Security Network Interface Controller (SNIC) Preprocessor with Cyber Data Threat Detection and Response Capability that Provides Security Protection for a Network Device with Memory or Client Device with Memory or Telecommunication Device with Memory

Abstract

Data Input Output (I/O) processing interfaces such as the typical Network Interface Controller (NIC) do not prevent a hacker from accessing sensitive device memory data. The existing typical NIC establishes the cyber data handshake with no data security layer or discriminant response to the data traffic content while performing protocol specification IEEE 802.x. The Security Network Interface Controller SNIC embodiment, collocated with the existing the NIC interface circuit location, provides preprocessing/filtering of the incoming message packet data for malware and Hacker threats, to secure the network device memory and prevent serious damage or data loss. The Security Network Interface Controller (SNIC) embodiment method with autonomous response to the hacker ensures that the device memory is never breached, but the hacker will think they have gained access to the targeted device memory while intelligence on the Hacker is reported.

What is claimed is: 
     
         1 . The Security Network Interface Controller (SNIC) comprised of electronic circuit components, utilizes a typical Network Interface Controller (NIC) or RF Wireless Network Interface Controller (WNIC) connected to a collocated SNIC embodiment containing a processor and program memory, connected to a SNIC embodiment start up PROM for initialization of the SNIC embodiment components, connected to a SNIC embodiment Random Access Memory (RAM) buffer memory common to a Client buss, connected to a SNIC embodiment flash memory that stores the software security program, connected to a SNIC embodiment upload interface port and memory to store threat data lists and authorized data lists, connected to a SNIC embodiment threat status memory storage (SMS) as write only memory (WOM) component to capture isolate and quarantine Hacker malware that could have optional forensic analysis and retrieval, connected to a SNIC embodiment set of register indicators for CPU AI program vectoring, connected to a SNIC embodiment output port for reporting Hacker frame header data content by generating SNIC embodiment register status, time stamp and Hacker attempt counts, connected to a unique SNIC embodiment sequencer/comparator to filter incoming data for malware, connected to a SNIC embodiment autonomous action spoofing Hacker response circuit are the hardware/software invention component features of the SNIC embodiment circuit to accomplish preprocessing and gatekeeper methods and processes of network message data integrity, cyber data security, Hacker deception for data traffic to and from a Client device memory and to prevent all known hacker attempts to bridge entry of a targeted network device memory or product device memory or Client device memory from contamination of the data contents or from accessing data from the above device memories that utilize IEEE 802.X protocols for data transmission interactive connections. (See  FIGS. 1, 2 ) 
     
     
         2 . The SNIC embodiment electronic circuit device embodiment defined in  claim 1  wherein the startup program read only memory (PROM) circuit device will be initialized for the device interface comprising of events cast for the environment in which it is installed in, that may be to include but is not limited to, wired or wireless interfaces or mounted platforms (See  FIG. 5 ). 
     
     
         3 . The SNIC embodiment electronic circuit device defined in  claim 1  incorporates an AI sequencer/comparator decision making circuit that is a microprocessor driven software program that preprocesses and filters the incoming digitized data located between the NIC or VNIC or WNIC output and the Client Device Memory, automates the threat response and acknowledges handshaking with the threat sender with cyber defensive maneuvers and autonomous responses to a hacker from preprocessed message data content analytics and issues a spoof response to the Hacker when malware is discovered during the filtering process, but allows data through put to the Client device memory if no malware or Hacker threats are found and authorized (See  FIGS. 3 and 4 ). 
     
     
         4 . The SNIC embodiment electronic circuit device defined in  claim 1  operates with multiple communication protocols but not limited to: Ethernet NIC, RF wireless telecommunications WNIC, custom application security software enabled with Artificial Intelligence (AI) for decision making responses to make the Hacker think entry of the device memory was bridged or obtained but in reality the Hacker was denied the targeted device memory by deception and spoofing AI algorithms, and custom user threat report log generation tailored to user capability and Hacker learning algorithms custom for the SNIC data sequencer program (See  FIGS. 5, 6 ). 
     
     
         5 . The SNIC embodiment electronic circuit device defined in  claim 1  incorporates a protocol data frame search for threat content and executable software data code, to tag frames with a Management Register alarm bit if bad content data is discovered, to flag frames that have targeted words on incoming messages or threats designated for Client device memory, and set indicators that can be used to generate a status report of flagged data for display on the Network administrators display screen or client screen or printers, but not allowing the message data or data content to go into the targeted device memory of the addressed client device memory (See  FIGS. 5, 6 ). 
     
     
         6 . The SNIC electronic circuit device defined in  claim 1  and  claim 5  method and process claim is that if there are no threat contents in the message and the sender IP is recognized as authorized, then message data will be allowed to process as normal to the device memory and a status report output will show a verification of throughput to Client Device Memory (See  FIGS. 3, 4, 5, 11, 12 ). 
     
     
         7 . The SNIC embodiment electronic circuit device defined in  claim 1  incorporates an input upload port and memory storage for a list of known Hacker ID and destination address information, known Authorized user ID and destination address and formatted in a priority sequence for each Hacker or Authorized user such that the SNIC sequencer and comparator circuits can filter the incoming data content for malware or dangerous threats to the Client device equipment or to the Client device memory(see  FIG. 6 ). 
     
     
         8 . The process and method of  claim 7 , wherein an authorization list further comprising priority of identification (ID) and destination IP address data code is uploaded to the SNIC embodiment Input Memory and whose content data will be compared to incoming frame data for validation to gain access to the Client Device Memory and if found to be a no match shall not be allowed to gain access to the Client Device Memory. 
     
     
         9 . The process and method of  claim 1 , wherein a specific advantage of using a SNIC embodiment invention is that access to any SNIC embodiment connected Device Memory on a bus controlled by a Device CPU will have preprocessed, filtered and gatekeeper processes at the port of entry NIC or WNIC location which allows only validated data to pass to the Device Memory rather than from a software firewall (such as Wireshark or Norton) which are resident in the Device Memory and immediately bridged by a hacker because the Hacker data has to be in the Device Memory for these products to work. 
     
     
         10 . The SNIC electronic circuit device defined in  claim 1  negates the need for the Client device to have a need for a resident memory security firewall software program and this post interface processing task is now resident on the SNIC flash memory storage device in a unique algorithm for preprocessing and filtering methods and processes within custom embedded architecture and with Hacker response capability to preprocess and filter the message data to prevent the Client device memory from breach or contamination of data by the Hacker (See  FIGS. 5 and 6 ). 
     
     
         11 . The SNIC electronic circuit device defined in  claim 1  will replace all typical nonsecure NIC interfaces with either a dongle box SNIC embodiment when a NIC mother board is involved or a drop in SNIC circuit board replacement for a home computer such as a PCI circuit board or as in the case of a portable device such as an I-Phone, Tablet, Laptop, shall be made to fit with the NIC or RF as an additional integrated circuit micro miniaturized collocated component to form a SNIC interface embodiment, the unique invention method and utility of memory security process being the same but not limited to fir (See  FIGS. 2, 11, 12 ). 
     
     
         12 . The SNIC embodiment electronic circuit device defined in  claim 1 , will defeat all known methods of hackers attempts to gain entry into a targeted device memory and adapt from learned experiences how to defeat future forms and methods of hack entry attacks while outputting a status report of such an occurrence and if an undesired occurrence by a Hacker is attempted, all message data will be dumped to a Secure Memory Storage (SMS) device as contaminated data for quarantine and isolation from the bus data traffic to the destination targeted Client device memory while preventing access to the device memory bus (See  FIG. 5   520 ). 
     
     
         13 . The process and method of  claim 1  and  claim 12 , wherein a multiple of specific advantages of using a SNIC embodiment invention is that it doesn't give any feedback to the hacker while intelligence is gather on the Hacker, it has an embodiment memory isolation trap SMS where all harmful data is sent and quarantined, it spoofs the hacker and keeps them in the dark to its presence, it will learn and adapt to present and future attacks, it brings security to the beginning of the message process, and it can fit in any network device. 
     
     
         14 . The process and method of  claim 1  and  claim 13 , wherein a SNIC containing a typical NIC or WNIC can be architecturally sized for the environment such as a Laptop Computer requiring a dongle attachment to acquire the SNIC embodiment invention when a mother board containing an onboard NIC cannot be back fitted and security for the device memory is needed.