Patent ID: 7634655
Filing Date: 2009-12-15
Classification: H04L

Abstract:
1. In a local server that receives data from one or more remote entities over a data transport protocol, a method of applying a cryptographically secure hash to packets from unverified remote entities for preventing denial of service attacks on lookup tables used to store state information for one or more remote entities, while maintaining the performance of the local server for packets from verified remote entities, the method comprising the acts of: receiving a packet of data from a remote entity that includes connection identifier information; hashing at least a portion of the connection identifier information using a first hash function to generate a first hash, the first hash identifying an entry in a first table of verified remote entities, the first table for storing remote entities that have a confirmed connection identifier; determining when state information for the remote entity exists at the entry in the first table of verified remote entities, and performing standard data transport protocol on the packet of data; and determining when state information for the remote entity does not exist in the first table of verified remote entities and performing the following: