Device-specific firewall

• US 20030163732A1
• Filed: 02/28/2002
• Published: 08/28/2003
• Est. Priority Date: 02/28/2002
• Status: Abandoned Application

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Parry, Travis J.
• Application Number:
  US10/086,746
• Publication Number:
  US 20030163732A1
• Time in Patent Office: Days
• US Class Current: 713/201
• CPC Class Codes: H04L 63/0236 Filtering by address, protocol, port number or service, e.g. IP-address or URL
• CPC Class Codes: H04L 63/0245 Filtering by information in the payload
• CPC Class Codes: H04L 63/145 the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms

Abstract

A device-specific filtering method includes receiving a packet from a network, evaluating the packet to determine whether or not it or a file thereof has one or more undesirable characteristics and/or desirable characteristics, and controlling further transmittal and/or processing of one or more files of the packet based upon such evaluation. The device-specific filtering method may be effected by a destination device, such as a printer, for the transmitted packet or by a computer associated with a destination device. Programs, apparatus, and systems that effect the filtering method are also disclosed.

Claims

1. A printing system, comprising:

a printer including;

a processor; and

a printing component in communication with said processor; and

a filtering program associated with said processor so as to control printing of a file by said printing component based on at least one of a presence or absence of at least one prespecified characteristic from a packet including said file.

2. The printing system of claim 1, wherein said filtering program is stored by at least one of a memory device and firmware of said printer associated with said processor.

3. The printing system of claim 1, wherein said filtering program is stored by at least one of a memory device and firmware external to said printer and in communication with said processor.

4. The printing system of claim 3, further comprising:

a computer including said at least one of said memory device and said firmware, a processor in communication with said at least one of said memory device and said firmware, and a communication port for at least partially establishing communication between said processor of said computer and said processor of said printer.

5. The printing system of claim 1, wherein said at least one prespecified characteristic comprises at least one of an undesirable characteristic and a desirable characteristic.

6. The printing system of claim 5, wherein said filtering program causes said processor to prevent said printing component from printing a file of a packet having at least one said undesirable characteristic.

7. The printing system of claim 5, wherein said filtering program instructs said processor to cause said printing component to print a file of a packet having said desirable characteristic.

8. The printing system of claim 5, wherein said filtering program instructs said processor to cause said printing component to print said file only if said packet lacks said undesirable characteristic and has said desirable characteristic.

9. The printing system of claim 5, wherein said undesirable characteristic comprises one of a file type, a file string, a source computer identifier, a user identifier, a file size, and at least one prespecified command.

10. The printing system of claim 5, wherein said desirable characteristic comprises one of a source computer identifier, a user identifier, a file type, and a password.

11. A device-specific filtering method, comprising:

transmitting a packet comprising at least one file from a source computer, across a network, to a device of said network;

evaluating at least one prespecified characteristic of said packet following passage of said packet through a server of said network; and

controlling at least one of further transmission of said packet to said device and processing of said at least one file of said packet by said device based on said evaluating.

12. The device-specific filtering method of claim 11, wherein said evaluating at least one prespecified characteristic comprises evaluating at least one of an undesirable characteristic and a desirable characteristic.

13. The device-specific filtering method of claim 12, wherein said controlling comprises preventing said at least one of further transmission of said packet to said device and processing of said at least one file of said packet by said device if said packet has at least one said undesirable characteristic.

14. The device-specific filtering method of claim 12, wherein said controlling comprises permitting said at least one of further transmission of said packet to said device and processing of said at least one file of said packet by said device if said packet has said desirable characteristic.

15. The device-specific filtering method of claim 12, wherein said controlling comprises permitting said at least one of further transmission of said packet to said device and processing of said at least one file of said packet by said device if said packet lacks said undesirable characteristic and has said desirable characteristic.

16. The device-specific filtering method of claim 12, wherein said evaluating comprises evaluating said packet for at least one said undesirable characteristic comprising at least one of a file type, a file string, a source computer identifier, a user identifier, a file size, and at least one prespecified command.

17. The device-specific filtering method of claim 12, wherein said evaluating comprises evaluating said packet for at least one said desirable characteristic comprising at least one of a source computer identifier, a user identifier, a file type, and a password.

18. The device-specific filtering method of claim 11, wherein said evaluating is effected by a processor of said device.

19. The device-specific filtering method of claim 11, wherein said evaluating is effected by a processor external to and in communication with a processor of said device.

20. A system for filtering a file transmitted to a destination device, comprising:

a processor in communication with a network across which the file has been transmitted; and

a filtering program associated with said processor so as to control at least one of transmission of a packet including at least one file to the destination device and processing of said at least one file by the destination device based on at least one of a presence or absence of at least one prespecified characteristic from said packet including said at least one file.

21. The system of claim 20, wherein said filtering program is stored by at least one of a memory device and firmware.

22. The system of claim 21, wherein said processor and said memory device or said firmware are parts of the destination device.

23. The system of claim 21, wherein said processor and said memory device or said firmware are parts of a computer in communication with the destination device.