JPH09275404A - Address resolution processing method - Google Patents
Address resolution processing methodInfo
- Publication number
- JPH09275404A JPH09275404A JP8351896A JP8351896A JPH09275404A JP H09275404 A JPH09275404 A JP H09275404A JP 8351896 A JP8351896 A JP 8351896A JP 8351896 A JP8351896 A JP 8351896A JP H09275404 A JPH09275404 A JP H09275404A
- Authority
- JP
- Japan
- Prior art keywords
- address
- address resolution
- internet
- host
- permitted
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Landscapes
- Small-Scale Networks (AREA)
- Communication Control (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
(57)【要約】
【課題】 セキュリティ機能の強化と高速通信とが両立
したアドレス解決処理方法を提供する。
【解決手段】 非同報型広域網上にインタネットを構築
する際に用いるアドレス解決サーバで、インタネットア
ドレスから非同報型広域網の物理アドレスを解決する方
法において、同一宛先インタネットアドレスに対するア
ドレス解決要求受信時に、アドレス解決の要求元のイン
タネットアドレスに応じて異なる物理アドレスで応答す
るか又は応答しないようにする。一例では、予め登録さ
れた情報に基づき、通信許可済のホストからのアドレス
解決要求に対しては宛先ホストの物理アドレスで応答
し、通信不許可のホストからのアドレス解決要求に対し
ては応答せず、通信許可又は不許可を一律に決められな
いホストからのアドレス解決要求に対してはセキュリテ
ィ機能を有する中継ルータの物理アドレスで応答する。
(57) [Abstract] [PROBLEMS] To provide an address resolution processing method in which enhanced security functions and high-speed communication are compatible. In an address resolution server used when constructing an internet on a non-broadcast wide area network, in a method of resolving a physical address of a non-broadcast wide area network from an internet address, an address resolution request for the same destination internet address At the time of reception, it responds with a different physical address or does not respond according to the internet address from which the address resolution is requested. In one example, based on the information registered in advance, respond to the address resolution request from the host permitted to communicate with the physical address of the destination host, and respond to the address resolution request from the host not permitted to communicate. First, in response to an address resolution request from a host for which communication permission or non-permission cannot be uniformly determined, the physical address of a relay router having a security function is used for response.
Description
【０００１】[0001]
【発明の属する技術分野】本発明は、非同報型広域網上
にインタネットを構築する際に用いられるアドレス解決
サーバに用いて好適なアドレス解決処理方法に関するも
のである。BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an address resolution processing method suitable for use in an address resolution server used when constructing an internet on a non-broadcast type wide area network.
【０００２】非同報型広域網上でのアドレス解決処理
は、非同報型広域網上の異なるサブネットに帰属するホ
スト間で、中継ルータを介さない高速パケット通信経路
を設定するために必要な処理である。これを実現する従
来のアドレス解決処理方法では、同一宛先インタネット
アドレスに対するアドレス解決要求に対しては、アドレ
ス解決の要求元のインタネットアドレスに関わりなく、
同一の物理アドレスで応答していた。Address resolution processing on a non-broadcast wide area network is necessary for setting up a high-speed packet communication path that does not go through a relay router between hosts belonging to different subnets on the non-broadcast wide area network. Processing. In the conventional address resolution processing method that realizes this, an address resolution request for the same destination Internet address, regardless of the Internet address of the request source of address resolution,
It responded with the same physical address.
【０００３】[0003]
【発明が解決しようとする課題】非同報型広域網上に構
築されたインタネットでは、異なるサブネットに帰属す
るホスト間通信でも中継ルータを介さない通信が可能で
あるため、同一宛先インタネットアドレスに対するアド
レス解決要求に対して、アドレス解決の要求元のインタ
ネットアドレスに関わりなく同一の物理アドレスで応答
すると、常に中継ルータを介しない通信が行われてしま
う。中継ルータを介さない通信が行われると、パケット
中継処理遅延を削減できるものの、パケット転送路上で
ファイアウォールと呼ばれるようなパケット中継装置を
用いてパケットフィルタリングを行うことが不可能にな
る。In the internet constructed on the non-broadcast type wide area network, even the communication between the hosts belonging to different subnets is possible without the relay router. Therefore, the address for the same destination internet address is required. If the same physical address is responded to the resolution request regardless of the internet address of the address resolution request source, communication is always performed without passing through the relay router. When communication is performed without passing through a relay router, the packet relay processing delay can be reduced, but it becomes impossible to perform packet filtering using a packet relay device such as a firewall on the packet transfer path.
【０００４】一方この問題を解決するために、常に中継
ルータを介した通信を行うこともできるが、この場合、
パケット転送路上でパケットフィルタリングを行うこと
が可能になるものの、常にパケット中継処理遅延が増加
する。従って、このような従来のアドレス解決処理方法
では、セキュリティ機能の弱い高速通信又はセキュリテ
ィ機能の強い低速通信のいずれかしか実現できないとい
う欠点があった。On the other hand, in order to solve this problem, it is possible to always perform communication via a relay router. In this case,
Although packet filtering can be performed on the packet transfer path, the packet relay processing delay always increases. Therefore, such a conventional address resolution processing method has a drawback that only high-speed communication having a weak security function or low-speed communication having a strong security function can be realized.
【０００５】そこで、本発明はこの問題を解決し、セキ
ュリティ機能の強化と高速通信とを両立させるアドレス
解決処理方法を提供することを目的とする。Therefore, an object of the present invention is to solve this problem and to provide an address solution processing method which makes it possible to enhance security functions and achieve high-speed communication at the same time.
【０００６】[0006]
【課題を解決するための手段】本発明のアドレス解決処
理方法は、上述の目的を達成するために行われた発明で
あって、パケット転送に先立つアドレス解決処理時に、
同一宛先インタネットアドレスに対するアドレス解決要
求受信時でも、アドレス解決の要求元のインタネットア
ドレスに応じて異なる物理アドレスで応答するか又は応
答しないことを特徴とする。The address resolution processing method of the present invention is an invention made to achieve the above-mentioned object, and in the address resolution processing prior to packet transfer,
Even when an address resolution request for the same destination internet address is received, it responds with a different physical address or does not respond according to the internet address from which the address resolution is requested.
【０００７】このような本発明においては、アドレス解
決処理時に、例えば、予め登録された情報に基づき、通
信を許可されているホストからのアドレス解決要求に対
しては直接宛先ホストの物理アドレスで応答し、通信を
許可されていないホストからのアドレス解決要求に対し
ては応答せず、通信の許可又は不許可を一律に決められ
ないホストからのアドレス解決要求に対してはセキュリ
ティ機能を有する中継ルータの物理アドレスで応答する
ようにすることができる。In the present invention as described above, at the time of address resolution processing, for example, based on information registered in advance, in response to an address resolution request from a host permitted to communicate, the physical address of the destination host responds directly. However, it does not respond to address resolution requests from hosts that are not allowed to communicate, and has a security function for address resolution requests from hosts that cannot uniformly determine whether to permit or deny communication. Can respond with the physical address of.
【０００８】このようにすれば、通信を許可されている
ホストとは高速通信が実現され、通信を許可されていな
いホストからのアクセスが防止され、通信の許可又は不
許可を一律に決められないホストとは、セキュリティ機
能を有する中継ルータを介した通信が実現され、セキュ
リティ機能の強化と高速通信とを両立させることができ
る。By doing so, high-speed communication is realized with the host permitted to communicate, access from the host not permitted to communicate is prevented, and it is not possible to uniformly determine whether the communication is permitted or not. Communication with the host is realized through a relay router having a security function, and it is possible to achieve both enhancement of the security function and high-speed communication.
【０００９】[0009]
【発明の実施の形態】次に図面を用いて、本発明の実施
例を説明する。図１は本発明を実施するためのネットワ
ークモデルを示す図、図２はアドレス解決サーバでの本
発明におけるアドレス解決処理を説明するフローチャー
トである。DESCRIPTION OF THE PREFERRED EMBODIMENTS Next, embodiments of the present invention will be described with reference to the drawings. FIG. 1 is a diagram showing a network model for implementing the present invention, and FIG. 2 is a flow chart for explaining an address resolution process in the present invention in an address resolution server.
【００１０】図１のネットワークモデルは広域ＡＴＭ網
10を示しており、この広域ＡＴＭ網10は、端末１を含む
サブネット11、端末２を含むサブネット12、端末３を含
むサブネット13、並びに、端末４、端末５、ルータ６及
びアドレス解決サーバ７を含むサブネット14から構成さ
れている。図中のIP.a.b. はインタネットアドレスを示
し、ATM.a.b.は非同報型広域網の物理アドレスを意味
し、ａの部分はサブネット部、ｂの部分はホスト部を表
す。また、図中のｘは任意の正の整数を表す。このよう
な構成において、例えば、アドレス解決サーバ７には、
予め、ルータ６を介さない通信を許可するサブネットと
してサブネット11を、通信を許可しないサブネットとし
てサブネット13を登録する。The network model shown in FIG. 1 is a wide area ATM network.
This wide area ATM network 10 includes a subnet 11 including a terminal 1, a subnet 12 including a terminal 2, a subnet 13 including a terminal 3, and a terminal 4, a terminal 5, a router 6 and an address resolution server 7. Consists of 14 subnets including. In the figure, IP.ab indicates an internet address, ATM.ab means a physical address of a non-broadcast wide area network, a part indicates a subnet part, and b part indicates a host part. Moreover, x in the figure represents an arbitrary positive integer. In such a configuration, for example, in the address resolution server 7,
In advance, the subnet 11 is registered as a subnet that permits communication without passing through the router 6, and the subnet 13 is registered as a subnet that does not permit communication.
【００１１】先ず、ルータを介さない通信を許可する場
合について説明する。サブネット11の端末１がサブネッ
ト14の端末４と通信しようとした場合、端末１はアドレ
ス解決サーバ７にアドレス解決要求パケットを送信す
る。アドレス解決サーバ７は、アドレス解決要求パケッ
ト受信処理を行い（図２のステップ22）、この後ソース
アドレス解析処理を行い（ステップ23）端末１のIP.1.
1. を特定する。IP.1.1.はルータを介さない通信を許可
するサブネット１（IP.1.x）に帰属するため、宛先端末
アドレス解析処理を行い（ステップ24）、ATM.4.2 を解
決する。First, the case of permitting communication without passing through a router will be described. When the terminal 1 on the subnet 11 tries to communicate with the terminal 4 on the subnet 14, the terminal 1 sends an address resolution request packet to the address resolution server 7. The address resolution server 7 performs an address resolution request packet reception process (step 22 in FIG. 2), and then performs a source address analysis process (step 23) IP1 of the terminal 1.
1. Identify. Since IP.1.1. Belongs to subnet 1 (IP.1.x) that allows communication without passing through a router, the destination terminal address analysis processing is performed (step 24), and ATM.4.2 is resolved.
【００１２】この後アドレス解決応答パケット送信処理
を行い（ステップ27）、アドレス解決要求パケット送信
元の端末１に対してATM.4.2 を解決したアドレス解決応
答パケットを送り返す。アドレス解決終了後、端末１は
IPパケットをATM.4.2 を付与した内部転送用フレームに
カプセル化し、これを直接端末４に転送する。なお、図
２のステップ21及び28は、それぞれ開始及び終了のステ
ップである。Thereafter, the address resolution response packet transmission processing is performed (step 27), and the address resolution response packet which has resolved ATM.4.2 is sent back to the terminal 1 which is the source of the address resolution request packet. After the address resolution is completed, terminal 1
The IP packet is encapsulated in an internal transfer frame to which ATM.4.2 is added, and this is directly transferred to the terminal 4. Note that steps 21 and 28 in FIG. 2 are start and end steps, respectively.
【００１３】次に、通信を許可しない場合について説明
する。サブネット13の端末３がサブネット14の端末４と
通信しようとした場合、端末３はアドレス解決サーバ７
にアドレス解決要求パケットを送信する。アドレス解決
サーバ７は、アドレス解決要求パケット受信処理を行い
（図２のステップ22）、この後ソースアドレス解析処理
を行い（ステップ23）、端末１のIP.4.2. を特定する。
IP.4.2. は通信を許可しないサブネット13（IP.4.x）に
帰属するため、無応答処理を行い（ステップ26）、ここ
で処理が終了する。ここでは、アドレス解決が行われな
いため、端末３はIPパケットを端末４に向けて送信でき
ない。Next, a case where communication is not permitted will be described. When the terminal 3 on the subnet 13 tries to communicate with the terminal 4 on the subnet 14, the terminal 3 uses the address resolution server 7
Address resolution request packet. The address resolution server 7 performs an address resolution request packet reception process (step 22 in FIG. 2) and then performs a source address analysis process (step 23) to identify the IP.4.2. Of the terminal 1.
Since IP.4.2. Belongs to the subnet 13 (IP.4.x) which does not permit communication, no response processing is performed (step 26), and the processing ends here. Here, since the address resolution is not performed, the terminal 3 cannot send the IP packet to the terminal 4.
【００１４】最後に通信の許可又は不許可が不明な場合
について説明する。サブネット12の端末２がサブネット
14の端末４と通信しようとした場合、端末２はアドレス
解決サーバ７にアドレス解決要求パケットを送信する。
アドレス解決サーバ７は、アドレス解決要求パケット受
信処理を行い（図２のステップ22）、この後ソースアド
レス解析処理を行い（ステップ23）、端末１のIP.2.2.
を特定する。IP.2.2.の端末に関しては許可又は不許可
が不明のため、中継ルータアドレス解決処理を行い（ス
テップ25）、ATM.4.1 を解決する。Finally, a case where the permission or non-permission of communication is unknown will be described. Terminal 2 of subnet 12 is subnet
When trying to communicate with the terminal 4 of No. 14, the terminal 2 sends an address resolution request packet to the address resolution server 7.
The address resolution server 7 performs an address resolution request packet reception process (step 22 in FIG. 2), and then performs a source address analysis process (step 23), and the IP.2.2.
To identify. Regarding the terminal of IP.2.2., It is unknown whether it is permitted or not, so relay router address resolution processing is performed (step 25) to resolve ATM.4.1.
【００１５】この後アドレス解決応答パケット送信処理
を行い（ステップ27）、アドレス解決要求パケット送信
元の端末２に対してATM.4.1 を解決したアドレス解決応
答パケットを送り返す。アドレス解決終了後、端末２は
IPパケットをATM.4.1 を付与した内部転送用フレームに
カプセル化し、これを中継ルータ６に転送する。中継ル
ータ６では、中継パケットのソースIPアドレス又は TCP
ポート番号等を基にしてパケットフィルタリングを行
い、必要なパケットのみを端末４に転送する。Thereafter, the address resolution response packet transmission processing is performed (step 27), and the address resolution response packet which has resolved ATM.4.1 is sent back to the terminal 2 which is the source of the address resolution request packet. After the address resolution is completed, terminal 2
The IP packet is encapsulated in an internal transfer frame with ATM.4.1 and transferred to the relay router 6. In the relay router 6, the source IP address or TCP of the relay packet
Packet filtering is performed based on the port number and the like, and only necessary packets are transferred to the terminal 4.
【００１６】[0016]
【発明の効果】上述のように、本発明によれば、アドレ
ス解決処理時におけるセキュリティ機能及びパケット転
送時におけるセキュリティ機能が効果的に発揮される。
即ち、アドレス解決処理時におけるセキュリティ機能に
よって、通信を許可されているホストとは中継ルータを
介さない高速通信が実現され、通信を許可されていない
ホストからのアクセスが防止され、通信の許可又は不許
可を一律に決められないホストとはセキュリティ機能を
有する中継ルータを介した通信が実現される。また、パ
ケット転送時のセキュリティ機能によって、通信の許可
又は不許可を一律に決められないホストとの通信時に、
中継ルータにおいて、中継パケットのソースIPアドレス
又は TCPポート番号等を基にしてパケットフィルタリン
グを行うことができる。従って、セキュリティ機能の強
化と高速通信とを両立させることができる。As described above, according to the present invention, the security function at the time of address resolution processing and the security function at the time of packet transfer are effectively exhibited.
That is, the security function at the time of address resolution processing realizes high-speed communication with a host permitted to communicate without passing through a relay router, prevents access from a host not permitted to communicate, and permits or disallows communication. Communication with a host whose permission cannot be uniformly decided is realized through a relay router having a security function. In addition, when communicating with a host whose communication permission or non-permission cannot be uniformly decided by the security function during packet transfer,
In the relay router, packet filtering can be performed based on the source IP address or TCP port number of the relay packet. Therefore, it is possible to achieve both enhancement of the security function and high-speed communication.
【図１】本発明を実施するためのネットワークモデルを
示す図である。FIG. 1 is a diagram showing a network model for implementing the present invention.
【図２】アドレス解決サーバでの本発明におけるアドレ
ス解決処理を説明するフローチャートである。FIG. 2 is a flowchart illustrating an address resolution process in the present invention in an address resolution server.
１、２、３、４、５ 端末 ６ ルータ ７ アドレス解決サーバ １０ 広域ＡＴＭ網 １１、１２、１３、１４ サブネット ２１〜２８ フローチャートの各ステップ 1, 2, 3, 4, 5 Terminal 6 Router 7 Address Resolution Server 10 Wide Area ATM Network 11, 12, 13, 14 Subnet 21-28 Each Step of Flowchart
───────────────────────────────────────────────────── フロントページの続き (72)発明者 小澤 和幸 東京都新宿区西新宿３丁目19番２号 日本 電信電話株式会社内 ─────────────────────────────────────────────────── ─── Continuation of the front page (72) Inventor Kazuyuki Ozawa 3-19-2 Nishishinjuku, Shinjuku-ku, Tokyo Nippon Telegraph and Telephone Corporation
Claims (2)
する際に用いられるアドレス解決サーバで、インタネッ
トで用いられるインタネットアドレスから非同報型広域
網で用いられる物理アドレスを解決するアドレス解決処
理方法において、同一宛先インタネットアドレスに対す
るアドレス解決要求受信時に、アドレス解決の要求元の
インタネットアドレスに応じて異なる物理アドレスで応
答するか又は応答しないことを特徴とするアドレス解決
処理方法。1. An address resolution server used when constructing an internet on a non-broadcast type wide area network, for address resolution processing for resolving a physical address used on the non-broadcast type wide area network from an internet address used on the internet. In the method, when receiving an address resolution request for the same destination internet address, a different physical address is responded or not responded according to the internet address of the request source of the address resolution.
可されているホストからのアドレス解決要求に対しては
宛先ホストの物理アドレスで応答し、通信を許可されて
いないホストからのアドレス解決要求に対しては応答せ
ず、通信の許可又は不許可を一律に決められないホスト
からのアドレス解決要求に対してはセキュリティ機能を
有する中継ルータの物理アドレスで応答することを特徴
とする請求項１に記載のアドレス解決処理方法。2. An address resolution request from a host not permitted to communicate, responding to an address resolution request from a host permitted to communicate with the physical address of a destination host based on pre-registered information. 2. A physical address of a relay router having a security function is used to respond to an address resolution request from a host that cannot uniformly determine whether communication is permitted or not permitted. Address resolution processing method described in.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| JP8351896A JP3268546B2 (en) | 1996-04-05 | 1996-04-05 | Address resolution processing method |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| JP8351896A JP3268546B2 (en) | 1996-04-05 | 1996-04-05 | Address resolution processing method |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| JPH09275404A true JPH09275404A (en) | 1997-10-21 |
| JP3268546B2 JP3268546B2 (en) | 2002-03-25 |
Family
ID=13804714
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| JP8351896A Expired - Fee Related JP3268546B2 (en) | 1996-04-05 | 1996-04-05 | Address resolution processing method |
Country Status (1)
| Country | Link |
|---|---|
| JP (1) | JP3268546B2 (en) |
Cited By (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US6172991B1 (en) | 1997-02-14 | 2001-01-09 | Nec Corporation | ATM Network with a filtering table for securing communication |
| US8843643B2 (en) | 1998-10-30 | 2014-09-23 | Virnetx, Inc. | System and method employing an agile network protocol for secure communications using secure domain names |
| US8874771B2 (en) | 1998-10-30 | 2014-10-28 | Virnetx, Inc. | Agile network protocol for secure communications with assured system availability |
| US8943201B2 (en) | 1998-10-30 | 2015-01-27 | Virnetx, Inc. | Method for establishing encrypted channel |
| US9860283B2 (en) | 1998-10-30 | 2018-01-02 | Virnetx, Inc. | Agile network protocol for secure video communications with assured system availability |
| US10511573B2 (en) | 1998-10-30 | 2019-12-17 | Virnetx, Inc. | Agile network protocol for secure communications using secure domain names |
-
1996
- 1996-04-05 JP JP8351896A patent/JP3268546B2/en not_active Expired - Fee Related
Cited By (23)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US6172991B1 (en) | 1997-02-14 | 2001-01-09 | Nec Corporation | ATM Network with a filtering table for securing communication |
| US8843643B2 (en) | 1998-10-30 | 2014-09-23 | Virnetx, Inc. | System and method employing an agile network protocol for secure communications using secure domain names |
| US8850009B2 (en) | 1998-10-30 | 2014-09-30 | Virnetx, Inc. | System and method employing an agile network protocol for secure communications using secure domain names |
| US8868705B2 (en) | 1998-10-30 | 2014-10-21 | Virnetx, Inc. | Agile network protocol for secure communications using secure domain names |
| US8874771B2 (en) | 1998-10-30 | 2014-10-28 | Virnetx, Inc. | Agile network protocol for secure communications with assured system availability |
| US8904516B2 (en) | 1998-10-30 | 2014-12-02 | Virnetx, Inc. | System and method employing an agile network protocol for secure communications using secure domain names |
| US8943201B2 (en) | 1998-10-30 | 2015-01-27 | Virnetx, Inc. | Method for establishing encrypted channel |
| US9027115B2 (en) | 1998-10-30 | 2015-05-05 | Virnetx, Inc. | System and method for using a registered name to connect network devices with a link that uses encryption |
| US9037713B2 (en) | 1998-10-30 | 2015-05-19 | Virnetx, Inc. | Agile network protocol for secure communications using secure domain names |
| US9038163B2 (en) | 1998-10-30 | 2015-05-19 | Virnetx, Inc. | Systems and methods for connecting network devices over communication network |
| US9077694B2 (en) | 1998-10-30 | 2015-07-07 | Virnetx, Inc. | Agile network protocol for secure communications using secure domain names |
| US9077695B2 (en) | 1998-10-30 | 2015-07-07 | Virnetx, Inc. | System and method for establishing an encrypted communication link based on IP address lookup requests |
| US9094399B2 (en) | 1998-10-30 | 2015-07-28 | Virnetx, Inc. | Method for establishing secure communication link between computers of virtual private network |
| US9100375B2 (en) | 1998-10-30 | 2015-08-04 | Virnetx, Inc. | System and method employing an agile network protocol for secure communications using secure domain names |
| US9374346B2 (en) | 1998-10-30 | 2016-06-21 | Virnetx, Inc. | Agile network protocol for secure communications using secure domain names |
| US9386000B2 (en) | 1998-10-30 | 2016-07-05 | Virnetx, Inc. | System and method for establishing a communication link |
| US9413766B2 (en) | 1998-10-30 | 2016-08-09 | Virnetx, Inc. | Method for establishing connection between devices |
| US9479426B2 (en) | 1998-10-30 | 2016-10-25 | Virnetz, Inc. | Agile network protocol for secure communications with assured system availability |
| US9819649B2 (en) | 1998-10-30 | 2017-11-14 | Virnetx, Inc. | System and method employing an agile network protocol for secure communications using secure domain names |
| US9860283B2 (en) | 1998-10-30 | 2018-01-02 | Virnetx, Inc. | Agile network protocol for secure video communications with assured system availability |
| US9967240B2 (en) | 1998-10-30 | 2018-05-08 | Virnetx, Inc. | Agile network protocol for secure communications using secure domain names |
| US10187387B2 (en) | 1998-10-30 | 2019-01-22 | Virnetx, Inc. | Method for establishing connection between devices |
| US10511573B2 (en) | 1998-10-30 | 2019-12-17 | Virnetx, Inc. | Agile network protocol for secure communications using secure domain names |
Also Published As
| Publication number | Publication date |
|---|---|
| JP3268546B2 (en) | 2002-03-25 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US7107609B2 (en) | Stateful packet forwarding in a firewall cluster | |
| CN100490377C (en) | Method and device for preventing illegal use of IP address | |
| US7386876B2 (en) | MAC address-based communication restricting method | |
| US20060059551A1 (en) | Dynamic firewall capabilities for wireless access gateways | |
| US20040243710A1 (en) | Method of user data exchange in the data network and a data network | |
| US7181612B1 (en) | Facilitating IPsec communications through devices that employ address translation in a telecommunications network | |
| US20020107961A1 (en) | Secure internet communication system | |
| JPH11168510A (en) | Packet verification method | |
| JPH11168511A (en) | Packet authentication method | |
| JPH11163940A (en) | Method for inspecting packet | |
| CN1647451B (en) | Apparatus, method and system for monitoring information in a network environment | |
| US8209529B2 (en) | Authentication system, network line concentrator, authentication method and authentication program | |
| KR101064382B1 (en) | System and method for preventing ARP attack in communication network | |
| JPH09275404A (en) | Address resolution processing method | |
| EP1593230B1 (en) | Terminating a session in a network | |
| CN100544348C (en) | proxy detection method | |
| WO2003045034A1 (en) | Security of data through wireless access points supporting roaming | |
| CN114024725A (en) | Inter-container communication method, system, electronic equipment and storage medium | |
| US20040230830A1 (en) | Receiver, connection controller, transmitter, method, and program | |
| JP2006013732A (en) | Routing apparatus and information processing apparatus authentication method | |
| US7113487B1 (en) | Forwarding control protocol | |
| US20040228357A1 (en) | Receiver, connection controller, transmitter, method, and program | |
| JP2001077857A (en) | Filtering processing device, network including the same, and storage medium therefor | |
| US11019097B2 (en) | Communication system and repeater | |
| Corbridge et al. | Packet filtering in an ip router |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| FPAY | Renewal fee payment (event date is renewal date of database) |
Free format text: PAYMENT UNTIL: 20090118 Year of fee payment: 7 |
|
| FPAY | Renewal fee payment (event date is renewal date of database) |
Free format text: PAYMENT UNTIL: 20090118 Year of fee payment: 7 |
|
| FPAY | Renewal fee payment (event date is renewal date of database) |
Free format text: PAYMENT UNTIL: 20100118 Year of fee payment: 8 |
|
| LAPS | Cancellation because of no payment of annual fees |