BRPI0519544A2 - configuraÇço firewall assistida de cliente - Google Patents

configuraÇço firewall assistida de cliente

Info

Publication number
BRPI0519544A2
BRPI0519544A2 BRPI0519544-6A BRPI0519544A BRPI0519544A2 BR PI0519544 A2 BRPI0519544 A2 BR PI0519544A2 BR PI0519544 A BRPI0519544 A BR PI0519544A BR PI0519544 A2 BRPI0519544 A2 BR PI0519544A2
Authority
BR
Brazil
Prior art keywords
firewall
passive socket
socket
passive
flows directed
Prior art date
Application number
BRPI0519544-6A
Other languages
English (en)
Inventor
Michael Paddon
Philip Michael Hawkes
Gregory Gordon Rose
Original Assignee
Qualcomm Inc
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Qualcomm Inc filed Critical Qualcomm Inc
Publication of BRPI0519544A2 publication Critical patent/BRPI0519544A2/pt

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/02—Details
    • H04L12/22—Arrangements for preventing the taking of data from a data transmission channel without authorisation
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/08—Configuration management of networks or network elements
    • H04L41/0803—Configuration setting
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/02—Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
    • H04L63/0227—Filtering policies
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1441—Countermeasures against malicious traffic
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/01—Protocols
    • H04L67/04—Protocols specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/34—Network arrangements or protocols for supporting network services or applications involving the movement of software or configuration parameters 
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/01—Protocols
    • H04L67/02—Protocols based on web technology, e.g. hypertext transfer protocol [HTTP]

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
  • Computer And Data Communications (AREA)
  • Telephonic Communication Services (AREA)

Abstract

CONFIGURAÇçO FIREWALL ASSISTIDA DE CLIENTE. As modalidades descrevem técnicas com relação à configuração de um firewall e/ou redução de tráfego de rede. De acordo com uma modalidade é um método para configurar um firewall para reduzir tráfego indesejado de rede. O método inclui executar um servidor de rede e detectar que um soquete passivo foi criado. O método também inclui estabelecer contato com um firewall e solicitar que o firewall permita fluxos dirigidos ao soquete passivo. De acordo com algumas modalidades, o método pode incluir fechar o servidor de rede e destruir o soquete passivo. O firewall pode ser contatado com a informação de soquete passivo destruido e pode ser enviada uma solicitação para negar fluxos dirigidos ao soquete passivo destruído. Se o soquete passivo for fechado, o método pode revogar aucomaticamente a solicitação para o firewall permitir fluxos dirigidos ao soquete passivo.
BRPI0519544-6A 2004-12-21 2005-12-21 configuraÇço firewall assistida de cliente BRPI0519544A2 (pt)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
US63827104P 2004-12-21 2004-12-21
PCT/US2005/046801 WO2006069315A1 (en) 2004-12-21 2005-12-21 Client assisted firewall configuration

Publications (1)

Publication Number Publication Date
BRPI0519544A2 true BRPI0519544A2 (pt) 2009-02-17

Family

ID=36095794

Family Applications (1)

Application Number Title Priority Date Filing Date
BRPI0519544-6A BRPI0519544A2 (pt) 2004-12-21 2005-12-21 configuraÇço firewall assistida de cliente

Country Status (10)

Country Link
US (1) US20060253900A1 (pt)
EP (1) EP1829334A1 (pt)
JP (1) JP4589405B2 (pt)
KR (1) KR100899903B1 (pt)
CN (1) CN101124801B (pt)
BR (1) BRPI0519544A2 (pt)
CA (1) CA2591933C (pt)
RU (1) RU2370903C2 (pt)
TW (1) TWI400920B (pt)
WO (1) WO2006069315A1 (pt)

Families Citing this family (29)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8910241B2 (en) * 2002-04-25 2014-12-09 Citrix Systems, Inc. Computer security system
DE602004028295D1 (de) * 2004-10-29 2010-09-02 Telecom Italia Spa System und verfahren zur ferngesteuerten sicherheitsverwaltung eines benutzerendgeräts über eine vertrauenswürdige benutzerplattform
US8385331B2 (en) * 2006-09-29 2013-02-26 Verizon Patent And Licensing Inc. Secure and reliable policy enforcement
EP1971101B1 (en) * 2007-03-12 2018-11-21 Nokia Solutions and Networks GmbH & Co. KG A method , a device for configuring at least one firewall and a system comprising such device
US9240945B2 (en) 2008-03-19 2016-01-19 Citrix Systems, Inc. Access, priority and bandwidth management based on application identity
US7940658B2 (en) * 2008-09-04 2011-05-10 Cisco Technology, Inc. ERSPAN dynamic session negotiation
US7924830B2 (en) 2008-10-21 2011-04-12 At&T Intellectual Property I, Lp System and method to route data in an anycast environment
KR101221045B1 (ko) * 2008-12-22 2013-01-10 한국전자통신연구원 패킷 처리 방법 및 이를 이용한 ｔｏｅ 장치
US8966607B2 (en) * 2009-07-15 2015-02-24 Rockstar Consortium Us Lp Device programmable network based packet filter
US20110075047A1 (en) * 2009-09-29 2011-03-31 Sony Corporation Firewall port selection using atsc tuner signals
US8520540B1 (en) 2010-07-30 2013-08-27 Cisco Technology, Inc. Remote traffic monitoring through a network
CN102065431A (zh) * 2010-12-28 2011-05-18 上海华勤通讯技术有限公司 手机网络防火墙的使用方法
CN102202094A (zh) * 2011-05-13 2011-09-28 中兴通讯股份有限公司 一种基于http的业务请求处理方法及装置
US8555369B2 (en) 2011-10-10 2013-10-08 International Business Machines Corporation Secure firewall rule formulation
US9094307B1 (en) 2012-09-18 2015-07-28 Cisco Technology, Inc. Measuring latency within a networking device
US9077619B2 (en) 2012-09-18 2015-07-07 Cisco Technology, Inc. Exporting real time network traffic latency and buffer occupancy
US9054967B1 (en) 2012-09-18 2015-06-09 Cisco Technology, Inc. Timestamping packets in a network
US9118707B2 (en) * 2012-12-14 2015-08-25 Verizon Patent And Licensing Inc. Methods and systems for mitigating attack traffic directed at a network element
US9590752B2 (en) * 2013-03-27 2017-03-07 International Business Machines Corporation Peer-to-peer emergency communication using public broadcasting
US20150135265A1 (en) * 2013-11-11 2015-05-14 MyDigitalShield, Inc. Automatic network firewall policy determination
EP3080973B1 (en) * 2013-12-11 2017-07-05 Telefonaktiebolaget LM Ericsson (publ) Proxy interception
KR101538667B1 (ko) * 2013-12-31 2015-07-22 주식회사 시큐아이 네트워크 시스템 및 네트워크 제어 방법
AU2016430261B2 (en) * 2016-11-23 2020-09-10 Huawei Technologies Co., Ltd. Passive optical network system, optical line terminal and optical network unit
CA3194408A1 (en) 2017-04-21 2018-10-25 Zenimax Media Inc. Player input motion compensation by anticipating motion vectors
US10999251B2 (en) * 2018-09-28 2021-05-04 Juniper Networks, Inc. Intent-based policy generation for virtual networks
US10491613B1 (en) * 2019-01-22 2019-11-26 Capital One Services, Llc Systems and methods for secure communication in cloud computing environments
US12470573B1 (en) * 2021-03-05 2025-11-11 Cable Television Laboratories, Inc. Systems and methods for managing networks for improved device connectivity
KR102602570B1 (ko) * 2021-11-23 2023-11-14 주식회사 카카오엔터프라이즈 방화벽 장치의 설정값을 제어하는 igw 콘트롤러 및 그것과 방화벽 장치 간의 설정값 동기화 제어 방법
US12615296B2 (en) 2022-06-20 2026-04-28 Microsoft Technology Licensing, Llc Dynamic updates to cloud access policies

Family Cites Families (19)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5944823A (en) * 1996-10-21 1999-08-31 International Business Machines Corporations Outside access to computer resources through a firewall
US6334056B1 (en) * 1999-05-28 2001-12-25 Qwest Communications Int'l., Inc. Secure gateway processing for handheld device markup language (HDML)
KR20010090014A (ko) * 2000-05-09 2001-10-18 김대연 네트워크 보호 시스템
KR100358518B1 (ko) * 2000-07-03 2002-10-30 주식회사 지모컴 임베디드 하드웨어와 범용 컴퓨터가 결합된 방화벽 시스템
KR20020043427A (ko) * 2000-12-04 2002-06-10 박준상 P2p 서비스 시스템 및 방법
US7089586B2 (en) * 2001-05-02 2006-08-08 Ipr Licensing, Inc. Firewall protection for wireless users
US7392537B2 (en) * 2001-10-08 2008-06-24 Stonesoft Oy Managing a network security application
US7593318B2 (en) * 2002-01-07 2009-09-22 Reams Byron L Method and apparatus for header updating
EP3401794A1 (en) * 2002-01-08 2018-11-14 Seven Networks, LLC Connection architecture for a mobile network
US7133368B2 (en) * 2002-02-01 2006-11-07 Microsoft Corporation Peer-to-peer method of quality of service (QoS) probing and analysis and infrastructure employing same
JP2004054488A (ja) * 2002-07-18 2004-02-19 Yokogawa Electric Corp ファイアウォール装置
KR100476237B1 (ko) * 2002-08-13 2005-03-10 시큐아이닷컴 주식회사 복수 방화벽에서의 효율적 부하 분산을 위한 비대칭 트래픽 처리 방법
US7454499B2 (en) * 2002-11-07 2008-11-18 Tippingpoint Technologies, Inc. Active network defense system and method
JP2004180155A (ja) * 2002-11-28 2004-06-24 Ntt Docomo Inc 通信制御装置、ファイアウォール装置、通信制御システム、及び、データ通信方法
JP2004187206A (ja) * 2002-12-06 2004-07-02 Nippon Telegr & Teleph Corp <Ntt> パーソナルフィルタリングシステム及びパーソナルフィルタリング方法
JP2004265286A (ja) * 2003-03-04 2004-09-24 Fujitsu Ltd 環境に応じて選択されたセキュリティ・ポリシーに従うモバイル機器の管理
US7340771B2 (en) * 2003-06-13 2008-03-04 Nokia Corporation System and method for dynamically creating at least one pinhole in a firewall
WO2005004370A2 (en) * 2003-06-28 2005-01-13 Geopacket Corporation Quality determination for packetized information
US8146145B2 (en) * 2004-09-30 2012-03-27 Rockstar Bidco Lp Method and apparatus for enabling enhanced control of traffic propagation through a network firewall

Also Published As

Publication number Publication date
RU2370903C2 (ru) 2009-10-20
TW200640206A (en) 2006-11-16
US20060253900A1 (en) 2006-11-09
KR20070087165A (ko) 2007-08-27
CN101124801B (zh) 2013-04-03
JP2008524970A (ja) 2008-07-10
KR100899903B1 (ko) 2009-05-28
WO2006069315A1 (en) 2006-06-29
WO2006069315A8 (en) 2007-11-01
JP4589405B2 (ja) 2010-12-01
CA2591933A1 (en) 2006-06-29
EP1829334A1 (en) 2007-09-05
CA2591933C (en) 2014-01-21
TWI400920B (zh) 2013-07-01
RU2007128045A (ru) 2009-01-27
CN101124801A (zh) 2008-02-13

Similar Documents

Publication Publication Date Title
BRPI0504330A (pt) sistema e métodos para o fornecimento de uma quarentena de rede utilizando ipsec
TW200640206A (en) Client assisted firewall configuration
BRPI0504756A (pt) interface de provedor de serviço a dispositivo
BRPI0513528A (pt) controle e gerenciamento de acesso a várias redes
BR0317098A (pt) Sistema e método para realizar handshake entre dispositivos sem fio e servidores
BR0110100A (pt) Sistema de ajuda de diretório on-line
BR0112909A (pt) Sistemas e métodos para autenticação de um usuário para um servidor da rede
BR0315550A (pt) Método para autorizar uma operação solicitada por um primeiro usuário em um item de conteúdo, e, dispositivo arranjado para executar uma operação solicitada por um primeiro usuário em um item de conteúdo
BRPI0503638A (pt) sistema e método para pesquisar e recuperar certificados, e aplicação de software para execução em um dispositivo de computação
WO2005084132A3 (en) A method and device for peer to peer file sharing
ATE489679T1 (de) Sicheres durchqueren von netzkomponenten
BRPI0505268A (pt) método para o gerenciamento de recursos em um terminal móvel
BR112017011176A2 (pt) método, dispositivo eletrônico, e, primeiro dispositivo eletrônico
WO2005062571A3 (en) System and method for allocating server resources
BRPI0515098A (pt) método e sistema para otimizar conexões
BRPI0511277A (pt) métodos e equipamentos para transmissões multicast e unicast hìbridas em uma rede de dados
AR064354A1 (es) Autenticacion en redes de comunicaciones
ATE467303T1 (de) System und verfahren zur verwaltung von vorrichtungen
BR112015025960A2 (pt) método, nó de rede e equipamento de usuário para atualizar informação de sistema
BRPI0511151A (pt) sistema e método para o gerenciamento de acesso a conteúdo protegido por aplicações não-confiáveis
ATE488801T1 (de) Wartungsfreundliche grid-manager
BRPI0509674A (pt) método, produto de programa de computador e sistema para gerenciar os dispositivos usando o domìnio do dispositivo virtual, e, método para prover o domìnio do dispositivo virtual incluindo os dispositivos virtuais correspondentes aos dispositivos fìsicos associados com o usuário
DE60102234D1 (de) Verfahren und vorrichtung zur ermittlung von benachbarten diensten
ATE545237T1 (de) Netzdienst-konfigurationsverwaltung
BRPI0907712A2 (pt) Sistema de dns dinâmico para redes particulares

Legal Events

Date Code Title Description
B08F Application fees: application dismissed [chapter 8.6 patent gazette]

Free format text: REFERENTE A 10A ANUIDADE.

B08K Patent lapsed as no evidence of payment of the annual fee has been furnished to inpi [chapter 8.11 patent gazette]

Free format text: EM VIRTUDE DO ARQUIVAMENTO PUBLICADO NA RPI 2343 DE 01-12-2015 E CONSIDERANDO AUSENCIA DE MANIFESTACAO DENTRO DOS PRAZOS LEGAIS, INFORMO QUE CABE SER MANTIDO O ARQUIVAMENTO DO PEDIDO DE PATENTE, CONFORME O DISPOSTO NO ARTIGO 12, DA RESOLUCAO 113/2013.