Method and apparatus for updating address lists for a packet filter processor

• US 6,158,008 A
• Filed: 10/23/1997
• Issued: 12/05/2000
• Est. Priority Date: 10/23/1997
• Status: Expired due to Term

• Current Assignee: AT&T Mobility II LLC (AT&T, Inc.)
• Original Assignee: AT&T Wireless Services Incorporated (AT&T, Inc.)
• Inventors: Maria, Arturo, Owens, Leslie Dale
• Primary Examiner(s): Beausoliel, Jr., Robert W.
• Assistant Examiner(s): Baderman, Scott T.
• Application Number:
  US08/956,990
• Time in Patent Office: 1,139 Days
• Field of Search: 713/200, 713/201, 713/202, 713/100, 713/153, 713/154, 709/225, 709/229, 709/242, 707/9, 380/23, 380/25
• US Class Current: 726/13
• CPC Class Codes: H04L 63/0236 Filtering by address, protocol, port number or service, e.g. IP-address or URL
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A dedicated data packet filtering processor whose only function is to filter data packets based on a list of source IP addresses stored in high-speed memory of the processor. The processor has a specialized operating system which controls the operation of the processor. The processor examines the source IP address of each received data packet to determine if the source IP address matches one of the stored source IP addresses, and if there is a match, either discards or forwards the data packet depending on the processor configuration. The list of source IP addresses are updated by a service provider having a central administrative site. The service provider keeps these lists up to data and periodically updates the source IP addresses stored in the random access memory of the dedicated IP filtering processors.

Claims

1. An apparatus for updating packet filtering devices, comprising:

a database for storing a plurality of data packet origination address lists, with each list comprising a plurality of data packet origination addresses;

means for selecting at least one list from said plurality of data packet origination address lists for sending to at least one packet filtering device; and

an output means for sending said selected list to said at least one packet filtering device via a communication network at predetermined intervals.

2. The apparatus of claim 1, further comprising a means for updating said lists by performing at least one function from a group of functions comprising adding an origination address to a list, deleting an origination address from a list, and modifying an origination address from a list.

3. The apparatus of claim 2, wherein said output means sends one of said selected lists when one of said selected lists have been updated.

4. The apparatus of claim 1, wherein said output means sends said selected lists in response to requests from said particular packet filtering devices.

5. The apparatus of claim 1, wherein said network is a fixed wireless network.

6. A method for updating a packet filter processor, comprising the steps of:

storing a plurality of data packet origination address lists, with each list comprising a plurality of data packet origination addresses;

selecting at least one list from said plurality of data packet origination address lists for transfer to at least one end user device; and

sending said selected list to said at least one end user device at predetermined intervals.

7. The method of claim 6, further comprising the step of updating said lists by performing at least one step from a group of steps comprising adding an origination address to a list, deleting an origination address from a list, and modifying an origination address from a list.

8. The method of claim 7, wherein said selected lists are sent when one of said selected lists have been updated.

9. The method of claim 6, wherein said selected lists are sent in response to a request from said packet filter device.