US5935249A — Mechanism for embedding network based control sys…

Claim 1

Independent Claim 94 words

A network interface device providing a secure representation of network services between a network and a host computer said network interface device comprising: a host bus interface circuit coupled to said host computer; a control logic circuit coupled to said host bus interface; a network interface circuit coupled to said network; and a secure interpreter coupled to said network interface circuit and said control logic, said secure interpreter allowing state information from said network to be stored in said secured interpreter, said secure interpreter denying access to said state information by said host computer.

Claim 2

Dependent Claim 94 words

A network interface device providing a secure representation of network services between a network and a host computer said network interface device comprising: a host bus interface circuit coupled to said host computer; a control logic circuit coupled to said host bus interface; a network interface circuit coupled to said network; and a secure interpreter coupled to said network interface circuit and said control logic, said secure interpreter allowing state information from said network to be stored in said secured interpreter, said secure interpreter denying access to said state information by said host computer.

Claim 3

Dependent Claim 54 words

The network interface device according to claim 1, wherein said secure interpreter comprises: a processor unit executing instructions defined by a secure programming language; a memory coupled to said processor; and a carrier sense circuit coupled to said network interface circuit, said carrier sense circuit detecting the status of transmission signals on said network.

Claim 4

Dependent Claim 16 words

The network interface device according to claim 2, wherein said memory is a non-volatile memory device.

Claim 5

Dependent Claim 59 words

The network interface device according to claim 3 wherein said secure interpreter provides a secure network management function that includes implementation by said network interface device of control commands sent to said network interface device from one or more remote devices on said network; and said non-volatile memory device contains a data string representing a message source verification mechanism.

Claim 6

Dependent Claim 87 words

The network interface device according to claim 3 wherein said secure interpreter provides a secure network management function that includes a proxying of network services available to said host computer from one or more remote devices on said network, said network services comprising access to one or more fee based application programs executable by said host computer; and said non-volatile memory device contains a data string representing an object of value utilized by said application program to verify authorization to use said one or more application programs.

Claim 7

Dependent Claim 28 words

The network interface device of claim 2 wherein said secure programming language is the Java programming language, and said secure interpreter is implemented within a Java Virtual Machine.

Claim 8

Dependent Claim 28 words

The network interface device according to claim 1 wherein said secure interpreter providing said secure network management services even when said network is disconnected from said host computer.

Claim 9

Independent Claim 130 words

An apparatus providing a proxy for network services to a first station connected to a network from a second station connected to a network, said apparatus comprising: a bus interface circuit coupled between said first station and said network; a security circuit coupled to said bus interface circuit, said security circuit including a processor, said processor executing instructions defined by a secure programming language; a memory coupled to said processor, said memory containing parameter information utilized by said network services; said security circuit allowing said parameter information from said network to be stored in said memory, said security circuit denying access to said parameter information by said first station; and a carrier sense circuit coupled to said bus interface circuit detecting a disconnection of said first station from said network.

Claim 10

Independent Claim 130 words

An apparatus providing a proxy for network services to a first station connected to a network from a second station connected to a network, said apparatus comprising: a bus interface circuit coupled between said first station and said network; a security circuit coupled to said bus interface circuit, said security circuit including a processor, said processor executing instructions defined by a secure programming language; a memory coupled to said processor, said memory containing parameter information utilized by said network services; said security circuit allowing said parameter information from said network to be stored in said memory, said security circuit denying access to said parameter information by said first station; and a carrier sense circuit coupled to said bus interface circuit detecting a disconnection of said first station from said network.

Claim 11

Dependent Claim 74 words

The apparatus of claim 8 wherein: said network service comprises a verification routine executable by said processor; and said security circuit transmits a first set of commands to said first station if said verification routine returns a first value when executed by said processor, said first set of commands enabling said first station to execute an application program executable by said first station, said verification routine utilizing said parameter information contained in said memory.

Claim 12

Dependent Claim 52 words

The apparatus of claim 9 wherein said parameter information includes a counter for storing a counter value and said verification routine comprises an authentication routine for verifying the identity of a user of said first station, said verification routine further comprising a decrement routine for decrementing the value of said counter value.

Claim 13

Dependent Claim 35 words

The apparatus of claim 10 wherein said authentication routine further includes a plurality of identification parameters, each of said identification parameters verifying the identity of one of a plurality of users of said first station.

Claim 14

Dependent Claim 57 words

The apparatus of claim 9 wherein said security circuit transmits said first set of commands to said first station from said second station if said verification routine returns said first value, and said security circuit transmits a second set of commands to said first station from said second station if said verification routine returns a second value.

Claim 15

Dependent Claim 36 words

The apparatus of claim 9 wherein said security circuit transmits said first set of commands to said first station if said verification routine returns said first value and said first station is disconnected from said network.

Claim 16

Dependent Claim 22 words

The apparatus of claim 10 wherein said programming language is the Java Programming Language and said verification routine is a Java applet.

Claim 17

Independent Claim 103 words

An apparatus providing remote network access to network interface functions of a first station connected to a network from a second station connected to said network, said apparatus comprising: a bus interface circuit coupled between said first station and said network; a processor coupled to said first station, said processor executing instructions defined by a secure programming language; and a memory coupled to said processor, said memory containing parameter information utilized by said network interface functions said processor allowing said parameter information from said network to be stored in said memory, said processor denying access to said parameter information by said first station.

Claim 18

Independent Claim 103 words

An apparatus providing remote network access to network interface functions of a first station connected to a network from a second station connected to said network, said apparatus comprising: a bus interface circuit coupled between said first station and said network; a processor coupled to said first station, said processor executing instructions defined by a secure programming language; and a memory coupled to said processor, said memory containing parameter information utilized by said network interface functions said processor allowing said parameter information from said network to be stored in said memory, said processor denying access to said parameter information by said first station.

Claim 19

Dependent Claim 50 words

The apparatus of claim 15 further comprising a verification circuit coupled to said processor, said verification circuit verifying access privileges of said second station by comparing a station identification data string contained within an access request message sent by said second station with said parameter information contained in said memory.

Claim 20

Dependent Claim 14 words

The apparatus of claim 15 wherein said network interface functions include network bandwidth utilization.

Claim 21

Dependent Claim 22 words

The apparatus of claim 17 wherein said apparatus is a Java Virtual Machine and said programming language is the Java Programming Language.

Claim 22

Independent Claim 165 words

A method of providing secure network management functions within a network interface device, said network interface comprising a memory, a processor, and a bus interface circuit, said bus interface circuit coupling said first network station to a network, said network coupled to a second network station, said method comprising the steps of: storing a first parameter in said memory; storing a security routine in said memory, said security routine comprising instructions and one or more data objects defined by a secure programming language, said security routine containing a second parameter; causing said processor to execute said security routine; transmitting a first set of commands to said first network station if said security routine returns a first value; and transmitting a second set of commands to said first network station if said security routine returns a second value said processor allowing said data objects from said network to be stored in said memory, said processor denying access to said data objects by said first network station.

Claim 23

Independent Claim 165 words

A method of providing secure network management functions within a network interface device, said network interface comprising a memory, a processor, and a bus interface circuit, said bus interface circuit coupling said first network station to a network, said network coupled to a second network station, said method comprising the steps of: storing a first parameter in said memory; storing a security routine in said memory, said security routine comprising instructions and one or more data objects defined by a secure programming language, said security routine containing a second parameter; causing said processor to execute said security routine; transmitting a first set of commands to said first network station if said security routine returns a first value; and transmitting a second set of commands to said first network station if said security routine returns a second value said processor allowing said data objects from said network to be stored in said memory, said processor denying access to said data objects by said first network station.

Claim 24

Dependent Claim 119 words

The method of claim 19 wherein: said first parameter comprises a data string corresponding to the identity of a user of said first network station, and one of said one or more data objects comprises a counter; wherein the step of causing said processor to execute said security routine further comprises the steps of: verifying the identity of said user by comparing a character string input by said user to said first parameter, checking a value associated with said counter, decrementing said counter if said value exceeds a threshold value, and issuing an authorization command allowing the transmission of said first set of commands if said counter exceeds said threshold value and said character string matches said first parameter.

Claim 25

Dependent Claim 27 words

The method of claim 20 wherein said first set of commands causes said first network station to execute an application program executable by said first network station.

Claim 26

Dependent Claim 23 words

The method of claim 21 wherein said secure programming language is the Java programming language and said security routine is a Java applet.

Claim 27

Dependent Claim 87 words

The method of claim 19 wherein said first parameter comprises a data string corresponding to the address of an authorized network station, and wherein the step of causing said processor to execute said security routine further comprises the steps of: verifying the authority of a network station requesting access by comparing said first parameter with a character string transmitted by said network station requesting access; and issuing an authorization command allowing the transmission of said first set of commands if said character string matches said first parameter.

Claim 28

Dependent Claim 22 words

The method of claim 20 wherein said first set of commands causes said network interface device to modify usage of said network.

Claim 29

Dependent Claim 23 words

The method of claim 24 wherein said secure programming language is the Java programming language and said security routine is a Java applet.

Annuity Stage	Window Opens	Payment Deadline	Surcharge Period Until	Estimated Fee	Status
3.5 Years (Year 4)	2002-08-09	2003-02-08	2003-08-10	$2000.00	Window Closed / Lapsed
7.5 Years (Year 8)	2006-08-09	2007-02-08	2007-08-10	$3760.00	Window Closed / Lapsed
11.5 Years (Year 12)	2010-08-09	2011-02-08	2011-08-10	$7700.00	Window Closed / Lapsed

Mechanism for embedding network based control systems in a local network interface device

Abstract

Inventors

Bibliographic Details

Claims Analysis

References Cited (Backward Citations)

USPTO Annuity & Maintenance Windows

Assigned Categories & Tags

Assign Category Tag