Mobile Terminal Defense Module for DoS Attack Prevention

The patent introduces a defense module as an intermediary component between the network and the mobile terminal. This module intercepts and validates incoming connection requests (SYN packets) before they reach the terminal, filtering out malicious DoS attack packets while allowing legitimate connections to proceed. The defense module acts as a protective mediator that enables the terminal to safely provide soft AP functionality without direct exposure to network threats.

The defense module performs preliminary validation of connection requests by examining SYN packets before the full three-handshake TCP connection process begins. It pre-filters malicious packets using security rules and only allows potentially legitimate requests to proceed to the complete handshake process. This preliminary action reduces the time burden by eliminating the need for full handshake verification of obviously malicious packets.

The defense module applies partial processing to connection requests by performing selective validation based on security rules and packet characteristics. Instead of fully processing every incoming connection request through the complete TCP handshake, it applies expedited filtering to suspicious packets (processing only what's necessary to identify and reject them) while allowing clearly legitimate packets to proceed with standard processing. This partial action approach maintains connection acceptance for valid requests while dramatically reducing resource consumption during DoS attacks.