PATENT CLAIM ANALYSIS

Application Number: 16448969
Application Type: Utility
Filing Date: 2019-06
Publication Date: 2019-10
Patent Classification: ["726", "001000"]

Abstract:
Methods and systems for protecting a secured network are presented. For example, one or more packet security gateways may be associated with a security policy management server. At each packet security gateway, a dynamic security policy may be received from the security policy management server, packets associated with a network protected by the packet security gateway may be received, and at least one of multiple packet transformation functions specified by the dynamic security policy may be performed on the packets.

Claim (Index 1):
A method of filtering packets at a packet security gateway, configured for protection of a network and associated with a security policy management server external from the network, the method comprising:\n receiving, by the packet security gateway, malicious traffic information for a dynamic security policy from the security policy management server, wherein the dynamic security policy comprises a plurality of packet filtering rules, wherein each packet filtering rule comprises at least one packet matching criterion and a corresponding packet transformation function, wherein one or more of the plurality of packet filtering rules of the dynamic security policy is automatically created or altered based on the malicious traffic information received from a security policy management server; performing, on a packet by packet basis, packet filtering on a first portion of packets, the packet filtering comprising performing at least one of multiple packet transformation functions specified by at least one of the plurality of packet filtering rules on the packets associated with the network protected by the packet security gateway, wherein at least one of the multiple packet transformation functions specified by the plurality of packet filtering rules corresponds to at least one packet transformation function other than forwarding or dropping; after performing packet filtering on the first portion of packets, receiving updated malicious traffic information; updating at least one rule of the dynamic security policy based on the received updated malicious traffic information; and performing, on the packet by packet basis, packet filtering on a second portion of packets based on the updated at least one rule.

Metadata:
- Claim Count in Document: 53.0
- Percentile: 100.0
- Lexical Diversity: 1.8913
- Patent Class: 726.0
- Transitional Phrase Type: open
- Component Type: 1
- Foreign Priority: False
- Related Applications: ['13657010', '16111524', '15414117', '14253992', '15413834']

Analysis Scores:
- 35 USC 101 Eligibility (BERT): 0.3394528386874338
- 35 USC 102 Novelty (BERT): 0.5779489771211613
- Combined Prediction Score: 0.3633024525308066
- Mean Citation Score: 384.621664
- Max Citation Score: 414.7667
- Similarity Product: 328.8503070193887

Labels:
- Claim Label 101: 1
- Claim Label 102: 1
- Claim Label 103: 0
- Claim Label 112: 1
- Combined Label: 1
- Label 101 Adjusted: 1

Dataset: test