Granted Patent B2

US 8,085,752 · App. 10/300,918 · Granted Dec 27, 2011

Abstract

Claims (50)

1. A method of handling mobile entities in a firewall, comprising

maintaining a first mobile entity table comprising identifiers of mobile entities which are active in the firewall,

maintaining a second mobile entity table comprising identifiers of mobile entities which are active in a predefined set of other firewalls and identifiers of corresponding other firewalls,

detecting a new mobile entity, which is not currently active in the firewall,

finding on the basis of the second mobile entity table, if the new mobile entity is currently active in another firewall, and

if the mobile entity is currently active in another firewall, querying, from the another firewall, state information related to the new mobile entity, and storing the state information in the firewall to be used for processing data packets from/to the new mobile entity, and

sending the first mobile entity table to a predefined set of other firewalls in response to an addition, deletion or modification of an entry in the mobile entity table.

2. A method according to claim 1 , further comprising adding a new entry in the first mobile entity table after detecting a new mobile entity not currently active in the firewall, the new entry corresponding to the new mobile entity.

3. A method according to claim 1 , further comprising sending the first mobile entity table to a predefined set of other firewalls as a response to an indication of a certain time period having elapsed since the first mobile entity table was sent the last time.

4. A method according to claim 1 , further comprising sending the first mobile entity table to a predefined set of other firewalls as a response to receiving a request for the first mobile entity table.

5. A method according to claim 1 , further comprising

receiving from at least one other firewall a mobile entity table comprising identifiers of mobile entities which are active in the at least one other firewall,

updating the second mobile entity table on the basis of the received mobile entity table, and

deleting an entry in the first mobile entity table, if a corresponding entry is contained in the received mobile entity table.

6. A method according to claim 1 , wherein detecting a new mobile entity comprises detecting a data packet in which the source is the new mobile entity.

7. A method according to claim 1 , wherein detecting a new mobile entity comprises detecting a registration message from the new mobile entity.

8. A method according to claim 1 , wherein the identifier is an IP address or a subscriber number.

9. A method according to claim 1 , wherein the state information related to the new mobile entity comprises state of the ongoing connections of the new mobile entity.

10. A method of maintaining information in a firewall, comprising

maintaining a first mobile entity table comprising identifiers of mobile entities which are active in the firewall,

sending the first mobile entity table to a predefined set of other firewalls as a response to an addition, deletion or modification of an entry in the mobile entity table,

receiving from at least one other firewall a mobile entity table comprising identifiers of mobile entities which are active in the at least one other firewall, and

maintaining a second mobile entity table comprising identifiers of mobile entities which are active in the at least one other firewall and an identifier of the corresponding at least one other firewall on the basis of the mobile entity table received from said at least one other firewall.

11. A method according to claim 10 , further comprising requesting from the at least one other firewall a mobile entity table comprising identifiers of mobile entities which are active in the at least one other firewall.

12. A method according to claim 10 , further comprising sending the first mobile entity table to a predefined set of other firewalls as a response to an indication of certain time period having elapsed since the first mobile entity table was sent the last time.

13. A method according to claim 10 , further comprising sending the first mobile entity table to a predefined set of other firewalls as a response to receiving a request for the first mobile entity table.

14. A firewall comprising

memory and mechanism for maintaining a first mobile entity table comprising identifiers of mobile entities which are active in the firewall,

memory and mechanism maintaining a second mobile entity table comprising identifiers of mobile entities which are active in a predefined set of other firewalls and identifiers of corresponding other firewalls,

mechanism for detecting a new mobile entity, which is not currently active in the firewall,

mechanism for finding on the basis of the second mobile entity table, if the new mobile entity is currently active in another firewall, and

mechanism for querying, from the another firewall, state information related to the new mobile entity, and mechanism and memory for storing the state information in the firewall to be used for processing data packets from/to the new mobile entity, if the mobile entity is currently active in another firewall and

mechanism for sending the first mobile entity table to a predefined set of other firewalls as a response to an addition, deletion or modification of an entry in the mobile entity table.

15. A firewall comprising

memory and mechanism for maintaining a first mobile entity table comprising identifiers of mobile entities which are active in the firewall,

mechanism for sending the first mobile entity table to a predefined set of other firewalls as a response to an addition, deletion or modification of an entry in the mobile entity table,

mechanism for receiving from at least one other firewall a mobile entity table comprising identifiers of mobile entities which are active in the at least one other firewall, and

memory and mechanism for maintaining a second mobile entity table comprising identifiers of mobile entities which are active in the at least one other firewall and an identifier of the corresponding at least one other firewall on the basis of the mobile entity table received from the at least one other firewall.

16. A non-transitory computer-readable medium, comprising computer software recorded thereon, which computer software, when executed in a computer device, causes the computer device to provide a firewall routine comprising

maintaining a first mobile entity table comprising identifiers of mobile entities which are active in the firewall,

maintaining a second mobile entity table comprising identifiers of mobile entities which are active in a predefined set of other firewalls and identifiers of corresponding other firewalls,

detecting a new mobile entity, which is not currently active in the firewall,

finding on the basis of the second mobile entity table, if the new mobile entity is currently active in another firewall,

if the mobile entity is currently active in another firewall, querying, from the another firewall, state information related to the new mobile entity, and storing the state information in the firewall to be used for processing data packets from/to the new mobile entity, and

sending the first mobile entity table to a predefined set of other firewalls as a response to an addition, deletion or modification of an entry in the mobile entity table.

17. A non-transitory computer-readable medium, comprising computer software recorded thereon, which, when executed in a computer device, causes the computer device to provide a firewall routine comprising

maintaining a first mobile entity table comprising identifiers of mobile entities which are active in the firewall,

sending the first mobile entity table to a predefined set of other firewalls as a response to an addition, deletion or modification of an entry in the mobile entity table,

receiving from at least one other firewall a mobile entity table comprising identifiers of mobile entities which are active in the at least one other firewall, and

maintaining a second mobile entity table comprising identifiers of mobile entities which are active in the at least one other firewall and an identifier of the corresponding at least one other firewall on the basis of the mobile entity table.

Assignments (11)