MULTI-LEVEL FIREWALL ARCHITECTURE Russian patent published in 2009 - IPC G06F21/22 G06F12/14 

FIELD: information technology.

SUBSTANCE: invention relates to the architecture of a multi-level firewall and methods of multi-level packet filtering. The firewall infrastructure contains: a set of level processes, where each level process can process level parametres for a packet, associated with that level process, and each level process can also send a classification query, which includes level parametres; and a first firewall tool, which includes: a level interface for receiving first level parametres from the requesting level process and for returning action to the requesting level process, where the requesting level process is one of the said set of level processes, a set of filters and a search component for identification of at least one matching filter from the said set of filters and for identification from this matching filter, action, which is subject to returning by the level interface.

EFFECT: reduced excess execution of syntax analysis and interpretation of packets using levels in a network stack and firewall.

28 cl, 9 dwg