Method and apparatus to enable efficient processing and transmission of network communications

• US 7,188,173 B2
• Filed: 09/30/2002
• Issued: 03/06/2007
• Est. Priority Date: 09/30/2002
• Status: Expired due to Fees

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Anderson, Andrew V., Robinson, Scott H.
• Primary Examiner(s): Dharia; Rupal
• Assistant Examiner(s): BAYARD, DJENANE M
• Application Number:
  US10/262,351
• Publication Number:
  US 20040064537A1
• Time in Patent Office: 1,618 Days
• Field of Search: 709/223, 709/247, 709/225, 709/229, 726/12
• US Class Current: 709/225
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32

Abstract

A method and apparatus to enable efficient processing and transmission of network communications are described. A network transmission directed to one or more destination nodes within a network is received. One or more network transmission items are identified in the network transmission. One or more item signatures associated with the one or more network transmission items are generated. Finally, a determination is made whether the one or more network transmission items can be transmitted to the one or more destination nodes by further processing the one or more item signatures.

Claims

1. A method comprising:

receiving, on an outbound path of an internal network, a network transmission directed to a destination node of an external network;

identifying a network transmission item in the network transmission;

generating an item signature associated with the network transmission item;

determining whether the network transmission item originates from the internal network or an external network based at least in part on the item signature;

transmitting the network transmission item to the destination node if the item originates from an external network; and

further processing the network transmission item if the item originates from the internal network.

2. The method according to claim 1, wherein determining further comprises:

comparing the item signature to signatures stored in a signature database;

determining that the network transmission item originates from an external network if the item signature matches a signature stored in the signature database; and

determining that the network transmission item originates from the internal network if the item signature does not match a signature stored in the signature database.

3. The method of claim 2, wherein storing a signature in the signature database comprises:

receiving a network transmission on an inbound path of the internal network;

identifying a network transmission item in the network transmission;

generating an item signature associated with the network transmission item; and

storing the item signature in the signature database if no signature for the item exists in the signature database.

4. The method according to claim 1, further comprising:

logging the network transmission item in a log database.

5. The method according to claim 1, wherein the item signature further comprises a cryptographic hash algorithm.

6. The method according to claim 1, wherein further processing the network transmission item comprises:

performing a security inspection on the item; and

determining, based on a security policy, whether to allow transmission of the item to the destination node of the external network.

7. A system comprising:

a memory; and

a processor coupled to the memory to receive, on an outbound path of an internal network, a network transmission directed to a destination node of an external network, to identify a network transmission item in the network transmission, to generate an item signature associated with the network transmission item, to determine whether the network transmission item originates from the internal network or an external network based at least in part on the item signature, to transmit the network transmission item to the destination node if the item originates from an external network, and to further process the network transmission item if the item originates from the internal network.

8. The system according to claim 7, wherein the processor compares the item signature to signatures stored in a signature database within the memory, determines that the network transmission item originates from an external network if the item signature matches a signature in the signature database, and determines that the network transmission item originates from the internal network if the item signature does not match a signature in the signature database.

9. The system according to claim 8, wherein the processor further compares item metadata information associated with the network transmission item to metadata stored in the signature database and corresponding to signatures in the database, and further transmits the network transmission item to the destination node if the metadata does not prohibit transmission of the network transmission item.

10. The system according to claim 8, wherein the processor further compares item metadata information associated with the network transmission item to metadata stored in the signature database and corresponding to signatures in the database, and blocks transmission of the network transmission item to the destination node if the metadata prohibits the transmission.

11. An article of manufacture comprising a machine-accessible medium having content to provide instructions to result in an electronic device performing operations including:

receiving, on an outbound path of an internal network, a network transmission directed to a destination node of an external network;

identifying a network transmission item in the network transmission;

generating an item signature associated with the network transmission item;

determining whether the network transmission item originates from the internal network or an external network based at least in part on the item signature;

transmitting the network transmission item to the destination node if the item originates from an external network; and

further processing the network transmission item if the item originates from the internal network.

12. The article of manufacture of claim 11, the medium having content to provide instructions to result in the electronic device performing further operations including:

comparing the item signature to signatures stored in a signature database;

determining that the network transmission item originates from an external network if the item signature matches a signature stored in the signature database; and

determining that the network transmission item originates from the internal network if the item signature does not match a signature stored in the signature database.

13. The article of manufacture of claim 11, the medium having content to provide instructions to result in the electronic device performing further operations including:

receiving a network transmission on an inbound path of the internal network;

identifying a network transmission item in the network transmission;

generating an item signature associated with the network transmission item; and

storing the item signature in the signature database if no signature for the item exists in the signature database.

14. The article of manufacture of claim 11, the medium having content to provide instructions to result in the electronic device performing further operations including logging the network transmission item in a log database.

15. The article of manufacture of claim 11, wherein the item signature further comprises a cryptographic hash algorithm.

16. The article of manufacture of claim 11, the medium having content to provide instructions to result in the electronic device performing further operations associated with further processing the network transmission item, including:

performing a security inspection on the item; and

determining, based on a security policy, whether to allow transmission of the item to the destination node of the external network.