US5828846A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Controlling passage of packets or messages via a virtual connection or flow
Assignee: Orange SA
•
Filing: 1995-11-22
•
Granted: 1998-10-27
•
Expires: 2015-11-22
Abstract
Abstract Passage of packets or messages is controlled between a device and a network via a virtual connection or flow which conforms to a predefined communication protocol. In connection with processing a packet or message that triggers a step in managing the virtual connection or flow, predefined authorization rules are applied to determine whether to permit the step to occur. In connection with processing a packet or message that does not trigger a step in managing the virtual connection or flow, the packet or message is permitted to pass directly via the virtual connection or flow, without applying the predefined authorization rules.
Inventors
- 👤 Alan J. Kirby
- 👤 Ashok P. Nadkarni
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-29 02:35
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/02; H04L63/0227; H04L63/0263; H04L69/00; H04L69/16; H04L69/161; H04L9/00; H04L9/40; H04L69/22
Claims Analysis
Total Claims: 15
Claim 1
Independent Claim
204 words
A method for controlling a virtual connection or flow of packets or messages between a device and a network which conforms to a predefined communication protocol, comprising: examining a packet or message for network protocol information that indicates if the packet or message triggers a step in managing a virtual connection or flow; if the packet or message triggers a step, identifying the step from the packet or message network protocol information and applying predefined authorization allow and deny rules that indicate whether destination access should be denied to determine whether to permit the step to occur; if application of the authorization allow and deny rules permit a step that starts a virtual connection or flow, setting up the virtual connection or flow and updating information on the state of virtual connections or flows; if application of the authorization allow and deny rules permit a step that terminates a virtual connection or flow, terminating the virtual connection or flow and updating information on the state of virtual connections or flows; and if the packet or message does not trigger a step, permitting the packet or message to pass directly via the virtual connection or flow, without applying the predefined authorization allow and deny rules.
Claim 2
Independent Claim
204 words
A method for controlling a virtual connection or flow of packets or messages between a device and a network which conforms to a predefined communication protocol, comprising: examining a packet or message for network protocol information that indicates if the packet or message triggers a step in managing a virtual connection or flow; if the packet or message triggers a step, identifying the step from the packet or message network protocol information and applying predefined authorization allow and deny rules that indicate whether destination access should be denied to determine whether to permit the step to occur; if application of the authorization allow and deny rules permit a step that starts a virtual connection or flow, setting up the virtual connection or flow and updating information on the state of virtual connections or flows; if application of the authorization allow and deny rules permit a step that terminates a virtual connection or flow, terminating the virtual connection or flow and updating information on the state of virtual connections or flows; and if the packet or message does not trigger a step, permitting the packet or message to pass directly via the virtual connection or flow, without applying the predefined authorization allow and deny rules.
Claim 3
Dependent Claim
47 words
The method of claim 1 further comprising in connection with processing a packet or message, determining whether it is a packet or message that triggers a step in managing the virtual connection or flow, the determination being made only on the basis of information in the packet.
Claim 4
Dependent Claim
33 words
The method of claim 1, wherein the authorization allow and deny rules comprise rules that use information specifying time intervals that specify when a rule should apply to determine whether to deny access.
Claim 5
Dependent Claim
28 words
The method of claim 1, wherein the authorization allow and deny rules comprise rules that use information specifying types of services allowed to determine whether to deny access.
Claim 6
Dependent Claim
27 words
The method of claim 1, wherein the authorization allow and deny rules comprise rules that use information specifying types of authentication to determine whether to deny access.
Claim 7
Dependent Claim
24 words
The method of claim 1, wherein the authorization allow and deny rules comprise rules that use alert thresholds to determine whether to deny access.
Claim 8
Dependent Claim
14 words
The method of claim 1, wherein the communication protocol comprises a TCP/IP communication protocol.
Claim 9
Dependent Claim
24 words
The method of claim 7, wherein the triggering steps comprise TCP/IP packet types of at least one of the following: SYN, FIN, and RST.
Claim 10
Dependent Claim
15 words
The method of claim 1, further comprising maintaining information on the state of virtual connections.
Claim 11
Dependent Claim
26 words
The method of claim 1, wherein the authorization allow and deny rules include rules that check a destination field in the packet against stored permitted destinations.
Claim 12
Dependent Claim
27 words
The method of claim 1, wherein the authorization allow and deny rules include rules that check services that are permitted to be supplied for a source/destination pair.
Claim 13
Dependent Claim
17 words
The method of claim 1, wherein the authorization allow and deny rules include specification of alert thresholds.
Claim 14
Dependent Claim
15 words
The method of claim 1 also including logging information about packets as they are processed.
Claim 15
Dependent Claim
25 words
The method of claim 13, wherein the logged information comprises a source address, a destination address, a sequence number, and an amount of data transferred.
References Cited (Backward Citations)
US5099517A
Cited
US5161193A
Cited
US5235644A
Cited
US5535336A
Cited
US5553060A
Cited
US5623605A
Cited
US5633861A
Cited
US5583862A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2001-10-26 | 2002-04-27 | 2002-10-27 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2005-10-26 | 2006-04-27 | 2006-10-27 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2009-10-26 | 2010-04-27 | 2010-10-27 | $7700.00 | Window Closed / Lapsed |