Patent ID: 7930413
Filing Date: 2011-04-19
Classification: H04L

Abstract:
1. A method for controlling access to a network resource, the method comprising: reviewing at least one incoming electronic connection from an IP network address directed to the network resource; extracting a source IP network address from the incoming electronic connection; selecting a first grouping of leading bits of the source IP network address; performing a lookup of the first grouping of leading bits against a stored list of representations of IP network addresses, the stored list having a data structure for storage of said representations of IP network addresses as one or more pointers without storage of the IP network addresses themselves, wherein each pointer is associated with two or more IP network addresses; matching the first grouping of leading bits to a first pointer in the list representing all of the IP network addresses in the IP network address space having a grouping of leading bits identical to the first grouping of leading bits; if the first pointer points to one or more second pointers in the list: selecting a second grouping of leading bits of the source IP network address, the second grouping of bits being larger than the first grouping of leading bits; performing a lookup of the second grouping of leading bits against the list; matching the second grouping of leading bits to a second pointer in the one or more second pointers representing all of the IP network addresses in the IP network address space having a grouping of leading bits identical to the second grouping of leading bits; accepting or rejecting the incoming electronic connection depending on the value of the second pointer; otherwise, accepting or rejecting the incoming electronic connection depending on the value of the first pointer.