Patent ID: 8726362

Claim:
A device comprising: a chip comprising a firewall engine; a driver; a storage unit that stores a rule database (DB); and at least one application which uses at least one process associated with at least one packet, wherein the rule DB stores a rule for each process, wherein an owner process uses the packet by transmitting the packet to an external device or receiving the packet from an external device, wherein, if the packet is to be transmitted to a chip, the driver identifies the owner process of the packet, and transmits the packet to the chip only if the owner process is allowed to transmit the packet to an external device based on a rule for the owner process stored in the rule DB, and wherein the chip filters the packet received from the driver by applying a rule for packet filtering, wherein a rule for a process defines a packet as being allowed or blocked according to the process associated with the packet, and wherein, if the packet is to be transmitted, the driver obtains an owner process identification (ID) included in the packet and determines whether a process having the owner process ID is allowed to transmit the packet to the external device by referring to the rule DB for each process, and transmits the packet to the chip only if the process is allowed to transmit the packet.