Method and apparatus employing an invalid symbol security jam for communications network security
AssigneeLevel One Communications, Inc.
InventorMichael A. Sokol
Life of this patent
Estimating the term…
Abstract
A security device for use in communications network devices, such as multi-port repeaters, in local area networks to prevent eavesdropping by overwriting the data with an invalid symbol in the data communication packets transmitted to all unintended transceivers connected to the communications network device. Confidential or user sensitive information is not conveyed to the unintended transceivers since the invalid symbol is defined independent of the data. The invalid symbol unambiguously informs the unintended transceivers that the data in the data packet is invalid.
Claims17
A security management device for providing secure data communications between a plurality of transceivers, the transceivers being coupled to ports on a communications network device in a local area network, the data communications including one or more data packets having a source address, a destination address and a data field, the security management device being operatively coupled to the communications network device, the security management device comprising:
- (a) a source address memory for storing a source address for each of the transceivers connected to the communications network device;
- (b) a security management controller coupled to the source address memory for comparing the destination address to the source addresses stored in the source address memory;
- and
- (c) a security jamming device, coupled to the security management controller, for jamming the data communications to the transceivers having source addresses not matching the destination address in the data packet wherein the security jamming device stores an invalid symbol into the data field of the data communications, and the invalid symbol unambiguously indicates to a receiving transceiver that the data communications is invalid.
A communications network device for providing data communications between a plurality of transceivers in a local area network, the data communications including at least one data packet having a source address, a destination address and a data field, the communications network device comprising:
- (a) a security management device coupled to the communications network device for providing eavesdropping security, the security management device comprising:
- (i) a source address memory for storing a source address for each of the transceivers connected to the communications network device;
- (ii) a security management controller coupled to the source address memory for comparing the destination address in the data packet to the source addresses stored in the source address memory;
- and
- (iii) a security jamming device, coupled to the security management controller, for jamming the data communications to the transceivers having source addresses stored in the source address memory not matching the destination address in the data packet, wherein the security jamming device stores an invalid symbol into the data field of the data packet, and the invalid symbol unambiguously indicates to a receiving transceiver that the data packet is invalid;
- (b) transmitting and receiving ports, coupled to the communications network device, for interfacing to the transceivers for sending and receiving data communications;
- and
- (c) a data transport bypass coupled to the receiving and transmitting ports for expediting transport of the data packets between transceivers and the communications network device, wherein the transport of the data within the network communications device circumvents the security management controller.
A method of preventing eavesdropping on a communications network comprising a plurality of transceivers coupled to a communications network device, the method comprising:
- (a) reading a data packet transmitted from a transceiver, the data packet having a source address in a source address field, a destination address in a destination address field, and data in a data field;
- (b) comparing the destination address with a source address memory, the source address memory having source addresses, the source address memory being operatively coupled to the communications network device;
- and
- (c) inserting an invalid symbol in the data field of the data packet transmitted to transceivers having source addresses in the source address memory not matching the destination address in the data packet.
Dependencies are inferred from the claim text.