System and method for achieving network separation - Patent Review 5918018

WikiPatents - Community Patent Review

Create Free Account | License or Sell Your Patent | WikiPatents Marketplace | WikiPatents Blog

counter customizable free hit

System and method for achieving network separation

United States Patent

5918018

Link to this page

http://www.wikipatents.com/5918018.html

Inventor(s)

Gooderum; Mark P. (Blaine, MN); Vu; Trinh Q. (Minneapolis, MN); Andreas; Glenn (Fridley, MN)

Abstract

A system and method of achieving network separation within a computing system having a plurality of network interfaces. A plurality of burbs or regions is defined, wherein the plurality of burbs includes a first and a second burb and wherein each burb includes a protocol stack. Each of the plurality of network interfaces is assigned to one of the plurality of burbs and more than one network interface can be assigned to a particular burb. Processes are bound to specific burbs when they try to access that burb's protocol stack and communication between processes assigned to different burbs is restricted so that a communication between a process bound to one burb must pass through a proxy before being sent to a different burb.

References Submit all comments and votes

Submit all comments and votes

*references marked with an asterisk below are user-added references

U.S. References

Add a new US reference:
[Vote on relevancy & make comments] [Display results only]
Reference	Relevancy	Comments	Reference	Relevancy	Comments
5781550 Templin 370/401 Jul,1998	Your vote accepted [0 after 0 votes]		5720035 Allegre 709/225 Feb,1998	Your vote accepted [0 after 0 votes]
5706507 Schloss Jan,1998	Your vote accepted [0 after 0 votes]		5699513 Feigen 726/11 Dec,1997	Your vote accepted [0 after 0 votes]
5689566 Nguyen 713/155 Nov,1997	Your vote accepted [0 after 0 votes]		5684951 Goldman 726/6 Nov,1997	Your vote accepted [0 after 0 votes]
5673322 Pepe 705/52 Sep,1997	Your vote accepted [0 after 0 votes]		5671279 Elgamal Sep,1997	Your vote accepted [0 after 0 votes]
5644571 Seaman 370/401 Jul,1997	Your vote accepted [0 after 0 votes]		5636371 Yu 703/26 Jun,1997	Your vote accepted [0 after 0 votes]
5623601 Vu 726/12 Apr,1997	Your vote accepted [0 after 0 votes]		5619648 Canale 709/206 Apr,1997	Your vote accepted [0 after 0 votes]
5615340 Dai Mar,1997	Your vote accepted [0 after 0 votes]		5606668 Shwed 726/13 Feb,1997	Your vote accepted [0 after 0 votes]
5604490 Blakley, III 726/5 Feb,1997	Your vote accepted [0 after 0 votes]		5586260 Hu 726/12 Dec,1996	Your vote accepted [0 after 0 votes]
5583940 Vidrascu 713/151 Dec,1996	Your vote accepted [0 after 0 votes]		5566170 Bakke 370/392 Oct,1996	Your vote accepted [0 after 0 votes]
5550984 Gelb 709/245 Aug,1996	Your vote accepted [0 after 0 votes]		5548646 Aziz 713/153 Aug,1996	Your vote accepted [0 after 0 votes]
5530758 Marino, Jr. 713/150 Jun,1996	Your vote accepted [0 after 0 votes]		5511122 Atkinson 713/153 Apr,1996	Your vote accepted [0 after 0 votes]
5485460 Schrier Jan,1996	Your vote accepted [0 after 0 votes]		5455828 Zisapel 370/445 Oct,1995	Your vote accepted [0 after 0 votes]
5414833 Hershey 726/22 May,1995	Your vote accepted [0 after 0 votes]		5355474 Thuraisngham 707/9 Oct,1994	Your vote accepted [0 after 0 votes]
5333266 Boaz 709/206 Jul,1994	Your vote accepted [0 after 0 votes]		5329623 Smith Jul,1994	Your vote accepted [0 after 0 votes]
5311593 Carmi 713/162 May,1994	Your vote accepted [0 after 0 votes]		5303303 White 713/160 Apr,1994	Your vote accepted [0 after 0 votes]
5276735 Boebert 713/167 Jan,1994	Your vote accepted [0 after 0 votes]		5272754 Boerbert 713/159 Dec,1993	Your vote accepted [0 after 0 votes]
5263147 Francisco 711/164 Nov,1993	Your vote accepted [0 after 0 votes]		5228083 Lozowick 713/160 Jul,1993	Your vote accepted [0 after 0 votes]
5204961 Barlow 726/1 Apr,1993	Your vote accepted [0 after 0 votes]		5153918 Tuai 713/182 Oct,1992	Your vote accepted [0 after 0 votes]
5124984 Engel 370/230 Jun,1992	Your vote accepted [0 after 0 votes]		5093914 Coplien 717/129 Mar,1992	Your vote accepted [0 after 0 votes]
4914568 Kodosky 715/763 Apr,1990	Your vote accepted [0 after 0 votes]		4885789 Burger 713/164 Dec,1989	Your vote accepted [0 after 0 votes]
4870571 Frink 709/224 Sep,1989	Your vote accepted [0 after 0 votes]		4713753 Boebert 711/164 Dec,1987	Your vote accepted [0 after 0 votes]
4648031 Jenner 714/10 Mar,1987	Your vote accepted [0 after 0 votes]		4621321 Boebert 707/8 Nov,1986	Your vote accepted [0 after 0 votes]
4584639 Hardy 726/2 Apr,1986	Your vote accepted [0 after 0 votes]		4442484 Childs, Jr. 711/163 Apr,1984	Your vote accepted [0 after 0 votes]
4177510 Appell 711/163 Dec,1979	Your vote accepted [0 after 0 votes]		4104721 Markstein 711/164 Aug,1978	Your vote accepted [0 after 0 votes]
3956615 Anderson 705/72 May,1976	Your vote accepted [0 after 0 votes]		5305385 Schanning 726/13 Dec,1969	Your vote accepted [0 after 0 votes]
4701840 Boebert 726/4 Dec,1969	Your vote accepted [0 after 0 votes]
[Vote on relevancy & make comments] [Display results only]

Foreign References

Other References

Technical Review Submit all comments and votes

Submit all comments and votes

Claims

Submit all comments and votes

What is claimed is:

1. A method of achieving network separation within a computing system having a plurality of network interfaces, including a first and a second network interface, the method comprising the steps of:

defining a plurality of burbs, wherein the plurality of burbs includes a first and a second burb and wherein the first burb includes a fit protocol stack and the second burb includes a second protocol stack separate from the first protocol stack;

assigning each of the plurality of network interfaces to one of the plurality of burbs, wherein more than one network interface can be assigned to a particular burb, wherein the step of assigning includes the steps of assigning the first network interface to the first burb and the second network interface to the second burb;

binding processes to burbs; and

restricting communication between processes bound to different burbs, wherein the of restricting communication between processes includes the steps of:

examining a message received by the first network interface; and

if the message is to be routed through the second network interface, routing the message up through the first protocol stack to a process bound to the first burb,