Parallel match processing of network packets to identify packet data for masking or other actions
US10063474B2 · kind B2 · utility
Assignee
Inventors
Key dates
| Filing date | Sep 29, 2015 |
| Grant date | Aug 28, 2018 |
| Priority date | — |
| Expiry date | May 9, 2036 |
Classification
- Technology area (CPC H)Electricity
- CPC primaryH04L49/90
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
Systems and methods are disclosed for parallel match processing of network packets to identify data for masking or other actions. In part, the disclosed embodiments receive packets and identify packet data, such as sensitive data, by rapid parallel matching of packet data being communicated in multi-byte wide data paths to match parameters in order to generate match vectors. The match vectors are then used to generate control vectors that are subsequently used by packet processing circuitry to perform desired actions for this packet data (e.g., mask data) and/or for related packets (e.g., drop packets). For example, data identified through the match processing can be masked, and control vectors can be mask control vectors applied to parallel multiplexers. In certain embodiments, the parallel data multiplexers are controlled by the mask control vectors to selectively output either original packet data or mask data that obscures original packet data.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.