Filtering network traffic using protected filtering mechanisms
AssigneeAT&T Intellectual Property I, L.P.
InventorsEdward G. Amoroso, Nishanth Chandran, Evgene Vahlis
Life of this patent
Estimating the term…
Abstract
Concepts and technologies are disclosed herein for filtering network traffic using protected filtering mechanisms. An indication that traffic is to be filtered can be received, and a hash key, a signature representation, and an obfuscated signature can be identified or generated. The hash key and the signature representation can be provided to a first device without exposing the contents of the signature to the second device, and the obfuscated signature can be provided to a second device without exposing the contents of the signature to the second device. The first device and the second device can execute independent operations to collectively determine if the traffic is to be filtered.
Claims20
A method comprising:
- generating, by a first device comprising a processor, a hash key, a signature representation, and an obfuscated signature, wherein the signature representation represents a signature that is available to the first device, and wherein the signature is not available to a second device and a third device;
- providing, by the first device and to the second device, the hash key and the signature representation, wherein the hash key and the signature representation are provided without the signature that is represented by the signature representation, and wherein the second device is configured to
- receive traffic that is to be filtered,
- generate, using the hash key and the signature representation, a hash value based on the traffic, and
- provide the hash value and the traffic to the third device;
- and
- providing, by the first device and to the third device, the obfuscated signature, wherein the third device is configured to generate a filtering decision using the obfuscated signature and the hash value without having the signature, and wherein the filtering decision relates to the traffic.
A system comprising:
- a first device comprising a processor;
- and
- a memory that stores computer-executable instructions that, when executed by the processor, cause the processor to perform operations comprising
- generating a hash key, a signature representation, and an obfuscated signature, wherein the signature representation represents a signature that is available to the first device, and wherein the signature is not available to a second device and a third device,
- providing, to the second device, the hash key and the signature representation, wherein the hash key and the signature representation are provided without the signature that is represented by the signature representation, and wherein the second device is configured to
- receive traffic that is to be filtered,
- generate, using the hash key and the signature representation, a hash value based on the traffic, and
- provide the hash value and the traffic to the third device, and
- providing, to the third device, the obfuscated signature, wherein the third device is configured to generate a filtering decision using the obfuscated signature and the hash value without having the signature, and wherein the filtering decision relates to the traffic.
A computer storage medium having computer-executable instructions stored thereon that, when executed by a processor, cause the processor to perform operations comprising:
- generating, by a first device, a hash key, a signature representation, and an obfuscated signature, wherein the signature representation represents a signature that is available to the first device, and wherein the signature is not available to a second device and a third device;
- providing, to the second device, the hash key and the signature representation, wherein the hash key and the signature representation are provided without the signature that is represented by the signature representation, and wherein the second device is configured to
- receive traffic that is to be filtered,
- generate, using the hash key and the signature representation, a hash value based on the traffic, and
- provide the hash value and the traffic to the third device;
- and
- providing, to the third device, the obfuscated signature, wherein the third device is configured to generate a filtering decision using the obfuscated signature and the hash value without having the signature, and wherein the filtering decision relates to the traffic.
Dependencies are inferred from the claim text.