinations on communication media using a carrier sense, multiple access media access protocol with collision detection among devices within the network, said method comprising: receiving frames at a first device within the network from a device within the network, the first device having repeater functions; and performing the repeater functions on the received frames including processing the received frames in the first device, based on the identifiable destination in the received frames, such that a received frame having an authorized destination within the network is forwarded substantially unchanged on a port in the first device which is coupled to a device corresponding to the authorized destination, and a modified version of the received frame is forwarded on a port in the first device which is coupled to a device within the network but not corresponding to the authorized destination whilst maintaining collision detection within the network.
Claim 21
Independent Claim
161 words
A method for providing security within a network, the network communicating data frames having identifiable destinations on communication media using a carrier sense, multiple access media access protocol with collision detection among devices within the network, said method comprising: receiving frames at a first device within the network from a device within the network, the first device having repeater functions; and performing the repeater functions on the received frames including processing the received frames in the first device, based on the identifiable destination in the received frames, such that a received frame having an authorized destination within the network is forwarded substantially unchanged on a port in the first device which is coupled to a device corresponding to the authorized destination, and a modified version of the received frame is forwarded on a port in the first device which is coupled to a device within the network but not corresponding to the authorized destination whilst maintaining collision detection within the network.
Claim 22
Dependent Claim
34 words
The method of claim 16, including: automatically learning during a learning interval, authorized destinations within the network for ports in the first device, and using the learned authorized destinations in the step of processing.
Claim 23
Independent Claim
145 words
A method for providing security within a network, said network communicating data frames having identifiable sources on communication media using a carrier sense, multiple access media access protocol with collision detection among devices within the network, said method comprising: receiving frames at a first device within the network from a device within the network, said first device having repeater functions; and performing the repeater functions on the received frames including processing the received frames in the first device based on the identifiable source in the received frames, such that a received frame having an authorized source within the network is forwarded substantially unchanged on a port in the first device coupled to another device within the network, and a modified version of a received frame having an unauthorized source is forwarded on a port in the first device coupled to another device within the network.
Claim 24
Independent Claim
145 words
A method for providing security within a network, said network communicating data frames having identifiable sources on communication media using a carrier sense, multiple access media access protocol with collision detection among devices within the network, said method comprising: receiving frames at a first device within the network from a device within the network, said first device having repeater functions; and performing the repeater functions on the received frames including processing the received frames in the first device based on the identifiable source in the received frames, such that a received frame having an authorized source within the network is forwarded substantially unchanged on a port in the first device coupled to another device within the network, and a modified version of a received frame having an unauthorized source is forwarded on a port in the first device coupled to another device within the network.
Claim 25
Dependent Claim
28 words
The method of claim 18, including: automatically learning during a learning interval, authorized sources within the network, and using the learned authorized sources in the step of processing.
References Cited (Backward Citations)
US4449247A
Cited
US4626845A
Cited
US4627052A
Cited
US4672572A
Cited
US4692918A
Cited
US4901348A
Cited
US4783657A
Cited
US4887075A
Cited
US4896319A
Cited
US4974190A
Cited
US5161192A
Cited
US5177788A
Cited
US5311593A
Cited
US5455828A
Cited
US5489896A
Cited
US5453980A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2001-10-12 | 2002-04-13 | 2002-10-13 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2005-10-12 | 2006-04-13 | 2006-10-13 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2009-10-12 | 2010-04-13 | 2010-10-13 | $7700.00 | Window Closed / Lapsed |