Back to results
US 8,136,162 B2Granted
Intelligent network interface controller
AssigneeBroadcom Corporation
InventorsBora Akyol, Puneet Agarwal
Life of this patent
Estimating the term…
Abstract
A network interface device includes a security database and a security services engine. The security database is configured to store patterns corresponding to predetermined malware. The security services engine is configured to compare data to be transmitted through a network to the patterns stored in the security database, and the security database is configured to receive updated patterns from the network.
Claims20
A network interface device comprising:
- a security database configured to:
- store regular expressions characterizing predetermined malware;
- and
- update the regular expressions based on updates received, via network circuitry, from a station in a network outside the network interface device;
- a security services engine configured to compare, to the regular expressions stored in the security database, data to be transmitted from a host interface, through the network interface device, to the network;
- the network circuitry configured to transmit and receive packets, including the data and the updates, to and from the network;
- and
- the host interface configured to couple the network interface device to a host bus outside the network interface device, the host interface being configured to prohibit data received via the host bus from being written to the security database.
5 more elements
A computing system comprising:
- a host comprising:
- a central processing unit (CPU);
- and
- a random access memory (RAM) accessible to the CPU and configured to store instructions that are executable by the CPU;
- and
- a network interface device coupled to the host via a host bus and configured to route data between the CPU and a network, wherein the network interface device comprises:
- a security database configured to:
- store patterns corresponding to predetermined malware;
- and
- update the stored patterns based on updated patterns received from a network management station via network circuitry;
- a security services engine configured to compare data to be exchanged between the network and the host to the patterns stored in the security database;
- and
- the network circuitry configured to route the data between the host and the network and transmit the updated patterns from the network management station to the security database;
- wherein:
- the network interface device is further configured to establish a secure channel to the network management station via the network circuitry based on the transmission of a hardware-based identification token from the network interface device to the network management station,
- the secure channel is further configured to route the updates from the network management station to the security database via the network circuitry, and
- the network interface device is configured to prohibit data received from the host via the host bus from being written to the security database.
14 more elements
A method comprising:
- receiving updated patterns at a network interface device of a computing system from a network management station via network circuitry;
- storing the patterns in a security database within the network interface device, the patterns corresponding to predetermined malware patterns;
- blocking data received via a host bus from being written to the security database;
- receiving, via the host bus, data for transmission, via the network circuitry, from the network interface device to a network;
- and
- comparing the data to the patterns.
3 more elements
Dependencies are inferred from the claim text.