Electrical computers and digital processing systems: processing – Byte-word rearranging – bit-field insertion or extraction,...
Reexamination Certificate
2000-05-09
2003-10-07
Kim, Kenneth S. (Department: 2183)
Electrical computers and digital processing systems: processing
Byte-word rearranging, bit-field insertion or extraction,...
C707S793000, C712S010000, C708S212000
Reexamination Certificate
active
06631466
ABSTRACT:
FIELD OF THE INVENTION
The present invention relates to the field of pattern matching and searching. In particular the present invention discloses a parallel pattern searching system that allows one or more pattern to be located within a particular data stream.
BACKGROUND OF THE INVENTION
The Internet is a worldwide interconnection of computer networks that share a common set of well-defined data communication protocols. Specifically, most computer networks are coupled to the Internet communicate using the Transport Control Protocol (TCP) and the Internet Protocol (IP) commonly known as TCP/IP. These protocols provide a data connection between any two computing devices on the Internet. The TCP/IP protocols work in conjunction with higher-level network protocols including HyperText Transfer Protocol (HTTP) File Transfer Protocol (FTP), Network News Transmission Protocol (NNTP), Simple Mail Transport Protocol, and other application protocols to provide useful Internet services.
There is no central controlling authority in the global Internet. Individual entities coupled to the Internet are responsible for their own interactions with the Internet. To protect private networks, most private networks use a gateway that carefully controls the flow of traffic between the private network and the Internet. Examples of such gateways include firewalls and packet filtering routers.
Firewalls and packet filtering routers attempt to prevent unauthorized access by carefully examining each packet and properly routing (or dropping) each packet depending on the packet's characteristics. Most firewalls and packet filtering routers are implemented using a set of packet filtering rules. Each packet-filtering rule specifies a particular packet filtering policy. For example, all packets incoming from the Internet addressed to vulnerable server ports may be discarded in order to protect the internal servers on the local area network.
Packet filtering is normally performed on packet headers. Specifically, the Transport Control Protocol (TCP) and the Internet Protocol (IP) add a set of headers to each packet that most packet filtering routers examine to determine how to route the packet. However, it would be desirable to have even more precise methods of filtering packets.
SUMMARY OF THE INVENTION
In view of the above, it is one of the objects in the present invention to provide a system that provides even greater flexibility for packet filtering in a gateway system. The present invention provides such functionality by providing a high-speed parallel string searching system, that allows the body of a data packet to be searched for one or more patterns such as a string or a series of strings. These strings can be defined by the grammar of regular expressions. Specifically, one or more patterns are loaded into one or more nanocomputers and then the packet body is fed to the participating nanocomputers such that each participating nanocomputer tests for a match. The various tests performed by the nanocomputers may be combined to perform complex searches. These searches are performed in parallel. Furthermore, several different searches may be combined together using control statements. A combination of these searches engines can be supported such that data is also looked at in parallel. This above search mechanism is called “Deep Packet Search”
Objects and advantages together with the foregoing are attained in the exercise of the invention in the following description, resulting in the embodiment illustrated in the accompanying drawings.
REFERENCES:
patent: 4896133 (1990-01-01), Methvin et al.
patent: 5497488 (1996-03-01), Akizawa et al.
patent: 5880671 (1999-03-01), Ranson et al.
patent: 6493698 (2002-12-01), Beylin
patent: 6519237 (2003-02-01), McDonough et al.
Chopra Vikram
Desai Ajay
Iyer Raghunath
Iyer Sundar
Jiandani Moti
Johansen Dag
Kim Kenneth S.
PMC-Sierra
Stattler Johansen & Adeli LLP
LandOfFree
Parallel string pattern searches in respective ones of array... does not yet have a rating. At this time, there are no reviews or comments for this patent.
If you have personal experience with Parallel string pattern searches in respective ones of array..., we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Parallel string pattern searches in respective ones of array... will most certainly appreciate the feedback.
Profile ID: LFUS-PAI-O-3124044