Back to results
US 12,732,478 B2Granted
Systems, methods and apparatus for local area network isolation
AssigneeR&D Industries, Inc.
InventorDonald Van Oort
Life of this patent
Estimating the term…
Abstract
The disclosed apparatus, systems and methods relate to methods, systems, and devices for the isolation of devices on a LAN network. Route poisoning, ARP poisoning null routing, blackhole and/or firewall blocking are employed to prevent peer-to-peer network communications within the local area network.
Claims18
A system for isolation of a local area network (LAN) comprising a plurality of network devices comprising a default gateway, a first host, and a second host, the system comprising:
- a device comprising a hardware processor configured to execute a series of executable steps on the first host to allow communications with whitelist devices on the LAN and to prevent communications with the second host via ARP poisoning and one or more of route poisoning, null routing, and blackhole routing, wherein the route poisoning and null routing are applied to a data link layer or network layer, wherein the ARP poisoning comprises:
- clearing an ARP table of the first host;
- determining a valid host IP address space of the LAN:
- determining a whitelist comprising IP addresses for all whitelist devices on the LAN, the whitelist devices comprising the default gateway;
- and
- creating a false entry in the ARP table of the first host for each IP address within the valid host IP address space not in the whitelist, the false entry comprising a MAC address that is not the MAC address of any of the plurality of network devices on the LAN.
3 more elements
A local area network host isolation system comprising:
- a. a local area network (LAN) comprising a plurality of network devices comprising a default gateway, a first host, and a second host;
- and
- b. a hardware processor, the hardware processor constructed and arranged to establish and enforce rules on the first and second hosts to allow communications with whitelist devices on the LAN and to prevent peer-to-peer communications within the LAN by implementing ARP poisoning and route poisoning, wherein the ARP poisoning comprises:
- clearing an ARP table of the first host;
- determining a valid host IP address space of the LAN;
- determining a whitelist comprising IP addresses for all whitelist devices on the LAN, the whitelist devices comprising the default gateway;
- and
- creating a false entry in the ARP table of the first host for each IP address within the valid host IP address space not in the whitelist, the false entry comprising a MAC address that is not the MAC address of any of the plurality of network devices on the LAN;
- and
- implementing, with device comprising the hardware processor, two or more of route poisoning, null routing, and firewall rules, wherein the route poisoning and null routing are applied to a data link layer or network layer, and the firewall rules are applied to a transport layer, a session layer, a presentation layer, or an application layer.
7 more elements
A method of isolating hosts on a local area network (LAN) comprising:
- allowing a first host communicating with whitelist devices on the LAN and to prevent communications with a second host via ARP poisoning the first host on the LAN with a device comprising a hardware processor, comprising:
- clearing an ARP table of the first host;
- determining a valid host IP address space of the LAN:
- determining a whitelist comprising IP addresses for all whitelist devices on the LAN the whitelist devices comprising the fault gateway;
- and creating a false entry in the ARP table of the first host for each IP address within the valid host IP address space not in the whitelist, the false entry comprising a MAC address that is not the MAC address of any network devices on the LAN;
- and
- implementing, with the device comprising the hardware processor, two or more of route poisoning, null routing, and firewall rules, wherein the route poisoning and null routing are applied to a data link layer or network layer, and the firewall rules are applied to a transport layer, a session layer, a presentation layer, or an application layer.
4 more elements
Dependencies are inferred from the claim text.