Firewalls for filtering communications in a dynamic computer network
AssigneeHarris Corporation
InventorsWayne B. Smith, Ryan E. Sharpe
Life of this patent
Estimating the term…
Abstract
A method and apparatus for filtering data communications in a dynamic computer network is disclosed. The method includes receiving a data packet that includes a plurality of identity parameters. The data packet is filtered by comparing the plurality of identity parameters to a set of filtering rules. The filtering rules allow the data packet into the network if a set of said identity parameters have been pseudorandomly transformed to specify false identity parameters and those false identity parameters are within a set of currently allowed false identity parameters determined based on a mission plan.
Claims20
A method of filtering data communications in a dynamic computer network, the method comprising:
- receiving a data packet that includes a plurality of identity parameters;
- and
- filtering said data packet by comparing said plurality of identity parameters to a set of filtering rules, wherein said filtering rules comprise allowing said data packet on a condition that a first set of said identity parameters have been pseudorandomly transformed to specify false identity parameters that are within a set of currently allowed false identity parameters determined based on a mission plan.
A network device comprising:
- input circuitry connected to at least one input port configured to receive a data packet that includes a plurality of identity parameters;
- a computer-readable storage medium, having stored thereon a computer program for filtering data communications in a dynamic network, the computer program having a plurality of code sections, the code sections executable by a network device to cause the network device to perform the steps of:
- filtering said data packet by comparing said plurality of identity parameters to a set of filtering rules, wherein said filtering rules comprise allowing said data packet on a condition that a first set of said identity parameters have been pseudorandomly transformed to specify false identity parameters that are within a set of currently allowed false identity parameters determined based on a mission plan.
Dependencies are inferred from the claim text.