Device for managing data filters

• US 20050182815A1
• Filed: 04/22/2003
• Published: 08/18/2005
• Est. Priority Date: 04/23/2002
• Status: Active Grant

• Current Assignee: Alcatel-Lucent SA (Nokia Corporation)
• Original Assignee: Alcatel-Lucent SA (Nokia Corporation)
• Inventors: Pennerath, Frederick, Offredo, Gaetan
• Granted Patent: US 8,914,339 B2
• Time in Patent Office: Days
• US Class Current: 709/200
• CPC Class Codes: H04L 63/0263 Rule management

Abstract

A data processing device (1) is installed in a data processing server (2) adapted to receive primary data and to transmit said primary data after application by control means (5) of dedicated processing based on primary rules. The device comprises, firstly, a first table (T1) in which are stored sets of at least one primary rule, called “primary metarules”, in a parameterizable form, in corresponding relationship to primary identifiers, and, secondly, management means (8) intended to be coupled to the control means (5) and adapted, on receipt of auxiliary data representing operating parameters delivered by the control means (5) after the reception by the server (2) of secondary data, to select at least one of the primary identifiers in the first table (T1) and associate the auxiliary data therewith in such a manner as to define the dedicated processes.

Claims

1. A data processing device (1) adapted to be installed in a data processing server (2) adapted to receive primary data and to transmit said primary data after application of dedicated processing based on primary rules by control means (5), which device is characterized in that it comprises i) a first table (T1) storing sets of at least one primary rule, called “

primary metarules”

, in a parameterizable form and in corresponding relationship to primary identifiers and ii) management means (8) adapted to be coupled to said control means (5) and, on receipt of auxiliary data representing operating parameters delivered by said control means (5) after reception by the server (2) of secondary data, to select at least one of the primary identifiers in the first table (T1) and associate said auxiliary data therewith so as to define said dedicated processes.

2. A device according to claim 1, characterized in that it comprises a second table (T2) accessible to said management means (8) in which are stored secondary identifiers in each corresponding relationship to at least one selected primary identifier associated with auxiliary data.

3. A device according to claim 2, characterized in that said management means (8) are adapted, on receipt of said auxiliary data, to determine if selected primary identifiers corresponding thereto is present in the secondary data (T2), so as to associate therewith new auxiliary data intended to adapt said dedicated processes.

4. A device according to claim 2, characterized in that certain selected primary metarules in the second table (T2) are grouped into secondary metarules represented by secondary identifiers.

5. A device according to claim 1, characterized in that said management means (8) i) comprise a multiplicity of management submodules each adapted to manage the association of auxiliary data with at least one primary or secondary metarule and ii) are adapted, on receipt of said auxiliary data, to determine which of said management submodules corresponds thereto.

6. A device according to claim 2, characterized in that said management means (8) are adapted, on receipt of said auxiliary data communicated by the server (2), to add, delete or modify primary or secondary metarules or auxiliary data in the second table (T2) associated with said primary or secondary metarules.

7. A device according to claim 1, characterized in that said management means (8) and said tables (T1, T2) are part of a metafirewall adapted to manage a firewall equipping said server (2).

8. A firewall characterized in that it comprises a device (1) according to claim 1.

9. A data processing method consisting in applying dedicated processes based on primary rules to primary data received by a data processing server (2) so that the received primary data is processed before being transmitted by said server, which method is characterized in that it comprises a preliminary step in which i) there are stored in a first table (T1) sets of at least one primary rule, called “

primary metarules”

, in a parameterizable form and in corresponding relationship to primary identifiers and ii) on receipt of auxiliary data representing operating parameters delivered by the server (2) after the receipt of secondary data, at least one of the primary identifiers in the first table (T1) is selected and said auxiliary data is associated with said primary identifier so as to define said dedicated processes.

10. A method according to claim 9, characterized in that, during the preliminary step, secondary identifiers each in corresponding relationship to at least one selected primary identifier associated with auxiliary data are stored in a second table (T2).

11. A method according to claim 10, characterized in that, on receipt of the auxiliary data, it is determined if selected primary identifiers that correspond to it are present in the second table (T2), so as to associate therewith new auxiliary data adapted to adapt said dedicated processes.

12. A method according to claim 10, characterized in that certain primary metarules in the second table (T2) are grouped into secondary metarules represented by secondary identifiers.

13. A method according to claim 9, characterized in that there are executed in parallel i) the selection of the primary or secondary metarules in the first table (T1 ) and ii) the modification of the auxiliary data in the second table (T2) associated with the secondary identifier representing the selected primary or secondary metarules.

14. A method according to claim 9, characterized in that, on receipt of complementary data communicated by said server (2), primary or secondary metarules are added to, deleted from or modified in the second table (T2).