Wide area network system providing secure transmission

• US 5,978,373 A
• Filed: 07/11/1997
• Issued: 11/02/1999
• Est. Priority Date: 07/11/1997
• Status: Expired due to Fees

• Current Assignee: AG Communication Systems Corp. (Nokia Corporation)
• Original Assignee: AG Communication Systems Corp. (Nokia Corporation)
• Inventors: Perry, Thomas J., Plyler, Kevin B., Spenik, John W., Southway, James B., Baer, Scott J., Mualim, Satrio P., Brown, Randall L., Hoff, James, Sciabica, Frank
• Primary Examiner(s): Kizou, Hassan
• Assistant Examiner(s): HO, DUC CHI
• Application Number:
  US08/893,473
• Time in Patent Office: 844 Days
• Field of Search: 370/351, 370/352, 370/401, 370/354, 370/355, 370/360, 370/422, 370/432, 370/434, 370/389, 395/186, 395/187.01, 713/201
• US Class Current: 370/392
• CPC Class Codes: H04L 63/0236 Filtering by address, protocol, port number or service, e.g. IP-address or URL
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

A system that provides secure transmission of data between a subscriber'"'"'s PC and an online service provider (OLS) over an Ethernet WAN. The system includes a remote transceiver unit located at a subscriber site and connected to the subscriber'"'"'s PC; a central transceiver unit located at a telephone central office and connected to the remote transceiver unit over a twisted pair network and also connected to a WAN; an authorization server that is connected to the WAN; and one or more OLSs, which may include Internet service providers, connected to the WAN. Security of transmission is provided through a method in which only subscriber transmissions directed to a session-specific OLS are allowed to pass through the central transceiver unit onto the WAN, and only unicast transmissions from authorized OLSs are allowed to pass through the central transceiver unit to the subscriber port of the remote transceiver unit. Broadcast transmissions are minimized in favor of unicast messages. The authorization server delivers the IP and MAC addresses of the session-specific OLSs and the subscriber'"'"'s PC to the remote transceiver units.

Claims

1. A secure transmission system for use in a wide area network (WAN) handling message traffic in accordance with a set of messaging protocols that use a network addressing scheme comprising source and destination addresses, the set of messaging protocols supporting broadcast and unicast addressing, and one or more service providers coupled to the WAN, each of said service providers having a network address, said secure transmission system comprising:

a transceiver coupled to said WAN;

one or more computing devices connected to said transceiver, each of said computing devices operated to transmit and receive message traffic in accordance with said messaging protocols, each of said computing devices having a network address;

means for associating each of said computing device network addresses with one of said service provider network addresses, said associating means having stored associations between said computing device network addresses and said service provider network addresses; and

said transceiver being operated in response to a received unicast message to determine whether or not said association means has a stored association having the source network address and the destination network address of said unicast message, and to transmit said unicast message if said association means has a stored association having said source network address and said destination network address.

2. A secure transmission system according to claim 1, further comprising:

an authorization server coupled to said WAN;

said transceiver being responsive to a broadcast address resolution message received from one of said computing devices, to transmit said address resolution message to said authorization server as a unicast message;

said authorization server being responsive to said address resolution message to transmit a service provider selection screen to said computing device; and

said authorization server being responsive to a completed service provider selection screen received from said computing device to enter an association between said computing device network address and said selected service provider network address into said association means.

3. A secure transmission system according to claim 1, wherein said transceiver further comprises:

a central transceiver unit coupled to said WAN; and

a remote transceiver unit coupled to said central transceiver unit and having said computing devices connected thereto.

4. A secure transmission system according to claim 3, wherein said central transceiver unit further comprises:

a first communications interface operated to receive messages from and transmit messages onto said WAN;

a second communications interface operated to receive messages from and transmit messages to said remote transceiver; and

a control processor coupled between said first and second communications interfaces.

5. A secure transmission system according to claim 4, wherein said first communications interface further comprises:

an Ethernet interface coupled to said control processor; and

a filter and pulse transformer coupled between said Ethernet interface and said WAN.

6. A secure transmission system according to claim 5, wherein said Ethernet interface further comprises a 10BASE-T Ethernet interface.

7. A secure transmission system according to claim 4, wherein said second communications interface further comprises:

an ADSL interface coupled to said control processor; and

a line interface unit coupled between said ADSL interface and said remote receiver.

8. A secure transmission system according to claim 4, wherein said control processor further comprises:

an Ethernet controller coupled to said first communications interface; and

a HDLC controller coupled to said second communications interface.

9. A secure transmission system according to claim 3, wherein said remote transceiver unit further comprises:

a first communications interface operated to receive messages from and transmit messages to said computing devices;

a second communications interface operated to receive messages from and transmit messages to said central transceiver; and

a control processor coupled between said first and second communications interfaces.

10. A secure transmission system according to claim 9, wherein said first communications interface further comprises:

an Ethernet interface coupled to said control processor; and

a plurality of filter and pulse transformers coupled to said Ethernet interface, each of said filter and pulse transformers further coupled to one of said computing devices.

11. A secure transmission system according to claim 10, wherein said Ethernet interface further comprises an Ethernet hub having a plurality of ports, each of said ports coupled to one of said filter and pulse transformers.

12. A secure transmission system according to claim 11, wherein said Ethernet interface further comprises a 10BASE-T Ethernet hub.

13. A secure transmission system according to claim 9, wherein said second communications interface further comprises:

an ADSL interface coupled to said control processor; and

a line interface unit coupled between said ADSL interface and said central transceiver.

14. A secure transmission system according to claim 9, wherein said control processor further comprises:

an Ethernet controller coupled to said first communications interface; and

a HDLC controller coupled to said second communications interface.