Controlling network access by modifying packet headers at a local hub

• US 6,671,739 B1
• Filed: 07/10/2000
• Issued: 12/30/2003
• Est. Priority Date: 07/10/2000
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Reed, Benjamin C.
• Primary Examiner(s): Lin, Wen-Tai
• Application Number:
  US09/613,566
• Time in Patent Office: 1,268 Days
• Field of Search: 709/232, 709/236, 709/238, 709/244, 709/246, 709/249, 709/250, 370/245, 370/256, 370/400, 370/401, 370/474, 370/380, 370/395.53
• US Class Current: 709/246
• CPC Class Codes: H04L 61/25 of the same type
• CPC Class Codes: H04L 61/5084 Providing for device mobility network addressing or numbering for mobility support in wireless networks H04W8/26; mobile IP H04W80/04
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04L 69/22 Parsing or analysis of headers
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A method and structure for processing packets of information over a data processing system is disclosed. The packets have header information indicating a source and a destination of the packets. The method includes receiving a packet from a client, forwarding the packet to a hub of a local area network, changing the header of the packet such that the packet is directed to a server instead of an original destination, processing the packet through the server to produce a processed packet, and forwarding the processed packet to the original destination.

Claims

1. A data processing network comprising:

at least one server; and

at least one hub connected to said server for allowing at least one client connected to said server, wherein;

said client transmits packets to said hub;

said packets have header information indicating a source and a destination of said packets;

said hub changes said header of said packet such that said packet is directed to said server instead of an original destination; and

said server processes said packet and forwards said packet to said original destination.

2. The data processing network in claim 1, wherein said hub only allows packets from said server to be delivered to said client.

3. The data processing network in claim 1, wherein said server screens said packet for proper access rights.

4. The data processing network in claim 1, wherein said server changes said packets to correct errors within said packets.

5. The data processing network in claim 1, wherein said server processes said packet to prevent damage or unauthorized access to said original destination.

6. The data processing network in claim 1, wherein said server further modifies said header to eliminate conflicting addresses of clients connected to said hub.

7. The data processing network in claim 1, wherein all hubs connected to said server modify headers of packets being processed such that all packets being transmitted by said clients connected to said hubs are processed through said server.

8. A hub for a data processing network having at least one server, said hub comprising:

a first connected to said server;

a second connection to at least one client; and

an addressing unit operatively connected to said first connection and said second connection and in communication with said server, wherein;

said client transmits packets to said second connection;

said packets have header information indicating a source and a destination of said packets;

said addressing unit changes said header of said packet such that said packet is directed to said server instead of an original destination; and

said server processes said packet and forwards said packet to said original destination based on information from said addressing unit.

9. The hub in claim 8, wherein said addressing unit only allows packets from said server to be delivered to said client.

10. The hub in claim 8, wherein said addressing unit supplies said server information to screen said packet for proper access rights.

11. The hub in claim 8, wherein said addressing unit supplies said server information to change said packets to correct errors within said packets.

12. The hub in claim 8, wherein said addressing unit supplies said server information to process said packet to prevent damage or unauthorized access to said original destination.

13. The hub in claim 8, wherein said addressing unit supplies said server information to modify said header to eliminate conflicting addresses of clients connected to said hub.

14. A method of processing packets of information over a data processing system, said packets having header information indicating a source and a destination of said packets, said method comprising:

receiving a packet from a client;

forwarding a packet from a client to a hub of a local area network;

changing said header of said packet such that said packet is directed to a server instead of an original destination;

processing said packet through said server to produce a processed packet; and

forwarding said processed packet to said original destination.

15. The method in claim 14, wherein said hub only allows packets from said server to be delivered to said client.

16. The method in claim 14, wherein said processing screens said packet for proper access rights.

17. The method in claim 14, wherein said processing changes said packets to correct errors within said packets.

18. The method in claim 14, wherein said server processes said packet to prevent damage or unauthorized access to said original destination.

19. The method in claim 14, wherein said server further modifies said header to eliminate conflicting addresses of clients connected to said hub.

20. The method in claim 14, wherein all hubs connected to said local area network modify headers of packets being processed such that all packets being transmitted by said clients connected to said hubs are processed through said server.

21. A program storage device readable by machine, tangibly embodying a program of instructions executable by the machine to perform a method of processing packets of information over a data processing system, said packets having header information indicating a source and a destination of said packets, said method comprising:

receiving a packet from a client;

forwarding a packet from a client to a hub of a local area network;

changing said header of said packet such that said packet is directed to a server instead of an original destination;

processing said packet through said server to produce a processed packet;

forwarding said processed packet to said original destination.

22. The program storage device in claim 21, wherein said hub only allows packets from said server to be delivered to said client.

23. The program storage device in claim 21, wherein said processing screens said packet for proper access rights.

24. The program storage device in claim 21, wherein said processing changes said packets to correct errors within said packets.

25. The program storage device in claim 21, wherein said server processes said packet to prevent damage or unauthorized access to said original destination.

26. The program storage device in claim 21, wherein said server further modifies said header to eliminate conflicting addresses of clients connected to said hub.

27. The program storage device in claim 21, wherein all hubs connected to said local area network modify headers of packets being processed such that all packets being transmitted by said clients connected to said hubs are processed through said server.