Patent ID: 7073196

Claim:
A method of accessing an information processing network, comprising the steps of: a) initializing a database, an approved list, and a disapproved list, where the database contains rules for allowing and denying access to the information processing network, where the approved list includes approvals of connectionless network packets, and where the disapproved list includes disapprovals of connectionless network packets; b) receiving a connectionless network packet; c) computing a flow tag based on the connectionless network packet; d) discarding the connectionless network packet and returning to step (b) if the flow tag is on the disapproved list; e) allowing the connectionless network packet access to the information processing network and returning to step (b) if the flow tag is on the approved list; f) comparing the flow tag to the database if the flow tag is not on the approved list and is not on the disapproved list; g) discarding the connectionless network packet, adding the flow tag to the disapproved list, and returning to step (b) if the database rejects the flow tag; and h) allowing the connectionless network packet access to the information processing network, adding the flow tag to the approved list, and returning to step (b) if the database accepts the flow tag.