Device for managing data filters

A data processing method, comprising:

• storing in a first table sets of at least one primary metarule in a parameterized form and in corresponding relationship to primary identifiers;
• storing in a second table at least one secondary metarule associated with secondary identifiers, each secondary identifier is in corresponding relationship to primary identifiers, wherein at least one priority level is installed between the at least one primary metarule and the at least one secondary metarule;
• on receipt of auxiliary data representing operational parameters that request reconfiguration of a control means, the auxiliary data delivered by the server after the receipt of secondary data that requires reconfiguration of the control means, selecting at least one of the primary identifiers in the first table;
• associating said auxiliary data with said selected primary identifier so as to define said dedicated processes;
• and
• applying said dedicated processes based on primary rules to process primary data received by a data processing server, and transmitted by said data processing server based on said processing;
• wherein said at least one primary metarule is specified according to a string of characters containing a place-holder for each parameter of said primary metarule that is not statically defined,
• wherein the control means is a firewall and a management means configures the firewall so that a current configuration of the firewall is modified, based on hardware characteristics of the data processing server, an operating configuration of the data processing server and an occurrence of internal and external events,
• wherein the primary identifier comprises alphabetical characters designating a set of primary rule prototypes.

A network data processing device, comprising:

• an engine;
• a management module coupled to said engine, said management module comprising:
• a first memory containing a first table, said first table containing primary identifiers associated with at least one parameterized rule for providing direction to said engine when one or more of said primary identifiers and said at least one parameterized rule are associated with at least one parameter value;
• and
• a second memory containing a second table, said second table containing at least one secondary metarule associated with secondary identifiers, each secondary identifier associated with at least one of said primary identifiers, wherein at least one priority level is installed between the at least one primary metarule and the at least one secondary metarule,
• wherein the management module includes a configuration module which decides when to make modifications to a current configuration of a firewall,
• wherein the management module reconfigures the firewall so that a current configuration of the firewall is modified, based on hardware characteristics of the data processing server, an operating configuration of the data processing server and an occurrence of internal and external events,
• wherein said engine, in response to receiving said direction, manages network data according to said direction;
• and
• wherein said at least one parameterized rule is specified according to a string of characters containing a place-holder for each parameter of said parameterized rule that is not statically defined, wherein the place-holder is relevant to the rule, and
• wherein the primary identifier comprises alphabetical characters designating a set of primary rule prototypes.

A method of processing network data, comprising:

• storing, as entries in a first table, first primary identifiers, each with one or more associated first parameterized rules for configuring a firewall;
• storing as entries in a second table, second parameterized rules, each associated with secondary identifiers, each secondary identifier with one or more second primary identifiers and one or more associated parameter values;
• receiving data comprising at least one new parameter value;
• determining at least one associable second primary identifier which said new parameter value can be associated with;
• storing said new parameter value is association with said associable second primary identifier;
• determining current associated parameter values and corresponding parameterized rules for each of said secondary identifiers;
• based on priority levels installed between the first parameterized rules and the second parameterized rules, making a combination of said current associated parameter values and at least one of the first parameterized rules and the second parameterized rules for directing an engine;
• and
• communicating said combination to said engine so as to direct management of network data by said engine;
• wherein each of said associated parameterized rules is specified according to a string of characters containing a place-holder for each parameter of said associated parameterized rule that is not statically defined, wherein the place-holder is relevant to the rule;
• and
• wherein a management module reconfigures the firewall so that a current configuration of the firewall is modified, based on hardware characteristics of said engine, an operating configuration of said engine and an occurrence of internal and external events,
• wherein the first primary identifiers comprise alphabetical characters designing a set of primary rule prototypes.