Method and apparatus for supervising access and protecting against unauthorized access in a communication metwork

• US 5,471,459 A
• Filed: 05/12/1993
• Issued: 11/28/1995
• Est. Priority Date: 05/15/1992
• Status: Expired due to Fees

• Current Assignee: Max B. Gut
• Original Assignee: Max B. Gut
• Inventors: Gut, Max B.
• Primary Examiner(s): MARCELO, MELVIN C
• Application Number:
  US08/060,749
• Time in Patent Office: 930 Days
• Field of Search: 370/13, 370/94.1, 370/110.1, 340/825.3, 340/825.31-825.35, 340/825.5, 340/825.51
• US Class Current: 726/4
• CPC Class Codes: H04L 12/22 Arrangements for preventing the taking of data from a data transmission channel without authorisation means for verifying the identity or the authority of a user of a secure or secret communication system H04L9/32
• CPC Class Codes: H04L 12/40026 Details regarding a bus guardian
• CPC Class Codes: H04L 12/4135 using bit-wise arbitration
• CPC Class Codes: H04L 43/00 Arrangements for monitoring or testing data switching networks
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

With this method protection against unauthorized access can be accomplished centrally so that less memory capacity and calculation time are needed for testing the right-of-access. By this the message traffic in the whole network is constantly intercepted by a central supervision device (SV). A table is stored in the central supervision device (SV) whereby upon entry of a message, the central supervision device tests the right-of-access of the message sender (SE,PC) to the message receiver (AK) with the aid of data in the table and a predetermined portion of the information contained in the message. In case of unauthorized access, the supervision device causes the message to be rendered ineffective.

Claims

1. A method for supervising access and protecting against unauthorized access in message networks whereby information in the form of messages is transmitted over a network having a plurality of stations and a central supervision device configured to receive each of the messages transmitted on the network and a particular portion of the information contained in the message is employed for supervising the right-of-access at the message receiver, said method comprising the steps of:

generating, at a first station, a message destined for a second station, said first station message including signals indicating a right of access of said first station with other stations in the network;

transmitting said first station message over the network;

intercepting said transmitted first station message at said central supervision device;

comparing said transmitted first station message right of access signals with supervisory signals stored in a table in said central supervision device indicative of authorized access to said second station;

generating cancellation signals if said comparison indicates that access to said second station is unauthorized;

transmitting said cancellation signals to said second station;

halting execution of said transmitted first station message by said second station upon receipt of said cancellation signals; and

beginning the comparison of the right-of-access by means of the central supervision device (SV) during the transmission of a message and terminating said comparison before the end of the message, and in the case of an unauthorized access the central supervision device (SV) editing a portion of said transmitted message to guarantee its non-effectiveness.

2. A method according to claim 1 further comprising the steps of generating, by the central supervision device, an error signal in the transmitted message in order to trigger its repetition.

3. The method according to claim 1 further comprising the steps of modifying, by the central supervision device, a predetermined portion of the information signals in said transmitted message, whereby the recognition of the modification in the second station renders the message ineffective.

4. A method according to claim 1 characterized in that each of said stations and said central supervision device compares an address (SA) of the transmitted message and upon detection of an address identical with its own address, causes the message to be rendered ineffective.

5. A method according to claim 4 further comprises the steps of

waiting, by a receiving station, a particular predetermined period of time for execution of an action demanded by the message;

accomplishing the comparison of addresses during said predetermined time, and

sending after the communication participant having established an address identity a canceling message whereupon the message receiving station does not accomplish the requested action.

6. A method according to claim 5 wherein said address comparison step begins during the message transmission.

7. A method according to claim 6 wherein the message has a control field (CF), the sender'"'"'s address (SA), the receiver'"'"'s address (DA), a length (L), a data field (D) and a test byte (FCS), wherein said address comparison step begins during or immediately after receipt of a sending station address (SA).

8. A method according to claim 4 wherein said address comparison step begins during the message transmission and is terminated before the end of the message, and wherein the receiving station, having established an address identity edits the transmitted message to guarantee its ineffectiveness should a received address be the same as the receiving station'"'"'s address.

9. A method according to claim 8 further comprising the steps of generating an error in the transmitted message in order to trigger a repetition of the transmitted message.

10. A method according to claim 8 further comprising the step of modifying a portion of the information signals included in said message, whereby recognition of the modified message signals renders the message ineffective in the message receiver.