Systems and methods for a self-defending wireless computer network

• US 9,276,906 B2
• Filed: 04/25/2014
• Issued: 03/01/2016
• Est. Priority Date: 10/12/2004
• Status: Active Grant

• Current Assignee: Alex I. Alten
• Original Assignee: Alex I. Alten
• Inventors: Alten, Alex I.
• Primary Examiner(s): Rahman, Mohammad L
• Application Number:
  US14/262,648
• Publication Number:
  US 20140237583A1
• Time in Patent Office: 676 Days
• US Class Current: 1/1
• CPC Class Codes: H04L 61/103 across network layers, e.g. resolution of network layer into physical layer addresses or address resolution protocol [ARP]
• CPC Class Codes: H04L 61/5014 using dynamic host configuration protocol [DHCP] or bootstrap protocol [BOOTP]
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 63/145 the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms

Abstract

In one embodiment, the methods and apparatuses to assign a routing address to a wireless computer that is in a different logical network from the routing addresses of other wireless computers within the same physical wireless network; and to prevent a wireless computer from learning the routing address of another wireless computer within the same physical wireless network.

Claims

1. A method for providing network communication between a plurality of network devices in a network via wireless communication protocols, the network coupling the plurality of network devices to at least one access gateway for transmitting information, comprising;

transmitting a request message from a first wireless computer to a second wireless computer and an access gateway (“

AG”

) inquiring an Internet Protocol (“

IP”

) address of the second wireless computer within a wireless network;

issuing a fast response message containing an AG IP address from the AG for handling subsequent network communication relating to the first wireless computer;

wherein transmitting the response message includes assigning a unique network identification to the first wireless computer and screening communication from the first wireless computer by the AG for preventing computer virus initiated from the first wireless computer from spreading; and

facilitating the fast response message to reach the first wireless computer before a response message sent from the second wireless computer.

2. The method of claim 1, further comprising receiving the request message by the AG situated in the wireless network and activating a high-performance response module for responding to the request message.

3. The method of claim 2, wherein receiving the request message by the AG further includes initiating a high-performance ARP proxy to provide a quicker response to the request message than other wireless computers within the wireless network.

4. The method of claim 1, wherein transmitting a request message from a first wireless computer to an AG includes issuing a series of address resolution protocol (“

ARP”

) broadcasts to identify address of a second wireless computer within the wireless network.

5. The method of claim 1, wherein transmitting a request message from a first wireless computer to an AG includes seeking a second IP address associated to a second wireless computer within the wireless network.

6. The method of claim 1, further comprising ignoring a second response message from the second wireless computer by the first wireless computer after receipt of the response message from the AG.

7. The method of claim 1, further comprising assigning the AG with highest host address within an Internet Class address.

8. The method of claim 1, further comprising providing network service by the AG to the first wireless for communicating with other wireless computers after receipt of the response message from the AG.

9. A communications network, comprising:

a first wireless computer configured to communicate through a wireless network;

a second wireless computer configured to communicate through the wireless network; and

an access gateway (“

AG”

) configured to communicate with the first wireless computer and the second wireless computer and configured to include a high-performance proxy able to provide a quick response for address binding, wherein the quick response is configured to reach its target before other responses for address binding, wherein the AG is able to prevent the first wireless computer from communicating directly with the second wireless computer to prevent spreading of computer virus between the first wireless computer and the second wireless computer.

10. The network of claim 9, wherein the AG is able to prevent the first wireless computer from communicating directly with the second wireless computer by preventing the first wireless computer from learning an address of the second computer.

11. The network of claim 9,

wherein the first wireless computer is a Dynamic Host Control Protocol (“

DHCP”

) client;

wherein the access gateway is a DHCP server; and

wherein the first wireless computer broadcasts a DHCP message with an IP address request.

12. The network of claim 11,

wherein the AG transmits a DHCP message with an IP address lease acknowledgement response;

and

wherein no other wireless computer will be assigned the same IP address during the IP address lease lifetime or before the wireless client releases the assigned IP address.

13. The network of claim 12, wherein the response message contains the network identification based on a random value.

14. The network of claim 12, wherein the response message contains a Class A IP address from 1.0.0.0 to 127.255.255.255;

and wherein the network identification is unique with 128 possible values between 1 and 127.

15. The network of claim 12, wherein the response message contains a Class B IP address from 128.0.0.0 to 191.255.255.255;

and wherein the network identification is a unique number of 16,384 having a range of values between 128.0 and 191.255.

16. The network of claim 12, wherein the response message contains a Class C IP address from 192.0.0.0 to 223.255.255.255;

and wherein the network identification is unique a number of 2,097,152 having a range of values between 192.0.0 and 191.255.

17. The network of claim 12, wherein the response message contains IP address from 84.55.0.1 to 84.55.255.254;

and wherein the network identification is unique with 64,000 possible values.