Back to results
US 12,764,102 B2Granted
System for controlling data flow based on logical connection identification and method thereof
AssigneePRIBIT AI Inc.
InventorYoung Rang Kim
Life of this patent
Estimating the term…
Abstract
Disclosed is a gateway which includes a communication circuit, a memory, and a processor operatively connected with the communication circuit and the memory. The processor receives a data packet of a node through a network processing layer, identifies whether there is data flow corresponding to the data packet of the node and authorized from an external server, inspects authentication information of the data packet, when there is a need to inspect the authentication information of the data packet based on authentication information included in the data flow, and inserts and forwards data flow identification information capable of being identified by an application processing layer into the data packet to the application processing layer.
Claims18
A gateway, comprising:
- a communication circuit;
- a memory;
- and
- a processor operatively connected with the communication circuit and the memory,
- wherein the processor is configured to:
- receive a data packet from a node through a network processing layer;
- identify whether there is a data flow corresponding to the data packet from the node and authorized from an external server;
- when authentication information included in the data flow specifies an authentication requirement for the data packet, the processor is further configured to, by the network processing layer:
- identify whether a data flow header is included in the data packet and drop the data packet when the data flow header is not included;
- identify whether there is a valid data flow corresponding to the data flow header and drop the data packet when there is no valid data flow;
- identify whether to decrypt authentication information included in the data flow header and whether the authentication information included in the data flow header is valid, based on the authentication information included in the valid data flow;
- drop the data packet when the authentication information included in the data flow header is not valid;
- remove the data flow header and insert a new data flow header which includes data flow identification information capable of being identified by an application processing layer into the data packet and forward the data packet to the application processing layer, when the authentication information included in the data flow header is valid,
- wherein the new data flow header includes the data flow identification information and the authentication information being combined with each other.
11 more elements
A service server, comprising:
- a communication circuit;
- a memory;
- and
- a processor operatively connected with the communication circuit and the memory,
- wherein the processor is configured to:
- receive a data packet from a node through a network processing layer;
- identify whether there is a data flow corresponding to the data packet from the node and authorized from an external server;
- when authentication information included in the data flow specifies an authentication requirement for the data packet, the processor is further configured to, by the network processing layer:
- identify whether a data flow header is included in the data packet and drop the data packet when the data flow header is not included;
- identify whether there is a valid data flow corresponding to the data flow header and drop the data packet when there is no valid data flow;
- identify whether to decrypt authentication information included in the data flow header and whether the authentication information included in the data flow header is valid, based on the authentication information included in the valid data;
- drop the data packet when the authentication information included in the data flow header is not valid;
- and
- remove the data flow header and insert a new data flow header which includes data flow identification information capable of being identified by an application processing layer into the data packet the data packet to the application processing layer, when the authentication information included in the data flow header is valid,
- wherein the new data flow header includes the data flow identification information and the authentication information being combined with each other.
12 more elements
An operation method of a gateway, the operation method comprising:
- receiving a data packet from a node through a network processing layer;
- identifying whether there is data flow corresponding to the data packet from the node and authorized from an external server;
- when authentication information included in the data flow specifies an authentication requirement for the data packet, the operation method further comprises, by the network processing layer:
- identifying whether a data flow header is included in the data packet and dropping the data packet when the data flow header is not included;
- identifying whether there is a valid data flow corresponding to the data flow header, when the data flow header is included, and dropping the data packet when there is no valid data flow;
- identifying whether to decrypt authentication information included in the data flow header and whether the authentication information included in the data flow header is valid, based on the authentication information included in the valid data flow, when there is valid data flow;
- dropping the data packet when the authentication information included in the data flow header is not valid;
- and
- removing the data flow header included in the data packet and inserting a new data flow header which includes data flow identification information capable of being identified by an application processing layer into the data packet and forwarding the data packet to the application processing layer, when the authentication information included in the data flow header is valid,
- wherein the new data flow header includes the data flow identification information and the authentication information being combined with each other.
7 more elements
Dependencies are inferred from the claim text.