专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

11. 发明授权

US08824677B1 Provably secure and efficient pseudorandom number generation 有权
标题翻译：可靠的高效伪随机数生成
公开(公告)号：US08824677B1
公开(公告)日：2014-09-02
申请号：US12475291
申请日：2009-05-29
申请人： Zulfikar Ramzan , Sanjay Sawhney , Virendra Kumar
发明人： Zulfikar Ramzan , Sanjay Sawhney , Virendra Kumar
IPC分类号： H04L9/06
CPC分类号： H04L9/0869
摘要： A pseudorandom number is generated from a random seed number using a collision-resistant hash function. A iteration input is extracted from the seed number. A hardcore predicate is applied to the iteration input to generate a pseudorandom bit. A pairwise-independent function is identified using a pairwise-independent function identifier extracted from the seed number and applied to the iteration input to produce a randomized iteration input. The collision-resistant hash function is applied to the randomized iteration input to produce a hash result and pad the output. The padded hash result is assigned as the iteration input for the next iteration. The process repeats iteratively and pseudorandom bits are generated using the hardcore predicate in each iteration until a predetermined number of pseudorandom bits are generated. The pseudorandom number is constructed using the generated pseudorandom bits.
摘要翻译：使用防碰撞哈希函数从随机种子号生成伪随机数。从种子号提取迭代输入。硬核谓词应用于迭代输入以生成伪随机位。使用从种子编号提取的并且应用于迭代输入的成对独立函数标识符来识别成对独立函数以产生随机迭代输入。抗冲突散列函数被应用于随机迭代输入以产生散列结果并且填充输出。填充哈希结果被分配为下一次迭代的迭代输入。该过程重复迭代，并且在每次迭代中使用硬核谓词生成伪随机比特，直到生成预定数量的伪随机比特。伪随机数使用生成的伪随机位来构造。

12. 发明授权

US08543861B1 Systems and methods for diagnosing a network configuration of a computing device 有权
标题翻译：用于诊断计算设备的网络配置的系统和方法
公开(公告)号：US08543861B1
公开(公告)日：2013-09-24
申请号：US12753542
申请日：2010-04-02
申请人： Sanjay Sawhney , Anand Kashyap
发明人： Sanjay Sawhney , Anand Kashyap
IPC分类号： G06F11/07
CPC分类号： G06F11/3006 , G06F11/0709 , G06F11/0751 , G06F11/0793 , G06F11/3051 , H04L43/00 , H04L43/50
摘要： A computer-implemented method for diagnosing a network configuration of a computing device is described. A test network configuration is captured. A test network signature is generated from the test network configuration. A label is assigned to the test network signature. A determination is made as to whether the test network signature is labeled as an unsuccessful network signature. If the test network signature is labeled unsuccessful, one or more procedures to change the label are generated.
摘要翻译：描述了用于诊断计算设备的网络配置的计算机实现的方法。捕获测试网络配置。从测试网络配置生成测试网络签名。标签被分配给测试网络签名。确定测试网络签名是否被标记为不成功的网络签名。如果测试网络签名被标记为不成功，则生成一个或多个更改标签的过程。

13. 发明申请

US20110225624A1 Systems and Methods for Providing Network Access Control in Virtual Environments 有权
标题翻译：在虚拟环境中提供网络访问控制的系统和方法
公开(公告)号：US20110225624A1
公开(公告)日：2011-09-15
申请号：US12724414
申请日：2010-03-15
申请人： Sanjay Sawhney , Matthew Conover , Bruce Montague
发明人： Sanjay Sawhney , Matthew Conover , Bruce Montague
IPC分类号： G06F21/00 , G06F9/44
CPC分类号： G06F9/45558 , G06F21/53 , G06F2009/45587
摘要： A computer-implemented method for providing network access control in virtual environments. The method may include: 1) injecting a transient security agent into a virtual machine that is running on a host machine; 2) receiving, from the transient security agent, an indication of whether the virtual machine complies with one or more network access control policies; and 3) controlling network access of the virtual machine based on the indication of whether the virtual machine complies with the one or more network access control policies. Various other methods, systems, and computer-readable media are also disclosed herein.
摘要翻译：一种用于在虚拟环境中提供网络访问控制的计算机实现的方法。该方法可以包括：1）将瞬时安全代理注入到在主机上运行的虚拟机; 2）从瞬态安全代理接收虚拟机是否符合一个或多个网络访问控制策略的指示; 以及3）基于虚拟机是否符合一个或多个网络访问控制策略的指示来控制虚拟机的网络访问。本文还公开了各种其它方法，系统和计算机可读介质。

14. 发明申请

US20050041812A1 Method and system for stateful storage processing in storage area networks 审中-公开
标题翻译：存储区域网状态存储处理方法与系统
公开(公告)号：US20050041812A1
公开(公告)日：2005-02-24
申请号：US10688848
申请日：2003-10-17
申请人： Kumar Sundararajan , Dharmesh Shah , Sanjay Sawhney , Atul Pandit , Aseem Vaid , Richard Moeller
发明人： Kumar Sundararajan , Dharmesh Shah , Sanjay Sawhney , Atul Pandit , Aseem Vaid , Richard Moeller
IPC分类号： H04K1/00 , H04L29/06 , H04L29/08
CPC分类号： H04L63/0428 , H04L63/102 , H04L63/1408 , H04L67/1097
摘要： A system (and methods) for performing a service operation on a Fibre Channel or other like channels. The system has an interface coupled to a Fibre Channel. A classifier is coupled to the interface. The classifier is adapted to receive an initiator frame from the interface. The classifier is adapted to determine header information from the initiator frame and is also adapted to determine source information, destination information, and exchange information from the header information. A flow content addressable memory is coupled to the classifier. The flow content addressable memory is configured to store one or more header information. Each of the one or more header information is associated with a state. The system has a rule content addressable memory coupled to the classifier. The rule content addressable memory is configured to store one of a plurality of policies. A processing module is coupled to the classifier. The processing module is adapted to process an incoming payload associated with the initiator frame and the header information.
摘要翻译：一种用于在光纤通道或其他类似通道上执行服务操作的系统（和方法）。该系统具有耦合到光纤通道的接口。分类器耦合到接口。分类器适于从接口接收发起者帧。分类器适于确定来自发起者帧的报头信息，并且还适于从标题信息确定源信息，目的地信息和交换信息。流内容可寻址存储器耦合到分类器。流内容可寻址存储器被配置为存储一个或多个头信息。一个或多个标题信息中的每一个与状态相关联。该系统具有耦合到分类器的规则内容可寻址存储器。规则内容可寻址存储器被配置为存储多个策略中的一个。处理模块耦合到分类器。处理模块适于处理与发起者帧相关联的传入有效载荷和报头信息。

15. 发明申请

US20050033988A1 Method and system for transparent encryption and authentication of file data protocols over internet protocol 审中-公开
标题翻译：通过互联网协议透明加密和文件数据协议认证的方法和系统
公开(公告)号：US20050033988A1
公开(公告)日：2005-02-10
申请号：US10688204
申请日：2003-10-17
申请人： Ganesan Chandrashekhar , Sanjay Sawhney , Hemant Puri , Aseem Vaid , Dharmesh Shah
发明人： Ganesan Chandrashekhar , Sanjay Sawhney , Hemant Puri , Aseem Vaid , Dharmesh Shah
IPC分类号： H04L9/00 , H04L29/06
CPC分类号： H04L63/0435 , H04L63/08 , H04L63/123
摘要： A method processing one or more files using a security application. The method includes a method processing one or more files using a security application. The method includes connecting the client to a proxy server, which is coupled to one or more NAS servers. The method includes requesting for a file from a client to the proxy server and authenticating a requesting user of the client. The method also includes authorizing the requesting user for the file requested; requesting for the file from the one or more NAS servers after authenticating and authorizing; and requesting for the file from the one or more storage elements. The file is transferred from the one or more storage elements through the NAS server to the proxy server. The method determines header information on the file at the proxy server and identifies a policy based upon the header information at the proxy server. The method also includes processing (e.g., decompressing the file, decrypting the file, and verifying the file) the file according to the policy. The method includes transferring the processed file to the user of the client.
摘要翻译：使用安全应用处理一个或多个文件的方法。该方法包括使用安全应用处理一个或多个文件的方法。该方法包括将客户端连接到代理服务器，代理服务器耦合到一个或多个NAS服务器。该方法包括从客户端向代理服务器请求文件，并验证客户端的请求用户。该方法还包括授权请求用户所请求的文件; 在认证和授权之后，从一个或多个NAS服务器请求文件; 以及从所述一个或多个存储元件请求所述文件。该文件通过NAS服务器从一个或多个存储元件传输到代理服务器。该方法确定代理服务器上的文件的头信息，并根据代理服务器上的头信息识别策略。该方法还包括根据策略处理（例如，解压缩文件，解密文件并验证文件）文件。该方法包括将处理的文件传送到客户端的用户。

16. 发明授权

US06341309B1 Firewall system for quality of service management 失效
标题翻译：防火墙系统为服务质量管理
公开(公告)号：US06341309B1
公开(公告)日：2002-01-22
申请号：US08998314
申请日：1997-12-24
申请人： Aseem Vaid , Sanjay Sawhney
发明人： Aseem Vaid , Sanjay Sawhney
IPC分类号： G06F15173
CPC分类号： H04L43/00 , H04L1/1854 , H04L41/0893 , H04L41/0896 , H04L41/22 , H04L41/5022 , H04L43/0829 , H04L43/0852 , H04L43/087 , H04L43/0888 , H04L47/11 , H04L47/15 , H04L47/20 , H04L47/2441 , H04L47/283 , H04L47/323 , H04L47/70 , H04L47/788 , H04L47/803 , H04L47/805 , H04L47/821 , H04L47/822 , H04L63/0263
摘要： A novel system for a network of computers to improve quality of services using a combination of a bandwidth mangement tool in a firewall. The present system includes, among other elements, a plurality of computers, which are each coupled to each other to form an internal network of computers (e.g., local area network or LAN). The system also includes a server, which has a memory sufficient to store a firewall program. The server is coupled to at least one of the plurality of computers, where the server is also coupled to an outgoing line to a wide area network of computers, which can be, for example, the Intenet. A bandwidth management tool is coupled to or stored in the server, where the bandwidth management tool is capable of monitoring incoming and outgoing information to and from the server.
摘要翻译：一种用于计算机网络的新型系统，其利用防火墙中的带宽管理工具的组合来提高服务质量。除了其他元件之外，本系统还包括多个计算机，每个计算机各自彼此耦合以形成计算机的内部网络（例如，局域网或LAN）。该系统还包括具有足以存储防火墙程序的内存的服务器。服务器耦合到多个计算机中的至少一个计算机，其中服务器还耦合到出口线到计算机的广域网络，其可以是例如Intenet。带宽管理工具耦合到或存储在服务器中，其中，带宽管理工具能够监测来往服务器的进入和离开的信息。

17. 发明授权

US08938782B2 Systems and methods for providing network access control in virtual environments 有权
标题翻译：在虚拟环境中提供网络访问控制的系统和方法
公开(公告)号：US08938782B2
公开(公告)日：2015-01-20
申请号：US12724414
申请日：2010-03-15
申请人： Sanjay Sawhney , Matthew Conover , Bruce Montague
发明人： Sanjay Sawhney , Matthew Conover , Bruce Montague
IPC分类号： G06F21/00 , G06F9/455 , G06F21/53
CPC分类号： G06F9/45558 , G06F21/53 , G06F2009/45587
摘要： A computer-implemented method for providing network access control in virtual environments. The method may include: 1) injecting a transient security agent into a virtual machine that is running on a host machine; 2) receiving, from the transient security agent, an indication of whether the virtual machine complies with one or more network access control policies; and 3) controlling network access of the virtual machine based on the indication of whether the virtual machine complies with the one or more network access control policies. Various other methods, systems, and computer-readable media are also disclosed herein.
摘要翻译：一种用于在虚拟环境中提供网络访问控制的计算机实现的方法。该方法可以包括：1）将瞬时安全代理注入到在主机上运行的虚拟机; 2）从瞬态安全代理接收虚拟机是否符合一个或多个网络访问控制策略的指示; 以及3）基于虚拟机是否符合一个或多个网络访问控制策略的指示来控制虚拟机的网络访问。本文还公开了各种其它方法，系统和计算机可读介质。

18. 发明申请

US20130110784A1 MANAGING BACKUPS OF DATA OBJECTS IN CONTAINERS 有权
标题翻译：管理集装箱数据对象的备份
公开(公告)号：US20130110784A1
公开(公告)日：2013-05-02
申请号：US13285331
申请日：2011-10-31
申请人： Fanglu Guo , Petros Efstathopoulos , Xianbo Zhang , Sanjay Sawhney , Weibao Wu
发明人： Fanglu Guo , Petros Efstathopoulos , Xianbo Zhang , Sanjay Sawhney , Weibao Wu
IPC分类号： G06F7/00
CPC分类号： G06F11/1448 , G06F11/1451 , G06F11/1469 , G06F2201/81
摘要： Containers that store data objects that were written to those containers during a particular backup are accessed. Then, a subset of the containers is identified; the containers in the subset have less than a threshold number of data objects associated with the particular backup. Data objects that are in containers in that subset and that are associated with the backup are copied to one or more other containers. Those other containers are subsequently used to restore data objects associated with the backup.
摘要翻译：存储在特定备份期间存储写入这些容器的数据对象的容器。然后，识别容器的一个子集; 子集中的容器具有小于阈值数量的与特定备份相关联的数据对象。位于该子集中并与备份关联的容器中的数据对象将复制到一个或多个其他容器。这些其他容器随后用于还原与备份相关联的数据对象。

19. 发明授权

US08429745B1 Systems and methods for data loss prevention on mobile computing systems 有权
标题翻译：移动计算系统数据丢失预防的系统和方法
公开(公告)号：US08429745B1
公开(公告)日：2013-04-23
申请号：US13243198
申请日：2011-09-23
申请人： Jim Casaburi , Kent Griffin , Susanta Nanda , Sanjay Sawhney , Matthew Conover
发明人： Jim Casaburi , Kent Griffin , Susanta Nanda , Sanjay Sawhney , Matthew Conover
IPC分类号： G06F21/00
CPC分类号： G06F21/554 , G06F21/6254 , G06F2221/2101 , G06F2221/2143
摘要： A computer-implemented method for data loss prevention on mobile computing systems may include (1) identifying a mobile computing system configured to execute only one application at a time as a foreground application, (2) determining that the mobile computing system has begun executing a sensitive application as the foreground application, (3) identifying a first enumeration of screenshots stored on the mobile computing system when the mobile computing system began executing the sensitive application as the foreground application, (4) identifying a second enumeration of screenshots stored on the mobile computing system, (5) determining that at least one new screenshot was taken on the mobile computing system while the sensitive application was the foreground application by detecting a difference between the first enumeration and the second enumeration, and (6) performing a security action upon detecting the difference. Various other methods, systems, and computer-readable media are also disclosed.
摘要翻译：用于移动计算系统的用于数据丢失预防的计算机实现的方法可以包括（1）识别被配置为一次只执行一个应用的移动计算系统作为前台应用，（2）确定移动计算系统已经开始执行敏感应用程序作为前台应用程序，（3）当移动计算系统开始执行敏感应用程序作为前台应用程序时，识别存储在移动计算系统上的屏幕截图的第一枚举;（4）识别存储在移动计算系统上的屏幕截图的第二枚举计算系统，（5）通过检测第一次枚举和第二次枚举之间的差异，确定在移动计算系统上至少采用一个新的截图，而敏感应用程序是前台应用程序，以及（6）执行安全措施检测差异。还公开了各种其它方法，系统和计算机可读介质。

20. 发明申请

US20090119752A1 Method and system for transparent encryption and authentication of file data protocols over internet protocol 审中-公开
标题翻译：通过互联网协议透明加密和文件数据协议认证的方法和系统
公开(公告)号：US20090119752A1
公开(公告)日：2009-05-07
申请号：US11947623
申请日：2007-11-29
申请人： Ganesan Chandrashekhar , Sanjay Sawhney , Hemant Puri , Aseem Vaid , Dharmesh Shah
发明人： Ganesan Chandrashekhar , Sanjay Sawhney , Hemant Puri , Aseem Vaid , Dharmesh Shah
IPC分类号： H04L9/00
CPC分类号： H04L63/0435 , H04L63/08 , H04L63/123
摘要： A method processing one or more files using a security application. The method includes a method processing one or more files using a security application. The method includes connecting the client to a proxy server, which is coupled to one or more NAS servers. The method includes requesting for a file from a client to the proxy server and authenticating a requesting user of the client. The method also includes authorizing the requesting user for the file requested; requesting for the file from the one or more NAS servers after authenticating and authorizing; and requesting for the file from the one or more storage elements. The file is transferred from the one or more storage elements through the NAS server to the proxy server. The method determines header information on the file at the proxy server and identifies a policy based upon the header information at the proxy server. The method also includes processing (e.g., decompressing the file, decrypting the file, and verifying the file) the file according to the policy. The method includes transferring the processed file to the user of the client.
摘要翻译：使用安全应用处理一个或多个文件的方法。该方法包括使用安全应用处理一个或多个文件的方法。该方法包括将客户端连接到代理服务器，代理服务器耦合到一个或多个NAS服务器。该方法包括从客户端向代理服务器请求文件，并验证客户端的请求用户。该方法还包括授权请求用户所请求的文件; 在认证和授权之后，从一个或多个NAS服务器请求文件; 以及从所述一个或多个存储元件请求所述文件。该文件通过NAS服务器从一个或多个存储元件传输到代理服务器。该方法确定代理服务器上的文件的头信息，并根据代理服务器上的头信息识别策略。该方法还包括根据策略处理（例如，解压缩文件，解密文件并验证文件）文件。该方法包括将处理的文件传送到客户端的用户。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式