Patent US6591304B1 successfully refreshed from Google Patents.
US6591304B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
Dynamic, scaleable attribute filtering in a multi-protocol compatible network access environment
Assignee: Cisco Technology Inc
•
Filing: 1999-06-21
•
Granted: 2003-07-08
•
Expires: 2019-06-21
Abstract
Abstract A device for processing network access requests responsive to more than one network access protocol comprises a protocol layer responsive to a client access request based on a first protocol, a gateway layer in communication with the protocol layer including at least one protocol handler for processing access requests and a state manager having more than one set of process states required for each network access method, and an inbound filter state object in communication with the gateway layer that is responsive to at least one protocol handler and is invoked to filter attribute data in the access request packets. A method for dynamic, scaleable attribute filtering in a multiple-protocol compatible network access environment comprises receiving an access request which is based upon a first supported network access protocol, processing the access request as a task, processing the task at a protocol handler to verify user identity; checking the access request at the protocol handler for an inbound filter attribute, retrieving a state interface pointer from a state manager based upon an inbound filter being found in the access request and invoking an inbound filter state object to filter the first access request in accordance with the first state interface pointer.
Inventors
- 👤 Aravind Sitaraman
- 👤 Craig T. Iwata
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-04 07:31
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/02; H04L63/0227; H04L63/0263; H04L63/10; H04L9/00; H04L9/40; H04L69/00; H04L69/18
Claims Analysis
Total Claims: 36
Claim 1
Independent Claim
152 words
A device for processing network access requests responsive to more than one network access method, said device comprising: a protocol gateway responsive to an access request based on a supported protocol; a gateway layer in communication with said protocol layer having protocol handlers for processing access requests and a state manager defining sets of process states required for each of the network access methods supported; an inbound filter state object in communication with said gateway that is responsive to at least one of the protocol handlers and is invoked to filter attributes from the access request, said inbound filter state object identifying a set of steps necessary to filter said attributes from the access request; a service component responsive to an access request received from an access state object; a protocol handler responsive to an outbound filter attribute of the access request response received from said service component via a state object.
Claim 2
Independent Claim
152 words
A device for processing network access requests responsive to more than one network access method, said device comprising: a protocol gateway responsive to an access request based on a supported protocol; a gateway layer in communication with said protocol layer having protocol handlers for processing access requests and a state manager defining sets of process states required for each of the network access methods supported; an inbound filter state object in communication with said gateway that is responsive to at least one of the protocol handlers and is invoked to filter attributes from the access request, said inbound filter state object identifying a set of steps necessary to filter said attributes from the access request; a service component responsive to an access request received from an access state object; a protocol handler responsive to an outbound filter attribute of the access request response received from said service component via a state object.
Claim 3
Dependent Claim
40 words
The device of claim 1 further comprising: an outbound filter state object in communication with said gateway layer that is responsive to at least one of the protocol handlers and is invoked to filter attributes from an access request response.
Claim 4
Dependent Claim
66 words
The device of claim 1 , wherein said protocol layer further comprises: a task source for receiving access requests from clients; a task processor in communication with said task source that determines whether the protocol of said access requests is supported and queues the requests for further processing; and a task sink in communication with said task processor that sends access request responses back to clients.
Claim 5
Dependent Claim
25 words
The device of claim 1 , wherein said supported protocol is Remote Authentication Dial-In User Service (RADIUS) protocol used in conjunction with a dial-up client.
Claim 6
Dependent Claim
25 words
The device of claim 1 , wherein said supported protocol is Multimedia Cable Network System (MCNS) protocol used in conjunction with a cable modem client.
Claim 7
Dependent Claim
16 words
The device of claim 1 , wherein said supported protocol is Trivial File Transfer Protocol (TFTP).
Claim 8
Dependent Claim
34 words
The device of claim 1 , wherein said sets of process states define the necessary steps which must be performed by one of the protocol handlers in order to respond to the access request.
Claim 9
Dependent Claim
24 words
The device of claim 1 , further including at least one client for providing an access point interface between a host and said device.
Claim 10
Dependent Claim
17 words
The device of claim 8 , wherein said at least one client includes a network access server.
Claim 11
Dependent Claim
18 words
The device of claim 8 , wherein said at least one client includes a digital subscriber line-based interface.
Claim 12
Dependent Claim
17 words
The device of claim 8 , wherein said at least one client includes a cable modem interface.
Claim 13
Dependent Claim
17 words
The device of claim 8 , wherein said at least one client includes a wireless communication interface.
Claim 14
Independent Claim
110 words
A method of dynamic, scaleable attribute filtering in a multiple-protocol compatible network access environment, the method comprising: receiving a first access request which is based upon a first supported network access protocol; processing the first access request as a first task; processing the first task at a protocol handler to verify user identity; checking the first access request at the protocol handler for an inbound filter attribute; retrieving a first state interface pointer from a state manager based upon an inbound filter being found in the first access request; and invoking an inbound filter state object to filter the first access request in accordance with the first state interface pointer.
Claim 15
Independent Claim
110 words
A method of dynamic, scaleable attribute filtering in a multiple-protocol compatible network access environment, the method comprising: receiving a first access request which is based upon a first supported network access protocol; processing the first access request as a first task; processing the first task at a protocol handler to verify user identity; checking the first access request at the protocol handler for an inbound filter attribute; retrieving a first state interface pointer from a state manager based upon an inbound filter being found in the first access request; and invoking an inbound filter state object to filter the first access request in accordance with the first state interface pointer.
Claim 16
Dependent Claim
113 words
The method of claim 13 further comprising: proxying said inbound filtered first access request to an access state object; sending said inbound filtered first access request from the access state object to a service component; returning a first access request response from a service component to the protocol handler via the state object; checking the first access request response at the protocol handler for an outbound filter attribute; retrieving a second state interface pointer from a state manager based upon an outbound filter being found in the first access request response; and invoking an outbound filter state object to filter the first access request response in accordance with the second state interface pointer.
Claim 17
Dependent Claim
101 words
The method of claim 13 , further comprising: receiving a second access request which is based upon a second supported network access protocol; processing the second access request as a second task; processing the second task at a protocol handler to verify user identity; checking the second access request at the protocol handler for an inbound filter attribute; retrieving a third state interface pointer from a state manager based upon an inbound filter being found in the second access request; and invoking an inbound filter state object to filter the second access request in accordance with the third state interface pointer.
Claim 18
Dependent Claim
110 words
The method of claim 15 further comprising: proxying said inbound filtered second-access request to an access state object; sending said inbound filtered second access request from the access state object to a service component; returning a second access request response from a service component to the protocol handler via the state object; checking the second access request response at the protocol handler for an outbound filter attribute; retrieving a fourth state interface pointer from a state manager based upon an outbound filter being found in the second access request response; and invoking an outbound filter state-object to filter the second access request response in accordance with the fourth interface pointer.
Claim 19
Independent Claim
168 words
A method of dynamic, scaleable attribute filtering in a multiple-protocol compatible network access environment, the method comprising: receiving a first access request which is based upon a first supported network access protocol; processing the first access request as a first task; processing the first task at a protocol handler to verify user identity; checking the first access request response at the protocol handler for an inbound filter attribute; proxying the first access request to an access state object; sending first access request from the access state object to a service component; returning a first access request response from a service component to the protocol handler via the state object; checking the first access request response at the protocol handler for an outbound filter attribute; retrieving a second state interface pointer from a state manager based upon an outbound filter being found in the first access request response; and invoking an outbound filter state object to filter the first access request in accordance with the first state interface pointer.
Claim 20
Independent Claim
168 words
A method of dynamic, scaleable attribute filtering in a multiple-protocol compatible network access environment, the method comprising: receiving a first access request which is based upon a first supported network access protocol; processing the first access request as a first task; processing the first task at a protocol handler to verify user identity; checking the first access request response at the protocol handler for an inbound filter attribute; proxying the first access request to an access state object; sending first access request from the access state object to a service component; returning a first access request response from a service component to the protocol handler via the state object; checking the first access request response at the protocol handler for an outbound filter attribute; retrieving a second state interface pointer from a state manager based upon an outbound filter being found in the first access request response; and invoking an outbound filter state object to filter the first access request in accordance with the first state interface pointer.
Claim 21
Independent Claim
128 words
A device for processing network access requests responsive to more than one network access method and having dynamic, scaleable filtration, said device comprising: means for receiving a first access request that is based upon a first supported network access protocol; means for processing the first access request as a first task; means for processing the first task at a protocol handler to verify user identity; means for checking the first access request at the protocol handler for an inbound filter attribute; means for retrieving a first state interface pointer from a state manager based upon an inbound filter being found in the first access request; and means for invoking an inbound filter state object to filter the first access request in accordance with the first state interface pointer.
Claim 22
Independent Claim
128 words
A device for processing network access requests responsive to more than one network access method and having dynamic, scaleable filtration, said device comprising: means for receiving a first access request that is based upon a first supported network access protocol; means for processing the first access request as a first task; means for processing the first task at a protocol handler to verify user identity; means for checking the first access request at the protocol handler for an inbound filter attribute; means for retrieving a first state interface pointer from a state manager based upon an inbound filter being found in the first access request; and means for invoking an inbound filter state object to filter the first access request in accordance with the first state interface pointer.
Claim 23
Dependent Claim
123 words
The device of claim 18 further comprising: means for proxying inbound filtered first access request to an access state object; means for sending inbound filtered first access request from the access state object to a service component; means for returning a first access request response from a service component to the protocol handler via the state object; means for checking the first access request response at the protocol handler for an outbound filter attribute; means for retrieving a second state interface pointer from a state manager based upon an outbound filter being found in the first access request response; and means for invoking an outbound filter state object to filter the first access request response in accordance with the second state interface pointer.
Claim 24
Dependent Claim
131 words
A program storage device readable by a machine, tangibly embodying a program of instructions executable by the machine to perform method steps for dynamic, scaleable filtration of attribute data in a multiple-protocol network access environment, the method comprising: receiving a first access request which is based upon a first supported network access protocol; processing the first access request as a first task; processing the first task at a protocol handler to verify user identity; checking the first access request at the protocol handler for an inbound filter attribute; retrieving a first state interface pointer from a state manager based upon an inbound filter being found in the first access request; and invoking an inbound filter state object to filter the first access request in accordance with the first state interface pointer.
Claim 25
Dependent Claim
131 words
A program storage device readable by a machine, tangibly embodying a program of instructions executable by the machine to perform method steps for dynamic, scaleable filtration of attribute data in a multiple-protocol network access environment, the method comprising: receiving a first access request which is based upon a first supported network access protocol; processing the first access request as a first task; processing the first task at a protocol handler to verify user identity; checking the first access request at the protocol handler for an inbound filter attribute; retrieving a first state interface pointer from a state manager based upon an inbound filter being found in the first access request; and invoking an inbound filter state object to filter the first access request in accordance with the first state interface pointer.
Claim 26
Dependent Claim
119 words
The program storage device of claim 20 , wherein said method further comprises: proxying said inbound filtered first access request to an access state object; sending said inbound filtered first access request from the access state object to a service component; returning a first access request response from a service component to the protocol handler via the state object; checking the first access request response at the protocol handler for an outbound filter attribute; retrieving a second state interface pointer from a state manager based upon an outbound filter being found in the first access request response; and invoking an outbound filter state object to filter the first access request response in accordance with the second state interface pointer.
Claim 27
Independent Claim
96 words
A method for dynamically filtering an attribute in a multiple-protocol compatible network access environment, the method comprising: receiving an access request; checking said access request for an inbound filter attribute; retrieving a data structure identifying a set of steps necessary to implement said inbound filter attribute; executing said set of steps; sending said access request from an access state object to a service component; returning an access request response from a service component to a protocol handler via a state object; and checking said access request response at said protocol handler for an outbound filter attribute.
Claim 28
Independent Claim
96 words
A method for dynamically filtering an attribute in a multiple-protocol compatible network access environment, the method comprising: receiving an access request; checking said access request for an inbound filter attribute; retrieving a data structure identifying a set of steps necessary to implement said inbound filter attribute; executing said set of steps; sending said access request from an access state object to a service component; returning an access request response from a service component to a protocol handler via a state object; and checking said access request response at said protocol handler for an outbound filter attribute.
Claim 29
Dependent Claim
27 words
The method of claim 22 , wherein said data structure identifying a set of steps necessary to implement said inbound filter attribute is a state interface pointer.
Claim 30
Dependent Claim
18 words
The method of claim 22 , further comprising: verifying a user identify of said of said access request.
Claim 31
Independent Claim
110 words
An apparatus for dynamically filtering an attribute in a multiple-protocol compatible network access environment, the apparatus comprising: means for receiving an access request; means for checking said access request for an inbound filter attribute; means for retrieving a data structure identifying a set of steps necessary to implement said inbound filter attribute; means for executing said set of steps; means for sending said access request from an access state object to a service component; means for returning an access request response from a service component to a protocol handler via a state object; and means for checking said access request response at said protocol handler for an outbound filter attribute.
Claim 32
Independent Claim
110 words
An apparatus for dynamically filtering an attribute in a multiple-protocol compatible network access environment, the apparatus comprising: means for receiving an access request; means for checking said access request for an inbound filter attribute; means for retrieving a data structure identifying a set of steps necessary to implement said inbound filter attribute; means for executing said set of steps; means for sending said access request from an access state object to a service component; means for returning an access request response from a service component to a protocol handler via a state object; and means for checking said access request response at said protocol handler for an outbound filter attribute.
Claim 33
Dependent Claim
116 words
A program storage device readable by a machine, tangibly embodying a program of instructions executable by the machine to perform a method for dynamically filtering an attribute in a multiple-protocol compatible network access environment, the method comprising: receiving an access request; checking said access request for an inbound filter attribute; retrieving a data structure identifying a set of steps necessary to implement said inbound filter attribute; executing said set of steps; sending said access request from an access state object to a service component; returning an access request response from a service component to a protocol handler via a state object; and checking said access request response at said protocol handler for an outbound filter attribute.
Claim 34
Dependent Claim
116 words
A program storage device readable by a machine, tangibly embodying a program of instructions executable by the machine to perform a method for dynamically filtering an attribute in a multiple-protocol compatible network access environment, the method comprising: receiving an access request; checking said access request for an inbound filter attribute; retrieving a data structure identifying a set of steps necessary to implement said inbound filter attribute; executing said set of steps; sending said access request from an access state object to a service component; returning an access request response from a service component to a protocol handler via a state object; and checking said access request response at said protocol handler for an outbound filter attribute.
Claim 35
Dependent Claim
27 words
The apparatus of claim 25 , wherein said data structure identifying a set of steps necessary to implement said inbound filter attribute is a state interface pointer.
Claim 36
Dependent Claim
20 words
The apparatus of claim 25 , further comprising: means for verifying a user identify of said of said access request.
References Cited (Backward Citations)
US5570361A
Cited
US5241594A
Cited
US5715394A
Cited
US5473607A
Cited
US5513172A
Cited
US5991828A
Cited
US5408472A
Cited
US5699521A
Cited
US5561769A
Cited
US5864542A
Cited
US5673265A
Cited
US5740176A
Cited
US5555244A
Cited
US5799017A
Cited
US5655077A
Cited
US5671354A
Cited
US5845087A
Cited
US5815665A
Cited
US5752242A
Cited
US5913037A
Cited
US5857074A
Cited
US5883893A
Cited
US5684950A
Cited
US6047376A
Cited
US5812529A
Cited
US5835727A
Cited
US5845070A
Cited
US6011910A
Cited
US5944824A
Cited
US6091951A
Cited
US5918016A
Cited
US6021496A
Cited
US5991810A
Cited
US6377998B2
Cited
US5974453A
Cited
US6092196A
Cited
US6026441A
Cited
US6009103A
Cited
US6118785A
Cited
WO1999053408A1
Cited
US6141687A
Cited
US6154465A
Cited
US6119160A
Cited
US6356949B1
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2006-07-07 | 2007-01-06 | 2007-07-08 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2010-07-07 | 2011-01-06 | 2011-07-08 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2014-07-07 | 2015-01-06 | 2015-07-08 | $7700.00 | Window Closed / Lapsed |