Back to results
US 9,871,765 B2Granted
DIAMETER firewall using reception IP address or peer identity
AssigneeAlcatel Lucent
InventorsRobert A. Mann, Eric Colaviti
Life of this patent
Estimating the term…
Abstract
Various exemplary embodiments relate to a method performed by a DIAMETER network node, the method including: receiving a first DIAMETER message; determining that the first DIAMETER message is not trusted; and rejecting the first DIAMETER message.
Claims18
A DIAMETER node, comprising:
- a DIAMETER interface configured to receive a first DIAMETER message;
- a DIAMETER network information extractor configured to extract DIAMETER firewall information from the first DIAMETER message;
- a DIAMETER stack configured to store the extracted DIAMETER firewall information;
- a firewall rules engine configured to create firewall filtering rules from the stored DIAMETER firewall information and store the created firewall filtering rules;
- and
- a firewall configured to filter the first DIAMETER message based upon the stored firewall filtering rules, wherein the first DIAMETER message is rejected when the first DIAMETER message was sent by a roaming partner and has an application of either Gx or Rx.
3 more elements
A method performed by a DIAMETER network node, the method comprising:
- receiving, in a DIAMETER interface, a first DIAMETER message;
- extracting, in a DIAMETER network information extractor, DIAMETER firewall information from the first DIAMETER message;
- storing, in a DIAMETER stack, the extracted DIAMETER firewall information;
- creating, in a firewall rules engine, firewall filtering rules from the stored DIAMETER firewall information;
- storing, in the firewall rules engine, the created firewall filtering rules;
- and
- filtering, in a firewall, the first DIAMETER message based upon the stored firewall filtering rules, wherein the first DIAMETER message is rejected when the first DIAMETER message was sent by a roaming partner and has an application of either Gx or Rx.
4 more elements
A DIAMETER node, comprising:
- a DIAMETER interface configured to receive a first DIAMETER message;
- a DIAMETER network information extractor configured to extract DIAMETER firewall information from the first DIAMETER message;
- a DIAMETER stack configured to store the extracted DIAMETER firewall information;
- a firewall rules engine configured to create firewall filtering rules from the stored DIAMETER firewall information and store the created firewall filtering rules;
- and
- a firewall configured to filter the first DIAMETER message based upon the stored firewall filtering rules, wherein the first DIAMETER message is rejected when the first DIAMETER message was sent by a routing agent in an identical realm as the DIAMETER node and has an application of either S9 or Rx.
3 more elements
A method performed by a DIAMETER network node, the method comprising:
- receiving, in a DIAMETER interface, a first DIAMETER message;
- extracting, in a DIAMETER network information extractor, DIAMETER firewall information from the first DIAMETER message;
- storing, in a DIAMETER stack, the extracted DIAMETER firewall information;
- creating, in a firewall rules engine, firewall filtering rules from the stored DIAMETER firewall information;
- storing, in the firewall rules engine, the created firewall filtering rules;
- and
- filtering, in a firewall, the first DIAMETER message based upon the stored firewall filtering rules, when the first DIAMETER message was sent by a routing agent in an identical realm as the DIAMETER node and has an application of either S9 or Rx.
4 more elements
Dependencies are inferred from the claim text.