Apple Inc.

David Schinazi

Vincent Lubet

Prabhakar Lakhera

Sushant U Chavan

An electronic device includes a port binding module that binds ports to processes. A process running on the electronic device sends a port request to the port binding module. The port binding module determines whether the requested port is a restricted port. If not, the port binding module binds the requested port to the process. If the requested port is restricted, then the port binding module determines whether the requesting process has an entitlement corresponding to the port. If the requesting process has the corresponding entitlement, then the port binding module binds the requested restricted port to the process. If not, then the port binding module denies binding the requested restricted port to the process.

Apparatus and methods for restricted binding of ports

An electronic device includes an address generator module that generates a source address for each traffic class to be sent using a network interface. The source address includes a Unique Local Address (ULA) prefix and an interface identifier having a traffic class identifier as one or more most significant bits and a randomly generated remainder. The address generator module generates a destination address having the ULA prefix and the traffic class identifier. When a processor of the electronic device is selecting a source address for the traffic class according to rules of a network layer protocol (e.g., IPv6), including a rule that a longest matching address of possible source addresses to the given destination is selected as the source address, the generated source address is selected due to the one or more most significant bits of the interface identifier matching with the traffic class identifier of the destination address.

Growing community of inventors

San Francisco, CA, United States of America

David Schinazi