| 摘要 |
A method and apparatus for enhancing the security of a data communications network. When a packet or other data unit enters the network, an associated geolocation is ascertain and a value representing that geolocation, that is, geolocation information, is inserted into the packet. When a packet is about to leave the network, the previously inserted geolocation information is analyzed, and in most cases, removed, and a decision is made according the analysis as to whether to forward the packet or discard it due to a suspect character. In some cases, suspect packets are instead flagged and forwarded, sometimes in connection with sending a warning to the intended recipient.
|
