Patent ID: 7774841
Filing Date: 2010-08-10
Classification: H04L

Abstract:
1. A system for protecting a network resource from a denial of service attack, comprising: a memory configured to store a first access filter value uniquely calculated for one remote communication device, wherein the first access filter value includes a hash value calculated from one or more randomly generated dynamic values using one or more predetermined hash functions; and responder logic configured to execute on a computer device, wherein executing the responder logic on the computer device causes the computer device to: transmit the one or more randomly generated dynamic values to the remote communication device, wherein the remote communication device calculates a first hash value from the one or more randomly generated dynamic values using the one or more predetermined hash functions; receive a first message frame from the remote communication device through a network interface coupled to a network, wherein the first message frame includes the first hash value calculated by the remote communication device; authenticate the first message frame received from the remote communication device in response to the first hash value included in the first message frame matching the first access filter value; update the one or more randomly generated dynamic values in response to authenticating the first message frame; calculate a second access filter value from the updated one or more randomly generated dynamic values using the one or more predetermined hash functions; transmit the updated one or more randomly generated dynamic values to the remote communication device, wherein the remote communication device calculates a second hash value from the updated one or more randomly generated dynamic values using the one or more predetermined hash functions; receive a second message frame from the remote communication device through the network interface, wherein the second message frame includes the second hash value calculated by the remote communication device; and authenticate the second message frame received from the remote communication device in response to the second hash value included in the second message frame matching the second access filter value; wherein the one or more randomly generated dynamic values and the updated one or more randomly generated dynamic values each include at least one of a nonce value or a time stamp value.