Patent ID: 6615358
Filing Date: 2003-09-02
Classification: H04L

Abstract:
A method of accessing an information processing network, comprising the steps of:a) initializing a database, a connection-oriented network approved list, a connectionless network approved list, and a connectionless network disapproved list, where the database contains rules for allowing and denying access concerning connection-oriented network flows and connectionless network flows, where the connection-oriented network approved list includes approvals of connection-oriented network signaling segments and connection-oriented network data segments that exclude a connectionless network packet segment, where the connectionless network approved list includes approvals of flows of connection-oriented network data segments that include a connectionless network packet segment, and where the connectionless network disapproval list includes disapprovals of connection-oriented network data segments that include a connectionless network packet segment; b) receiving a datagram; c) discarding the datagram and returning to step (b) if the datagram is not on the connection-oriented network approved list; d) determining the datagram's type; e) if the datagram is a connection-oriented network signaling segment and includes a request to establish a transmission path them comparing the request to; f) returning to step (b) if the datagram is a connection-oriented network signaling segment and the database denies the request to establish the transmission path; g) allowing access to the information processing network, adding the requested transmission path to the connection-oriented network approved list, and returning to step (b) if the datagram is a connection-oriented network signaling segment and the database approves the request to establish the transmission path; h) allowing the datagram access to the information processing network and returning to step (b) if the datagram is a connection-oriented network data segment that excludes an IP packet segment and is on the connection-oriented network approved list; i) computing a flow tag if the datagram is a connection-oriented network data segment that includes a connectionless network packet segment; j) discarding the datagram and returning to step (b) if the flow tag is on the connectionless network disapproved list; k) allowing the datagram access to the information processing network and returning to step (b) if the flow tag is on the connectionless network approved list; l) comparing the flow tag to the database if the flow tag is not on the connectionless network approved list and is not on the connectionless network disapproved list; m) discarding the datagram, adding the flow tag to the connectionless network disapproved list, and returning to step (b) if the database rejects the flow tag; and n) allowing the datagram access to the information processing network, adding the flow tag to the connectionless network approved list, and returning to step (b) if the database accepts the flow tag.