US 8,265,089 B2Granted

Network gateway with enhanced requesting

AssigneeEveris, Inc.

InventorsJoseph McCoy, Joshua White

Life of this patent

Estimating the term…

Loading patent…

Abstract

A gateway and/or software for running on a gateway that communicates data units from a connection based network to a connectionless network, where the gateway uses at least some network protocol data from the connection based network in checking against a set of rules to determine whether some responsive reaction is appropriate. Preferably, the network protocol data from the connection based network is low level network protocol data (that is, physical layer and/or data link layer) that would otherwise be discarded by the gateway as the data was de-encapsulated and sent along to the receiving, connectionless network. Some possible responsive reactions include: selectively blocking data communication; slowing down selected data communications; sending responsive communications back to selected data sending machines; and/or alerting of network administrator(s).

Claims20

Dependent claims

A computer communication network system comprising:

a source computer, an MPDU aggregating module, a connection-based network, a gateway, a receiver-side connectionless network, and a receiver computer, wherein:
the source computer is structured, and/or data-communication-connected to send a first packet, with the first packet including destination information indicating that it is intended to be sent to and received by the receiver computer;
the MPDU aggregating module is structured, programmed and/or data-communication-connected to receive the first packet from the source computer and to aggregate it into a first MPDU, where the first MPDU is in a form and format suitable to be communicated over the connection-based network;
the connection-based network is structured, programmed and/or data-communication-connected to receive the first MPDU from the MPDU aggregating module and to communicate it to the gateway in a connection-based manner;
the gateway is structured, programmed and/or data-communication-connected to receive the first MPDU from the connection-based network, to disaggregate the first MPDU into a plurality of smaller data units (DUs) including a first DU at least partially constituted by the first packet, and to selectively communicate the first DU to the receiver-side connectionless network;
the receiver-side connectionless network is structured, programmed and/or data-communication-connected to receive the first DU from the gateway on condition that it was selectively communicated by the gateway, and to communicate at least the first data packet portion of the first DU to the receiver computer in a connectionless manner;
the gateway is structured, programmed and/or data-communication-connected to collect selected network protocol data from the first MPDU, with the selected network protocol data including at least some network protocol data included in the first MPDU and not included in any of the plurality of DUs, and with the selected network protocol data relating exclusively to network protocols and including no data from any data payload(s) which may be present in the MPDU;
the gateway is further structured, programmed and/or data-communication-connected to apply a first rule to the selected network protocol data that has been collected by the gateway;
and
the gateway is further structured, programmed and/or data-communication-connected to selectively make a responsive reaction based, at least in part, upon the application of the first rule applied by the gateway to the selected network protocol data.

7 more elements

A gateway computer for use in a computer communication network system, the gateway computer comprising a non-transient software storage device with the following software encoded therein:

a gateway module and an enhanced requesting module;
wherein:
the gateway module is structured, programmed and/or data-communication-connected to receive a first MPDU from a connection-based network of the computer communication network system, to disaggregate the first MPDU into a plurality of smaller data units (DUs), and selectively communicate the first DU to a receiver-side connectionless network of the computer communication network system;
and
the enhanced requesting module is structured, programmed and/or data-communication-connected to collect selected network protocol data from the first MPDU, with the selected network protocol data including at least some network protocol data included in the first MPDU and not included in any of the plurality of DUs, and with the selected network protocol data relating exclusively to network protocols and including no data from any data payload(s) which may be present in the MPDU;
the enhanced requesting module is further structured, programmed and/or data-communication-connected to apply a first rule to the selected network protocol data collected by the enhanced requesting module;
and
the enhanced requesting module is further structured, programmed and/or data-communication-connected to selectively make a responsive reaction based, at least in part, upon the application of the first rule by the enhanced requesting module to the selected network protocol data.

5 more elements

Dependencies are inferred from the claim text.