Security system for network address translation systems
November 3, 2015. Estimated Expiration Date is calculated based on simple USPTO term provisions. It does not account for terminal disclaimers, term adjustments, failure to pay maintenance fees, or other factors which might affect the term of a patent.Patent ReferencesMethod for providing notification of classified electronic message delivery restriction Network address management for a wired network supporting wireless communication to a plurality of mobile users Method and apparatus for providing local area network clients with internetwork identification data Method and apparatus for making a cluster of computers appear as a single host on a network Flexible destination address mapping mechanism in a cell switching communication controller Method and apparatus for testing a packet-based network System for protecting unauthorized memory accesses by comparing base memory address with mask bits and having attribute bits for identifying access operational mode and type Security system for preventing unauthorized communications between networks by translating communications received in ip protocol to non-ip protocol to remove address and routing services information Apparatus and method for providing a secure gateway for communication and data exchanges between networks Patent #: 5623601 InventorsApplicationNo. 552807 filed on 11/03/1995US Classes:370/389, Switching a message which includes an address header370/401, Bridge or gateway between networks370/466Converting between protocolsExaminersPrimary: Olms, Douglas W.Assistant: Hom, Shick Attorney, Agent or FirmInternational ClassH04J 003/24AbstractA system and method are provided for translating local IP addresses to globally unique IP addresses. This allows local hosts in an enterprise network to share global IP addresses from a limited pool of such addresses available to the enterprise. The translation is accomplished by replacing the source address in headers on packets destined for the Internet and by replacing destination address in headers on packets entering the local enterprise network from the Internet. Packets arriving from the Internet are screened by an adaptive security algorithm. According to this algorithm, packets are dropped and logged unless they are deemed nonthreatening. DNS packets and certain types of ICMP packets are allowed to enter local network. In addition, FTP data packets are allowed to enter the local network, but only after it has been established that their destination on the local network initiated an FTP session.Other References
| |
