Abnormal IPSec packet control system using IPSec configuration and session data, and method thereof
US8336093B2 · kind B2 · utility
Assignee
Inventors
Key dates
| Filing date | Feb 16, 2007 |
| Grant date | Dec 18, 2012 |
| Priority date | — |
| Expiry date | Mar 6, 2030 |
Classification
- Technology area (CPC H)Electricity
- CPC primaryH04L63/164
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
An abnormal Internet Protocol Security (IPSec) packet control system and method utilizes IPSec configuration and session data to detect whether or not packets encrypted by an extended header are abnormal. The IPSec packet control system can include an extended header processing unit that receives an IPSec packet and extracts the data to be used in traffic control; check units for checking the packets in the stages of IPSec configuration and IPSec communication that receive the extracted data to determine whether or not the IPSec packet has passed; and a control unit that allows the IPSec to pass or to be blocked according to a determination result from the check units for checking the IPSec configuration and communication packets, where abnormal IPSec packets are blocked using the IPSec configuration and session tables without requiring them to be decrypted and encrypted.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.