System and method for preventing a first node from being emulated by another node
AssigneeFortress Technologies Inc. of Florida
InventorsAharon Friedman, Ben Zion Levy
Life of this patent
Estimating the term…
Loading patent…
AssigneeFortress Technologies Inc. of Florida
InventorsAharon Friedman, Ben Zion Levy
Estimating the term…
A network security device 10 is connected between a protected client 12 and a network 100. The network security device 10 negotiates a session key with any other protected client. Then, all communications between the two clients are encrypted. The inventive device is self-configuring and locks itself to the IP address of its client 12. Thus, the client 12 cannot change its IP address once set and therefore cannot emulate the IP address of another client. When a packet is transmitted from the protected host, the security device 10 translates the MAC address of the client to its own MAC address before transmitting the packet into the network. Packets addressed to the host, contain the MAC address of the security device. The security device 10 translates its MAC address to the client's 12 MAC address before transmitting the packet to the client 12.
A network security device configured to receive communications from a node to be secured and pass the received communications to a network, and configured to be connected between the node to be secured and the network, the node to be secured having a first network address and the security device having the same network address as the node to be secured, the security device comprising:
A network security device configured to be connected between a single node to be secured and a communications network, the security device comprising:
A method performed by a security device having a permanent memory, the method preventing a first node in a communications network from being emulated by another node, the method comprising the steps of:
Dependencies are inferred from the claim text.