Method and System for Secure Communication Between a Public Network and a Local Network

Andrea Bragagnini; Diego Buffa; Paolo Pellegrino; Luca Scevola; Drory Shohat; Zac Sadan; Niv Gilboa

Method and System for Secure Communication Between a Public Network and a Local Network

Andrea Bragagnini (Inventor), Diego Buffa (Inventor), Paolo Pellegrino (Inventor), Luca Scevola (Inventor), Drory Shohat (Inventor), Zac Sadan (Inventor), Niv Gilboa (Inventor)

Department of Computer Science

Research output: Patent

Abstract

A method for secure communication between a local area network and a wide area network includes integrating a NAT functionality in a firewall associated with the local area network, wherein the NAT functionality is suitable to translate the source port of outgoing data packets with a NAT port value obtained by adding to a NAT offset value the value of the session ED used in a session database. When reply data packets coming from the wide area network are received by the firewall, the session ID is extracted from the NAT port value and is used for directly pointing to the session database, thus reducing the time required to recognize the session.

Original language	English
Patent number	US2009323703
IPC	H04L 12/ 56 A I
Priority date	30/12/05
State	Published - 31 Dec 2009

Cite this

@misc{e1d90d2c2fab484d82b4ab04d8fa8029,

title = "Method and System for Secure Communication Between a Public Network and a Local Network",

abstract = "A method for secure communication between a local area network and a wide area network includes integrating a NAT functionality in a firewall associated with the local area network, wherein the NAT functionality is suitable to translate the source port of outgoing data packets with a NAT port value obtained by adding to a NAT offset value the value of the session ED used in a session database. When reply data packets coming from the wide area network are received by the firewall, the session ID is extracted from the NAT port value and is used for directly pointing to the session database, thus reducing the time required to recognize the session.",

author = "Andrea Bragagnini and Diego Buffa and Paolo Pellegrino and Luca Scevola and Drory Shohat and Zac Sadan and Niv Gilboa",

year = "2009",

month = dec,

day = "31",

language = "English",

type = "Patent",

note = "US2009323703; H04L 12/ 56 A I",

}

TY - PAT

T1 - Method and System for Secure Communication Between a Public Network and a Local Network

AU - Bragagnini, Andrea

AU - Buffa, Diego

AU - Pellegrino, Paolo

AU - Scevola, Luca

AU - Shohat, Drory

AU - Sadan, Zac

AU - Gilboa, Niv

PY - 2009/12/31

Y1 - 2009/12/31

N2 - A method for secure communication between a local area network and a wide area network includes integrating a NAT functionality in a firewall associated with the local area network, wherein the NAT functionality is suitable to translate the source port of outgoing data packets with a NAT port value obtained by adding to a NAT offset value the value of the session ED used in a session database. When reply data packets coming from the wide area network are received by the firewall, the session ID is extracted from the NAT port value and is used for directly pointing to the session database, thus reducing the time required to recognize the session.

AB - A method for secure communication between a local area network and a wide area network includes integrating a NAT functionality in a firewall associated with the local area network, wherein the NAT functionality is suitable to translate the source port of outgoing data packets with a NAT port value obtained by adding to a NAT offset value the value of the session ED used in a session database. When reply data packets coming from the wide area network are received by the firewall, the session ID is extracted from the NAT port value and is used for directly pointing to the session database, thus reducing the time required to recognize the session.

M3 - Patent

M1 - US2009323703

ER -

Method and System for Secure Communication Between a Public Network and a Local Network

Abstract

Fingerprint

Cite this