Dynamic network security system and control method thereof
OwnerEung-Moon Yeominventor
Life of this patent
Estimating the term…
Abstract
A dynamic network security system and control method thereof dynamically judges application of a firewall in a router where firewall and VoIP ALG functions are integrated. A VoIP ALG for seamless VoIP service dynamically shares information (e.g., IP, port) on a VoIP media packet with the firewall, and thus when the VoIP media packet ingress a firewall intranet, firewall application on the VoIP media packet is intelligently processed. Unlike conventional methods set to statically apply firewall rule to particular IP and port, the firewall rule can be applied to or relieved from particular IP and port in real-time, and thus firewall policy can be operated more securely.
Claims15
An integrated switching system including a router and a switching unit, wherein the router comprises:
- a firewall for storing communication information on a counterpart unit in an Access Control List (ACL) and for allowing or disallowing passage of a packet received from the counterpart unit according to the communication information stored in the Access Control List (ACL);
- and
- a signaling processor for transmitting the communication information acquired through signaling with the counterpart unit to the firewall.
A router in an integrated switching system comprising:
- a Voice over Internet Protocol Application Level Gateway (VoIP ALG) for acquiring IP/port/protocol information of a counterpart unit through VoIP signaling with the counterpart unit, the IP/port/protocol information used for judging whether or not to allow passage of a packet to a switching unit;
- a firewall rule memory for storing the IP/port/protocol information in an Access Control List (ACL);
- and
- an IP/port/protocol processor for storing the IP/port/protocol information acquired from the VoIP ALG into the Access Control List (ACL) of the firewall rule memory and for allowing or disallowing passage of the received packet to the switching unit according to the IP/port/protocol information stored in the Access Control List (ACL) of the firewall rule memory.
A method of processing a receiving packet in an integrated switching system including a router and a switching unit, the method comprising steps of:
- at the router, acquiring communication information of a counterpart unit supposed to communicate with through signaling with the counterpart unit;
- storing the acquired communication information in an Access Control List (ACL);
- and
- allowing or disallowing passage of a received packet according to the communication information stored in the Access Control List (ACL).
A method of processing a receiving packet in an integrated switching system including a router and a switching unit, in which the router includes a Voice over Internet Protocol Application Level Gateway (VoIP ALG) and a firewall, the method comprising steps of:
- at the VoIP ALG of the router, acquiring communication of a counterpart unit to communicate with through VoIP signaling with the counterpart unit, and providing the acquired communication information of the counterpart unit to the firewall;
- at the firewall, storing the communication information of the counterpart unit provided from the VoIP ALG in an Access Control List (ACL);
- and
- at the firewall, allowing or disallowing passage of a received packet according to the communication information stored in the Access Control List (ACL).
Dependencies are inferred from the claim text.