IP Library Granted Patent US 11,108,738
Granted Patent B2
US 11,108,738 · App. 16/419,035 · Granted Aug 31, 2021

Communication apparatus and communication system

Inventors: Kazuaki Honma (Kawasaki, JP); Keigo Uchizumi (Kawasaki, JP)
Assignee: ALAXALA NETWORKS CORPORATION
H04L63/0236H04L61/2015H04L61/2517H04L61/6022H04L63/101
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,108,738
App. No.
16/419,035
Granted
Aug 31, 2021
Kind
B2
Abstract

A whitelist generation possibility/impossibility determination unit transmits a signal for permitting generation of a whitelist to a whitelist generating unit, in a case where an IP address corresponding to a source MAC address stored in a protocol information table matches the extracted source IP address, and in a case where an IP address corresponding to a destination MAC address stored in the protocol information table matches the extracted destination IP address.

Claims (52)

1. A communication apparatus for relaying a packet received according to a whitelist including a MAC address and an IP address, comprising:

a protocol information table that stores the MAC address and the IP address in association with teach other;

a whitelist storage memory that stores the whitelist; and

a processor configured to:

generate the whitelist;

determine whether or not generation of the whitelist is possible,

wherein the processor extracts a source MAC address, a source IP address, a destination MAC address, and a destination IP address, from contents in communication between a server and a client terminal according to a protocol for dynamically assigning the IP address, and

wherein, in a case where the protocol information table is search based on the extracted source MAC address, and the IP address corresponding to the source MAC address stored in the protocol information table matches the extracted source IP address, and

in case where the protocol information table is searched based on the extracted destination MAC address, and the IP address corresponding to the destination MAC address stored in the protocol information table matches the extracted destination IP address,

the processor transmits a signal for permitting generation of the whitelist.

2. The communication apparatus according to claim 1 ,

wherein the processor performs generation of the whitelist, in a case where a signal for permitting generation of the whitelist is received.

3. The communication apparatus according to claim 2 ,

wherein the processor does not perform generation of the whitelist, in a case where a signal for permitting generation of the whitelist is not received.

4. The communication apparatus according to claim 1 , further comprising:

a control unit that generates the protocol information table from content in communication according to the protocol exchanged between the server and the client terminal.

5. The communication apparatus according to claim 1 ,

wherein, once the packet is received in the whitelist generation state in which generation of the whitelist is performed, the processor generates the whitelist and writes the whitelist into the whitelist storage memory, in a case where generation of the whitelist is permitted.

6. The communication apparatus according to claim 5 ,

wherein the processor performs update of the whitelist stored in the whitelist storage memory, in a case where the protocol information table is updated in the whitelist generation state in which generation of the whitelist is performed.

7. A communication apparatus for relaying a packet received according to a whitelist including a MAC address and an IP address, comprising:

a protocol information table that stores the MAC address and the IP address in association with each other;

a whitelist storage memory that stores the whitelist; and

a processor configured to:

generate the whitelist;

determine whether or not generation of the whitelist is possible,

wherein the processor extracts a source MAC address, a source IP address, a destination MAC address, and a destination IP address, from contents in communication between a server and a client terminal according to a protocol for dynamically assigning the IP address, and

wherein, in a case where the protocol information table is searched based on the extracted source IP address, and the MAC address corresponding to the source IP address stored in the protocol information table matches the extracted source MAC address, and

in a case where the protocol information table is searched based on the extracted destination IP address, and the MAC address corresponding to the destination IP address stored in the protocol information table matches the extracted destination MAC address,

the processor transmits a signal from permitting generation of the whitelist.

8. The communication apparatus according to claim 7 ,

wherein the processor performs generation of the whitelist, in a case where the signal for permitting generation of the whitelist is received.

9. The communication apparatus according to claim 8 ,

wherein the processor does not perform generation of the whitelist, in a case where a signal for permitting generation of the whitelist is not received.

10. The communication apparatus according to claim 7 , further comprising:

a control unit that generates the protocol information table from contents in communication according to the protocol exchanged between the server and the client terminal.

11. The communication apparatus according to claim 7 ,

wherein, once the packet is received in a whitelist generation state in which generation of the whitelist is performed, the processor generates the whitelist and writes the whitelist into the whitelist storage memory, in a case where the generation of the whitelist is permitted.

12. The communication apparatus according to claim 11 ,

wherein the processor performs update of the whitelist stored in the whitelist storage memory, in a case where the protocol information table is updated in the whitelist generation state in which generation of the whitelist is performed.

13. A communication system, comprising:

a communication apparatus for relaying a packet received according to a whitelist including a MAC address and an IP address, the communication apparatus comprising:

a protocol information table that stores the MAC address and the IP address in association with each other;

a whitelist storage memory that stores the whitelist; and

a processor configured to:

generate the whitelist;

determine whether or not generation of the whitelist is possible,

wherein the processor extracts a source MAC address, a source IP address, a destination MAC address, and a destination IP address, from contents in communication between a server and a client terminal according to a protocol for dynamically assigning the IP address, and

wherein, in a case where the protocol information table is searched based on the extracted source MAC address, and the IP address corresponding to the source MAC address stored in the protocol information table matches the extracted source IP address, and

in case where the protocol information table is searched based on the extracted destination MAC address, and the IP address corresponding to the destination MAC address stored in the protocol information table matches the extracted destination IP address,

the processor transmits a signal for permitting generation of the whitelist; and

the server that performs dynamic assignment of the IP address to the client terminal.

Assignments (2)
NUNC PRO TUNC ASSIGNMENT Recorded Jul 22, 2026
From: ALAXALA NETWORKS CORPORATION
To: FORTINET, INC.
Reel/Frame 076028/0721 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 22, 2019
From: HONMA, KAZUAKI; UCHIZUMI, KEIGO
To: ALAXALA NETWORKS CORPORATION
Reel/Frame 049249/0541 →
Priority Claims (1)
JP JP2018-138085 · Jul 24, 2018 · national
Continuity (1)
Related Publication 20200036682A1 · Jan 30, 2020