US6850495B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
Methods, apparatus and data structures for segmenting customers using at least a portion of a layer 2 address header or bits in the place of a layer 2 address header
Assignee: Verizon Patent and Licensing Inc
•
Filing: 2000-08-31
•
Granted: 2005-02-01
•
Expires: 2020-08-31
Abstract
Abstract Limiting or controlling access to various services thereby performing a firewall function. An access router may permit or deny a packet based on at least a portion of a unique bit string (or context information) which replaced layer 2 header information (e.g., the layer 2 (e.g., MAC) address). Further, a particular quality of service may be indicated by at least a part of the unique bit string (or context information). The service provided to a group of customers, that group of customers being defined by at least a portion of the unique bit string (or context information), may be monitored. Multicast groups may be supported by checking at least a part of the unique bit string (or context information) to determine whether or not a customer associated with that port is permitted to join the multicast group.
Inventors
- 👤 Robert T. Baum
- 👤 Eric A. Voit
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-24 13:26
CPC Classifications
H; H04; H04L; H04L12/00; H04L12/28; H04L12/46; H04L12/4641; H04L61/00; H04L61/35; H04L63/00; H04L63/02; H04L63/0272; H04L63/10; H04L63/101; H04L63/104; H04L2463/00; H04L2463/102; H04L69/00; H04L69/22
Claims Analysis
Total Claims: 38
Claim 1
Independent Claim
155 words
A method for provisioning services to packets sourced from a number of client devices, the method comprising: a) accepting a packet sourced from one of the number of client devices, wherein the packet has had at least a part of a layer 2 header replaced with a unique bit string, wherein the layer 2 header is an Ethernet header, wherein when the unique bit string replaces the at least a part of the layer 2 header a modified header is generated, wherein a bit-size of the modified header is the same as that of the Ethernet header, and wherein the unique bit string is independent of any contents of the packet; b) determining whether or not the packet is entitled to access a particular service using at least a portion of the unique bit string; and c) if it is determined that the packet is entitled to access the particular service, then routing the packet.
Claim 2
Independent Claim
155 words
A method for provisioning services to packets sourced from a number of client devices, the method comprising: a) accepting a packet sourced from one of the number of client devices, wherein the packet has had at least a part of a layer 2 header replaced with a unique bit string, wherein the layer 2 header is an Ethernet header, wherein when the unique bit string replaces the at least a part of the layer 2 header a modified header is generated, wherein a bit-size of the modified header is the same as that of the Ethernet header, and wherein the unique bit string is independent of any contents of the packet; b) determining whether or not the packet is entitled to access a particular service using at least a portion of the unique bit string; and c) if it is determined that the packet is entitled to access the particular service, then routing the packet.
Claim 3
Dependent Claim
23 words
The method of claim 1 wherein at least a portion of the unique bit string represents one of a number of logical interfaces.
Claim 4
Dependent Claim
23 words
The method of claim 1 wherein at least a portion of the unique bit string corresponds to a virtual private network-organizational universal identifier.
Claim 5
Dependent Claim
21 words
The method of claim 1 wherein at least a portion of the unique bit string corresponds to a virtual private network-INDEX.
Claim 6
Dependent Claim
30 words
The method of claim 1 wherein at least a portion of the unique bit string represents a logical port identifier including a geographic location identifier and a physical unit identifier.
Claim 7
Dependent Claim
46 words
The method of claim 1 wherein the step of determining whether or not the packet is entitled to access a particular service using at least a portion of the unique bit string is a separate determination from determining whether or not the packet can be forwarded.
Claim 8
Dependent Claim
25 words
The method of claim 1 wherein the packet is routed only if it is determined that the packet is entitled to access the particular service.
Claim 9
Independent Claim
152 words
A method for providing various quality of service levels to packets sourced from a number of client devices, the method comprising: a) accepting a packet sourced from one of the number of client devices, wherein the packet has had at least a part of a layer 2 header replaced with a unique bit string that is independent of any contents of the packet; b) determining a service level to which the packet is entitled using at least a portion of the unique bit string, wherein the layer 2 header is an Ethernet header, wherein when the unique bit string replaces the at least a part of the layer 2 header a modified header is generated, and wherein a bit-size of the modified header is the same as that of the Ethernet header; and c) forwarding the packet to a particular one of a plurality of queues associated with the service level determined.
Claim 10
Independent Claim
152 words
A method for providing various quality of service levels to packets sourced from a number of client devices, the method comprising: a) accepting a packet sourced from one of the number of client devices, wherein the packet has had at least a part of a layer 2 header replaced with a unique bit string that is independent of any contents of the packet; b) determining a service level to which the packet is entitled using at least a portion of the unique bit string, wherein the layer 2 header is an Ethernet header, wherein when the unique bit string replaces the at least a part of the layer 2 header a modified header is generated, and wherein a bit-size of the modified header is the same as that of the Ethernet header; and c) forwarding the packet to a particular one of a plurality of queues associated with the service level determined.
Claim 11
Dependent Claim
23 words
The method of claim 8 wherein at least a portion of the unique bit string represents one of a number of logical interfaces.
Claim 12
Dependent Claim
23 words
The method of claim 8 wherein at least a portion of the unique bit string corresponds to a virtual private network-organizational universal identifier.
Claim 13
Dependent Claim
21 words
The method of claim 8 wherein at least a portion of the unique bit string corresponds to a virtual private network-INDEX.
Claim 14
Dependent Claim
30 words
The method of claim 8 wherein at least a portion of the unique bit string represents a logical port identifier including a geographic location identifier and a physical unit identifier.
Claim 15
Dependent Claim
15 words
The method of claim 8 wherein the service level is a quality of service level.
Claim 16
Dependent Claim
21 words
The method of claim 8 wherein the service level is a quality of service level represented by a plurality of bits.
Claim 17
Independent Claim
174 words
A method for monitoring packets sourced from a group of client devices defining a subset of client devices, each of the packets having at least a part of a layer 2 header replaced with a unique bit string, the method comprising: a) determining whether or not the packet belongs to the group of client devices using at least a portion of at least one of the unique bit string, wherein the layer 2 header is an Ethernet header, wherein when the unique bit string replaces the at least a part of the layer 2 header a modified header is generated, and wherein a bit-size of the modified header is the same as that of the Ethernet header; and b) if it is determined that the packet does belong to the group of client devices, then i) copying the packet to generate a duplicate packet, and ii) forwarding the duplicate packet to a monitoring facility, wherein the monitoring facility monitors at least one of (A) service provided to a group of customers and (B) security.
Claim 18
Independent Claim
174 words
A method for monitoring packets sourced from a group of client devices defining a subset of client devices, each of the packets having at least a part of a layer 2 header replaced with a unique bit string, the method comprising: a) determining whether or not the packet belongs to the group of client devices using at least a portion of at least one of the unique bit string, wherein the layer 2 header is an Ethernet header, wherein when the unique bit string replaces the at least a part of the layer 2 header a modified header is generated, and wherein a bit-size of the modified header is the same as that of the Ethernet header; and b) if it is determined that the packet does belong to the group of client devices, then i) copying the packet to generate a duplicate packet, and ii) forwarding the duplicate packet to a monitoring facility, wherein the monitoring facility monitors at least one of (A) service provided to a group of customers and (B) security.
Claim 19
Dependent Claim
23 words
The method of claim 15 wherein at least a portion of the unique bit string represents one of a number of logical interfaces.
Claim 20
Dependent Claim
23 words
The method of claim 15 wherein at least a portion of the unique bit string corresponds to a virtual private network-organizational universal identifier.
Claim 21
Dependent Claim
21 words
The method of claim 15 wherein at least a portion of the unique bit string corresponds to a virtual private network-INDEX.
Claim 22
Dependent Claim
18 words
The method of claim 15 wherein the unique bit string is independent of a layer 2 destination address.
Claim 23
Dependent Claim
30 words
The method of claim 15 wherein at least a portion of the unique bit string represents a logical port identifier including a geographic location identifier and a physical unit identifier.
Claim 24
Independent Claim
155 words
An apparatus for provisioning services to packets sourced from a number of client devices, each of the packets having at least a part of a layer 2 header replaced with a unique bit string, the apparatus comprising: a) an access control list; and b) an access controller, the access controller including i) means for determining whether or not the packet is entitled to access a particular service using A) contents of the access control list, and B) at least a portion of the unique bit string, wherein the layer 2 header is an Ethernet header, wherein when the unique bit string replaces the at least a part of the layer 2 header a modified header is generated, and wherein a bit-size of the modified header is the same as that of the Ethernet header, and ii) means for routing the packet if it is determined that the packet is entitled to access the particular service.
Claim 25
Independent Claim
155 words
An apparatus for provisioning services to packets sourced from a number of client devices, each of the packets having at least a part of a layer 2 header replaced with a unique bit string, the apparatus comprising: a) an access control list; and b) an access controller, the access controller including i) means for determining whether or not the packet is entitled to access a particular service using A) contents of the access control list, and B) at least a portion of the unique bit string, wherein the layer 2 header is an Ethernet header, wherein when the unique bit string replaces the at least a part of the layer 2 header a modified header is generated, and wherein a bit-size of the modified header is the same as that of the Ethernet header, and ii) means for routing the packet if it is determined that the packet is entitled to access the particular service.
Claim 26
Dependent Claim
18 words
The method of claim 21 wherein the unique bit string is independent of a layer 2 destination address.
Claim 27
Dependent Claim
30 words
The method of claim 21 wherein at least a portion of the unique bit string represents a logical port identifier including a geographic location identifier and a physical unit identifier.
Claim 28
Independent Claim
183 words
An apparatus for providing various service levels to packets sourced from a number of client devices, each of the packets having at least a part of a layer 2 header replaced with a unique bit string that is independent of contents of the packets, the apparatus comprising: a) a plurality of queues, each of the plurality of queues associated with a particular service level; b) a service level list; and c) a service level controller, the service level controller including i) means for determining a service level to which the packet is entitled using A) contents of the service level list, and B) at least a portion of the unique bit string, wherein the layer 2 header is an Ethernet header, wherein when the unique bit string replaces the at least a part of the layer 2 header a modified header is generated, and wherein a bit-size of the modified header is the same as that of the Ethernet header, and ii) means for forwarding the packet to the one of the plurality of queues associated with the quality of service level determined.
Claim 29
Independent Claim
183 words
An apparatus for providing various service levels to packets sourced from a number of client devices, each of the packets having at least a part of a layer 2 header replaced with a unique bit string that is independent of contents of the packets, the apparatus comprising: a) a plurality of queues, each of the plurality of queues associated with a particular service level; b) a service level list; and c) a service level controller, the service level controller including i) means for determining a service level to which the packet is entitled using A) contents of the service level list, and B) at least a portion of the unique bit string, wherein the layer 2 header is an Ethernet header, wherein when the unique bit string replaces the at least a part of the layer 2 header a modified header is generated, and wherein a bit-size of the modified header is the same as that of the Ethernet header, and ii) means for forwarding the packet to the one of the plurality of queues associated with the quality of service level determined.
Claim 30
Dependent Claim
30 words
The method of claim 24 wherein at least a portion of the unique bit string represents a logical port identifier including a geographic location identifier and a physical unit identifier.
Claim 31
Independent Claim
194 words
An apparatus for monitoring packets sourced from a group of client devices defining a subset of client devices, each of the packets having at least a part of a layer 2 header replaced with a unique bit string, the apparatus comprising: a) a monitoring port for accepting packets of the group of client devices to be monitored; b) means determining whether or not an accepted packet belongs to the group of client devices using at least a portion of the unique bit string, wherein the layer 2 header is an Ethernet header, wherein when the unique bit string replaces the at least a part of the layer 2 header a modified header is generated, and wherein a bit-size of the modified header is the same as that of the Ethernet header; and c) means for i) copying the accepted packet to generate a duplicate packet, and ii) forwarding the duplicate packet to the monitoring port so that at least one of (A) service to a group of customers and (B) security, may be monitored, if it is determined that the packet was sourced by a client device belonging to the group of client devices.
Claim 32
Independent Claim
194 words
An apparatus for monitoring packets sourced from a group of client devices defining a subset of client devices, each of the packets having at least a part of a layer 2 header replaced with a unique bit string, the apparatus comprising: a) a monitoring port for accepting packets of the group of client devices to be monitored; b) means determining whether or not an accepted packet belongs to the group of client devices using at least a portion of the unique bit string, wherein the layer 2 header is an Ethernet header, wherein when the unique bit string replaces the at least a part of the layer 2 header a modified header is generated, and wherein a bit-size of the modified header is the same as that of the Ethernet header; and c) means for i) copying the accepted packet to generate a duplicate packet, and ii) forwarding the duplicate packet to the monitoring port so that at least one of (A) service to a group of customers and (B) security, may be monitored, if it is determined that the packet was sourced by a client device belonging to the group of client devices.
Claim 33
Dependent Claim
18 words
The method of claim 26 wherein the unique bit string is independent of a layer 2 destination address.
Claim 34
Dependent Claim
30 words
The method of claim 26 wherein at least a portion of the unique bit string represents a logical port identifier including a geographic location identifier and a physical unit identifier.
Claim 35
Independent Claim
150 words
A method for provisioning services to packets sourced from a number of client devices, the method comprising: a) accepting a packet sourced from one of the number of client devices; b) replacing at least a part of a layer 2 header of the packet with a unique bit string that is independent of any contents of the packet; c) determining whether or not the packet is entitled to access a particular service using at least a portion of the unique bit string; and d) if it is determined that the packet is entitled to access the particular service, then routing the packet, wherein the layer 2 header is an Ethernet header, wherein when the unique bit string replaces the at least a part of the layer 2 header a modified header is generated, and wherein a bit-size of the modified header is the same as that of the Ethernet header.
Claim 36
Independent Claim
150 words
A method for provisioning services to packets sourced from a number of client devices, the method comprising: a) accepting a packet sourced from one of the number of client devices; b) replacing at least a part of a layer 2 header of the packet with a unique bit string that is independent of any contents of the packet; c) determining whether or not the packet is entitled to access a particular service using at least a portion of the unique bit string; and d) if it is determined that the packet is entitled to access the particular service, then routing the packet, wherein the layer 2 header is an Ethernet header, wherein when the unique bit string replaces the at least a part of the layer 2 header a modified header is generated, and wherein a bit-size of the modified header is the same as that of the Ethernet header.
Claim 37
Independent Claim
145 words
A method for providing various quality of service levels to packets sourced from a number of client devices, the method comprising: a) accepting a packet sourced from one of the number of client devices; b) replacing at least a part of a layer 2 header of the packet with a unique bit string that is independent of any contents of the packet; c) determining a service level to which the packet is entitled using at least a portion of the unique bit string; and d) forwarding the packet to a queue associated with the service level determined, wherein the layer 2 header is an Ethernet header, wherein when the unique bit string replaces the at least a part of the layer 2 header a modified header is generated, and wherein a bit-size of the modified header is the same as that of the Ethernet header.
Claim 38
Independent Claim
145 words
A method for providing various quality of service levels to packets sourced from a number of client devices, the method comprising: a) accepting a packet sourced from one of the number of client devices; b) replacing at least a part of a layer 2 header of the packet with a unique bit string that is independent of any contents of the packet; c) determining a service level to which the packet is entitled using at least a portion of the unique bit string; and d) forwarding the packet to a queue associated with the service level determined, wherein the layer 2 header is an Ethernet header, wherein when the unique bit string replaces the at least a part of the layer 2 header a modified header is generated, and wherein a bit-size of the modified header is the same as that of the Ethernet header.
References Cited (Backward Citations)
US5088090A
Cited
US5774640A
Cited
US5610905A
Cited
US5566170A
Cited
US6058429A
Cited
US5740375A
Cited
US5805801A
Cited
US5946313A
Cited
US6243379B1
Cited
US5959989A
Cited
US5920566A
Cited
US6104700A
Cited
US6035405A
Cited
US6618381B1
Cited
US6097720A
Cited
US6314106B1
Cited
US6539011B1
Cited
US6546001B1
Cited
US5991300A
Cited
US6636516B1
Cited
US6633571B1
Cited
US20030067912A1
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2008-02-01 | 2008-08-02 | 2009-02-01 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2012-02-01 | 2012-08-02 | 2013-02-01 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2016-02-01 | 2016-08-02 | 2017-02-01 | $7700.00 | Window Closed / Lapsed |