Back to results
US 2026/0238614 A1Published application
Optimized deep packet inspection for role-based policies
AssigneeHewlett Packard Enterprise Development LP
InventorsVenkata Varadhan Devarajan, Balaji Sankaran, Vijeesh Erankotte Panayamthatta
Life of this patent
Estimating the term…
Abstract
Techniques are provided herein for selective deep packet inspection. Deep packet inspection (DPI) is implemented selectively for particular data packets that are associated with one or more policies that include a DPI component, such as a DPI-identified criteria and/or a DPI-dependent action.
Claims20
A network device, configured to:
- receive, at the network device, a data packet for transmission to a destination;
- identify, via the network device, that the data packet is associated with a policy comprising data packet inspection (DPI)-identified criteria;
- in response to identifying that the data packet is associated with the policy comprising the DPI-identified criteria:
- selectively enable DPI on the data packet, by providing, via the network device, a copy of the data packet to a DPI processor configured to perform DPI;
- receive, via the network device, from the DPI processor, a DPI-identified characteristic associated with the data packet;
- identify, via the network device, whether the DPI-identified characteristic matches the DPI-identified criteria of the policy;
- and
- implement, via the network device, an action of the policy when the DPI-identified characteristic matches the DPI-identified criteria;
- and
- send the data packet to the destination.
7 more elements
A network device-implemented method, comprising:
- receiving, at a network device, a data packet;
- identifying, via the network device, that deep packet inspection (DPI) conditions are met by the data packet, the DPI conditions comprising:
- the data packet being associated with a role-to-role policy providing a source role criteria and a destination role criteria;
- the role-to-role policy comprising a DPI component;
- and
- DPI of the data packet not being performed elsewhere;
- in response to identifying that the DPI conditions are met, selectively triggering DPI of the data packet;
- and
- sending, via the network device, the data packet to a destination of the data packet.
6 more elements
A system, comprising:
- a deep packet inspection (DPI) processor configured to perform DPI on received data packets;
- a network device, configured to:
- receive a data packet for transmission to a destination;
- identify that the data packet is associated with a policy comprising DPI-identified criteria;
- in response to identifying that the data packet is associated with the policy comprising the DPI-identified criteria, selectively enable DPI on the data packet, by providing, via the network device, a copy of the data packet to the DPI processor;
- and
- transmit the data packet to the destination.
4 more elements
Dependencies are inferred from the claim text.