Computer system and network interface with hardware based rule checking for embedded firewall

Number of patents in Portfolio can not be more than 2000

United States of America Patent

PATENT NO 7894480
SERIAL NO

10228492

Stats

ATTORNEY / AGENT: (SPONSORED)

Importance

Loading Importance Indicators... loading....

Abstract

See full text

A data processing system adapted for high-speed network communications, a method for managing a network interface and a network interface for such system, are provided, in which processing of packets received over the network is achieved by embedded logic at the network interface level. Incoming packets on the network interface are parsed and classified as they are stored in a buffer memory. Functional logic coupled to the buffer memory on the network interface is enabled to access any data field within a packet in a single cycle, using pointers and packet classification information produced by the parsing and classifying step. Results of operations on the data fields in the packets are available before the packets are transferred out of the buffer memory. A data processing system, a method for management of a network interface and a network interface are also provided by the present invention that include an embedded firewall at the network interface level of the system, which protects against inside and outside attacks on the security of data processing system. Furthermore, a data processing system, a method for management of a network interface and a network interface are a provided by the present invention that support class of service management for packets incoming from the network, by applying priority rules at the network interface level of the system.

Loading the Abstract Image... loading....

First Claim

See full text

Family

Loading Family data... loading....

Patent Owner(s)

Patent OwnerAddressTotal Patents
HEWLETT PACKARD ENTERPRISE DEVELOPMENT LPHOUSTON, TX8793

International Classification(s)

Inventor(s)

Inventor Name Address # of filed Patents Total Citations
Hu, BaoDong Milpitas, US 10 102
Mitchell, Scott W San Jose, US 15 304
Wang, Chi-Lie Fremont, US 48 749

Cited Art Landscape

Patent Info (Count) # Cites Year
 
PMC-SIERRA, INC. (1)
6163539 Firmware controlled transmit datapath for high-speed packet switches 116 1998
 
TREND MICRO INCORPORATED (1)
* 7200684 Network data packet classification and demultiplexing 14 2000
 
Allied Telesyn International Corporation (1)
5615340 Network interfacing apparatus and method using repeater and cascade interface with scrambling 66 1994
 
NOKIA SOLUTIONS AND NETWORKS GMBH & CO. KG (1)
6246691 Method and circuit configuration for the transmission of message units in message streams of different priority 18 2000
 
ALTERA CORPORATION (1)
* 7277437 Packet classification method 5 2002
 
VERTICAL NETWORKS, INC. (1)
* 6154465 Systems and methods for multiple mode voice and data communications using intelligenty bridged TDM and packet buses and methods for performing telephony and data functions using the same 199 1998
 
DEKKO TECHNOLOGIES, INC. (1)
6247061 Method and computer program product for scheduling network communication packets originating from different flows having unique service requirements 83 1998
 
ORACLE AMERICA, INC. (4)
5909686 Hardware-assisted central processing unit access to a forwarding database 394 1997
6356951 System for parsing a packet for conformity with a predetermined protocol using mask and comparison values included in a parsing instruction 200 1999
6389468 Method and apparatus for distributing network traffic processing on a multiprocessor computer 191 1999
6453360 High performance network interface 218 1999
 
MASSACHUSETTS INSTITUTE OF TECHNOLOGY (1)
5212778 Message-driven processor in a concurrent computer 121 1988
 
Datapoint Corporation (1)
4783730 Input/output control technique utilizing multilevel memory structure for processor and I/O communication 138 1986
 
NEC CORPORATION (1)
4500990 Data communication device including circuitry responsive to an overflow of an input packet buffer for causing a collision 59 1983
 
APPLE INC. (1)
* 6580721 Routing and rate control in a universal transfer mode network 87 1998
 
MARVELL INTERNATIONAL LTD. (1)
* 7321554 Method and apparatus for preventing blocking in a quality of service switch 15 2007
 
KONINKLIJKE PHILIPS ELECTRONICS N.V. (1)
2004/0039,940 Hardware-based packet filtering accelerator 40 2002
 
GOOGLE TECHNOLOGY HOLDINGS LLC (1)
5835724 System and method for communication information using the internet that receives and maintains information concerning the client and generates and conveys the session data to the client 367 1996
 
ELECTRONICS AND TELECOMMUNICATIONS RESEARCH INSTITUTE (1)
* 6574195 Micro-flow management 99 2000
 
AVAGO TECHNOLOGIES GENERAL IP (SINGAPORE) PTE. LTD. (2)
6154446 Network switching architecture utilizing cell based and packet based per class-of-service head-of-line blocking prevention 112 1999
* 2005/0152,369 Fast flexible filter processor based architecture for a network device 24 2005
 
INTERNATIONAL BUSINESS MACHINES CORPORATION (2)
6052375 High speed internetworking traffic scaler and shaper 85 1997
* 2002/0009,076 Method and means for classifying data packets 41 2001
 
TTI INVENTIONS A LLC (1)
5121383 Duration limited statistical multiplexing in packet networks 80 1990
 
ADVANCED MICRO DEVICES, INC. (1)
6138189 Network interface having adaptive transmit start point for each packet to avoid transmit underflow 28 1998
 
ERICSSON AB (2)
6026090 Method and system for receiving ATM cells from an ATM network by a host 17 1997
6151321 Method and system for sending ATM cells to an ATM network from a host 17 1997
 
HEWLETT-PACKARD DEVELOPMENT COMPANY, L.P. (2)
5530703 Remote communication server with automatic filtering 121 1994
5828835 High throughput message passing process using latency and reliability classes 189 1996
 
LUCENT TECHNOLOGIES INC. (1)
6199137 Method and device for controlling data flow through an IO controller 65 2000
 
CISCO TECHNOLOGY, INC. (8)
5473607 Packet filtering for data networks 343 1993
* 5881242 Method and system of parsing frame headers for routing data frames within a computer network 21 1997
5838915 System for buffering data in the network having a linked list for each of said plurality of queues 109 1997
* 6324656 System and method for rules-driven multi-phase network vulnerability assessment 309 1998
6286052 Method and apparatus for identifying network data traffic flows and for applying quality of service treatments to the flows 197 1998
* 6515963 Per-flow dynamic buffer management 87 1999
* 6687247 Architecture for high speed class of service enabled linecard 281 1999
* 7154888 Method for classifying packets using multi-class structures 19 2002
 
ALCATEL-LUCENT CANADA INC. (1)
* 5917821 Look-up engine for packet-based network 221 1996
 
CISCO SYSTEMS, INC. (1)
* 6658002 Logical operation unit for packet processing 193 1999
 
GLOBALFOUNDRIES INC. (1)
5933413 Adaptive priority determination for servicing transmit and receive in network controllers 24 1997
 
RPX CLEARINGHOUSE LLC (1)
5987113 Long distance phone tag service 147 1996
 
TENSILICA, INC. (1)
* 7227842 Fast IP packet classification with configurable processor 74 2002
 
INTEL CORPORATION (3)
6070219 Hierarchical interrupt structure for event notification on multi-virtual circuit network interface controller 130 1996
* 6427169 Parsing a packet header 149 1999
6728265 Controlling frame transmission 44 1999
 
NIPPON TELEGRAPH AND TELEPHONE CORPORATION (1)
5953341 Contention control circuit 16 1997
 
VITESSES SEMICONDUCTOR CORPORATION (1)
6108713 Media access control architectures and network management systems 104 1997
 
ALACRITECH CORPORATION (1)
6226680 Intelligent network interface system method for protocol processing 368 1998
* Cited By Examiner

Patent Citation Ranking

Forward Cite Landscape

Patent Info (Count) # Cites Year
 
HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP (1)
* 9479464 Computer system and network interface with hardware based packet filtering and classification 3 2009
 
CISCO TECHNOLOGY, INC. (1)
* 8700771 System and method for caching access rights 13 2006
 
CPACKET NETWORKS, INC. (6)
8024799 Apparatus and method for facilitating network security with granular traffic modifications 17 2006
* 2007/0056,030 Apparatus and method for facilitating network security with granular traffic modifications 27 2006
* 8665868 Apparatus and method for enhancing forwarding and classification of network traffic with prioritized matching and categorization 12 2009
8346918 Apparatus and method for biased and weighted sampling of network traffic to facilitate network monitoring 9 2009
8296846 Apparatus and method for associating categorization information with network traffic to facilitate application level processing 2 2009
* 2010/0008,359 APPARATUS AND METHOD FOR ENHANCING FORWARDING AND CLASSIFICATION OF NETWORK TRAFFIC WITH PRIORITIZED MATCHING AND CATEGORIZATION 4 2009
 
NICIRA, INC. (3)
9806948 Providing firewall rules for workload spread across multiple data centers 0 2015
9755903 Replicating firewall policy across multiple data centers 0 2015
* 9680706 Federated firewall management for moving workload across data centers 0 2015
 
SAMSUNG SDS CO., LTD. (1)
* 9306908 Anti-malware system, method of processing packet in the same, and computing device 0 2013
 
BROADCOM ISRAEL RESEARCH LTD. (2)
* 8660137 Method and system for quality of service and congestion management for converged network interface devices 1 2006
* 2007/0070,901 METHOD AND SYSTEM FOR QUALITY OF SERVICE AND CONGESTION MANAGEMENT FOR CONVERGED NETWORK INTERFACE DEVICES 33 2006
* Cited By Examiner

Maintenance Fees

Fee Large entity fee small entity fee micro entity fee due date
7.5 Year Payment $3600.00 $1800.00 $900.00 Aug 22, 2018
11.5 Year Payment $7400.00 $3700.00 $1850.00 Aug 22, 2022
Fee Large entity fee small entity fee micro entity fee
Surcharge - 7.5 year - Late payment within 6 months $160.00 $80.00 $40.00
Surcharge - 11.5 year - Late payment within 6 months $160.00 $80.00 $40.00
Surcharge after expiration - Late payment is unavoidable $700.00 $350.00 $175.00
Surcharge after expiration - Late payment is unintentional $1,640.00 $820.00 $410.00