Network authentication based on inter-packet gap characteristics

• US 7,574,594 B2
• Filed: 02/23/2005
• Issued: 08/11/2009
• Est. Priority Date: 02/23/2005
• Status: Active Grant

• Current Assignee: Dell Products LP (Dell Technologies Inc.)
• Original Assignee: Dell Products LP (Dell Technologies Inc.)
• Inventors: Winter, Robert L.
• Primary Examiner(s): Dada; Beemnet W
• Application Number:
  US11/063,778
• Publication Number:
  US 20060191001A1
• Time in Patent Office: 1,630 Days
• Field of Search: 713/151, 713/161, 713/168, 713/170, 713/152, 709/223, 709/225, 709/229
• US Class Current: 713/151
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

Network communications in physical layer frame-based networks may be authenticated based on inter-packet gap (IPG) characteristics such as inter-packet gap length, inter-packet gap length pattern, information contained in the inter-packet gap, etc.

Claims

1. A method of processing information communicated across a network using a frame-based network protocol, comprising:

receiving a frame stream from across a network in a first information handling system configured as a first network node, said frame stream comprising one or more frames and inter-packet gaps having an inter-packet gap length, and each of said one or more frames being associated with one of said inter-packet gaps;

using physical layer processing to examine said inter-packet gap length associated with each of said one or more frames;

accepting a first frame of said one or more frames if said inter-packet gap length associated with said first frame is greater than or equal to a minimum inter-packet gap length specified for said network protocol, and if said inter-packet gap length associated with said first frame meets an inter-packet gap authentication criteria policy; and

rejecting said first frame associated with said one or more frames if said inter-packet gap length associated with said first frame does not meet said inter-packet gap authentication criteria policy;

wherein said first frame is preceded by said inter-packet gap.

2. The method of claim 1, wherein said inter-packet gap authentication criteria policy comprises a length threshold, specific length or a length window.

3. The method of claim 1, wherein said inter-packet gap authentication criteria policy comprises a length of said inter-packet gap of said first frame relative to a length of an inter-packet gap of a second frame received at said network node.

4. The method of claim 1, and wherein said step of accepting further comprises sending said first frame to a MAC processing layer of said first network node for further processing.

5. The method of claim 1, wherein said method further comprises communicating said first frame from said first network node across said network to an information handling system configured as a second network node if said first frame is accepted by said first network node;

and not communicating said first frame from said first network node across said network to said second network node if said first frame is rejected by said first network node.

6. A network node system, comprising:

an information handling system configured to be coupled to a network as network node, said information handling system comprising a network interface that includes one or more processors, said processors of said network interface being configured for coupling to transmit or receive a first frame and inter-packet gap associated with said first frame across a network;

wherein said inter-packet gap has one or more inter-packet gap characteristics; and

wherein said one or more inter-packet gap characteristics are employed by said one or more processors of said network interface as at least a part of an inter-packet gap authentication criteria for said network;

wherein said first frame is preceded by said inter-packet gap; and

wherein said information handling system is further configured to;

receive a frame stream from across said network, said frame stream comprising one or more frames including said first frame, and each of said one or more frames being preceded by an inter-packet gap having an inter-packet gap length,

use physical layer processing to examine said inter-packet gap length preceding each of said one or more frames,

accept said first frame of said one or more frames for further processing if said inter-packet gap length preceding said first frame is greater than or equal to a minimum inter-packet gap length specified for said network protocol, and if said inter-packet gap length preceding said first frame meets an inter-packet gap authentication criteria policy, and

reject said first frame of said one or more frames if said inter-packet gap length preceding said first frame does not meet said inter-packet gap authentication criteria policy.

7. The system of claim 6, wherein said inter-packet gap authentication criteria policy comprises a length threshold, specific length or a length window.

8. The system of claim 6, wherein said inter-packet gap authentication criteria policy comprises a length of said inter-packet gap preceding said first frame relative to a length of an inter-packet gap preceding a second frame received at said network node.