Method and system for providing a symmetric key for more efficient session identification

• US 7,283,526 B2
• Filed: 07/19/2001
• Issued: 10/16/2007
• Est. Priority Date: 07/19/2001
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Davis, Gordon Taylor
• Primary Examiner(s): Chan; Wing
• Assistant Examiner(s): Lee; Andrew C.
• Application Number:
  US09/908,836
• Publication Number:
  US 20030016653A1
• Time in Patent Office: 2,280 Days
• Field of Search: 370/389, 370/392, 370/400, 370/401, 370/469, 370/252
• US Class Current: 370/392
• CPC Class Codes: H04L 45/742 Route cache; Operation thereof
• CPC Class Codes: H04L 45/745 Address table lookup; Address filtering
• CPC Class Codes: H04L 61/4552 Lookup mechanisms between a plurality of directories; Synchronisation of directories, e.g. metadirectories
• CPC Class Codes: H04L 69/327 in the session layer [OSI layer 5]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A method and system for identifying sessions in a computer network is disclosed. The session is between a first computer system and a second computer system. The session consists of an exchange of a plurality of packets between the computer systems. Each of the packets includes source information and destination information relating to the first computer system and the second computer system. The method and system include providing a symmetric key and identifying the session using the symmetric key. The symmetric key is provided utilizing a manipulation of the source information and the destination information. The symmetric key is associated with the plurality of packets traveling between the first computer system and the second computer system.

Claims

1. A system for identifying sessions in a computer network, the session being between a first computer system and a second computer system exchanging a plurality of packets, each of the plurality of packets including source information and destination information relating to the first computer system and the second computer system, the system comprising:

a memory for storing a session table including a plurality of entries; and

a processor for providing a symmetric key, an entry of the plurality of entries of the session table for the session being accessed for the packet using the symmetric key, the symmetric key being a manipulation of the source information and the destination information, the symmetric key being associated with the plurality of packets traveling between the first computer and the second computer system, the processor further provides the symmetric key using a sum of the portion of the source information and the portion of the destination information and an absolute value of the difference between the portion of the source information and the portion of the destination information;

wherein the manipulation includes providing a difference between a portion of the source information and a portion of the destination information.

2. The system of claim 1 wherein the processor provides the symmetric key utilizing an arithmetic manipulation of the source information and the destination information, the symmetric key being associated with the plurality of packets traveling between the first computer and the second computer system.

3. The system of claim 1 wherein the portion of the source information includes a source address and a source port and wherein the portion of the destination information include a destination address and a destination port.

4. The system of claim 3 wherein the processor provides the symmetric key by concatenating the sum and the absolute value of the difference.

5. The system of claim 4 wherein each of the plurality of packets further includes information relation to the session and wherein the processor further provides the symmetric key by concatenating the information.

6. The system of claim 5 wherein the information further includes a protocol type.