Network appliance for controlling hypertext transfer protocol (HTTP) messages between a local area network and a global communications network

• US 20070240208A1
• Filed: 04/10/2006
• Published: 10/11/2007
• Est. Priority Date: 04/10/2006
• Status: Abandoned Application

• Current Assignee: Zyxel Communications Corporation (Unizyx Holding Corporation)
• Original Assignee: Zyxel Communications Corporation (Unizyx Holding Corporation)
• Inventors: Lu, Shao-Chi, Yu, Ming-Che
• Application Number:
  US11/279,114
• Publication Number:
  US 20070240208A1
• Time in Patent Office: Days
• US Class Current: 726/13
• CPC Class Codes: H04L 63/0236 Filtering by address, protocol, port number or service, e.g. IP-address or URL
• CPC Class Codes: H04L 63/0245 Filtering by information in the payload
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/56 Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54
• CPC Class Codes: H04L 67/5651 Reducing the amount or size of exchanged application data

Abstract

A network appliance for controlling hypertext transfer protocol (HTTP) messages between a local area network and a global communications network includes a housing; a receiving and forwarding module installed within the housing and coupled to the local area network and the global communications network, the receiving and forwarding module for communicating HTTP messages between the local area network and the global communications network; and an interception module installed within the housing and coupled to the receiving and forwarding module, the interception module having hardware that filters HTTP messages originating from the local area network and bound for the global communications network according to a predetermined condition residing in firmware of the interception module.

Claims

1. A network appliance for controlling hypertext transfer protocol (HTTP) messages between a local area network and a global communications network, comprising:

a housing;

a receiving and forwarding module installed within the housing and coupled to the local area network and the global communications network, the receiving and forwarding module for communicating HTTP messages between the local area network and the global communications network; and

an interception module installed within the housing and coupled to the receiving and forwarding module, the interception module having hardware that filters HTTP messages originating from the local area network and bound for the global communications network according to a predetermined condition residing in firmware of the interception module.

2. The network appliance of claim 1 wherein the global communications network comprises the Internet.

3. The network appliance of claim 1 wherein the hardware of the interception module compares a field of the HTTP message against the predetermined condition, the predetermined condition programmed according to a network administrator for determining an action of the interception module when the field of the HTTP message matches the predetermined condition.

4. The network appliance of claim 3 wherein the hardware of the interception module allows the receiving and forwarding module to send the HTTP message to a destination IP address of the global communications network when a field of the HTTP message does not match the predetermined condition.

5. The network appliance of claim 3 wherein the hardware of the interception module discards the HTTP message when a field of the HTTP message matches the predetermined condition.

6. The network appliance of claim 5 wherein the hardware of the interception module generates a reply message and sends the reply message to an originating user machine of the local area network.

7. The network appliance of claim 3 wherein the hardware of the interception module forwards the HTTP message to an alternate IP address of the global communications network when a field of the HTTP message matches the predetermined condition.

8. The network appliance of claim 1 wherein the hardware of the interception module compares a field of the HTTP message against a set of predetermined conditions, the hardware of the interception module for:

allowing the receiving and forwarding module to send the HTTP message to a destination IP address of the global communications network when the field of the HTTP message does not match any predetermined condition of the set of predetermined conditions;

discarding the HTTP message and generating a reply message sent to an originating user machine of the local area network when the field of the HTTP message matches a first predetermined condition of the plurality of predetermined conditions; and

forwarding the HTTP message to an alternate IP address of the global communications network when the field of the HTTP message matches a second predetermined condition of the set of predetermined conditions.