Methods and apparatus for improving security while transmitting a data packet
View Patent ↗In a first aspect, a first method of transmitting a data packet is provided. The first method includes the steps of (1) for each connection from which a data packet may be transmitted, storing header data corresponding to the connection; (2) employing a user application to form header and payload data of a packet, wherein the user application is associated with a connection from which the packet is to be transmitted; and (3) while transmitting the packet, comparing one or more portions of the packet header data with the header data corresponding to the connection with which the user application is associated. Numerous other aspects are provided.
1. A method of transmitting a data packet, comprising:
for each connection from which a data packet is transmitted, storing header data corresponding to the connection;
employing a user application to form header and payload data of a packet, wherein the user application is associated with a connection from which the packet is to be transmitted; and
while transmitting the packet, comparing with packet parsing logic one or more portions of the packet header data with the header data corresponding to the connection with which the user application is associated.
2. The method of claim 1 wherein employing a user application to form header and payload data of the packet includes reducing a latency to form the packet.
3. The method of claim 1 wherein comparing with the packet parsing logic one or more portions of the packet header data with the header data corresponding to the connection with which the user application is associated includes reducing successful transmission of a packet with inaccurate header data.
4. The method of claim 1 wherein comparing with packet parsing logic one or more portions of the packet header data with the header data corresponding to the connection with which the user application is associated includes:
extracting portions of the packet header data with the packet parsing logic; and
comparing with the packet parsing logic the extracted portions of the packet header data with the header data corresponding to the connection with which the user application is associated.
5. The method of claim 1 further comprising stopping packet transmission if the one or more portions of the packet header data do not match the header data corresponding to the connection with which the user application is associated.
6. The method of claim 1 further comprising corrupting the packet if the one or more portions of the packet header data do not match the header data corresponding to the connection with which the user application is associated.
7. The method of claim 1 wherein:
storing header data corresponding to the connection includes storing a reduced version of header data corresponding to the connection; and
comparing with packet parsing logic one or more portions of the packet header data with the header data corresponding to the connection with which the user application is associated includes comparing with the packet parsing logic one or more portions of the packet header with the reduced version of the header data corresponding to the connection with which the user application is associated.
8. An apparatus for transmitting a data packet, comprising:
a storage device; and
packet parsing logic coupled to the storage device;
wherein the apparatus is adapted to:
for each connection from which a data packet is transmitted, store header data corresponding to the connection in the storage device;
receive a packet whose header and payload data are formed by a user application, wherein the user application is associated with a connection from which the packet is to be transmitted; and
while transmitting the packet, using the packet parsing logic to compare one or more portions of the packet header data with the header data corresponding to the connection with which the user application is associated.
9. The apparatus of claim 8 wherein the apparatus is further adapted to reduce successful transmission of a packet with inaccurate header data.
10. The apparatus of claim 8 wherein the apparatus is further adapted to:
extract portions of the packet header data; and
compare the extracted portions of the packet header data with the header data corresponding to the connection with which the user application is associated.
11. The apparatus of claim 8 wherein the apparatus is further adapted to stop packet transmission if the one or more portions of the packet header data do not match the header data corresponding to the connection with which the user application is associated.
12. The apparatus of claim 8 wherein the apparatus is further adapted to corrupt the packet if the one or more portions of the packet header data do not match the header data corresponding to the connection with which the user application is associated.
13. The apparatus of claim 8 wherein the apparatus is further adapted to:
store a reduced version of header data corresponding to the connection; and
compare one or more portions of the packet header data with the reduced version of the header data corresponding to the connection with which the user application is associated.
14. A system, comprising:
a processor adapted to execute one or more user applications; and
an apparatus for transmitting a data packet, coupled to the processor, and having:
a storage device; and
packet parsing logic coupled to the storage device;
wherein the system is adapted to:
for each connection from which a data packet is transmitted, store header data corresponding to the connection in the storage device;
employ a user application to form header and payload data of a packet, wherein the user application is associated with a connection from which the packet is to be transmitted; and
while transmitting the packet, use the packet parsing logic to compare one or more portions of the packet header data with the header data corresponding to the connection with which the user application is associated.
15. The system of claim 14 wherein the system is further adapted to reduce a latency to form the packet.
16. The system of claim 14 wherein the system is further adapted to reduce successful transmission of a packet with inaccurate header data.
17. The system of claim 14 wherein the system is further adapted to:
extract portions of the packet header data; and
compare the extracted portions of the packet header data with the header data corresponding to the connection with which the user application is associated.
18. The system of claim 14 wherein the system is further adapted to stop packet transmission if the one or more portions of the packet header data do not match the header data corresponding to the connection with which the user application is associated.
19. The system of claim 14 wherein the system is further adapted to corrupt the packet if the one or more portions of the packet header data do not match the header data corresponding to the connection with which the user application is associated.
20. The system of claim 14 wherein the system is further adapted to:
store a reduced version of header data corresponding to the connection; and
compare one or more portions of the packet header data with the reduced version of the header data corresponding to the connection with which the user application is associated.