US6400707B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
Real time firewall security
Assignee: Palo Alto Networks Inc
•
Filing: 1998-08-27
•
Granted: 2002-06-04
•
Expires: 2018-08-27
Abstract
Abstract A system and method for conducting a voice communication through a hybrid network which includes a packet internetwork, such as the Internet, connected to a circuit switched telephone network. The packet internetwork is connected to the switched telephone network through a static filter device, a packet switch, and a telephone network controlled gateway. A control processor is connected to the packet switch and to the filter device. The filter device generates a real time copy of call set up signaling dialog between the party requesting connection and the gateway which passes through or to the filter device. This duplicate of set up signaling is delivered from the filter device through the packet switch to the control processor. The control processor generates therefrom a filter device control signal which specifies the filter parameters derived from the set-up signaling dialog. This filter device control signal is delivered to the filter device and reconfigures the filter device to set filter parameters which are customized to the specific communication. The filter device thereupon filters the conversation stream of packetized voice.
Inventors
- 👤 Robert T. Baum
- 👤 Edward M. Eggerl
- 👤 William R. Burton
- 👤 Leo C. Cloutier
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-03 22:55
CPC Classifications
H; H04; H04L; H04L65/00; H04L65/10; H04L65/102; H04L65/1033; H04L65/104; H04L63/00; H04L63/02; H04L63/0227; H04L63/0263; H04L65/1023; H04L65/103; H04M; H04M7/00; H04M7/006; H04M7/0078; H04M7/12; H04M7/1205; H04L65/1066; H04L65/1101
Claims Analysis
Total Claims: 39
Claim 1
Independent Claim
195 words
A method of conducting an analog to analog communication between an originating terminal and a terminating terminal through a packet switched network coupled to a switched telephone network via at least one gateway wherein said terminating terminal is coupled to said switched telephone network; comprising: establishing a static filter device between said gateway and said originating terminal; transmitting through said filter device to said gateway a request for the establishment of a communication path through said gateway and through said telephone network to said terminating terminal; engaging in a signaling dialog between said originating terminal and said gateway through said filter device; generating a real time copy of at least a portion of said signaling dialog; creating a filter device control signal containing parameters derived from said dialog; configuring said filter device pursuant to said filter control signal; conducting said analog to analog communication between said originating terminal and said terminating terminal via packet signaling through said packet switched network and said filter device to said gateway; filtering said packet signaling through the configured filter device and blocking packet signals that fail to conform to the configuration of said static filter created from said dialog.
Claim 2
Independent Claim
195 words
A method of conducting an analog to analog communication between an originating terminal and a terminating terminal through a packet switched network coupled to a switched telephone network via at least one gateway wherein said terminating terminal is coupled to said switched telephone network; comprising: establishing a static filter device between said gateway and said originating terminal; transmitting through said filter device to said gateway a request for the establishment of a communication path through said gateway and through said telephone network to said terminating terminal; engaging in a signaling dialog between said originating terminal and said gateway through said filter device; generating a real time copy of at least a portion of said signaling dialog; creating a filter device control signal containing parameters derived from said dialog; configuring said filter device pursuant to said filter control signal; conducting said analog to analog communication between said originating terminal and said terminating terminal via packet signaling through said packet switched network and said filter device to said gateway; filtering said packet signaling through the configured filter device and blocking packet signals that fail to conform to the configuration of said static filter created from said dialog.
Claim 3
Dependent Claim
14 words
A method according to claim 1 wherein said analog communication is a voice communication.
Claim 4
Dependent Claim
14 words
A method according to claim 2 wherein said packet switched network comprises the Internet.
Claim 5
Dependent Claim
36 words
A method according to claim 1 wherein said parameters include the identity of said originating and terminating terminals, the identity of a port in said static filter, and the protocol to be used in the communication.
Claim 6
Dependent Claim
19 words
A method according to claim 4 wherein said parameters are valid solely for the communication initiated with said dialog.
Claim 7
Dependent Claim
31 words
A method according to claim 5 wherein said parameters include Internet protocol (IP) addresses for said gateway and for a server by which said originating terminal accessed said packet switched network.
Claim 8
Independent Claim
199 words
A method of conducting a voice communication between an originating terminal and a terminating terminal through a packet switched network coupled to a switched telephone network via at least one gateway wherein said terminating terminal is coupled to said switched telephone network; comprising: establishing a static filter device between said gateway and said originating terminal; transmitting through said filter device to said gateway a request for the establishment of a communication path through said gateway and through said telephone network to said terminating terminal; engaging in a call set up signaling dialog between said originating terminal and said gateway through said filter device; generating a real time copy of at least a portion of said set up signaling dialog; creating a filter device control signal containing parameters derived from said set up dialog; configuring said filter device pursuant to said filter device control signal; conducting said voice communication between said originating terminal and said terminating terminal via packet signaling through said packet switched network and said filter device to said gateway; filtering said packet signaling through the configured filter device and blocking packet signals that fail to conform to the configuration of said filter device created from said dialog.
Claim 9
Independent Claim
199 words
A method of conducting a voice communication between an originating terminal and a terminating terminal through a packet switched network coupled to a switched telephone network via at least one gateway wherein said terminating terminal is coupled to said switched telephone network; comprising: establishing a static filter device between said gateway and said originating terminal; transmitting through said filter device to said gateway a request for the establishment of a communication path through said gateway and through said telephone network to said terminating terminal; engaging in a call set up signaling dialog between said originating terminal and said gateway through said filter device; generating a real time copy of at least a portion of said set up signaling dialog; creating a filter device control signal containing parameters derived from said set up dialog; configuring said filter device pursuant to said filter device control signal; conducting said voice communication between said originating terminal and said terminating terminal via packet signaling through said packet switched network and said filter device to said gateway; filtering said packet signaling through the configured filter device and blocking packet signals that fail to conform to the configuration of said filter device created from said dialog.
Claim 10
Dependent Claim
17 words
A method according to claim 7 wherein said dialog utilizes Q.931 signaling protocol and H.323 packet standards.
Claim 11
Dependent Claim
53 words
A method according to claim 7 wherein said dialog includes the steps of accessing a storage to authenticate the originating terminal, providing the originating terminal with the packet switched network address of said gateway, setting at least a port parameter from said gateway, and authorizing commencement of said voice communication from said gateway.
Claim 12
Dependent Claim
14 words
A method according to claim 9 wherein said copying is in said filter device.
Claim 13
Dependent Claim
22 words
A method according to claim 7 including the steps of copying said voice communication packet signaling, and monitoring said copied packet signaling.
Claim 14
Dependent Claim
13 words
A method according to claim 7 wherein said originating terminal comprises a computer.
Claim 15
Independent Claim
114 words
A system for conducting a voice communication through a hybrid network including: a packet internetwork; a switched telephone network connected to the packet internetwork via a static filter device, a packet switch, and a gateway, said telephone network including a central office switching system connected to a voice terminal; and a control processor connected to said packet switch and to said filter device; wherein said filter device generates a real time copy of call set up signaling therethrough, which copy of set up signaling is delivered through said packet switch to said control processor, said control processor generating therefrom a filter device control signal delivered to said filter device and reconfiguring said filter device.
Claim 16
Independent Claim
114 words
A system for conducting a voice communication through a hybrid network including: a packet internetwork; a switched telephone network connected to the packet internetwork via a static filter device, a packet switch, and a gateway, said telephone network including a central office switching system connected to a voice terminal; and a control processor connected to said packet switch and to said filter device; wherein said filter device generates a real time copy of call set up signaling therethrough, which copy of set up signaling is delivered through said packet switch to said control processor, said control processor generating therefrom a filter device control signal delivered to said filter device and reconfiguring said filter device.
Claim 17
Dependent Claim
24 words
A system according to claim 13 wherein said filter device is reconfigured solely for the single call for which the set up was performed.
Claim 18
Dependent Claim
25 words
A system according to claim 13 including an authorization database which is accessed by said gateway prior to said gateway authorizing a call set up.
Claim 19
Dependent Claim
17 words
A system according to claim 15 wherein said gateway accesses said authorization database via said packet internetwork.
Claim 20
Dependent Claim
12 words
A system according to claim 16 wherein said internetwork comprises the Internet.
Claim 21
Dependent Claim
35 words
A system according to claim 17 including a gateway address database which is accessed in an attempt to set up a voice communication through said hybrid network to obtain the internetwork address of said gateway.
Claim 22
Dependent Claim
16 words
A system according to claim 18 wherein said gateway address database is accessed via said internetwork.
Claim 23
Dependent Claim
36 words
A system according to claim 13 wherein said filter device control signal delivered to said filter device includes information identifying a calling terminal, a called terminal, and a port number assigned for conducting the voice communication.
Claim 24
Dependent Claim
33 words
A system according to claim 13 wherein, upon the reconfiguring of said filter device, said filter device commences generation of a real time copy of call set up signaling for a different call.
Claim 25
Dependent Claim
105 words
In a communication system comprising a packet internetwork, a switched telephone network connected to the packet internetwork via a static filter device and a gateway, and a control processor connected to said filter device; a method comprising: transmitting from said filter device to said control processor a real time copy of call set up signaling passing through said filter device, generating in said control processor a filter device control signal and delivering said filter device control signal to said filter device, reconfiguring said filter device in accord with said filter device control signal, and filtering through said reconfigured filter device a packetized voice communication signal.
Claim 26
Dependent Claim
105 words
In a communication system comprising a packet internetwork, a switched telephone network connected to the packet internetwork via a static filter device and a gateway, and a control processor connected to said filter device; a method comprising: transmitting from said filter device to said control processor a real time copy of call set up signaling passing through said filter device, generating in said control processor a filter device control signal and delivering said filter device control signal to said filter device, reconfiguring said filter device in accord with said filter device control signal, and filtering through said reconfigured filter device a packetized voice communication signal.
Claim 27
Dependent Claim
28 words
A method according to claim 22 wherein said filter device control signal is delivered to said filter device substantially immediately upon completion of said call set up signaling.
Claim 28
Dependent Claim
44 words
A method according to claim 23 including the step of said filter device producing real time copy of call set up signaling for a different call through a different port substantially immediately upon its said reconfiguration for the first call through a first port.
Claim 29
Dependent Claim
125 words
In a communication system comprising a packet internetwork, a switched telephone network connected to the packet internetwork via a static filter device, a packet switch, and a gateway, and a control processor connected to said filter device; a method comprising: transmitting from said filter device to said packet switch duplicate streams of call set up signaling; switching one of said streams to said gateway and the other of said streams to said control processor; generating in said control processor a filter device control signal and delivering said filter device control signal to said filter device; reconfiguring said filter device in accord with said filter device control signal; and filtering through said reconfigured filter device the packetized voice communication set up by said set up signaling.
Claim 30
Dependent Claim
125 words
In a communication system comprising a packet internetwork, a switched telephone network connected to the packet internetwork via a static filter device, a packet switch, and a gateway, and a control processor connected to said filter device; a method comprising: transmitting from said filter device to said packet switch duplicate streams of call set up signaling; switching one of said streams to said gateway and the other of said streams to said control processor; generating in said control processor a filter device control signal and delivering said filter device control signal to said filter device; reconfiguring said filter device in accord with said filter device control signal; and filtering through said reconfigured filter device the packetized voice communication set up by said set up signaling.
Claim 31
Dependent Claim
20 words
A method according to claim 25 including porting said set up signaling through a Q.931 port in said filter device.
Claim 32
Dependent Claim
24 words
A method according to claim 25 wherein said filter device is reconfigured solely for the single call for which the set up was performed.
Claim 33
Dependent Claim
25 words
A method according to claim 27 including the step of said gateway accessing an authorization database prior to said gateway authorizing a call set up.
Claim 34
Dependent Claim
17 words
A method according to claim 28 wherein said gateway accesses said authorization database via said packet internetwork.
Claim 35
Dependent Claim
12 words
A method according to claim 29 wherein said internetwork comprises the Internet.
Claim 36
Dependent Claim
36 words
A method according to claim 30 including the step of accessing a gateway address database in an attempt to set up a voice communication through said communication system to obtain the internetwork address of said gateway.
Claim 37
Dependent Claim
16 words
A method according to claim 31 wherein said gateway address database is accessed via the Internet.
Claim 38
Dependent Claim
102 words
A firewall device for providing protection of a network object to which said firewall device is connected, comprising a static filter device, a control processor, and a packet switch, said static filter device providing real time duplication of a packet stream passed therethrough and through said packet switch, said static filter device sending the duplicate packet stream through said packet switch to said control processor, said control processor sending a filter device control signal to said filter device based on information obtained from said duplicate packet stream causing said filter device to be reconfigured in accord with said filter device control signal.
Claim 39
Dependent Claim
102 words
A firewall device for providing protection of a network object to which said firewall device is connected, comprising a static filter device, a control processor, and a packet switch, said static filter device providing real time duplication of a packet stream passed therethrough and through said packet switch, said static filter device sending the duplicate packet stream through said packet switch to said control processor, said control processor sending a filter device control signal to said filter device based on information obtained from said duplicate packet stream causing said filter device to be reconfigured in accord with said filter device control signal.
References Cited (Backward Citations)
US4538259A
Cited
US5726984A
Cited
US5606668A
Cited
US5608786A
Cited
US5724355A
Cited
US6009475A
Cited
US6243815B1
Cited
US6088796A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2005-06-03 | 2005-12-03 | 2006-06-04 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2009-06-03 | 2009-12-03 | 2010-06-04 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2013-06-03 | 2013-12-03 | 2014-06-04 | $7700.00 | Window Closed / Lapsed |