Systems and methods for determining a flow of data

#This invention relates generally to computer networks and more particularly to systems and methods for determining a flow of data.

#Conventional rule-based computer security firewalls are based upon varyingly complex sets of rules, or “rule bases”. Data packets that enter such a firewall are compared to information in, and rules of, one or more rule bases to determine whether the data packets should be allowed to pass through the firewall. Rule bases are structured around concepts of logical comparisons, such as Boolean logic, and sequential rule flow through a list of rules. As rule bases become more complex, they require more system and processor overhead. Consequently, organizations that use firewalls often compromise between rule base complexity and perceived required data throughput, sacrificing some amount of security in favor of performance.

#In one aspect, a method for determining a flow of data is described. The method includes determining whether a packet including a first number of at least one bit within a first set is assigned a classification value based on the at least one bit within the first set and determining a result to be applied to the packet upon determining that the packet is assigned the classification value. The method further includes analyzing, by a processor, at least one bit of a second number within a second set of the packet upon determining that the packet cannot be assigned the classification value based on the first number of at least one bit of the packet.

#FIG. 1 is a block diagram of an embodiment of a system for determining a flow of data.

#FIG. 2 is a detailed block diagram of an embodiment of a system for determining a flow of data.

#FIG. 3 is a block diagram of another embodiment of a system for determining a flow of data.

#FIG. 1 is a block diagram of an embodiment of a system 10 for determining a flow of data. System 10 includes a server system 12 and a plurality of user devices 14 connected to server system 12. As used herein, the term server is not limited to just those integrated circuits referred to in the art as a computer, but broadly refers to a processor, a microcontroller, a microcomputer, a programmable logic controller, an application specific integrated circuit, any other programmable circuit, and any combination of hardware and software, and these terms are used interchangeably herein. In one embodiment, user devices 14 are computers including a web browser, and server system 12 is accessible to user devices 14 via a network, such as, a local area network (LAN) and a wide area network (WAN). The LAN may include an Intranet and the WAN may include the Internet.

#User devices 14 are interconnected to the network through many interfaces including dial-in-connections, cable modems, and high-speed integrated services digital network (ISDN) lines. Alternatively, user devices 14 include a web-based phone or other web-based connectable equipment, which are capable of interconnecting to the network. Server system 12 includes a database server 16 connected to a centralized database 18 that includes a method for determining a flow of data.

#In one embodiment, centralized database 18 is stored on database server 16 and can be accessed by potential users at one of user devices 14 by logging onto server system 12 through one of user devices 14. In one embodiment, centralized database 18 is stored remotely from server system 12.