专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

11. 发明授权

US08464083B1 Exiting low-power state without requiring user authentication 有权
标题翻译：退出低功耗状态，无需用户认证
公开(公告)号：US08464083B1
公开(公告)日：2013-06-11
申请号：US12891462
申请日：2010-09-27
申请人： Sameer Nanda , David James
发明人： Sameer Nanda , David James
IPC分类号： G06F1/32 , G06F21/00 , G06F1/00 , G06F7/04 , G06F12/14
CPC分类号： G06F21/81 , G06F1/3203 , G06F21/31 , G06F2221/2137
摘要： According to an example embodiment, a method may include, in response to an idle time of a computing device meeting or exceeding a power-save time threshold value, placing the computing device into a low-power state; in response to receiving an input to the computing device after the computing device has been placed into the low-power state, exiting the low-power state; determining whether the idle time meets or exceeds a lockout threshold value that is greater than the power-save time threshold value; after having exited from the low-power state, if the idle time meets or exceeds the lockout threshold value, requiring a user to perform a successful predetermined authentication to the computing device before allowing the user to access applications in the computing device; and if the idle time does not meet or exceed the lockout threshold value, allowing the user to access applications in the computing device without requiring the user to perform the successful predetermined authentication to the computing device.
摘要翻译：根据示例实施例，一种方法可以响应于计算设备的空闲时间满足或超过节电时间阈值，将计算设备置于低功率状态; 响应于在计算设备已经被置于低功率状态之后接收到计算设备的输入，退出低功率状态; 确定所述空闲时间是否满足或超过大于所述节电时间阈值的锁定阈值; 在从低功率状态退出之后，如果空闲时间满足或超过锁定阈值，则要求用户在允许用户访问计算设备中的应用程序之前对计算设备执行成功的预定认证; 并且如果空闲时间不满足或超过锁定阈值，则允许用户访问计算设备中的应用，而不需要用户对计算设备执行成功的预定认证。

12. 发明授权

US08432788B2 Intelligent failback in a load-balanced networking environment 有权
标题翻译：负载平衡网络环境中的智能故障恢复
公开(公告)号：US08432788B2
公开(公告)日：2013-04-30
申请号：US11750914
申请日：2007-05-18
申请人： Ayaz Abdulla , Norman K. Chen , Anand Rajagopalan , Ashutosh K. Jha , Hemamalini Manickavasagam , Sameer Nanda
发明人： Ayaz Abdulla , Norman K. Chen , Anand Rajagopalan , Ashutosh K. Jha , Hemamalini Manickavasagam , Sameer Nanda
IPC分类号： G01R31/08 , G06F11/00 , G08C15/00
CPC分类号： G06F11/2005
摘要： One embodiment of the present invention sets forth a method for failing back network connections to a network interface card (NIC) within a computing device. The method includes the steps of monitoring a failed or unreliable NIC within the computing device, determining that the failed or unreliable NIC has recovered, determining that a functional NIC within the computing device is overloaded, selecting a first connection set communicating through the overloaded NIC, and transferring the first connection set to the recovered NIC. With this approach, intelligent decisions can be advantageously made regarding whether to fail back a network connection set to a recovered NIC based on the traffic loads on the overloaded NIC and the recovered NIC. Such an approach to balancing network traffic across the functional NICs within a computing device may substantially improve overall performance relative to prior art techniques.
摘要翻译：本发明的一个实施例提出了一种用于使与网络接口卡（NIC）在计算设备内的网络连接失败的方法。该方法包括以下步骤：监视计算设备内的故障或不可靠的NIC，确定故障或不可靠的NIC已经恢复，确定计算设备内的功能NIC过载，选择通过过载的NIC通信的第一连接集，并将第一连接集传送到恢复的NIC。利用这种方法，可以有利地基于重载NIC和恢复的NIC上的流量负载来故障恢复到恢复的NIC的网络连接设置的智能决策。在计算设备内跨功能NIC平衡网络流量的这种方法可以相对于现有技术来显着提高整体性能。

13. 发明授权

US08300647B2 Intelligent load balancing and failover of network traffic 有权
标题翻译：网络流量的智能负载平衡和故障转移
公开(公告)号：US08300647B2
公开(公告)日：2012-10-30
申请号：US11750987
申请日：2007-05-18
申请人： Ayaz Abdulla , Norman K. Chen , Anand Rajagopalan , Ashutosh K. Jha , Hemamalini Manickavasagam , Sameer Nanda
发明人： Ayaz Abdulla , Norman K. Chen , Anand Rajagopalan , Ashutosh K. Jha , Hemamalini Manickavasagam , Sameer Nanda
IPC分类号： H04L12/28
CPC分类号： H04L45/00 , H04L29/12028 , H04L29/12443 , H04L43/0811 , H04L45/245 , H04L45/28 , H04L61/103 , H04L61/2542
摘要： A hash engine in a network device driver maintains data on the utilization and error rate for each network interface card (“NIC”) within a local computing device. From this data, the hash engine intelligently selects transmit NICs and receive NICs based on various networking parameters provided from a software driver program. Transmit packets sent from the operating system in a local computing device to a remote computing device are intercepted, modified and redirected to transmit NICs selected by the hash engine for transmission to remote computing devices. Similarly, address resolution protocol (“ARP”) response packets sent by the operating system in response to ARP request packets are intercepted, modified and redirected to receive NICs selected by the hash engine for transmission. By selecting receive NICs and transmit NICs in this fashion, the hash engine is able to intelligently load balance transmit and receive traffic in the local computing device, thereby improving overall network performance relative to prior art techniques.
摘要翻译：网络设备驱动程序中的散列引擎维护有关本地计算设备中每个网络接口卡（NIC）的利用率和错误率的数据。根据该数据，散列引擎基于从软件驱动程序提供的各种网络参数智能地选择发送NIC和接收NIC。将从本地计算设备中的操作系统发送的数据包发送到远程计算设备被拦截，修改和重定向，以发送由散列引擎选择的NIC以传输到远程计算设备。类似地，操作系统响应于ARP请求报文发送的地址解析协议（ARP）响应报文被截获，修改并重定向到接收由哈希引擎选择的NIC进行传输。通过以这种方式选择接收NIC并传输NIC，散列引擎能够智能地负载平衡本地计算设备中的传输和接收流量，从而相对于现有技术提高整体网络性能。

14. 发明授权

US07995465B2 Intelligent load balancing and failover of network traffic 有权
标题翻译：网络流量的智能负载平衡和故障转移
公开(公告)号：US07995465B2
公开(公告)日：2011-08-09
申请号：US11750919
申请日：2007-05-18
申请人： Ayaz Abdulla , Norman K. Chen , Anand Rajagopalan , Ashutosh K. Jha , Hemamalini Manickavasagam , Sameer Nanda
发明人： Ayaz Abdulla , Norman K. Chen , Anand Rajagopalan , Ashutosh K. Jha , Hemamalini Manickavasagam , Sameer Nanda
IPC分类号： H04L12/56
CPC分类号： H04L1/22 , H04L47/125
摘要： A hash engine in a network device driver maintains data on the utilization and error rate for each network interface card (“NIC”) within a local computing device. From this data, the hash engine intelligently selects transmit NICs and receive NICs based on various networking parameters provided from a software driver program. Transmit packets sent from the operating system in a local computing device to a remote computing device are intercepted, modified and redirected to transmit NICs selected by the hash engine for transmission to remote computing devices. Similarly, address resolution protocol (“ARP”) response packets sent by the operating system in response to ARP request packets are intercepted, modified and redirected to receive NICs selected by the hash engine for transmission. By selecting receive NICs and transmit NICs in this fashion, the hash engine is able to intelligently load balance transmit and receive traffic in the local computing device, thereby improving overall network performance relative to prior art techniques.
摘要翻译：网络设备驱动程序中的散列引擎维护本地计算设备内每个网络接口卡（“NIC”）的利用率和错误率的数据。根据该数据，散列引擎基于从软件驱动程序提供的各种网络参数智能地选择发送NIC和接收NIC。将从本地计算设备中的操作系统发送的数据包发送到远程计算设备被拦截，修改和重定向，以发送由散列引擎选择的NIC以传输到远程计算设备。类似地，操作系统响应于ARP请求报文发送的地址解析协议（“ARP”）响应报文被截获，修改并重定向到接收由哈希引擎选择的NIC进行传输。通过以这种方式选择接收NIC并传输NIC，散列引擎能够智能地负载平衡本地计算设备中的传输和接收流量，从而相对于现有技术提高整体网络性能。

15. 发明授权

US07974209B1 Packet processing with re-insertion into network interface circuitry 有权
标题翻译：分组处理，重新插入网络接口电路
公开(公告)号：US07974209B1
公开(公告)日：2011-07-05
申请号：US11956284
申请日：2007-12-13
申请人： Thomas A. Maufer , Paul J. Gyugyi , Sameer Nanda , Paul J. Sidenblad
发明人： Thomas A. Maufer , Paul J. Gyugyi , Sameer Nanda , Paul J. Sidenblad
IPC分类号： G01R31/08 , H04L12/28
CPC分类号： H04L49/9094 , H04L49/90 , H04L49/9026
摘要： Method and apparatus for packet processing by re-insertion into network interface circuitry. A method for handling a burst of packets sent to network interface circuitry includes checking for a connection table entry for received packets, and responsive to non-existence of the connection table entry for the received packets, sending the packets to network interface software for processing. The network interface software processing includes: building the connection table entry; processing the packets; and sending the packets as processed to the network interface circuitry. Additionally, a method for re-inserting a packet responsive to an active audit mode is described.
摘要翻译：通过重新插入网络接口电路来进行数据包处理的方法和装置。一种用于处理发送到网络接口电路的分组的突发的方法包括：检查所接收分组的连接表条目，并且响应于接收到的分组的连接表条目的不存在，将分组发送到网络接口软件进行处理。网络接口软件处理包括：建立连接表条目; 处理数据包; 并将处理的数据包发送到网络接口电路。此外，描述了响应于主动审核模式重新插入分组的方法。

16. 发明授权

US07234161B1 Method and apparatus for deflecting flooding attacks 有权
标题翻译：用于偏转洪水攻击的方法和装置
公开(公告)号：US07234161B1
公开(公告)日：2007-06-19
申请号：US10334656
申请日：2002-12-31
申请人： Thomas A. Maufer , Sameer Nanda
发明人： Thomas A. Maufer , Sameer Nanda
IPC分类号： H04L29/06 , G06F15/16
CPC分类号： H04L63/0254 , H04L63/1458 , H04L69/16 , H04L69/163
摘要： Method and apparatus for deflecting connection flooding attacks. Specifically, the stateful firewall allows all connection attempts to flow into the destination host, but monitors the connection attempts to ensure that only legitimate connections are allowed. If the firewall detects that a connection is half-open for longer than a certain timer threshold, it will instruct the destination host to tear down the half-open connection, thereby freeing up resources in the destination host for other connection attempts. The timer threshold can be dynamically adjusted if a connection flooding attack is detected.
摘要翻译：用于偏转连接洪水攻击的方法和装置。具体来说，状态防火墙允许所有连接尝试流入目标主机，但监视连接尝试以确保仅允许合法连接。如果防火墙检测到连接半开半小时超过某个定时器阈值，它将指示目标主机拆下半开连接，从而释放目标主机中的资源以进行其他连接尝试。如果检测到连接洪泛攻击，则可以动态调整定时器阈值。

17. 发明授权

US07120930B2 Method and apparatus for control of security protocol negotiation 有权
公开(公告)号：US07120930B2
公开(公告)日：2006-10-10
申请号：US10172683
申请日：2002-06-13
申请人： Thomas Albert Maufer , Sameer Nanda , Paul J. Sidenblad
发明人： Thomas Albert Maufer , Sameer Nanda , Paul J. Sidenblad
IPC分类号： G06F15/16
CPC分类号： H04L63/0272 , H04L29/12018 , H04L29/12216 , H04L29/12367 , H04L29/12462 , H04L29/1249 , H04L61/10 , H04L61/2015 , H04L61/2514 , H04L61/255 , H04L61/256 , H04L63/0428 , H04L63/061 , H04L63/164 , H04L69/24
摘要： Method and apparatus for enhanced security for communication over a network, and more particularly to control of security protocol negotiation to enable multiple clients to establish a virtual private network connection with a same remote address, is described. A mapping table accessible by a gateway computer is used to form associations between a local address for the client and a destination address for a peer and a Security Parameters Index associated with IPSec-protected traffic from the peer. When a packet is received at the gateway from a client it is checked to determine if it is an Internet Key Exchange (IKE) packet, whether an IKE session has already been recorded from this client in the mapping table for the destination address in the IKE packet, whether a Security Parameters Index has been observed in the clear from a remote computer associated with the destination address.

18. 发明授权

US06512774B1 Fail over with multiple network interface cards 失效
标题翻译：使用多个网络接口卡进行故障切换
公开(公告)号：US06512774B1
公开(公告)日：2003-01-28
申请号：US09272085
申请日：1999-03-18
申请人： RamKrishna Vepa , Roman G. Baker , Sameer Nanda , Thomas A. Maufer
发明人： RamKrishna Vepa , Roman G. Baker , Sameer Nanda , Thomas A. Maufer
IPC分类号： G06F1300
CPC分类号： H04L69/40
摘要： A method and system for detecting a non-functioning network interface card (NIC) in a server computer system adapted to have a plurality of network interface cards coupled thereto and communicatively coupled to client computer systems in a network. A directed packet is sent from a first NIC to a second NIC, and a direct packet is also sent from the second NIC to the first NIC. The server computer system monitors the NICs to determine whether the directed packet from the first NIC is received by the second NIC. The server computer system also monitors the first NIC to determine whether the directed packet from the second NIC is received by the first NIC. The server computer system determines whether the first NIC is functioning using the results from the monitoring. When the first NIC is determined to be non-functioning, the functions of the first NIC are automatically switched from the first NIC to one of the plurality of NICs. A broadcast packet is sent from the server computer system to the client computer systems. The broadcast packet contains a media access control (MAC) address for the NIC that replaces the first NIC, and each client computer system replaces the MAC address for the first NIC with the MAC address for the second NIC in its memory cache.
摘要翻译：一种用于检测服务器计算机系统中不起作用的网络接口卡（NIC）的方法和系统，其适于具有耦合到其上的多个网络接口卡并且可通信地耦合到网络中的客户端计算机系统。定向分组从第一NIC发送到第二NIC，并且直接分组也从第二NIC发送到第一NIC。服务器计算机系统监视NIC以确定来自第一NIC的定向分组是否被第二NIC接收。服务器计算机系统还监视第一NIC以确定来自第二NIC的定向分组是否被第一NIC接收。服务器计算机系统使用监视的结果来确定第一个NIC是否正在运行。当第一NIC被确定为不起作用时，第一NIC的功能将自动从第一NIC切换到多个NIC中的一个。广播包从服务器计算机系统发送到客户端计算机系统。广播分组包含用于替换第一NIC的NIC的媒体访问控制（MAC）地址，并且每个客户端计算机系统将第一NIC的MAC地址替换为其存储器高速缓存中的第二NIC的MAC地址。

19. 发明授权

US06490632B1 High performance load balancing and fail over support of internet protocol exchange traffic over multiple network interface cards 失效
标题翻译：高性能的负载平衡和故障转移支持多种网络接口卡上的互联网协议交换流量
公开(公告)号：US06490632B1
公开(公告)日：2002-12-03
申请号：US09272082
申请日：1999-03-18
申请人： RamKrishna Vepa , Roman G. Baker , Sameer Nanda
发明人： RamKrishna Vepa , Roman G. Baker , Sameer Nanda
IPC分类号： G06F1516
CPC分类号： H04L29/12783 , H04L29/06 , H04L29/12009 , H04L61/35 , H04L67/1002 , H04L67/1006 , H04L67/1023 , H04L67/1034 , H04L69/40 , H04L2029/06054
摘要： A method for selecting a network interface card (NIC) to be used to send and receive data packets in an Internetwork Protocol Exchange (IPX) environment using a server computer system having a plurality of NICs coupled thereto. An outgoing data packet is addressed using an IPX address and a socket number. A load balancing scheme is executed in order to select a NIC from the plurality of NICs. In one embodiment, the load balancing scheme is a function of the IPX address; in alternate embodiments, the load balancing scheme is a function of the IPX address and either the destination or source socket number. The media access control (MAC) address that represents the selected NIC is inserted in the outgoing data packet. The data packet is then sent using the selected NIC. In one embodiment, the present invention also provides a system and method for fault tolerance and fail over support. The plurality of NICs each include a filter that is adapted to mask a portion of a MAC address in an incoming data packet received at a NIC such that the MAC address in the incoming data packet is equivalent to the MAC address representing the NIC.
摘要翻译：一种用于使用具有耦合到其上的多个NIC的服务器计算机系统来选择用于在网际协议交换（IPX）环境中发送和接收数据分组的网络接口卡（NIC）的方法。输出数据包使用IPX地址和套接字号进行寻址。执行负载平衡方案以从多个NIC中选择NIC。在一个实施例中，负载平衡方案是IPX地址的函数; 在替代实施例中，负载平衡方案是IPX地址以及目的地或源插座号的函数。表示所选NIC的媒体访问控制（MAC）地址被插入到输出数据包中。然后使用所选择的NIC发送数据包。在一个实施例中，本发明还提供了用于容错和故障转移支持的系统和方法。多个NIC各自包括适于掩蔽在NIC处接收的输入数据分组中的MAC地址的一部分的过滤器，使得输入数据分组中的MAC地址等同于表示NIC的MAC地址。

20. 发明授权

US08738800B1 Data structures and state tracking for network protocol processing 有权
标题翻译：网络协议处理的数据结构和状态跟踪
公开(公告)号：US08738800B1
公开(公告)日：2014-05-27
申请号：US11949735
申请日：2007-12-03
申请人： Thomas A. Maufer , Paul J. Gyugyi , Sameer Nanda , Paul J. Sidenblad
发明人： Thomas A. Maufer , Paul J. Gyugyi , Sameer Nanda , Paul J. Sidenblad
IPC分类号： G06F15/173
CPC分类号： G06F17/3033 , G06F17/30306 , G06F17/30312 , H04L63/0236
摘要： Described are data structures, and methodology for forming same, for network protocol processing. A method for creating data structures for firewalling and network address translating is described. A method for creating data structures for physical layer addressing is described. A method for security protocol support using a data structure is described. A method for creating at least one data structure sized responsive to whether a firewall is activated is described. A data structure for routing packets is described. A method of forming hashing table chains is described. Additionally, method and apparatus for tracking packet states is described. More particularly, Transmission Control Protocol (“TCP”) tracking of states for packets is described. In an embodiment, a division between software states and hardware states is made as a packet is processed by both software and hardware. Additionally, method and apparatus for network protocol processing are described. For example, a packet for network address translation having a media access control header is obtained, from which information, including the media access control header, is obtained. The information is parsed into one or more data structures. It is determined whether a network processing unit is in a first round processing mode, or a second round pass-through mode.
摘要翻译：描述了用于网络协议处理的数据结构及其形成方法。描述了一种创建用于防火墙和网络地址转换的数据结构的方法。描述了一种用于创建物理层寻址的数据结构的方法。描述了使用数据结构的安全协议支持的方法。描述了一种用于创建响应于是否激活防火墙的至少一个数据结构的方法。描述用于路由分组的数据结构。描述了形成散列表链的方法。另外，描述了用于跟踪分组状态的方法和装置。更具体地，描述了用于分组的状态的传输控制协议（“TCP”）跟踪。在一个实施例中，软件状态和硬件状态之间的划分是由软件和硬件两者处理的数据包进行的。另外，描述了用于网络协议处理的方法和装置。例如，获得具有媒体访问控制头的用于网络地址转换的分组，从中获得包括媒体访问控制头的信息。信息被解析为一个或多个数据结构。确定网络处理单元是处于第一轮处理模式还是第二轮直通模式。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式