Network communications intermediate interface

• US 5,303,238 A
• Filed: 12/11/1990
• Issued: 04/12/1994
• Est. Priority Date: 12/11/1990
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Maher, James H., Brodd, Jeffrey L., Eikenhorst, Joel D., Fahmy, Adel F., Kiel, Harvey G.
• Primary Examiner(s): Olms, Douglas W.
• Assistant Examiner(s): HOM, SHICK C
• Application Number:
  US07/626,131
• Time in Patent Office: 1,218 Days
• Field of Search: 370/94.1, 370/60, 370/16, 370/54, 370/85.13, 370/85.14, 370/85.1, 370/85.2, 370/85.3
• US Class Current: 370/402
• CPC Class Codes: H04L 69/00 Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass networks security protocols H04L9/40; wireless communication networks H04W

Abstract

A highly efficient and cost effective system, which may be physically located locally to a group of workstations, performs communications rerouting at the network session level. The intermediate system changes data packet headers as necessary to make such rerouting transparent to the devices which are connected to it. Data packets are otherwise unaltered. The intermediate system can be used to connect to a plurality of workstations and to a network in such a manner that each workstation appears to be directly connected to the network.

Claims

1. A system for transferring data packets between a network entry point and a plurality of workstations, comprising:

a single input/output port connected to the network entry point;

a plurality of input/output ports each connected to one of the workstations, each input/output port having an input/output port address for uniquely identifying each of the connected workstations; and

redirection means connected to all of the input/output ports for routing data packets received through the entry point input/output port to a workstation input/output port address corresponding to a session identified in a header of the packet, and for routing data packets received from a workstation input/output port address to the entry point input/output port;

wherein, for a session initiated through the entry point, such session is identified by both the entry point and the workstation with a single session identifier, and for a session initiated by a workstation, such session is identified by the entry point and the workstation with session identifiers which are different from each other;

and wherein, for any received data packet, if such packet belongs to a session which is identified by the entry point and the workstation with different identifiers, said redirection means further changes a session identifier in the packet header to the identifier used by the device connected to the input/output port to which the packet is routed.

2. The system of claim 1, wherein said redirection means includes a translation table, said translation table having one entry corresponding to each session routed through said redirection means, each entry having session identifiers used by the entry point and by a workstation to identify the corresponding session.

3. The system of claim 2, wherein said redirection means, for each received packet which initiates a session, adds a corresponding entry to said translation table.

4. The system of claim 3, wherein said redirection means, for each received packet which terminates a session, deletes the corresponding entry from said translation table.

5. The system of claim 1, wherein said redirection means includes a logical name table, wherein sessions initiated through the entry point by another system in the network are directed to a logical name, and wherein said redirection means selects an input/output port address corresponding to such logical name.

6. A system for communicating data packets between a target system and a plurality of workstations, each packet corresponding to a single communications session, comprising:

a network;

a target system connected to said network;

an entry point connected to said network;

a plurality of workstations;

an intermediate controller connected to said entry point by a single data link, and to each workstation by a data link, wherein each workstation is uniquely identified and separately addressable;

redirection means within said intermediate controller for routing data packets received through the entry point data link to a workstation data link corresponding to a session identified in a header of the packet, and for routing data packets received from a workstation data link to the entry point data link;

wherein, for a session initiated by the target system, such session is identified by both the entry point and the workstation with a single session identifier, and wherein, for a session initiated by a workstation, said redirection means identifies such session to the entry point and to the workstation with different session identifiers;

and further wherein, for any received data packet, if such packet belongs to a session which is identified by the entry point and the workstation with different identifiers, said redirection means changes a session identifier in the packet header to the identifier used by the device connected to the data link to which the packet is routed.

7. The system of claim 6, wherein said redirection means includes a translation table, said translation table having one entry corresponding to each session routed through said redirection means, each entry having session identifiers used by the entry point and by a workstation to identify the corresponding session.

8. The system of claim 7, wherein said redirection means, for each received packet which initiates a session, adds a corresponding entry to said translation table.

9. The system of claim 8, wherein said redirection means, for each received packet which terminates a session, deletes the corresponding entry from said translation table.

10. A method for transmitting packets corresponding to a communications session between a network entry point and a workstation, comprising the steps of:

sending packets from the entry point to an intermediate controller, such packets having a header including a session identifier;

sending packets from the workstation to the intermediate controller, such packets having a header including a session identifier;

within the intermediate controller, forwarding packets received from the entry point to the workstation;

within the intermediate controller, forwarding packets received from the workstation to the entry point;

within the intermediate controller, assigning session identifiers to sessions when the sessions are initiated, wherein a single session identifier is used for sessions initiated from the target system, and two different session identifiers are used for sessions initiated from the workstation,

for packets received from the workstation, if the workstation and the entry point refer to the session using different identifiers, changing the identifier in the packet header to that used by the entry point before sending the packet, otherwise unchanged, to the entry point; and

for packets received from the entry point, if the workstation and the entry point refer to the session using different identifiers, changing the identifier in the packet header to that used by the workstation before sending the packet, otherwise unchanged, to the workstation.

11. The method of claim 10, further comprising the steps of:

maintaining a table of session identifiers, wherein, for any session in which the entry point and the workstation use different identifiers for the session, both identifiers are stored in the table of session identifiers, wherein identifiers are changed to corresponding identifiers stored in the table of session identifiers.

12. The method of claim 11, wherein one entry is maintained in the table of session identifiers corresponding to each communications session transmitted through the intermediate controller, such entry containing the session identifiers for both the entry point and the workstation for those sessions in which they differ.

13. The method of claim 12, wherein an entry is added to the table of session identifiers whenever a new session is initiated.

14. The method of claim 12, wherein the entry corresponding to a communications session is deleted from the table of session identifiers when such session is terminated.

15. The method of claim 11, further comprising the step of:

maintaining a table of logical names for the workstations, wherein a request to initiate a session by the target system is denied unless a logical name identified in such request is matched to a logical name in the table of logical names.

16. The method of claim 15, further comprising the step of:

when a logical name identified in a request to initiate a session by the target node is found in the table of logical names, adding an entry to the table of session identifiers corresponding to such session.

17. A method for transmitting packets, corresponding to a communications session, between an input/output port connected to a network entry point and an input/output port connected to a workstation, comprising the steps of:

receiving packets from the entry point input/output port in an intermediate controller, such packets having a header including a session identifier;

receiving packets from the workstation input/output port in the intermediate controller, such packets having a header including a session identifier;

within the intermediate controller, forwarding packets received from the entry point input/output port to the workstation;

within the intermediate controller, forwarding packets received from the workstation input/output port to the entry point input/output port;

within the intermediate controller, assigning session identifiers to sessions when the sessions are initiated, wherein a single session identifier is used for sessions initiated from the target system, and two different session identifiers are used for sessions initiated from the workstation,

for packets received from the workstation input/output port, if the session identifier is different from that used in packets received from the entry point input/output port for the same session, changing the identifier in the packet header to that used in such received packets before sending the packet, otherwise unchanged, to the entry point input/output port; and

for packets received from the entry point input/output port, if the session identifier is different from that used in packets received from the workstation input/output port for the same session, changing the identifier in the packet header to that used in such receiving packets before sending the packet, otherwise unchanged, to the workstation input/output port.

18. The method of claim 17, further comprising the steps of:

maintaining a table of session identifiers, wherein, for any session in which the packets received from the entry point input/output port and the workstation input/output port use different identifiers for the session, both identifiers are stored in the table of session identifiers, wherein identifiers are changed to corresponding identifiers stored in the table of session identifiers.

19. The method of claim 18, wherein one entry is maintained in the table of session identifiers corresponding to each communications session transmitted through the intermediate controller, such entry containing the identifiers contained in packets received from both the entry point input/output port and the workstation input/output port for those sessions in which they differ.

20. The method of claim 19, wherein an entry is added to the table of session identifiers whenever a new session is initiated.

21. The method of claim 19, wherein the entry corresponding to a communications session is deleted from the table of session identifiers when such session is terminated.

22. The method of claim 18, further comprising the step of:

maintaining a table of logical names for the workstation input/output port, wherein a request to initiate a session received from the entry point input/output port is denied unless a logical name identified in such request is matched to a logical name in the table of logical names.

23. The method of claim 22, further comprising the step of:

when a logical name is identified corresponding to a request to initiate a session through the entry point input/output port, adding an entry to the table of session identifiers corresponding to such session.