Screening of data packets in a gateway
First Claim
1. A method (750) for processing data packets in a gateway element, said method comprising the steps of:
- comparing (751) a data packet to screening information comprising a set of rules, and processing (755) a data packet according to a rule belonging to the set of rules, the header information of said data packet matching the header information of said rule, characterized in that said screening information is hierarchically structured so that it comprises a first rule, which specifies first header information, and a subset of rules relating to said first rule, and in that in said step of comparing a data packet, said data packet is compared (754, 756) to said subset of rules only if the header information of the data packet matches the header information of the first rule.
9 Assignments
0 Petitions
Accused Products
Abstract
A method (750) for processing data packets in a gateway element comprises the steps of: comparing (751) a data packet to screening information comprising a set of rules, and processing (755) a data packet according to a rule belonging to the set of rules, the header information of said data packet matching the header information of said rule. The method is characterized in that said screening information is hierarchically structured so that it comprises a first rule, which specifies first header information, and a subset of rules relating to said first rule, and in that in said step of comparing a data packet, said data packet is compared (754, 756) to said subset of rules only if the header information of the data packet matches the header information of the first rule. A gateway element (80), an arrangement (85), and a data structure (40) comprising screening information are also presented.
17 Citations
16 Claims
-
1. A method (750) for processing data packets in a gateway element, said method comprising the steps of:
-
comparing (751) a data packet to screening information comprising a set of rules, and processing (755) a data packet according to a rule belonging to the set of rules, the header information of said data packet matching the header information of said rule, characterized in that said screening information is hierarchically structured so that it comprises a first rule, which specifies first header information, and a subset of rules relating to said first rule, and in that in said step of comparing a data packet, said data packet is compared (754, 756) to said subset of rules only if the header information of the data packet matches the header information of the first rule. - View Dependent Claims (2, 3, 4, 5, 6, 13, 14)
-
-
7. A gateway element (80) comprising
means (801) for storing screening information and means (802) for processing data packets, said processing involving comparison of a data packet header to header information specified in said screening information, characterized in that said means (802) for processing data packets are arranged to compare header information of a data packet to screening information comprising a first rule, which specifies first header information, and a subset of rules relating to said first rule, and arranged to compare a data packet to said subset of rules only if the header information of the data packet matches the header information of the first rule.
-
12. An arrangement (85) comprising at least one gateway element (80) and a database entity (81), said at least one gateway element comprising
means (801) for storing information for screening data packets and means (802) for processing data packets, said processing involving comparison of a data packet header to header information specified in said screening information, characterized in that said database entity comprises means (82) for providing information for screening data packets, said at least one gateway element further comprises means (805) for receiving at least part of said information for screening data packets from said database entity, and said means (802) for processing data packets are arranged to compare header information of a data packet to screening information comprising a first rule, which specifies first header information, and a subset of rules relating to said first rule, and arranged to compare a data packet to said subset of rules only if the header information of the data packet matches the header information of the first rule.
-
15. A data structure (40, 60, 64, 66) comprising screening information, characterized in that said screening information is hierarchically structured so that it comprises a first rule (401), which specifies first header information, and a subset of rules (402, 403) relating to said first rule, said first header information being common to said rules belonging to said subset of rules.
Specification