Electrical computers and digital processing systems: multicomput – Computer-to-computer data modifying
Reexamination Certificate
2000-07-10
2003-12-30
Lin, Wen-Tai (Department: 2154)
Electrical computers and digital processing systems: multicomput
Computer-to-computer data modifying
C709S232000, C709S238000, C370S401000, C370S392000
Reexamination Certificate
active
06671739
ABSTRACT:
BACKGROUND OF THE INVENTION
1. Field of the Invention
The present invention generally relates to protecting computers and more particularly to controlling network access by modifying packet headers.
2. Description of the Related Art
When devices are attached to a network, the devices must be correctly configured to work properly. Malicious or accidental misconfiguration of devices may result in loss of service to the device itself or other devices on the network. In public LANs (local area networks) such as those found at conferences, exhibitions, media rooms, etc., the network administrators are faced with the task of ensuring the devices connected to the LAN behave properly.
For example, with conventional LANs, each client connected to a hub must have a unique hardware and network address. If users connecting to a hub inadvertently have the same address, the conflicting addresses will prevent the LAN and hub from processing communications correctly. It is becoming more common for convention centers and trade shows to allow individuals operating their own personal computers to connect to a hub of a LAN for the purpose of retrieving information from the LAN or connecting to another network such as the Internet. However, such random connections by unidentified pieces of hardware can readily create address conflicts.
Generally, administrators ensure proper LAN operation by detecting and fixing errors as they occur on the LAN. If the error was maliciously created, the problem may be hard to detect. In any case, with conventional systems, the problem must be handled manually.
If more sophisticated LAN equipment is used, each port on the LAN can be partitioned from all the other ports to better isolate problems. If enough computing power is present at the ports, many misconfigurations and problems can be dealt with and corrected by the individual ports. If each port is connected directly to a server, clients won't be able to interfere with each others' traffic and the server can correct any errors before forwarding the packet on to its destination. However this means that a non-shared line must be run from every client to the server. This increases the cost per client because of the wiring cost as well as the cost at the server since the server must have a port for each client and greatly increases the cost of the LAN. Therefore, there is a need to be able to process and modify network packets without substantially increasing the costs per port of the LAN.
SUMMARY OF THE INVENTION
It is, therefore, an object of the present invention to provide a structure and method for controlling network access without extensive hardware enhancements by modifying packet headers. More specifically, the invention includes a method of processing packets of information over a data processing system. The packets have header information indicating a source and a destination of the packets. The method includes receiving a packet from a client, forwarding the packet to a hub of a local area network, changing the hardware level header of the packet such that the packet is directed to a server instead of an original destination, processing the packet through the server to produce a processed packet, and forwarding the processed packet to the original destination.
With the invention, the hub only allows packets from the server to be delivered to the client. Further, the processing screens the packet for proper access rights and changes the packets to correct errors within the packets. Also, the server processes the packet to prevent damage or unauthorized access to the original destination. The server further modifies the header to eliminate conflicting addresses of clients connected to the hub. All hubs connected to the local area network modify headers of packets being processed such that all packets being transmitted by the clients connected to the hubs are processed through the server.
In another embodiment, the invention comprises a data processing network that includes at least one server, at least one local area network connected to the server, at least one hub connected to the local area network, and at least one client connected to the hub. The client transmits packets to the hub. The packets have header information indicating a source and a destination of the packets. The hub changes the header of the packet such that the packet is directed to the server instead of an original destination. The server processes the packet and forwards the packet to the original destination.
In a further embodiment, the invention comprises a hub for a data processing network having at least one server. The hub includes a first connected to the server, a second connection to at least one client, and an addressing unit operatively connected to the first connection and the second connection and in communication with the server. The client transmits packets to the second connection, the packets have header information indicating a source and a destination of the packets, the addressing unit changes the header of the packet such that the packet is directed to the server instead of an original destination, and the server processes the packet and forwards the packet to the original destination based on information from the addressing unit.
The addressing unit only allows packets from the server to be delivered to the client. Further, the addressing unit supplies the server information to screen the packet for proper access rights, to change the packets to correct errors within the packets, to process the packet to prevent damage or unauthorized access to the original destination, and to modify the header to eliminate conflicting addresses of clients connected to the hub.
REFERENCES:
patent: 5327127 (1994-07-01), May et al.
patent: 5426427 (1995-06-01), Chinnock et al.
patent: 5483522 (1996-01-01), Derby et al.
patent: 5577202 (1996-11-01), Padgett
patent: 5610905 (1997-03-01), Murthy et al.
patent: 5740375 (1998-04-01), Dunne et al.
patent: 5764914 (1998-06-01), Goto et al.
patent: 5861883 (1999-01-01), Cuomo et al.
patent: 5892912 (1999-04-01), Suzuki et al.
patent: 5987521 (1999-11-01), Arrowood et al.
patent: 6006090 (1999-12-01), Coleman et al.
patent: 6014380 (2000-01-01), Hendel et al.
patent: 6038608 (2000-03-01), Katsumata
patent: 6041042 (2000-03-01), Bussiere
patent: 6081512 (2000-06-01), Muller et al.
patent: 6172990 (2001-01-01), Deb et al.
patent: 6175875 (2001-01-01), Stapleton et al.
patent: 6385197 (2002-05-01), Sugihara
patent: 6425015 (2002-07-01), Jennings et al.
US 5,909,554, 6/1999, Iturralde (withdrawn)
Lin Wen-Tai
Tran, Esq. Khanh Q.
LandOfFree
Controlling network access by modifying packet headers at a... does not yet have a rating. At this time, there are no reviews or comments for this patent.
If you have personal experience with Controlling network access by modifying packet headers at a..., we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Controlling network access by modifying packet headers at a... will most certainly appreciate the feedback.
Profile ID: LFUS-PAI-O-3134267