Patent US6044402A successfully refreshed from Google Patents.
US6044402A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Network connection blocker, method, and computer readable memory for monitoring connections in a computer network and blocking the unwanted connections
Assignee: DEWAAY INVESTMENT PARTNERS LLLP
•
Filing: 1997-07-02
•
Granted: 2000-03-28
•
Expires: 2017-07-02
Abstract
Abstract A network connection blocker for monitoring connections between host computers in a network and blocking the unwanted connections. The host computers transmit connection packets between each other in accordance with a network protocol suite when seeking to establish, providing network services with, and close the connections. The network protocol suite includes a connection oriented transport layer protocol. The network connection blocker comprises a network interface that receives the connection packets transmitted between the host computers. It also comprises a blocking module that processes the received connection packets to detect the unwanted connections. The blocking module then generates connection packets in accordance with the network protocol suite to cause the detected unwanted connections to be closed by the corresponding host computers between which are the unwanted connections. The network interface then transmits the generated connection packets to these host computers.
Inventors
- 👤 Douglas W. Jacobson
- 👤 James A. Davis
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-30 13:40
CPC Classifications
H; H04; H04L; H04L41/00; H04L41/08; H04L43/00; H04L49/00; H04L49/90; H04L63/00; H04L63/14; H04L63/1408
Claims Analysis
Total Claims: 18
Claim 1
Independent Claim
194 words
A network connection blocker for monitoring connections between host computers in a computer network and blocking unwanted ones of the monitored connections, the host computers transmitting monitored connection packets over the computer network that are addressed to each other and, in accordance with a connection oriented transport layer protocol, establish, provide network services with, and close the monitored connections, the network connection blocker comprising: a central processing unit; a network interface configured to receive the transmitted monitored connection packets over the computer network without blocking their reception by the host computers; and a blocking module running on the central processing unit and configured to (a) process the received monitored connection packets to detect the unwanted connections, and (b) generate blocking connection packets that are addressed to those of the host computers that have the detected unwanted connections therebetween and, in accordance with the connection oriented transport layer protocol, cause the detected unwanted connections to be closed by the host computers that have the unwanted connections therebetween; the network interface being further configured to transmit the generated blocking connection packets over the computer network to the host computers that have the detected unwanted connections therebetween.
Claim 2
Dependent Claim
194 words
A network connection blocker for monitoring connections between host computers in a computer network and blocking unwanted ones of the monitored connections, the host computers transmitting monitored connection packets over the computer network that are addressed to each other and, in accordance with a connection oriented transport layer protocol, establish, provide network services with, and close the monitored connections, the network connection blocker comprising: a central processing unit; a network interface configured to receive the transmitted monitored connection packets over the computer network without blocking their reception by the host computers; and a blocking module running on the central processing unit and configured to (a) process the received monitored connection packets to detect the unwanted connections, and (b) generate blocking connection packets that are addressed to those of the host computers that have the detected unwanted connections therebetween and, in accordance with the connection oriented transport layer protocol, cause the detected unwanted connections to be closed by the host computers that have the unwanted connections therebetween; the network interface being further configured to transmit the generated blocking connection packets over the computer network to the host computers that have the detected unwanted connections therebetween.
Claim 3
Dependent Claim
93 words
The network connection blocker of claim 1 further comprising a memory wherein the blocking module comprises: a blocking data structure configured in the memory to store a connection blocking policy; a blocking controller configured to (a) process the received monitored connection packets to detect the unwanted connections by (i) obtaining from the received monitored connection packets connection information sets that identify the monitored connections, and (ii) determining from the obtained connection information sets which ones of the monitored connections satisfy the stored connection blocking policy, and (b) generate the generated blocking connection packets.
Claim 4
Dependent Claim
112 words
The network connection blocker of claim 2 wherein: the network interface is further configured to receive management packets over the computer network that are transmitted by an administrating one of the host computers; the blocking module further comprises a manager configured to (a) process the received management packets to obtain management information sets from the received management packets, (b) perform management operations at the network connection blocker based on the obtained management information sets, and (c) generate management packets to provide results of the management operations to the administrating host computer; the network interface is further configured to transmit the generated management packets over the computer network to the administrating host computer.
Claim 5
Independent Claim
162 words
A method of monitoring connections between host computers in a computer network and blocking unwanted ones of the monitored connections, the host computers transmitting monitored connection packets over the computer network that are addressed to each other and, in accordance with a connection oriented transport layer protocol, establish, provide network services with, and close the monitored connections, the method comprising the steps of: receiving the transmitted monitored connection packets over the computer network without blocking their reception by the host computers; processing the received monitored connection packets to detect the unwanted connections; generating blocking connection packets that are addressed to those of the host computers that have the detected unwanted connections therebetween and, in accordance with the connection oriented transport layer protocol, cause the detected unwanted connections to be closed by the host computers that have the unwanted connections therebetween; and transmitting the generated blocking connection packets over the computer network to the host computers that have the detected unwanted connections therebetween.
Claim 6
Independent Claim
162 words
A method of monitoring connections between host computers in a computer network and blocking unwanted ones of the monitored connections, the host computers transmitting monitored connection packets over the computer network that are addressed to each other and, in accordance with a connection oriented transport layer protocol, establish, provide network services with, and close the monitored connections, the method comprising the steps of: receiving the transmitted monitored connection packets over the computer network without blocking their reception by the host computers; processing the received monitored connection packets to detect the unwanted connections; generating blocking connection packets that are addressed to those of the host computers that have the detected unwanted connections therebetween and, in accordance with the connection oriented transport layer protocol, cause the detected unwanted connections to be closed by the host computers that have the unwanted connections therebetween; and transmitting the generated blocking connection packets over the computer network to the host computers that have the detected unwanted connections therebetween.
Claim 7
Dependent Claim
52 words
The method of claim 4 further comprising: storing a connection blocking policy; wherein the processing step includes: obtaining from the received monitored connection packets connection information sets that identify the monitored connections; and determining from the obtained connection information sets which ones of the monitored connections satisfy the stored connection blocking policy.
Claim 8
Dependent Claim
89 words
The method of claim 5 further comprising the steps of: receiving management packets over the computer network that are transmitted by an administrating one of the host computers; processing the received management packets to obtain management information sets from the received management packets; performing management operations at the network connection blocker based on the obtained management information sets; and generating management packets to provide results of the management operations to the administrating host computer; and transmitting the generated management packets over the computer network to the administrating host computer.
Claim 9
Dependent Claim
190 words
A computer readable memory for directing a computer in a computer network to monitor connections between host computers in the computer network and block unwanted ones of the connections, the host computers transmitting monitored connection packets over the computer network that are addressed to each other and, in accordance with a connection oriented transport layer protocol, establish, provide network services with, and close the monitored connections, the computer being configured to receive the monitored connection packets over the computer network without blocking their reception by the host computers and to transmit generated blocking connection packets over the computer network to those of the host computers that have the unwanted connections therebetween, the memory comprising: a blocking module configured to (a) run on the computer, (b) process the received monitored connection packets to detect the unwanted connections, and (c) generate the generated blocking connection packets so that they are addressed to those of the host computers that have the detected unwanted connections therebetween and, in accordance with the connection oriented transport layer protocol, cause the detected unwanted connections to be closed by the host computers that have the unwanted connections therebetween.
Claim 10
Dependent Claim
190 words
A computer readable memory for directing a computer in a computer network to monitor connections between host computers in the computer network and block unwanted ones of the connections, the host computers transmitting monitored connection packets over the computer network that are addressed to each other and, in accordance with a connection oriented transport layer protocol, establish, provide network services with, and close the monitored connections, the computer being configured to receive the monitored connection packets over the computer network without blocking their reception by the host computers and to transmit generated blocking connection packets over the computer network to those of the host computers that have the unwanted connections therebetween, the memory comprising: a blocking module configured to (a) run on the computer, (b) process the received monitored connection packets to detect the unwanted connections, and (c) generate the generated blocking connection packets so that they are addressed to those of the host computers that have the detected unwanted connections therebetween and, in accordance with the connection oriented transport layer protocol, cause the detected unwanted connections to be closed by the host computers that have the unwanted connections therebetween.
Claim 11
Dependent Claim
89 words
The computer readable memory of claim 1 wherein the blocking module comprises: a blocking data structure configured in the computer readable memory to store a connection blocking policy; a blocking controller to (a) process the received monitored connection packets to detect the unwanted connections by (i) obtaining from the received connection packets connection information sets that identify the monitored connections, and (ii) determining from the obtained connection information sets which ones of the monitored connections satisfy the stored connection blocking policy, and (b) generate the generated blocking connection packets.
Claim 12
Dependent Claim
105 words
The computer readable memory of claim 8 wherein: the computer is further configured to receive management packets over the computer network that are transmitted by an administrating one of the host computers and transmit generated management packets over the computer network to the administrating host computer; and the blocking module comprises a manager to (a) process the received management packets to obtain management information sets from the received management packets, (b) perform management operations at the network connection blocker based on the obtained management information sets, and (c) generate the generated management packets to provide results of the management operations to the administrating host computer.
Claim 13
Dependent Claim
40 words
The network connection blocker of claim 1 wherein the connection oriented transport layer protocol is the TCP protocol, the monitored connections are TCP connections, and the generated connection packets comprise reset packets containing the reset flag of the TCP protocol.
Claim 14
Dependent Claim
41 words
The network connection blocker of claim 1 wherein the connection oriented transport layer protocol is the TCP protocol, the monitored connections are TCP connections, and the generated connection packets comprise connection closing packets containing the finish flag of the TCP protocol.
Claim 15
Dependent Claim
38 words
The method of claim 4 wherein the connection oriented transport layer protocol is the TCP protocol, the monitored connections are TCP connections, and the generated connection packets comprise reset packets containing the reset flag of the TCP protocol.
Claim 16
Dependent Claim
39 words
The method of claim 4 wherein the connection oriented transport layer protocol is the TCP protocol, the monitored connections are TCP connections, and the generated connection packets comprise connection closing packets containing the finish flag of the TCP protocol.
Claim 17
Dependent Claim
40 words
The computer readable memory of claim 7 wherein the connection oriented transport layer protocol is the TCP protocol, the monitored connections are TCP connections, and the generated connection packets comprise reset packets containing the reset flag of the TCP protocol.
Claim 18
Dependent Claim
41 words
The computer readable memory of claim 7 wherein the connection oriented transport layer protocol is the TCP protocol, the monitored connections are TCP connections, and the generated connection packets comprise connection closing packets containing the finish flag of the TCP protocol.
References Cited (Backward Citations)
US5541987A
Cited
US5606668A
Cited
US5751952A
Cited
US5630058A
Cited
US5699513A
Cited
US5892903A
Cited
WO1998019250A1
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2003-03-28 | 2003-09-27 | 2004-03-28 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2007-03-28 | 2007-09-27 | 2008-03-28 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2011-03-28 | 2011-09-27 | 2012-03-28 | $7700.00 | Window Closed / Lapsed |