US6598034B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
Rule based IP data processing
Assignee: Infineon Technologies AG
•
Filing: 1999-09-21
•
Granted: 2003-07-22
•
Expires: 2019-09-21
Abstract
Abstract A apparatus and method that provides a routing engine for processing data packets based upon certain rules that are compiled and applied real-time via a just-in-time (JIT) compiler, a runtime compiler, or the like. The routing engine parses and analyzes an incoming IP flow. A set of rules are developed and stored for use by the JIT. The rules establish a set of patterns, and the incoming data is compared to those patterns. If certain patterns are detected, then the associated action established by the rule is applied to the processing of the data packet. Packets are classified according to any rule, as applied to any packet, as early as possible in the process (i.e. first or second stage of process), with the route lookup and packet attribute processes performed in parallel. Data packets might be assigned or mapped to various traffic service levels. Traffic types and priorities, as well as service levels, can be mapped onto existing QoS/CoS definitions and assignments. The data packets can be altered or modified as a result of the detected patterns. Data packets can also be discarded or dropped if the detected patterns and associated rule indicate such a desire. The apparatus and method might be implemented as a hardware and software configuration. A software configuration might also be loaded into existing router hardware.
Inventors
- 👤 Axel K. Kloth
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-24 13:23
CPC Classifications
H; H04; H04L; H04L45/00; H04L43/00; H04L45/302; H04L45/308; H04L45/38; H04L45/56; H04L45/563; H04L69/00; H04L69/16; H04L69/161; H04L69/168; H04L43/02; H04L43/026; H04L43/08; H04L43/0823; H04L43/0829; H04L43/0852; H04L43/087; H04L43/0876; H04L43/0888; H04L69/06; H04L69/12; H04L69/22; H04L69/30; H04L69/32
Claims Analysis
Total Claims: 34
Claim 1
Independent Claim
109 words
An apparatus for applying rules to the processing of data packets over a network, the apparatus comprising: a network interconnecting device for directing packet based data over an associated network; a parser associated with the network interconnecting device for analyzing bit patterns from incoming IP flows of data packets; a rule generator for providing rules for processing the data packets according to the analyzed bit patterns; a compiler for compiling the rules, wherein the rules are applied to the bit patterns which are parsed from the IP flow; and a buffering device, the buffering device buffering packets for later forwarding according to rules applied to that type of packet.
Claim 2
Independent Claim
109 words
An apparatus for applying rules to the processing of data packets over a network, the apparatus comprising: a network interconnecting device for directing packet based data over an associated network; a parser associated with the network interconnecting device for analyzing bit patterns from incoming IP flows of data packets; a rule generator for providing rules for processing the data packets according to the analyzed bit patterns; a compiler for compiling the rules, wherein the rules are applied to the bit patterns which are parsed from the IP flow; and a buffering device, the buffering device buffering packets for later forwarding according to rules applied to that type of packet.
Claim 3
Dependent Claim
47 words
The apparatus according to claim 1 , wherein the networking interconnection device includes router functions, firewall functions, and/or gateway functions, and the rules relating to device functionality can be combined into a common set of rules for processing the data packets according to any set of rules.
Claim 4
Dependent Claim
13 words
The apparatus according to claim 2 , wherein the functions include traffic policing.
Claim 5
Dependent Claim
16 words
The apparatus according to claim 3 , wherein the packets are distinguished by different service levels.
Claim 6
Dependent Claim
13 words
The apparatus according to claim 2 , wherein the functions include traffic shaper.
Claim 7
Dependent Claim
22 words
The apparatus according to claim 1 , wherein the compiler is a Just-In-Time (JIT) compiler for achieving real-time application of the rules.
Claim 8
Dependent Claim
16 words
The apparatus according to claim 1 , wherein the compiler provides runtime application of the rules.
Claim 9
Dependent Claim
21 words
The apparatus according to claim 1 , wherein a processor is associated with the forwarding, parser, rule generator, and compiler devices.
Claim 10
Dependent Claim
24 words
The apparatus according to claim 1 , wherein the rules can be edited via a graphical interface for real-time application to incoming IP flows.
Claim 11
Dependent Claim
19 words
The apparatus according to claim 1 , wherein the analyzed bit patterns are derived from IP packet header fields.
Claim 12
Dependent Claim
18 words
The apparatus according to claim 1 , wherein the analyzed bit patterns are derived from IP packet data.
Claim 13
Dependent Claim
22 words
The apparatus according to claim 1 , wherein the analyzed bit patterns are associated with a virus and the packets are discarded.
Claim 14
Dependent Claim
18 words
The apparatus according to claim 1 , wherein certain packets are discarded if the associated network is congested.
Claim 15
Dependent Claim
18 words
The apparatus according to claim 13 , wherein the certain packets are discarded via a leaky bucket implementation.
Claim 16
Dependent Claim
21 words
The apparatus according to claim 13 , wherein the certain packet has been assigned a low priority relative to other packets.
Claim 17
Dependent Claim
20 words
The apparatus according to claim 1 , wherein the packets are modified according to the rules applied to that packet.
Claim 18
Independent Claim
111 words
An apparatus for applying rules to the processing of data packets over a network, the apparatus comprising: a network interconnecting device for directing packet based data over an associated network; a parser associated with the network interconnecting device for analyzing bit patterns from incoming IP flows of data packets; a rule generator for providing rules for processing the data packets according to the analyzed bit patterns; and a compiler for compiling the rules, wherein the rules are applied to the bit patterns which are parsed from the IP flow and IP packet traffic types and priorities resulting from application of the rules are mapped onto existing Quality of Service (QoS) assignments.
Claim 19
Independent Claim
111 words
An apparatus for applying rules to the processing of data packets over a network, the apparatus comprising: a network interconnecting device for directing packet based data over an associated network; a parser associated with the network interconnecting device for analyzing bit patterns from incoming IP flows of data packets; a rule generator for providing rules for processing the data packets according to the analyzed bit patterns; and a compiler for compiling the rules, wherein the rules are applied to the bit patterns which are parsed from the IP flow and IP packet traffic types and priorities resulting from application of the rules are mapped onto existing Quality of Service (QoS) assignments.
Claim 20
Independent Claim
111 words
An apparatus for applying rules to the processing of data packets over a network, the apparatus comprising: a network interconnecting device for directing packet based data over an associated network; a parser associated with the network interconnecting device for analyzing bit patterns from incoming IP flows of data packets; a rule generator for providing rules for processing the data packets according to the analyzed bit patterns; and a compiler for compiling the rules, wherein the rules are applied to the bit patterns which are parsed from the IP flow and IP packet traffic types and priorities resulting from application of the rules are mapped onto existing Class of Service (CoS) assignments.
Claim 21
Independent Claim
111 words
An apparatus for applying rules to the processing of data packets over a network, the apparatus comprising: a network interconnecting device for directing packet based data over an associated network; a parser associated with the network interconnecting device for analyzing bit patterns from incoming IP flows of data packets; a rule generator for providing rules for processing the data packets according to the analyzed bit patterns; and a compiler for compiling the rules, wherein the rules are applied to the bit patterns which are parsed from the IP flow and IP packet traffic types and priorities resulting from application of the rules are mapped onto existing Class of Service (CoS) assignments.
Claim 22
Independent Claim
97 words
A method for applying rules to the processing of data packets within an IP flow over a network, the method comprising: formulating at least one rule for application to the data packets of an IP flow; receiving an IP flow from a source; parsing the IP flow to detect data patterns within the data stream; applying the at least one formulated rule to classify all the data packets in at least one step before processing the data packets, the at least one rule being used to establish data traffic types, the data traffic types including assigned priorities.
Claim 23
Independent Claim
97 words
A method for applying rules to the processing of data packets within an IP flow over a network, the method comprising: formulating at least one rule for application to the data packets of an IP flow; receiving an IP flow from a source; parsing the IP flow to detect data patterns within the data stream; applying the at least one formulated rule to classify all the data packets in at least one step before processing the data packets, the at least one rule being used to establish data traffic types, the data traffic types including assigned priorities.
Claim 24
Dependent Claim
36 words
The method according to claim 19 , wherein the at least one rule is compiled using a just-in-time compiler, whereby the compiled rule is used to process the data packets according to the detected data patterns.
Claim 25
Dependent Claim
36 words
The method according to claim 19 , wherein the at least one rule is compiled using a runtime compiler, whereby the compiled rule is used to process the data packets according to the detected data patterns.
Claim 26
Dependent Claim
23 words
The method of claim 19 , wherein the data packet priority assignments are mapped onto mapped onto existing Quality of Service (QoS) assignments.
Claim 27
Dependent Claim
23 words
The method of claim 19 , wherein the data packet priority assignments are mapped onto mapped onto existing Class of Service (CoS) assignments.
Claim 28
Independent Claim
102 words
A method for applying rules to the processing of data packets within an IP flow over a network, the method comprising: formulating a set of rules associated with each network interconnection device for application to the data packets of an IP flow; receiving an IP flow into the forwarding device; classifying the incoming data packets according to the rules and all other information available for the data packets; modifying the data packets according to desired forwarding instructions, wherein the entire set of rules are applied to all incoming data packets during at least one step to determine forwarding for all the packets.
Claim 29
Independent Claim
102 words
A method for applying rules to the processing of data packets within an IP flow over a network, the method comprising: formulating a set of rules associated with each network interconnection device for application to the data packets of an IP flow; receiving an IP flow into the forwarding device; classifying the incoming data packets according to the rules and all other information available for the data packets; modifying the data packets according to desired forwarding instructions, wherein the entire set of rules are applied to all incoming data packets during at least one step to determine forwarding for all the packets.
Claim 30
Dependent Claim
26 words
The method according to claim 24 , wherein the traffic policing is applied in the at least one step without having to reclassify the data packets.
Claim 31
Dependent Claim
16 words
The method of claim 24 , wherein the IP flow is encapsulated into network transport technologies.
Claim 32
Dependent Claim
12 words
The method of claim 26 , wherein decapsulation is performed in hardware.
Claim 33
Dependent Claim
12 words
The method of claim 26 , wherein decapsulation is performed in software.
Claim 34
Dependent Claim
16 words
The method of claim 24 , wherein traffic policing functions are applied to the data packets.
References Cited (Backward Citations)
US5642513A
Cited
US5793954A
Cited
WO1997028505A1
Cited
US5781550A
Cited
US5842040A
Cited
US5872783A
Cited
US5903559A
Cited
US5864666A
Cited
US6246684B1
Cited
US20020095462A1
Cited
US6154776A
Cited
US20020099854A1
Cited
US6452915B1
Cited
US6170011B1
Cited
US20010025309A1
Cited
US6332154B2
Cited
US6167395A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2006-07-21 | 2007-01-20 | 2007-07-22 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2010-07-21 | 2011-01-20 | 2011-07-22 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2014-07-21 | 2015-01-20 | 2015-07-22 | $7700.00 | Window Closed / Lapsed |