# US 7,613,205 B1 · Token-assignment networks over ethernet and methods therefor > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 7,613,205 B1 - Document ID: US7613205B1 - Status: Granted - Kind: B1 - Application number: 11/388,444 - Filed: 2006-03-24 - Granted: 2009-11-03 - Earliest claimed: 2006-03-24 - Assignees: Trend Micro Incorporated - Inventors: Chih-Ming Chen - Web page: https://patentgrep.com/patent/US7613205B1 ## CPC - H04L 63/1416: {Event detection, e.g. attack signature detection} - H04L 63/0227: {Filtering policies (mail message filtering H04L51/212)} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A token-assignment network implemented out of existing computers that are interconnected in an Ethernet network. The token-assignment mode ensures that each computer in the token-assignment network has a turn at transmitting, thus preventing starvation of any particular computer in the token-assignment network. In this manner, computers of the token-assignment network are able to continue functioning even during a virus outbreak, thereby enabling business to continue and/or virus remedial actions to be taken via the network. ## Claims ### Claim 1 A method for implementing an ad-hoc token-assignment network from a plurality of computers interconnected in an Ethernet network upon detecting one of a potential virus infection and an actual virus infection affecting said Ethernet network, comprising: activating a token-management application in a first computer of said plurality of computers, said activating said token-management application causing said first computer to enter into a token-management role as a token-managing device (“TMD”); activating a first network interface card filter in a second computer of said plurality of computers, said activating said first network interface card filter causing said second computer to enter into a token-sharing role as a first token-sharing computer (“first TSC”); and activating a second network interface card filter in a third computer of said plurality of computers, said activating said second network interface card filter causing said third computer to enter into said token-sharing role as a second token-sharing computer (“second TSC”), wherein said TMD manages a token-sharing schedule to determine the time period during which one of said first TSC and said second TSC is permitted to transmit data, said first TSC is permitted to transmit only if said first TSC is granted a token by said TMD, said second TSC is permitted to transmit only if said second TSC is granted said token by said TMD. ### Claim 2 (depends on 1) The method of claim 1 wherein said second computer and said third computer enter said token-sharing role upon receiving a message broadcasted by said first computer to request said second computer and said third computer to enter said token-sharing role. ### Claim 3 (depends on 1) The method of claim 1 wherein said network interface card filter represents a NDIS (Network Device Interface Specification) filter. ### Claim 4 (depends on 1) The method of claim 1 wherein said first computer, said second computer, and said third computer are in different sub-networks prior to entering said respective token-management role and said token-sharing role. ### Claim 5 (depends on 1) The method of claim 1 wherein said token-assignment network is implemented in advance of said virus infection when said virus infection is forecasted. ### Claim 6 (depends on 1) The method of claim 1 further comprising: activating a filter in a firewall associated with said first computer upon said first computer entering said token-management role, said filter preventing a virus infecting said first computer for transmitting data other than data pertaining to one of configuration, management, and maintenance of said token-assignment network. ### Claim 7 (depends on 1) The method of claim 1 wherein said token is assigned to said first TSC, said token is then automatically assigned to said second TSC upon expiration of a transmission time period associated with said token assigned to said first TSC irrespective whether said first TSC has returned said token to said TMD. ### Claim 8 (depends on 1) The method of claim 1 wherein said token is assigned to said first TSC, said token is then assigned to said second TSC after said first TSC returns said token to said TMD even if a transmission time period associated with said token assigned to said first TSC has not expired. ### Claim 9 A method for implementing an ad-hoc token-assignment network from a plurality of computers interconnected in an Ethernet network upon detecting one of a potential virus infection and an actual virus infection affecting said Ethernet network, comprising: activating a token-management application in a first computer of said plurality of computers, said activating said token-management application causing said first computer to enter into a token-management role as a token-managing device (“TMD”); activating a first network interface card filter in a second computer of said plurality of computers, said activating said first network interface card filter causing said second computer to enter into a token-sharing role as a first token-sharing computer (“first TSC”); activating a second network interface card filter in a third computer of said plurality of computers, said activating said second network interface card filter causing said third computer to enter into said token-sharing role as a second token-sharing computer (“second TSC”), wherein said TMD manages a token-sharing schedule to determine the time period during which one of said first TSC and said second TSC is permitted to transmit data, said first TSC is permitted to transmit only if said first TSC is granted a token by said TMD, said second TSC is permitted to transmit only if said second TSC is granted said token by said TMD, wherein at least two of said first computer, said second computer and said third computers are implemented in different Ethernet sub-networks prior to said token-assignment network being entered. ### Claim 10 (depends on 9) The method of claim 9 wherein said second computer and said third computer enter said token-sharing role upon receiving a message broadcasted by said first computer to request said second computer and said third computer to enter said token-sharing role. ### Claim 11 (depends on 9) The method of claim 9 wherein said network interface card filter represents a NDIS (Network Device Interface Specification) filter. ### Claim 12 (depends on 9) The method of claim 9 wherein said token-assignment network is implemented in advance of said virus infection when said virus infection is forecasted. ### Claim 13 (depends on 9) The method of claim 9 further comprising: activating a filter in a firewall associated with said first computer upon said first computer entering said token-management role, said filter preventing a virus infecting said first computer for transmitting data other than data pertaining to one of configuration, management, and maintenance of said token-assignment network. ### Claim 14 (depends on 9) The method of claim 9 wherein said token is assigned to said first TSC, said token is then automatically assigned to said second TSC upon expiration of a transmission time period associated with said token assigned to said first TSC irrespective whether said first TSC has returned said token to said TMD. ### Claim 15 (depends on 9) The method of claim 9 wherein said token is assigned to said first TSC, said token is then assigned to said second TSC after said first TSC returns said token to said TMD even if a transmission time period associated with said token assigned to said first TSC has not expired. ### Claim 16 A method for implementing an ad-hoc token-assignment network from a plurality of computers interconnected in an Ethernet network, comprising: receiving a virus infection forecast, including information specifying that said virus infection is due to occur; and activating said token-assignment network upon said receiving said virus infection forecast by: activating a token-management application in a first computer of said plurality of computers, said activating said token-management application causing said first computer to enter into a token-management role as a token-managing device (“TMD”), activating a first network interface card filter in a second computer of said plurality of computers, said activating said first network interface card filter causing said second computer to enter into a token-sharing role as a first token-sharing computer (“first TSC”), and activating a second network interface card filter in a third computer of said plurality of computers, said activating said second network interface card filter causing said third computer to enter into said token-sharing role as a second token-sharing computer (“second TSC”), wherein said TMD manages a token-sharing schedule to determine the time period during which one of said first TSC and said second TSC is permitted to transmit data, said first TSC is permitted to transmit only if said first TSC is granted a token by said TMD, said second TSC is permitted to transmit only if said second TSC is granted said token by said TMD. ### Claim 17 (depends on 16) The method of claim 16 wherein said second computer and said third computer enter said token-sharing role upon receiving a message broadcasted by said first computer to request said second computer and said third computer to enter said token-sharing role. ### Claim 18 (depends on 16) The method of claim 16 wherein said network interface card filter represents a NDIS (Network Device Interface Specification) filter. ### Claim 19 (depends on 16) The method of claim 16 further comprising: activating a filter in a firewall associated with said first computer upon said first computer entering said token-management role, said filter preventing a virus infecting said first computer for transmitting data other than data pertaining to one of configuration, management, and maintenance of said token-assignment network. ### Claim 20 (depends on 16) The method of claim 16 wherein said token is assigned to said first TSC, said token is then automatically assigned to said second TSC upon expiration of a transmission time period associated with said token assigned to said first TSC irrespective whether said first TSC has returned said token to said TMD. ### Claim 21 (depends on 16) The method of claim 16 wherein said token is assigned to said first TSC, said token is then assigned to said second TSC after said first TSC returns said token to said TMD even if a transmission time period associated with said token assigned to said first TSC has not expired. ### Claim 22 (depends on 16) The method of claim 16 wherein said token-management application is configured to limit the types of data transmitted by said first computer in said token-management role to data pertaining to said token management role and first data type, said first data type representing one of no data and at most a subset of the types of data transmitted by said first computer prior to entering said token management role.