Method and apparatus for source filtering data packets between networks of differing media

• US 5,842,224 A
• Filed: 06/30/1994
• Issued: 11/24/1998
• Est. Priority Date: 06/16/1989
• Status: Expired due to Term

• Current Assignee: Fenner Investments Limited
• Original Assignee: Peter R. Fenner
• Inventors: Fenner, Peter R.
• Primary Examiner(s): Chan, Eddie P.
• Assistant Examiner(s): NGUYEN, THAN VINH
• Application Number:
  US08/269,951
• Time in Patent Office: 1,608 Days
• Field of Search: 395/427, 395/412, 395/491, 395/416, 395/417, 370/14, 370/85.9, 370/392, 370/396, 370/397, 370/402, 371/3, 711/201, 711/202
• US Class Current: 711/202
• CPC Class Codes: H03M 7/4006 Conversion to or from arithmetic code
• CPC Class Codes: H04L 12/4625 Single bridge functionality, e.g. connection of two networks over a single bridge
• CPC Class Codes: H04L 45/00 Routing or path finding of packets in data switching networks routing or path finding in wireless networks H04W40/00
• CPC Class Codes: H04L 45/742 Route cache; Operation thereof
• CPC Class Codes: H04L 45/745 Address table lookup; Address filtering
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

To provide for fast access times with very large key fields, an associative memory utilizes a location addressable memory and look up tables to generate from a key an address in memory storing an associated record. The look up tables, stored in a memory, are constructed with the aid of arithmetic data compression methods to create a near perfect hashing of the keys. For encoding into the look up table, keys are divided into a string of symbols. Each symbol is assigned an index value, such that a modulo sum of index values for symbols of a particular key is a unique value that is used as an address to the memory storing the record associated with that key.

Claims

1. In a communication system having a plurality of data networks interconnected for communicating packets of data, each packet containing a source address of a sender, a data packet and a destination address of a receiver for the data packet, a method comprising:

at a media access controller for interconnecting one data network of a plurality of data networks to at least a second data network of the plurality of data networks, receiving a data packet from the second data network;

examining the data packet for a source address contained in the data packet;

looking up, in a directory table stored at the controller, the source address for obtaining source filtering information relating to the source, the step of looking up comprising the steps of,

arithmetically coding, according to a predetermined model, the source address as a numerical value uniquely identifying a record of data containing source filtering information for the source address, and

accessing the record of data identified by the numerical value for retrieving the source filtering information associated with the source address; and

determining whether or not any nodes of the first data network which are connected to the controller are protected from receiving the data packet from the source.

2. The method of claim 1 wherein:

the source address includes a plurality of symbols, each symbol occupying a symbol position; and

the step of looking up the source address in the directory table includes the steps of;

looking up a preassigned index value for each symbol based on the symbol'"'"'s value and position,

combining the index values according to a predetermined arithmetic operation to generate a numerical value associated with the source address, and

accessing the record of data identified by the numerical value for retrieving the source filtering information associated with the source address.

3. In a communication system comprised of a plurality of data networks interconnected for communicating packets of data, a routing method comprising:

receiving a data packet at a node connecting at least a first one of the plurality of data networks to a second one of the plurality of data networks, the data packet including a physical address for identifying a device to which the data packet is to be routed and a first logical address for identifying a sender of the data packet independent of the sender'"'"'s physical address;

examining the data packet for the first logical addresses;

looking up, in a directory table stored at the node, source filtering information associated with the first logical address; and

filtering the data packet in response to the source filtering information.

4. The method of claim 3 wherein:

the first logical address includes a plurality of symbols, each symbol occupying a symbol position; and

the step of looking up the first logical address in the directory table includes the steps of;

looking up a preassigned index value for each symbol based on the symbol'"'"'s value and position,

combining the index values according to a predetermined arithmetic operation to generate a numerical value associated with the source address, and

accessing the record of data identified by the numerical value for retrieving the source filtering information associated with the second logical address.

5. The method of claim 3 the data further includes a second logical address for identifying a recipient of the data pocket independent of the recipient'"'"'s physical address, and wherein the node routes the data packed in response to looking up routing information associated with the second logical address in a routing table.

6. The method of claim 5 wherein looking up the routing information in the routing table includes:

arithmetically coding the second logical address to a numerical value uniquely identifying a record of data containing the routing information; and

accessing the record of data identified by the numerical value for retrieving the routing information.

7. The method of claim 6 wherein:

the second logical address includes a plurality of symbols, each symbol occupying a symbol position; and

looking up the routing information stored in the routing table includes the steps of;

looking up a preassigned index value for each symbol based on the symbol'"'"'s value and position;

combining the index values according to a predetermined arithmetic operation to generate a numerical value associated with the source address, and

accessing the record of data identified by the numerical value for retrieving the routing information associated with the first logical address.

8. In a communication system having a plurality of data networks interconnected for communicating packets of data, a controller for interconnecting a first data network of the plurality of data networks to at least a second data network of the plurality of data networks comprising:

means for receiving a data packet, the data packet including a physical media address for identifying a physical device for routing the data packet in physical media and a source address for logically identifying a sender of the data packet independent of the sender'"'"'s physical media address;

means for looking up in a directory table stored at the controller using the source address source filtering information associated with the source address; and

means for filtering the data packet in response to the source filtering information.

9. The controller of claim 8 wherein the means for looking up includes an encoder for arithmetically coding the source address to a unique numerical value for indicating a location in the directory table of the source filtering information associated with the source address.

10. The controller of claim 9 wherein:

the source address includes a plurality of symbols, each symbol having a value and occupying a predetermined symbol position; and

the encoder includes,

a memory for storing index values assigned to each symbol value and position found in each source address for which there is source filtering information stored in the directory table, and

an adder for summing the index values preassigned for each symbol in the source address to generate the unique numerical value for looking up the source information in the directory table.

11. The controller of claim 9 wherein the source address includes a unique, fixed and unchanging code for uniquely identifying the source to each network in the plurality of networks.

12. The controller of claim 8 wherein the data packet includes a destination address for logically identifying a recipient of the data packet independent of the recipient'"'"'s physical media address, and wherein the controller further includes means for looking up, using the destination address, in a routing table information associated with the destination address for routing the data packet for delivery to the receiver.

13. The controller of claim 12 wherein the means for looking up in the routing table the information for routing includes an encoder for arithmetically coding the destination address to a unique numerical value for looking up the information for routing.