17932754. SYSTEM AND METHOD FOR PROVIDING SCHC-BASED EDGE FIREWALLING simplified abstract (Cisco Technology, Inc.)

SYSTEM AND METHOD FOR PROVIDING SCHC-BASED EDGE FIREWALLING

Organization Name

Cisco Technology, Inc.

Inventor(s)

Pascal Thubert of Roquefort-les-Pins (FR)

Jonas Zaddach of Antibes (FR)

Patrick Wetterwald of Mouans Sartoux (FR)

Eric Levy-abegnoli of Valbonne (FR)

SYSTEM AND METHOD FOR PROVIDING SCHC-BASED EDGE FIREWALLING - A simplified explanation of the abstract

This abstract first appeared for US patent application 17932754 titled 'SYSTEM AND METHOD FOR PROVIDING SCHC-BASED EDGE FIREWALLING

Simplified Explanation

The abstract describes a method involving the use of a Static Context Header Compression (SCHC) rules engine to identify packets matching a rule, select a firewall decision based on the identified packets and rule, and apply the firewall decision to the identified packets.

• The method involves identifying packets using a SCHC rules engine.
• A firewall decision is selected based on the identified packets and a rule.
• The selected firewall decision is then applied to the identified packets.

Potential Applications

This technology could be applied in network security systems, specifically in firewall management and packet filtering.

Problems Solved

This technology helps in efficiently managing and filtering network traffic based on predefined rules, enhancing network security and performance.

Benefits

The use of a SCHC rules engine allows for effective packet identification and firewall decision-making, leading to improved network security and optimized network performance.

Potential Commercial Applications

One potential commercial application of this technology could be in the development of advanced network security solutions for businesses and organizations.

Possible Prior Art

Prior art in the field of network security and packet filtering technologies may include traditional firewall systems and rule-based packet filtering methods.

How does this method handle complex network environments with high traffic volume?

This method's scalability and performance in high-traffic network environments are not explicitly addressed in the abstract. It would be important to understand how the system copes with large amounts of data and maintains efficiency under heavy network loads.

What level of customization is possible with the firewall decisions in this method?

The abstract mentions selecting a firewall decision based on identified packets and a rule, but it does not detail the extent of customization available in making these decisions. Understanding the flexibility and configurability of the firewall decisions would be crucial for implementing this technology in diverse network settings.

Original Abstract Submitted

In one embodiment, a method includes identifying, using a Static Context Header Compression (SCHC) rules engine, one or more packets matching a rule, selecting a firewall decision based on the identified one or more packets and the rule, and applying the firewall decision to the one or more identified packets.