System and method for routing and processing data packets

• US 6,717,943 B1
• Filed: 06/03/1999
• Issued: 04/06/2004
• Est. Priority Date: 06/03/1999
• Status: Expired due to Fees

• Current Assignee: David Schwering
• Original Assignee: David Schwering
• Inventors: Schwering, David
• Primary Examiner(s): VANDERPUYE, KENNETH N
• Application Number:
  US09/325,206
• Time in Patent Office: 1,769 Days
• Field of Search: 717/149, 712/203, 709/224, 370/401, 370/389
• US Class Current: 370/389
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 69/22 Parsing or analysis of headers
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

The present invention is a system for processing data packets between an internal environment to the system and external environment to the system comprising a plurality of processors within the internal system, each processor processing data packets based upon a criteria of the packet, first cable means for connecting the plurality of processors and for transmitting data packets between said plurality of processors, second cable means for transmitting the data packets between the plurality of processors and to the external environment, and third cable means for transmitting data between the plurality of processors and the internal environment.

Claims

1. A method for transmitting secured data packets over a network comprising the following steps:

(a) receiving a data packet having a source address from a point external to the network;

(b) determining whether the data packet is a zero packet, and if so;

(i) determining the binary sequence of a predesignated bit set in the source address of the packet;

(ii) forwarding the packet to a processor whose number corresponds with the sequence of the bit set;

(iii) using a security table to generate an IT entry in an IT table for directing the processing of data packets;

(iv) transmitting the IT entry to a plurality of processors for inclusion in said IT table;

(v) processing the packet in accordance with the entry in the IT table that corresponds to the source address, destination address and point number of the packet;

(c) determining whether the packet is the last packet of the message, and if so;

(i) deleting the IT entry for the message from the IT table; and

(ii) forwarding the packet for further processing.

2. The method of claim 1, comprising the following additional steps to be utilized when the packet is not a zero packet:

determining the last several bits of the packet number;

forwarding the packet for processing to the processor whose number corresponds with the bit set of the packet number;

completing steps (b)(iv) and (b)(v).

3. The method of claim 1, further comprising the step of checking the source or destination address of a packet and determining whether the source or destination is permissible.

4. The method of claim 1, further comprising the step of examining the contents of a packet and determining whether the packet may be transmitted.

5. The method of claim 1, further comprising the step of determining the processor which should process the data based upon a plurality of criteria.

6. The method of claim 1, comprising the additional step of converting in-coming data from an IPv6 format to an IPv4 format.

7. The method of claim 1, comprising the additional step of jamming impermissible transmissions.

8. The method of claim 7, wherein said jamming is accomplished utilizing a network interface card.

9. A method for transmitting secured data packets over a network comprising the following steps:

(a) receiving a data packet from a point external to the network;

(b) determining whether the data packet is a zero packet, and if so;

(i) determining the binary sequence of the third and fourth bits of the source address of the packet;

(ii) forwarding the packet to a processor whose number corresponds with the sequence of the third and fourth bits;

(iii) using a security table to generate an IT entry in an IT table for directing the processing of data packets;

(iv) transmitting the IT entry to a plurality of processors for inclusion in said IT table;

(v) processing the packet in accordance with the entry in the IT table that corresponds to the source address, destination address and point number of the packet.

(c) determining whether the packet is the last packet of the message, and if so;

(i) deleting the IT entry for the message from the IT table; and

(ii) forwarding the packet for further processing.

10. A system for processing data packets between a first external environment to the system and a second external environment to the system comprising:

a plurality of processors external to an internal environment, each processor processing data packets based upon an initial criteria of the packet;

first logical cable means for connecting the plurality of processors and for transmitting data packets between said plurality of processors based upon said initial criteria;

second logical cable means for transmitting the data packets between the plurality of processors and the first and second external environments; and

third logical cable means for transmitting data between the plurality of processors and the first and second external environments,

wherein a second set of plurality of processors communicates over a logical status and load information cable.

11. The system of claim 10 wherein the second plurality of processors further communicates over a logical hops information cable (wherein hops information is a measure of logical nearness).

12. The system of claim 10 wherein the second plurality of processors accepts and the original plurality of processors grants a logical connection to a requesting IP address.

13. The system of claim 12 wherein the second plurality of processors acquires the logical connection to the requesting IP address based upon criteria such as load, out of service indications, or information related to logical nearness.

14. The system of claim 12 wherein the second plurality of processors acquires the logical connection to the requesting IP address based upon criteria such as load, out of service indications, or logical nearness.