Assembly For Checking At Least One Firewall Device, And Method For Protecting At Least One Data Receiver
AssigneeSiemens Aktiengesellschaft
InventorsFRANK RENPENNING, MATTHIAS SEIFERT
Life of this patent
Estimating the term…
Abstract
An assembly checks at least one firewall device and a method protects at least one data receiver. In the method, permissible and non-permissible data traffic is differentiated in data traffic in the direction of the data receiver using specific rules. Non-permissible data traffic is blocked, and permissible data traffic is allowed through. In order to check the function of the firewall device, the data traffic which has been allowed through is interrupted if the data traffic which has been allowed through has non-permissible data traffic.
Claims16
1-15. (canceled)
An assembly for checking at least one firewall device embodied to differentiate between permissible data traffic and non-permissible data traffic in a direction of a data receiver on a basis of predetermined rules, as well as to block the non-permissible data traffic and to allow through the permissible data traffic, the assembly comprising:
- at least one acquisition device embodied to acquire data traffic allowed through by the firewall device;
- and
- at least one evaluation device embodied to check the data traffic acquired by said acquisition device on a basis of the predetermined rules.
A protection device for protecting at least one data receiver belonging to a network having high security requirements against non-permissible data traffic, the protection device comprising:
- at least one firewall device embodied to differentiate between permissible data traffic and the non-permissible data traffic in a direction of the data receiver on a basis of predetermined rules, as well as to block the non-permissible data traffic and to allow through the permissible data traffic;
- and
- an assembly having at least one acquisition device embodied to acquire data traffic allowed through by said firewall device and at least one evaluation device embodied to check the data traffic acquired by said acquisition device on a basis of the predetermined rules.
A network connection disposed between a data transmitter and a data receiver, wherein the data receiver belongs to a first network having high security requirements and the data transmitter sending data traffic belongs to a second network having lower security requirements, the network connection comprising:
- a protection device for protecting the data receiver, said protection device containing:
- at least one firewall device embodied to differentiate between permissible data traffic and the non-permissible data traffic in a direction of the data receiver on a basis of predetermined rules, as well as to block the non-permissible data traffic and to allow through the permissible data traffic;
- and
- an assembly having at least one acquisition device embodied to acquire the data traffic allowed through by said firewall device and at least one evaluation device embodied to check the data traffic acquired by said acquisition device on a basis of the predetermined rules.
A method for checking at least one firewall device, which comprises the steps of:
- determining a differentiation between permissible data traffic and non-permissible data traffic in data traffic in a direction of a data receiver on a basis of predetermined rules;
- blocking the non-permissible data traffic;
- allowing the permissible data traffic through;
- and
- acquiring and checking allowed-through data traffic for any said non-permissible data traffic present.
Dependencies are inferred from the claim text.