Application level gateway and firewall rule set download validation

• US 20050220126A1
• Filed: 07/03/2003
• Published: 10/06/2005
• Est. Priority Date: 07/11/2002
• Status: Abandoned Application

• Current Assignee: Thomson Licensing SA (Vantiva SA)
• Original Assignee: Thomson Licensing SA (Vantiva SA)
• Inventors: Gervais, John Alan, Mayernick, Mark Ryan, Beard, Rex Irvin
• Application Number:
  US10/520,854
• Publication Number:
  US 20050220126A1
• Time in Patent Office: Days
• US Class Current: 370/401
• CPC Class Codes: H04L 12/2801 Broadband local area networks
• CPC Class Codes: H04L 41/0869 Validating the configuration within one network element
• CPC Class Codes: H04L 41/28 Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/0263 Rule management
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]

Abstract

Method (300) and apparatus for validating application level gateway files or firewall rulsets. The method and apparatus include receiving at a bidirectional communications device, an application level gateway file, and comparing at least one compatibility parameter of said ALG file with features of said bi-directional communications device. In an instance where all of the compatibility parameters compare favorably, the ALG file is stored at the bidirectional communications device.

Claims

1. A method, comprising:

receiving, at a bi-directional communications device, an application level gateway file;

comparing at least one compatibility parameter of said ALG file with features of said bi-directional communications device; and

storing said ALG file at said bi-directional communications device in response to a favorable comparison of said at least one compatibility parameter.

2. The method of claim 1, further comprising:

rejecting said ALG file at said bi-directional communications device in response to an unfavorable comparison of said at least one compatibility parameter.

3. The method of claim 1, wherein said at least one compatibility parameter comprises a header format version of said ALG file.

4. The method of claim 1, wherein said at least one compatibility parameter comprises a file size of said ALG file.

5. The method of claim 1, wherein said at least one compatibility parameter comprises a header CRC value of said ALG file.

6. The method of claim 1, wherein said at least one compatibility parameter comprises a header format version of said ALG file.

7. The method of claim 1, wherein said at least one compatibility parameter comprises a body CRC value of said ALG file.

8. The method of claim 1, wherein said at least one compatibility parameter comprises an authentication signature of said ALG file.

9. The method of claim 1, wherein said at least one compatibility parameter comprises a hardware family version of said ALG file.

10. The method of claim 1, wherein said at least one compatibility parameter comprises a software family version of said ALG file.

11. The method of claim 1, wherein said bi-directional communications device comprises a cable modem.

12. The method of claim 1, wherein said receiving step comprises:

periodically polling a service provider to determine if at least one of a new and updated ALG file is available;

sending a request for an available ALG file; and

receiving said requested ALG file from an access network.

13. The method of claim 1, wherein said receiving step comprises:

receiving a configuration file from said service provider, said configuration file identifying at least one of new and updated ALG files;

sending a request for an available ALG files; and

receiving said requested ALG file from an access network.

14. The method of claim 1, wherein a firewall program utilizes said ALG files to control data traffic.

15. The method of claim 1, wherein said ALG file has appended thereto a header portion comprising said compatibility parameters selected from the group comprising a header format version, a header size, a header expected CRC, an authentication signature, a body size, a body expected CRC, compatible hardware version family, and compatible software version family.

16. Apparatus, comprising:

means for receiving, at a bi-directional communications device, an application level gateway file;

means for comparing at least one compatibility parameter of said ALG file with features of said bi-directional communications device; and

means for storing said ALG file at said bi-directional communications device in response to a favorable comparison of said at least one compatibility parameter.

17. The apparatus of claim 16, further comprising:

means for rejecting said ALG file at said bi-directional communications device in response to an unfavorable comparison of said at least one compatibility parameter.

18. The apparatus of claim 16, wherein said bi-directional communications device comprises a cable modem.

19. The apparatus of claim 16, wherein said ALG file has appended thereto a header portion comprising said compatibility parameters selected from the group comprising a header format version, a header size, a header expected CRC, an authentication signature, a body size, a body expected CRC, compatible hardware version family, and compatible software version family.