会员体验
专利管家(专利管理)
工作空间(专利管理)
风险监控(情报监控)
数据分析(专利分析)
侵权分析(诉讼无效)
联系我们
交流群
官方交流:
QQ群: 891211   
微信请扫码    >>>
现在联系顾问~
热词
    • 11. 发明申请
    • CONTROLLED INTERCONNECTION OF NETWORKS USING VIRTUAL NODES
    • 使用虚拟节点控制网络的互连
    • US20120076150A1
    • 2012-03-29
    • US12889309
    • 2010-09-23
    • Radia Perlman
    • Radia Perlman
    • H04L12/28H04L12/56
    • H04L45/123H04L12/4641H04L41/12H04L45/02H04L45/12H04L45/26H04L45/586H04L49/70
    • Methods, apparatuses, and systems for controlling interconnections between nodes using virtual nodes are described. A physical node—such as a router, bridge, switch, etc.—stores a virtual cost associated with a virtual link that links virtual nodes of the physical node. A first physical port and a second physical port of the physical node are designated as belonging to a first virtual node and a third physical port of the physical node is designated as belonging to the second virtual node. The first physical port is associated with a first network partition and the second physical port is associated with a second network partition. The physical node transmits a routing information packet that includes the virtual cost.
    • 描述了使用虚拟节点来控制节点之间互连的方法,装置和系统。 物理节点(例如路由器,网桥,交换机等)存储与链接物理节点的虚拟节点的虚拟链路相关联的虚拟成本。 物理节点的第一物理端口和第二物理端口被指定为属于第一虚拟节点,并且物理节点的第三物理端口被指定为属于第二虚拟节点。 第一物理端口与第一网络分区相关联,并且第二物理端口与第二网络分区相关联。 物理节点发送包含虚拟成本的路由信息​​包。
    • 12. 发明授权
    • Path splitting with a connection-oriented network
    • 路由分裂与面向连接的网络
    • US09559953B2
    • 2017-01-31
    • US13994175
    • 2011-11-14
    • Radia PerlmanRamakrishna Huggahalli
    • Radia PerlmanRamakrishna Huggahalli
    • H04L12/741H04L12/751H04L12/723
    • H04L45/745H04L45/10H04L45/50
    • In one embodiment this disclosure provides a network device that includes an input port configured to link to a first device to receive a packet from the first device, wherein the received packet having a first label encoded therein, the value of the first label is specific to the link between the network device and the first device; the input port having an input port identifier, the input port identifier and the first label form an input tuple; a plurality of output ports configured to link to respective ones of a plurality of second devices, each output port having a respective output port identifier; a forwarding table that includes at least one input tuple and a corresponding set of output tuples; wherein each output tuple comprises an output port identifier and a second label, the value of the second label is specific to the link between the network device and a respective one of the second plurality of devices; and routing circuitry configured to compare the input tuple of the received packet with at least one input tuple of the forwarding table, identify the corresponding set of output tuples, and select one output tuple from among the set of corresponding output tuples; the routing circuitry is also configured to replace the first label of the received packet with the second label and send the packet to the output port specified by the output port identifier in the selected output tuple.
    • 在一个实施例中,本公开提供一种网络设备,其包括被配置为链接到第一设备以从第一设备接收分组的输入端口,其中所接收的分组具有在其中编码的第一标签,第一标签的值是特定于 网络设备和第一设备之间的链路; 所述输入端口具有输入端口标识符,所述输入端口标识符和所述第一标签形成输入元组; 多个输出端口被配置为链接到多个第二设备中的相应的第二设备,每个输出端口具有相应的输出端口标识符; 转发表,其包括至少一个输入元组和相应的一组输出元组; 其中每个输出元组包括输出端口标识符和第二标签,所述第二标签的值是所述网络设备与所述第二多个设备中的相应一个设备之间的链路专用的; 以及路由电路,被配置为将所接收的分组的输入元组与所述转发表的至少一个输入元组进行比较,识别相应的输出元组集合,并从所述一组相应的输出元组中选择一个输出元组; 路由电路还被配置为用第二标签替换接收到的分组的第一标签,并将分组发送到由选择的输出元组中的输出端口标识符指定的输出端口。
    • 13. 发明授权
    • Network routing protocol power saving method for network elements
    • 网元路由协议省电方式
    • US09141171B2
    • 2015-09-22
    • US13977512
    • 2012-06-29
    • Yen Hsiang ChewRadia Perlman
    • Yen Hsiang ChewRadia Perlman
    • H04L12/12G06F1/32H04L29/06H04L12/729H04L12/753H04L12/24H04L12/28
    • G06F1/3234H04L12/28H04L41/0833H04L41/12H04L45/125H04L45/48H04L69/14Y02D50/30
    • Methods and apparatus relating to network routing protocols to support power savings in network elements. A most utilized link path network topology for a computer network is discovered using a routing protocol such as a Spanning Tree, link-state, or distance vector routing protocol. In view of the most utilized link path network topology, links are identified as candidates for power management under which a power state of the link and associated network ports are managed to save power under applicable link conditions, such as low utilization. Link power-state change conditions are detected, and in response a corresponding change to the power state of a link is effected by changing the power-state of the network ports at the ends of the link. Power state changes include putting a link into a reduced power state, taking a link offline, and powering a link back up.
    • 与网络路由协议相关的方法和设备,以支持网元的节电。 使用诸如生成树,链路状态或距离矢量路由协议的路由协议来发现用于计算机网络的最有效的链路路径网络拓扑。 鉴于最广泛使用的链路路径网络拓扑,链路被识别为用于电力管理的候选,其中管理链路和相关网络端口的电力状态以在适用的链路条件(例如低利用率)下节省功率。 检测到链路功率状态改变状况,并且作为响应,通过改变链路端的网络端口的功率状态来实现对链路的功率状态的相应改变。 电源状态改变包括将链路置于降低功率状态,使链路脱机,并为链路供电。
    • 14. 发明申请
    • PATH SPLITTING WITH A CONNECTION-ORIENTED NETWORK
    • 使用面向连接的网络进行路径分割
    • US20140185618A1
    • 2014-07-03
    • US13994175
    • 2011-11-14
    • Radia PerlmanRamakrishna Huggahalli
    • Radia PerlmanRamakrishna Huggahalli
    • H04L12/741
    • H04L45/745H04L45/10H04L45/50
    • In one embodiment this disclosure provides a network device that includes an input port configured to link to a first device to receive a packet from the first device, wherein the received packet having a first label encoded therein, the value of the first label is specific to the link between the network device and the first device; the input port having an input port identifier, the input port identifier and the first label form an input tuple; a plurality of output ports configured to link to respective ones of a plurality of second devices, each output port having a respective output port identifier; a forwarding table that includes at least one input tuple and a corresponding set of output tuples; wherein each output tuple comprises an output port identifier and a second label, the value of the second label is specific to the link between the network device and a respective one of the second plurality of devices; and routing circuitry configured to compare the input tuple of the received packet with at least one input tuple of the forwarding table, identify the corresponding set of output tuples, and select one output tuple from among the set of corresponding output tuples; the routing circuitry is also configured to replace the first label of the received packet with the second label and send the packet to the output port specified by the output port identifier in the selected output tuple.
    • 在一个实施例中,本公开提供一种网络设备,其包括被配置为链接到第一设备以从第一设备接收分组的输入端口,其中所接收的分组具有在其中编码的第一标签,第一标签的值是特定于 网络设备和第一设备之间的链路; 所述输入端口具有输入端口标识符,所述输入端口标识符和所述第一标签形成输入元组; 多个输出端口被配置为链接到多个第二设备中的相应的一个,每个输出端口具有相应的输出端口标识符; 转发表,其包括至少一个输入元组和相应的一组输出元组; 其中每个输出元组包括输出端口标识符和第二标签,所述第二标签的值是所述网络设备与所述第二多个设备中的相应一个设备之间的链路专用的; 以及路由电路,被配置为将所接收的分组的输入元组与所述转发表的至少一个输入元组进行比较,识别相应的输出元组集合,并从所述一组相应的输出元组中选择一个输出元组; 路由电路还被配置为用第二标签替换接收到的分组的第一标签,并将分组发送到由选择的输出元组中的输出端口标识符指定的输出端口。
    • 15. 发明申请
    • MULTI-HOP ERROR RECOVERY
    • 多机故障恢复
    • US20140140348A1
    • 2014-05-22
    • US13681136
    • 2012-11-19
    • Radia Perlman
    • Radia Perlman
    • H04L12/56
    • H04L45/26H04L12/4633H04L45/38
    • Methods, apparatus and network architectures relating to the use of a Hop-by-Hop packet forwarding technique using “stepping stone” switches. The network architectures include use of stepping stone switches interspersed with non-stepping stone switches such as conventional network switches comprising network elements such switches, routers, repeaters, etc. The stepping stone switches are configured to route packets as multiplexed flows along tunneled sub-paths between stepping stone switches in a hop-by-hop manner with error recovery, as opposed to conventional routing under which packets are routed from a source to a destination using an arbitrary path or along a (generally) lengthy flow-based path. Accordingly, packets from a source endpoint are routed to a destination endpoint via multiple sub-paths connecting pairs of stepping stone switches, with each sub-path traversing one or more conventional switches and constituting a logical Hop in the Hop-by-Hop route.
    • 与使用“踏脚石”开关的Hop-by-Hop分组转发技术相关的方法,装置和网络架构。 网络架构包括使用散布有非步进石开关的踏脚石开关,例如包括诸如开关,路由器,中继器等网元的常规网络交换机。踏脚石开关被配置为沿着隧道化子路径将分组路由为多路复用流 在传统的路由下,使用任意路径或沿着(通常为漫长的基于流的路径)将数据包从源路由到目的地而不是以错误恢复的逐跳方式进行。 因此,来自源端点的分组经由连接成对的踏脚石交换机的多个子路径被路由到目的地端点,每个子路径遍历一个或多个常规交换机,并且在Hop-by-Hop路由中构成逻辑Hop。
    • 16. 发明申请
    • REVOCATION OF A SYSTEM ADMINISTRATOR IN AN ENCRYPTED FILE SYSTEM
    • 系统管理员在加密文件系统中的撤销
    • US20090116649A1
    • 2009-05-07
    • US11933701
    • 2007-11-01
    • Radia Perlman
    • Radia Perlman
    • H04L9/14
    • H04L9/085H04L9/088
    • A method of securely storing electronic information includes a step in which target electronically stored information is encrypted with a first encryption key and then partitioned into a first set of encrypted ESI partitions a subset of which is able to reconstruct the unpartitioned encrypted ESI. This first set of encrypted ESI partitions is then encrypted with a first set of user encryption keys to form a first set of user-associated encrypted ESI partitions that are made available to a first set of users. When access to the target electronically stored information is changed, the target electronically stored information is accessed and then re-encrypted with a second encryption key to form a second encrypted ESI. This second encrypted ESI is then partitioned and distributed to a second set of users.
    • 安全地存储电子信息的方法包括以电子存储的目标信息用第一加密密钥加密然后被分割成第一组加密的ESI分区的步骤,其一部分能够重建未分区的加密的ESI。 然后使用第一组用户加密密钥对该第一组加密的ESI分区进行加密,以形成第一组用户相关联的加密的ESI分区,该第一组可用于第一组用户。 当改变对目标电子存储信息的访问时,访问目标电子存储信息,然后用第二加密密钥重新加密,以形成第二加密ESI。 然后将该第二加密ESI分区并分发给第二组用户。
    • 17. 发明申请
    • Method and apparatus for maintaining ephemeral keys in limited space
    • 用于在有限空间内保持短暂键的方法和装置
    • US20080016352A1
    • 2008-01-17
    • US11325203
    • 2006-01-03
    • Radia Perlman
    • Radia Perlman
    • H04L9/00
    • H04L9/0897G06Q20/341G06Q20/40975G07F7/1008G07F7/1016H04L9/0822
    • One embodiment of the present invention provides a system that maintains keys using limited storage space on a computing device, such as a smart card. During operation, the system receives a request at the computing device to perform an operation involving a key. While processing the request, the system obtains an encrypted key from remote storage located outside of the computing device, wherein the encrypted key was created by encrypting the key along with an expiration time for the key. Next, the system decrypts the encrypted key to restore the key and the expiration time, wherein the encrypted key is decrypted using a computing-device key, which is maintained locally on the computing device. Finally, if the expiration time has not passed, the system uses the key to perform the requested operation. Note that by storing the encrypted key in remote storage, the computing device is able to use the key without consuming local storage space to store the key.
    • 本发明的一个实施例提供了一种使用有限的存储空间来维护密钥的系统,所述计算设备例如是智能卡。 在操作期间,系统在计算设备处接收请求以执行涉及密钥的操作。 在处理请求时,系统从位于计算设备外部的远程存储器获得加密密钥,其中通过对密钥加密密钥以及密钥的到期时间来创建加密的密钥。 接下来,系统解密加密的密钥以恢复密钥和到期时间,其中使用计算设备密钥来解密加密的密钥,计算设备密钥在计算设备上本地维护。 最后,如果到期时间尚未通过,系统将使用该键执行请求的操作。 请注意,通过将加密密钥存储在远程存储中,计算设备能够使用密钥而不消耗本地存储空间来存储密钥。
    • 18. 发明申请
    • Method and apparatus for preventing spanning tree loops during traffic overload conditions
    • 在交通过载条件下防止生成树环路的方法和装置
    • US20050068903A1
    • 2005-03-31
    • US10671643
    • 2003-09-26
    • Radia Perlman
    • Radia Perlman
    • H04L12/44H04L12/28H04L12/46H04L12/56
    • H04L45/28H04L12/4625H04L45/18H04L45/48
    • One embodiment of the present invention provides a system that prevents loops from occurring when spanning tree configuration messages are lost while executing a spanning tree protocol on bridges in a network. During operation, the system executes the spanning tree protocol on a bridge. This spanning tree protocol configures each port coupled to the bridge into either a forwarding state, in which messages are forwarded to and from the port, or a backup state, in which messages are not forwarded to or from the port. The system also monitors ports coupled to the bridge to determine when messages are lost by the ports. If one or more messages are lost on a port, the system refrains from forwarding messages to or from the port until no messages are lost by the port for an amount of time.
    • 本发明的一个实施例提供了一种在网络中的桥上执行生成树协议时防止生成树配置消息丢失时发生环路的系统。 在运行过程中,系统在桥上执行生成树协议。 该生成树协议将耦合到网桥的每个端口配置为转发状态,其中消息被转发到端口或从端口转发,或者备份状态,其中消息不被转发到端口或从端口转发。 系统还监视耦合到网桥的端口,以确定端口何时丢失消息。 如果端口上有一个或多个消息丢失,则系统将禁止向端口转发消息,直到端口丢失一段消息。
    • 19. 发明申请
    • Ephemeral decryption utilizing blinding functions
    • 短暂解密利用盲法功能
    • US20050066175A1
    • 2005-03-24
    • US10665386
    • 2003-09-18
    • Radia Perlman
    • Radia Perlman
    • H04L9/30H04L29/06H04L9/00
    • H04L63/0428H04L9/002H04L9/088H04L9/3013H04L9/302H04L63/068H04L2209/04H04L2209/42
    • A method and system is disclosed for utilizing an ephemeral encryption or decryption agent so as to preclude access by the ephemeral encryption agent or decryption agent, respectively, to the information being ephemerally encrypted or decrypted. To preclude access by the ephemeral encryption agent, a blinding function is applied to the information prior to forwarding such information to the encryption agent for encryption. To preclude access to the information by the ephemeral decryption agent, a blinding function is applied to the encrypted information prior to forwarding the encrypted information to the decryption agent for decryption. Once the information has been returned, the information is unblinded, leaving an encrypted or decrypted message respectively.
    • 公开了一种用于利用临时加密或解密代理的方法和系统,以便分别防止临时加密代理或解密代理人对被短时加密或解密的信息进行访问。 为了排除临时加密代理的访问,在将这些信息转发到加密代理进行加密之前,将盲目的功能应用于信息。 为了防止临时解密代理访问信息,在将加密信息转发到解密代理进行解密之前,将加密信息应用于加密信息。 一旦信息被返回,信息就被解除隐藏,分别留下加密或解密的消息。