Patent US6523068B1 successfully refreshed from Google Patents.
← Back to Patent Explorer
US6523068B1 Expired / Lapsed US ⏱️ 0.0 years remaining

Method for encapsulating and transmitting a message includes private and forwarding network addresses with payload to an end of a tunneling association

Assignee: HP Inc
•
Filing: 1999-08-27
•
Granted: 2003-02-18
•
Expires: 2019-08-27
📄 Original PDF 🌐 Google Patents 🔄 Sync Now

Abstract

Abstract Methods for processing a media flow at an end of a tunneling association in a data network. One method includes receiving a data packet on a public network, such as the Internet, and recognizing that it encapsulates another data packet for a virtual connection to an application. The virtual connection is addressed by private network addresses. Another method includes constructing a data packet for a virtual connection to the application and encapsulating it for transmission on the public network. The methods provide for hiding the identity of the originating and terminating ends of the tunneling association from the other users of the public network. Hiding the identities may prevent interception of media flow between the ends of the tunneling association or eavesdropping on Voice-over-Internet-Protocol calls. The methods increase the security of communication on the data network without imposing a computational burden on the devices in the data network.

Inventors

  • 👤 Nurettin B. Beser
  • 👤 Michael Borella

Bibliographic Details

Application Number —
Jurisdiction US
Data Source google_patents
Last Synchronized 2026-11-06 04:25
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/02; H04L63/0272; H04L12/00; H04L12/28; H04L12/46; H04L12/4633; H04L61/00; H04L61/35; H04L63/04

Claims Analysis

Total Claims: 34
Claim 1
Independent Claim 213 words
In a data network having a plurality of private networks and public networks, and a plurality of network devices, a method for processing a media flow at an end of a tunneling association through a network device, the method comprising the following steps: receiving a first message on the network device on a public network associated with a first layer of a protocol stack for the network device, wherein the first message includes a first payload; determining whether the first message includes an indicator that the first payload is associated with a second layer of the protocol stack, and if so, obtaining a private network address from the first payload in the second layer of the protocol stack, wherein the first payload includes the private network address and a second payload, determining whether the private network address is recorded on the network device, and if so, associating a forwarding network address with the private network address, wherein the forwarding network address is associated with a third layer of the protocol stack and is associated with the end of the tunneling association, and requesting the third layer to encapsulate and transmit a second message to the end of the tunneling association, wherein the second message includes the forwarding network address and the second payload.
Claim 2
Dependent Claim 213 words
In a data network having a plurality of private networks and public networks, and a plurality of network devices, a method for processing a media flow at an end of a tunneling association through a network device, the method comprising the following steps: receiving a first message on the network device on a public network associated with a first layer of a protocol stack for the network device, wherein the first message includes a first payload; determining whether the first message includes an indicator that the first payload is associated with a second layer of the protocol stack, and if so, obtaining a private network address from the first payload in the second layer of the protocol stack, wherein the first payload includes the private network address and a second payload, determining whether the private network address is recorded on the network device, and if so, associating a forwarding network address with the private network address, wherein the forwarding network address is associated with a third layer of the protocol stack and is associated with the end of the tunneling association, and requesting the third layer to encapsulate and transmit a second message to the end of the tunneling association, wherein the second message includes the forwarding network address and the second payload.
Claim 3
Dependent Claim 22 words
A computer readable medium having stored therein instructions for causing a central processing unit to execute the method of claim 1 .
Claim 4
Dependent Claim 62 words
The method of claim 1 wherein the associating step further comprises: searching a network address table on the network device for an entry containing the private network address, wherein the private network address is recorded in the network address table; and reading the forwarding network address from the entry, wherein the entry includes the private network address and the forwarding network address.
Claim 5
Dependent Claim 39 words
The method of claim 1 wherein the first layer of the protocol stack for the network device is an Internet Protocol layer and the second layer of the protocol stack for the network device is the Internet Protocol layer.
Claim 6
Dependent Claim 38 words
The method of claim 1 wherein the first layer of the protocol stack for the network device is an Internet Protocol layer and the second layer of the protocol stack for the network device is an application layer.
Claim 7
Dependent Claim 23 words
The method of claim 1 wherein the third layer of the protocol stack for the network device is a Media Access Control layer.
Claim 8
Dependent Claim 50 words
The method of claim 1 wherein the end of the tunneling association is any of a multimedia device or a telephony device, and wherein the network device is any of an edge router, a cable modem for a data-over-cable system, or a cable modem termination system for a data-over-cable system.
Claim 9
Dependent Claim 207 words
In a data network having a plurality of private networks and public networks, and a plurality of network devices, a method for processing a media flow at an end of a tunneling association through a network device, the method comprising the following steps: receiving a first message in a first layer of a protocol stack for the network device from the end of the tunneling association, wherein the first message includes a first payload; determining whether the first message includes an indicator that the first payload is associated with a second layer of the protocol stack, and if so, obtaining a private network address from the first payload in the second layer of the protocol stack, wherein the first payload includes the private network address and a second payload, determining whether the private network address is recorded on the network device, and if so, associating a public network address with the private network address, wherein the public network address is associated with a third layer of the protocol stack, and requesting the third layer to encapsulate and transmit a second message on a public network associated with the third layer, wherein the second message includes the public network address, the private network address, and the second payload.
Claim 10
Dependent Claim 207 words
In a data network having a plurality of private networks and public networks, and a plurality of network devices, a method for processing a media flow at an end of a tunneling association through a network device, the method comprising the following steps: receiving a first message in a first layer of a protocol stack for the network device from the end of the tunneling association, wherein the first message includes a first payload; determining whether the first message includes an indicator that the first payload is associated with a second layer of the protocol stack, and if so, obtaining a private network address from the first payload in the second layer of the protocol stack, wherein the first payload includes the private network address and a second payload, determining whether the private network address is recorded on the network device, and if so, associating a public network address with the private network address, wherein the public network address is associated with a third layer of the protocol stack, and requesting the third layer to encapsulate and transmit a second message on a public network associated with the third layer, wherein the second message includes the public network address, the private network address, and the second payload.
Claim 11
Dependent Claim 22 words
A computer readable medium having stored therein instructions for causing a central processing unit to execute the method of claim 8 .
Claim 12
Dependent Claim 62 words
The method of claim 8 wherein the associating step further comprises: searching a network address table on the network device for an entry containing the private network address, wherein the private network address is recorded in the network address table; and reading the public network address from the entry, wherein the entry includes the private network address and the public network address.
Claim 13
Dependent Claim 40 words
The method of claim 8 wherein the first layer of the protocol stack for the network device is a Media Access Control layer and the second layer of the protocol stack for the network device is an Internet Protocol layer.
Claim 14
Dependent Claim 39 words
The method of claim 8 wherein the first layer of the protocol stack for the network device is a Media Access Control layer and the second layer of the protocol stack for the network device is an application layer.
Claim 15
Dependent Claim 22 words
The method of claim 8 wherein the third layer of the protocol stack for the network device is an Internet Protocol layer.
Claim 16
Dependent Claim 50 words
The method of claim 8 wherein the end of the tunneling association is any of a multimedia device or a telephony device, and wherein the network device is any of an edge router, a cable modem for a data-over-cable system, or a cable modem termination system for a data-over-cable system.
Claim 17
Dependent Claim 164 words
In a data network having a plurality of private networks and public networks, and a plurality of network devices, a method for processing a media flow at an end of a tunneling association through a network device, the method comprising the following steps: receiving a first payload in a first layer of a protocol stack for the network device from a second layer of the protocol stack, wherein the first payload includes a private network address and a second payload; searching a network address table on the network device for an entry containing the private network address; reading a forwarding network address associated with a third layer of the protocol stack for the end of the tunneling association from the entry, wherein the entry includes the private network address and the forwarding network address; and requesting the third layer to encapsulate and transmit a message to the end of the tunneling association, wherein the message includes the forwarding network address and the second payload.
Claim 18
Dependent Claim 164 words
In a data network having a plurality of private networks and public networks, and a plurality of network devices, a method for processing a media flow at an end of a tunneling association through a network device, the method comprising the following steps: receiving a first payload in a first layer of a protocol stack for the network device from a second layer of the protocol stack, wherein the first payload includes a private network address and a second payload; searching a network address table on the network device for an entry containing the private network address; reading a forwarding network address associated with a third layer of the protocol stack for the end of the tunneling association from the entry, wherein the entry includes the private network address and the forwarding network address; and requesting the third layer to encapsulate and transmit a message to the end of the tunneling association, wherein the message includes the forwarding network address and the second payload.
Claim 19
Dependent Claim 22 words
A computer readable medium having stored therein instructions for causing a central processing unit to execute the method of claim 15 .
Claim 20
Dependent Claim 48 words
The method of claim 15 wherein the first layer of the protocol stack for the network device is an Internet Protocol layer, the second layer of the protocol stack is the Internet Protocol layer, and the third layer of the protocol stack is a Media Access Control layer.
Claim 21
Dependent Claim 47 words
The method of claim 15 wherein the first layer of the protocol stack for the network device is an application layer, the second layer of the protocol stack is an Internet Protocol layer, and the third layer of the protocol stack is a Media Access Control layer.
Claim 22
Dependent Claim 158 words
In a data network having a plurality of private networks and public networks, and a plurality of network devices, a method for processing a media flow at an end of a tunneling association through a network device, the method comprising the following steps: receiving a first payload in a first layer of a protocol stack for the network device from a second layer of the protocol stack, wherein the first payload includes a private network address and a second payload; searching a network address table on the network device for an entry containing the private network address; reading a public network address associated with a third layer of the protocol stack from the entry, wherein the entry includes the private network address and the public network address; and requesting the third layer to encapsulate and transmit a message on a public network, wherein the message includes the public network address, the private network address, and the second payload.
Claim 23
Dependent Claim 158 words
In a data network having a plurality of private networks and public networks, and a plurality of network devices, a method for processing a media flow at an end of a tunneling association through a network device, the method comprising the following steps: receiving a first payload in a first layer of a protocol stack for the network device from a second layer of the protocol stack, wherein the first payload includes a private network address and a second payload; searching a network address table on the network device for an entry containing the private network address; reading a public network address associated with a third layer of the protocol stack from the entry, wherein the entry includes the private network address and the public network address; and requesting the third layer to encapsulate and transmit a message on a public network, wherein the message includes the public network address, the private network address, and the second payload.
Claim 24
Dependent Claim 22 words
A computer readable medium having stored therein instructions for causing a central processing unit to execute the method of claim 19 .
Claim 25
Dependent Claim 47 words
The method of claim 19 wherein the first layer of the protocol stack for the network device is an Internet Protocol layer, second layer of the protocol stack is a Media Access Control layer, and the third layer of the protocol stack is the Internet Protocol layer.
Claim 26
Dependent Claim 47 words
The method of claim 19 wherein the first layer of the protocol stack for the network device is an application layer, the second layer of the protocol stack is a Media Access Control layer, and the third layer of the protocol stack is an Internet Protocol layer.
Claim 27
Dependent Claim 227 words
In a data network having a plurality of private networks and public networks, and a plurality of network devices, a method for processing a Voice-over-Internet-Protocol flow at an end of a Voice-over-Internet-Protocol association through a network device, the method comprising the following steps: receiving a first message on the network device on a public network associated with an Internet Protocol layer of a protocol stack for the network device, wherein the first message includes a first payload; determining whether the first message includes an indicator that the first payload is associated with the Internet Protocol layer of the protocol stack, and if so, obtaining a private Internet Protocol address from the first payload in the Internet Protocol layer of the protocol stack, wherein the first payload includes the private Internet Protocol address and a second payload, determining whether the private Internet Protocol address is recorded on the network device, and if so, associating a Medium Access Control address with the private Internet Protocol address, wherein the Medium Access Control address is associated with a Medium Access Control layer of the protocol stack and is associated with the end of the Voice-over-internet-Protocol association, and requesting the Medium Access Control layer to encapsulate and transmit a second message to the end of the Voice-over-Internet-Protocol association, wherein the second message includes the Medium Access Control address and the second payload.
Claim 28
Dependent Claim 227 words
In a data network having a plurality of private networks and public networks, and a plurality of network devices, a method for processing a Voice-over-Internet-Protocol flow at an end of a Voice-over-Internet-Protocol association through a network device, the method comprising the following steps: receiving a first message on the network device on a public network associated with an Internet Protocol layer of a protocol stack for the network device, wherein the first message includes a first payload; determining whether the first message includes an indicator that the first payload is associated with the Internet Protocol layer of the protocol stack, and if so, obtaining a private Internet Protocol address from the first payload in the Internet Protocol layer of the protocol stack, wherein the first payload includes the private Internet Protocol address and a second payload, determining whether the private Internet Protocol address is recorded on the network device, and if so, associating a Medium Access Control address with the private Internet Protocol address, wherein the Medium Access Control address is associated with a Medium Access Control layer of the protocol stack and is associated with the end of the Voice-over-internet-Protocol association, and requesting the Medium Access Control layer to encapsulate and transmit a second message to the end of the Voice-over-Internet-Protocol association, wherein the second message includes the Medium Access Control address and the second payload.
Claim 29
Dependent Claim 22 words
A computer readable medium having stored therein instructions for causing a central processing unit to execute the method of claim 23 .
Claim 30
Dependent Claim 44 words
The method of claim 23 wherein the end of the Voice-over-Internet-Protocol association is a telephony device, and wherein the network device is any of an edge router, a cable modem for a data-over-cable system, or a cable modem termination system for a data-over-cable system.
Claim 31
Dependent Claim 222 words
In a data network having a plurality of private networks and public networks, and a plurality of network devices, a method for processing a Voice-over-Internet-Protocol flow at an end of a Voice-over-Internet-Protocol association through a network device, the method comprising the following steps: receiving a first message in a Media Access Control layer of a protocol stack for the network device from the end of the Voice-over-Internet-Protocol association, wherein the first message includes a first payload; determining whether the first message includes an indicator that the first payload is associated with an Internet Protocol layer of the protocol stack, and if so, obtaining a private Internet Protocol address from the first payload in the Internet Protocol layer of the protocol stack, wherein the first payload includes the private Internet Protocol address and a second payload, determining whether the private Internet Protocol address is recorded on the network device, and if so, associating a public Internet Protocol address with the private Internet Protocol address, wherein the public Internet Protocol address is associated with an Internet Protocol layer of the protocol stack, and requesting the Internet Protocol layer to encapsulate and transmit a second message on a public network associated with the Internet Protocol layer, wherein the second message includes the public Internet Protocol address, the private Internet Protocol address, and the second payload.
Claim 32
Dependent Claim 222 words
In a data network having a plurality of private networks and public networks, and a plurality of network devices, a method for processing a Voice-over-Internet-Protocol flow at an end of a Voice-over-Internet-Protocol association through a network device, the method comprising the following steps: receiving a first message in a Media Access Control layer of a protocol stack for the network device from the end of the Voice-over-Internet-Protocol association, wherein the first message includes a first payload; determining whether the first message includes an indicator that the first payload is associated with an Internet Protocol layer of the protocol stack, and if so, obtaining a private Internet Protocol address from the first payload in the Internet Protocol layer of the protocol stack, wherein the first payload includes the private Internet Protocol address and a second payload, determining whether the private Internet Protocol address is recorded on the network device, and if so, associating a public Internet Protocol address with the private Internet Protocol address, wherein the public Internet Protocol address is associated with an Internet Protocol layer of the protocol stack, and requesting the Internet Protocol layer to encapsulate and transmit a second message on a public network associated with the Internet Protocol layer, wherein the second message includes the public Internet Protocol address, the private Internet Protocol address, and the second payload.
Claim 33
Dependent Claim 22 words
A computer readable medium having stored therein instructions for causing a central processing unit to execute the method of claim 26 .
Claim 34
Dependent Claim 44 words
The method of claim 26 wherein the end of the Voice-over-Internet-Protocol association is a telephony device, and wherein the network device is any of an edge router, a cable modem for a data-over-cable system, or a cable modem termination system for a data-over-cable system.

USPTO Annuity & Maintenance Windows

Annuity Stage Window Opens Payment Deadline Surcharge Period Until Estimated Fee Status
3.5 Years (Year 4) 2006-02-17 2006-08-19 2007-02-18 $2000.00 Window Closed / Lapsed
7.5 Years (Year 8) 2010-02-17 2010-08-19 2011-02-18 $3760.00 Window Closed / Lapsed
11.5 Years (Year 12) 2014-02-17 2014-08-19 2015-02-18 $7700.00 Window Closed / Lapsed

Assigned Categories & Tags

No categories assigned to this patent yet.

Assign Category Tag