	US 12,237,986 B2
	Method and system for deep packet inspection in software defined networks
Yossi Barsheshet, Ashdod (IL); Simhon Doctori, Gan-Yavne (IL); and Ronen Solomon, Ramat-Gan (IL)
Assigned to ORCKIT CORPORATION
Filed by ORCKIT CORPORATION, West Newbury, MA (US)
Filed on May 2, 2022, as Appl. No. 17/734,147.
Application 17/734,147 is a continuation of application No. 16/865,361, filed on May 3, 2020.
Application 16/865,361 is a continuation of application No. 15/126,288, granted, now 10,652,111, issued on May 12, 2020, previously published as PCT/US2015/026869, filed on Apr. 21, 2015.
Claims priority of provisional application 61/982,358, filed on Apr. 22, 2014.
Prior Publication US 2022/0263735 A1, Aug. 18, 2022
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 43/028 (2022.01); H04L 12/64 (2006.01); H04L 43/026 (2022.01); H04L 47/2483 (2022.01); H04L 49/00 (2022.01); H04L 69/16 (2022.01)

CPC H04L 43/028 (2013.01) [H04L 12/6418 (2013.01); H04L 43/026 (2013.01); H04L 47/2483 (2013.01); H04L 49/70 (2013.01); H04L 69/161 (2013.01)]

30 Claims

1. A system for transporting packets between distinct first, second, and third entities over a packet network, the system comprising:

a network node configured to receive, from the first entity over the packet network, a packet addressed to the second entity; and

a controller that is external to the network node and that is configured to send to the network node over the packet network an instruction that comprises an identifier of the third entity and a packet-applicable criterion,

wherein the network node is configured to check if the packet satisfies the criterion,

wherein the network node is configured to send the packet over the packet network to the second entity, in response to the packet not satisfying the criterion, and

wherein the network node is configured to send the packet over the packet network only to the third entity and to block the packet from being sent to the second entity, in response to the packet satisfying the criterion.