Patent US6801948B2 successfully refreshed from Google Patents.
US6801948B2
Expired / Lapsed
US
⏱️ 0.0 years remaining
System and method for a streams based network access control for a computer
Assignee: Hewlett Packard Enterprise Development LP
•
Filing: 2000-12-15
•
Granted: 2004-10-05
•
Expires: 2020-12-15
Abstract
Abstract A system communicates a packet through a streams-based network protocol stack to a network interface card that includes an interface attribute. A session filter module and a network filter module are in communication with the network protocol stack. A table of network attributes, associated with the session filter module and network filter module, is use to determine whether the network interface card can be accessed. A method comprises operating a software process that includes a network endpoint attribute, communicating packets through a network protocol stack to a network interface card, having an interface attribute, and comparing the network endpoint attribute with the interface attribute to determine whether the software process can access the network interface card.
Inventors
- 👤 Brett Miller Clark
- 👤 Patricia Joyce Leima
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-03 11:18
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/10; H04L63/105; H04L63/104
Claims Analysis
Total Claims: 25
Claim 1
Independent Claim
122 words
A streams based network access control system, comprising: a software process operating on a computer, said software process including a network endpoint attribute and configured to communicate a packet through a streams based network protocol stack to a network interface card, said network interface card including an interface attribute; a session filter module communicating with said network protocol stack; a network filter module communicating with said network protocol stack; and a table of network attributes associated with said session filter module and said network filter module, wherein said session filter module and network filter module compare said network endpoint attribute with said interface attribute in said table of network attributes to determine whether said software process can access said network interface card.
Claim 2
Dependent Claim
122 words
A streams based network access control system, comprising: a software process operating on a computer, said software process including a network endpoint attribute and configured to communicate a packet through a streams based network protocol stack to a network interface card, said network interface card including an interface attribute; a session filter module communicating with said network protocol stack; a network filter module communicating with said network protocol stack; and a table of network attributes associated with said session filter module and said network filter module, wherein said session filter module and network filter module compare said network endpoint attribute with said interface attribute in said table of network attributes to determine whether said software process can access said network interface card.
Claim 3
Dependent Claim
26 words
The system of claim 1 , wherein said table of network attributes further comprises: at least one network endpoint attribute; and at least one interface attribute.
Claim 4
Dependent Claim
34 words
The system of claim 1 , wherein each of said at least one network endpoint attribute and said at least one interface attribute further comprise: a compartment label; and at least one privilege value.
Claim 5
Dependent Claim
48 words
The system of claim 1 , wherein said session filter module is configured to receive a communication packet, query said table of network attributes to determine said network endpoint attribute and said interface attribute, and determine whether said communication packet can be sent to said network interface card.
Claim 6
Dependent Claim
62 words
The system of claim 1 , wherein said network filter module is configured to receive a communication packet from said network protocol stack, query said table of network attributes to determine said endpoint attribute and said interface attribute, place said interface attribute in said table of network attributes, and determine whether said communication packet can be sent to said network interface card.
Claim 7
Dependent Claim
53 words
The system of claim 1 , wherein said network filter module is configured to receive a communication packet from said network interface card, query said table of network attributes to determine said network endpoint attribute and said interface attribute, and determine whether said communication packet can be sent to said network protocol stack.
Claim 8
Independent Claim
100 words
A method for a streams based network access control system, the method comprising the steps of: operating a software process on a computer, said software process including at least one network endpoint attribute; communicating packets through a network protocol stack to a network interface card, said network interface card including at least one interface attribute; establishing an association between said network endpoint attribute and said interface attribute; placing said network endpoint attribute and said interface attribute in a table; comparing said network endpoint attribute with said interface attribute; and determining whether said software process can access said network interface card.
Claim 9
Independent Claim
100 words
A method for a streams based network access control system, the method comprising the steps of: operating a software process on a computer, said software process including at least one network endpoint attribute; communicating packets through a network protocol stack to a network interface card, said network interface card including at least one interface attribute; establishing an association between said network endpoint attribute and said interface attribute; placing said network endpoint attribute and said interface attribute in a table; comparing said network endpoint attribute with said interface attribute; and determining whether said software process can access said network interface card.
Claim 10
Dependent Claim
28 words
The method of claim 7 , wherein each of said network endpoint attributes and said interface attributes further comprise: a compartment label; and at least one privilege value.
Claim 11
Dependent Claim
61 words
The method of claim 7 , further comprising the steps of: receiving, in a session filter module, a communication packet; placing said network endpoint attribute in said table of network attributes; querying said table of network attributes to determine said network endpoint attribute and said interface attribute; and determining whether said communication packet can be sent to said network protocol stack.
Claim 12
Dependent Claim
60 words
The method of claim 7 , further comprising the steps of: receiving, in a network filter module, a communication packet; placing said interface attribute in said table of network attributes; querying said table of network attributes to determine said network endpoint attribute and said interface attribute; and determining whether said communication packet can be sent to said network interface card.
Claim 13
Dependent Claim
47 words
The method of claim 7 , further comprising the steps of: receiving, in a network filter module, a communication packet; querying said table to determine said network endpoint attribute and said interface attribute; and determining whether said communication packet can be sent to said network protocol stack.
Claim 14
Dependent Claim
96 words
A computer readable medium for a streams based network access control system, comprising: logic for operating a software process on a computer, said software process including a at least one network endpoint attribute; logic for communicating packets through a network protocol stack to a network interface card, said network interface card including at least one interface attribute; logic for establishing an association between said network endpoint attribute and said interface attribute; logic for comparing said network endpoint attribute with said interface attribute; and logic for determining whether said software process can access said network interface card.
Claim 15
Dependent Claim
96 words
A computer readable medium for a streams based network access control system, comprising: logic for operating a software process on a computer, said software process including a at least one network endpoint attribute; logic for communicating packets through a network protocol stack to a network interface card, said network interface card including at least one interface attribute; logic for establishing an association between said network endpoint attribute and said interface attribute; logic for comparing said network endpoint attribute with said interface attribute; and logic for determining whether said software process can access said network interface card.
Claim 16
Dependent Claim
30 words
The computer readable medium of claim 12 , wherein each of said network endpoint attributes and said interface attributes further comprise: a compartment label; and at least one privilege value.
Claim 17
Dependent Claim
63 words
The computer readable medium of claim 12 , further comprising: logic for receiving a communication packet; logic for placing said network endpoint attribute in a table of network attributes; logic for querying said table of network attributes to determine said network endpoint attribute and said interface attribute; and logic for determining whether said communication packet can be sent to said network protocol stack.
Claim 18
Dependent Claim
69 words
The computer readable medium of claim 12 , further comprising logic configured to perform the steps of: logic for receiving a communication packet; logic for placing said interface attribute in a table of network attributes; logic for querying said table of network attributes to determine said network endpoint attribute and said interface attribute; and logic for determining whether said communication packet can be sent to said network interface card.
Claim 19
Dependent Claim
53 words
The computer readable medium of claim 12 , further comprising the steps of: logic for receiving a communication packet; logic for querying a table of network attributes to determine said network endpoint attribute and said interface attribute; and logic for determining whether said communication packet can be sent to said network protocol stack.
Claim 20
Dependent Claim
104 words
A streams based network access control system, comprising: a means for operating a software process on a computer, said software process including network endpoint attributes; a means for communicating packets through a network protocol stack to a network interface card, said network interface card including interface attributes; a means for establishing an association between said network endpoint attributes and said interface attributes; a means for placing said network endpoint attributes and said interface attributes in a table; a means for comparing said network endpoint attributes with said interface attributes; and a means for determining whether said software process can access said network interface card.
Claim 21
Dependent Claim
104 words
A streams based network access control system, comprising: a means for operating a software process on a computer, said software process including network endpoint attributes; a means for communicating packets through a network protocol stack to a network interface card, said network interface card including interface attributes; a means for establishing an association between said network endpoint attributes and said interface attributes; a means for placing said network endpoint attributes and said interface attributes in a table; a means for comparing said network endpoint attributes with said interface attributes; and a means for determining whether said software process can access said network interface card.
Claim 22
Dependent Claim
28 words
The system of claim 17 , wherein each of said network endpoint attributes and said interface attributes further comprise: a compartment label; and at least one privilege value.
Claim 23
Dependent Claim
70 words
The system of claim 17 , further comprising: a means for receiving a communication packet in a session filter module; a means for placing said network endpoint attribute in said table of network attributes; a means for querying said table of network attributes to determine said network endpoint attribute and said interface attribute; and a means for determining whether said communication packet can be sent to said network protocol stack.
Claim 24
Dependent Claim
69 words
The system of claim 17 , further comprising: a means for receiving a communication packet in a network filter module; a means for placing said interface attribute in said table of network attributes; a means for querying said table of network attributes to determine said network endpoint attribute and said interface attribute; and a means for determining whether said communication packet can be sent to said network interface card.
Claim 25
Dependent Claim
56 words
The system of claim 17 , further comprising: a means for receiving a communication packet in a network filter module; a means for querying said table of network attributes to determine said network endpoint attribute and said interface attribute; and a means for determining whether said communication packet can be sent to said network protocol stack.
References Cited (Backward Citations)
US5640399A
Cited
US5699350A
Cited
US6732191B1
Cited
US6477143B1
Cited
US6442612B1
Cited
US6446200B1
Cited
US6625657B1
Cited
US6363432B1
Cited
US6591304B1
Cited
US6665724B2
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2007-10-05 | 2008-04-05 | 2008-10-05 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2011-10-05 | 2012-04-05 | 2012-10-05 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2015-10-05 | 2016-04-05 | 2016-10-05 | $7700.00 | Window Closed / Lapsed |