Apparatus for filtering multicast messages transmitted between subnetworks based upon the message content

• US 5,933,605 A
• Filed: 11/08/1996
• Issued: 08/03/1999
• Est. Priority Date: 11/10/1995
• Status: Expired due to Fees

• Current Assignee: Hitachi, Ltd.
• Original Assignee: Hitachi, Ltd.
• Inventors: Iizuka, Tamio, Kawano, Shigeki, Kawano, Katsumi, Wataya, Hiroshi
• Primary Examiner(s): Maung, Zarni
• Assistant Examiner(s): CALDWELL, ANDREW T
• Application Number:
  US08/745,665
• Time in Patent Office: 998 Days
• Field of Search: 395/200.68, 395/200.79, 370/911, 370/401
• US Class Current: 709/238
• CPC Class Codes: H04L 63/0236 Filtering by address, protocol, port number or service, e.g. IP-address or URL
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A network system includes at least one computer which includes a processor for processing data and attaching an associated contents code corresponding to the processed data and data group information indicative of a data group corresponding to the attributes of the processed data to ask a data transmission request and a transmission controller connected to the processor for controllably transmitting a frame including the transmission sub-network, the contents code and the processed data to the first sub-network according to the data group information of the processed data. A second computer connected judges whether or not the contents code of the frame received from the first sub-network conforms to one of a plurality of data reception enable/disable judgement conditions. A third computer judges whether or not the contents code of the frame received conforms to one of a plurality of data reception enable/disable judgement conditions, and storing the received frame having the contents code conforming to one of the plurality of data reception enable/disable judgement conditions. The second computer includes a filter in which the contents codes differently set for respective sub-networks are stored and which changes the contents code contained in the received frame to the contents code set for the receiving sub-network.

Claims

1. A method for transmitting and receiving data in a system which includes a plurality of data groups and a plurality of computers each having a processor for performing its processing operation based on a user program and a transmission controller for transmitting data onto a plurality of transmission lines in response to a transmission request received from the user program and also receiving data from the transmission lines, wherein said computers are connected by two transmission lines, data having at least one or more different attributes is transmitted with a transmission range limited for each of said attributes, said method comprising the steps of:

when it is desired to transmit data having a plurality of attributes from a first computer to a first transmission line, providing in transmission data on the transmission line an area for specifying information about determining the transmission range of data corresponding to the attributes of the transmission data and an area for specifying condition information about judging reception or non-reception for a data receiver computer;

by the user program of the first computer, specifying said reception/non-reception condition information, information indicative of a data group set by the attributes of the data, and contents of the data in said first computer;

in said first computer, on the basis of preset correlation information between acquiring the data attributes and the transmission range information, acquiring the transmission range information of the data, attaching to the transmission data both of the data transmission range information and the condition information about judging the data reception or non-reception by said user program, and transmitting the data onto said first transmission line;

in a second computer connected between said first and second transmission lines in the system, making correspondence between the judging condition information of the data reception or non-reception at the receiver computer, information on the data group corresponding to the other attributes of the data, and judging condition information of the data reception or non-reception at the receiver computer in the data group;

in said second computer, when the transmission data flows through said first or second transmission line, acquiring information about judging reception or non-reception at receiver computers for the respective data groups on the basis of the transmission range information attached to said transmission data and filter information, attaching thereto both of the data transmission range information and the condition information of reception or non-reception at the receiver computer for each of the data groups, and relaying transmitting the transmission data in the transmission range specified in the transmission data among said first and second transmission lines;

in a third computer, performing information filtering operation by receiving the transmission data only when the transmission data is within the transmission range and only when the reception/non-reception judging condition at the receiver computer specified by the transmission data conforms to the condition indicated by the information, without paying any attention to the fact that the transmission data has a plurality of attributes;

in said second computer in the transmission lines for the respective data groups, making correspondence between condition information about judging reception or non-reception at a specified receiver computer, information about the data group corresponding to the other attributes of the transmission data, and condition information about judging reception or non-reception at the receiver computer in the data group;

in said second computer, a step of receiving the information flowing through the data group, acquiring the reception/non-reception judging condition information at the receiver computer for each data group on the basis of the transmission range information and said filter information attached to the transmission data, attaching thereto both of the data transmission range information for each data group and the reception/non-reception judging condition information at the receiver computer, and transmitting the transmission data in the transmission range specified in the transmission data; and

in said second computer connected between the first and second transmission lines in the system, when the transmission data flows through said first or second transmission line, relaying transmitting the transmission data in the transmission range specified in the transmission data on the basis of the transmission range information attached to the transmission data.

2. A method as set forth in claim 1, further comprising a step of, in said second computer, attaching information for causing suppression of transmission of the same data to the other data groups to transmission data to be transmitted for each data group to provide directivity to a flow of the transmission data between the data groups.

3. A method as set forth in claim 1, further comprising a step of, in said third computer, previously setting information for enabling reception of the transmission data having a plurality of attributes from the other data group not present in the transmission range, and receiving the transmission data only when the transmission data conforms to the receivable information or is in the transmission range as the data group to which the transmission data belongs and only when the condition indicated by the information conforms to the reception/non-reception judging condition at the receiver computer specified in the transmission data.

4. A method as set forth in claim 1, further comprising a step of, when a plurality of gateway computers connected between said first and second transmission lines and having said filter information are present, previously providing in said third computer other than said first and second computers a table in which gateway serial numbers for the gateway computers, gateway numbers thereof and gateway total numbers thereof are stored and, at the time of receiving data, previously registering the gateway serial number and gateway total number of the gateway computer in attribute table entries and, at the time of receiving the same data as overlapped, adding the gateway number by 1, and when the gateway number becomes equal to the gateway total number, completing reception of the overlap data.