System and method for preventing replay attacks
AssigneeHewlett-Packard Development Company, L.P.
InventorsMarcos K. Aguilera, Mark D. Lillibridge, John P. MacCormick
Life of this patent
Estimating the term…
Abstract
Preventing replay attacks on servers. At least one Bloom filter may be set up in a server for tracking requests received from clients. Identifying data may be generated for each request. The identifying data may be checked against the Bloom filter array. If a match is found, the message may be a replay and may be rejected. If a match is not found, the request identifying data may be added to the Bloom filter and the request may be processed.
Claims20
A method for preventing replay attacks, comprising:
- receiving a request from a client at a server;
- generating identifying data for the request;
- comparing the identifying data to data in a Bloom filter;
- rejecting the request if the identifying data matches data in the Bloom filter;
- and,
- processing the request if the identifying data does not match the data in the Bloom filter.
A method for preventing replay attacks, comprising:
- setting up concurrently operating first and second Bloom filters in a server receiving requests from at least one client;
- associating each request with a select one of said first and second Bloom filters;
- storing data identifying requests associated with the first Bloom filter in the first Bloom filter;
- and
- storing data identifying requests associated with the second Bloom filter in the second Bloom filter.
A system for preventing replay attacks, comprising:
- a server receiving requests and generating data identifying each request;
- a Bloom filter storing data identifying each request received by the server, and indicating whether the data matches or does not match previously stored data;
- and
- the server processing requests whose identifying data does not match previously stored data in the Bloom filter and rejecting requests whose identifying data does match previously stored data in the Bloom filter.
A system for preventing replay attacks, comprising:
- a server receiving requests and generating data identifying each request, each request including a time indicator indicating its time of issuance;
- a first Bloom filter storing data identifying each received request having a time indicator corresponding to a first time interval and indicating whether the data matches or does not match previously stored data;
- a second Bloom filter, operating concurrently with the first Bloom filter, storing data identifying each received request having a time indicator corresponding to a second time interval and indicating whether the data matches or does not match previously stored data;
- and
- the server processing requests whose identifying data does not match previously stored data and rejecting requests whose identifying data does match previously stored data.
A system for preventing replay attacks, comprising:
- means for producing data identifying a request received by a server,
- means for comparing the data identifying the request to Bloom filter data identifying previously received requests, and
- means for rejecting the request if the identifying data matches said Bloom filter data.
Dependencies are inferred from the claim text.