Method of preventing denial of service attacks in a cellular network

• US 20070140275A1
• Filed: 12/15/2006
• Published: 06/21/2007
• Est. Priority Date: 12/21/2005
• Status: Abandoned Application

• Current Assignee: Chris Bowman, David Daugherty, Frank Sheiness
• Original Assignee: Chris Bowman, David Daugherty, Frank Sheiness
• Inventors: Bowman, Chris, Daugherty, David, Sheiness, Frank
• Application Number:
  US11/639,843
• Publication Number:
  US 20070140275A1
• Time in Patent Office: Days
• US Class Current: 370/401
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/1458 Denial of Service

Abstract

A system, method, and computer readable medium for preventing denial of service attacks in a cellular network, that comprises, counting a data packet generated by an address on the cellular network and blocking access to the cellular network of the address if the counted data packets exceeds a pre-defined threshold.

Claims

1. A method for preventing denial of service attacks in a cellular network, comprising:

counting a data packet generated by an address on the cellular network; and

blocking access to the cellular network of the address if the counted data packets exceeds a pre-defined threshold.

2. The method of claim 1 wherein the counting is performed per time unit.

3. The method of claim 1 wherein the blocking is active for a pre-set interval.

4. The method of claim 1 comprising disabling the address.

5. The method of claim 1 wherein the address is at least one of:

a cellular identification address; and

a media access control address.

6. The method of claim 1 wherein the counting is performed at layer 2.

7. The method of claim 1 wherein the counting is performed at layer 1.

8. The method of claim 1 comprising identifying the address upon connection to the cellular network.

9. The method of claim 1 comprising defining the threshold based upon a number of devices utilizing the cellular network.

10. The method of claim 1 comprising defining the threshold based upon a bandwidth of the cellular network.

11. The method of claim 1 comprising disinfecting the address exceeding the pre-defined threshold.

12. A computer readable medium comprising instructions for:

identifying at least one of a cellular identification address and a media access control address upon connection to a cellular network;

counting a data packet generated per unit time by the at least one of the cellular identification address and the media access control address on the cellular network; and

blocking access of the at least one of the cellular identification address and the media access control address to the cellular network if the counted data packets exceeds a pre-defined threshold.

13. The computer readable medium of claim 12 wherein the blocking is active for a pre-set interval.

14. The computer readable medium of claim 12 comprising instructions for disabling the at least one the of the cellular identification address and the media access control address.

15. The computer readable medium of claim 12 wherein the counting is performed at layer 2.

16. The computer readable medium of claim 12 wherein the counting is performed at layer 1.

17. The computer readable medium of claim 12 comprising instructions for defining the threshold based upon the number of devices utilizing the cellular network and the bandwidth of the cellular network.

18. The computer readable medium of claim 12 comprising disinfecting the at least one of the cellular identification address and the media access control address exceeding the pre-defined threshold.

19. A system adapted to provide preventing denial of service attacks in a cellular network, comprising:

a memory; and

a processor communicably coupled to the memory, the processor communicably coupled to the cellular network, the processor adapted to;

identify at least one of a cellular identification address and a media access control address upon connection to the cellular network;

count a data packet generated per unit time by the at least one of the cellular identification address and the media access control address on the cellular network; and

block access of the at least one of the cellular identification address and the media access control address to the cellular network if the counted data packets exceeds a pre-defined threshold, wherein the blocking is active for a pre-set interval.

20. The system of claim 19 comprising disinfecting the at least one of the cellular identification address and the media access control address exceeding the pre-defined threshold.