专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

31. 发明授权

US08887250B2 Techniques for accessing desktop applications using federated identity 有权
标题翻译：使用联合身份访问桌面应用程序的技术
公开(公告)号：US08887250B2
公开(公告)日：2014-11-11
申请号：US12642657
申请日：2009-12-18
申请人： Sergey A. Kuzin , Olga B. Ivanova , Ashwin Palekar , Sriram Sampath , Arun K. Nanda , Lucas R. Melton
发明人： Sergey A. Kuzin , Olga B. Ivanova , Ashwin Palekar , Sriram Sampath , Arun K. Nanda , Lucas R. Melton
IPC分类号： G06F17/30 , H04L29/08 , H04L29/06
CPC分类号： H04L67/08 , H04L63/0815
摘要： Techniques for extending federation services to access desktop applications are herein described. In addition to the foregoing, other aspects are described in the claims, drawings, and text forming a part of the present disclosure.
摘要翻译：这里描述了用于扩展联合服务以访问桌面应用程序的技术。除了上述之外，其他方面在形成本公开的一部分的权利要求，附图和文本中描述。

32. 发明授权

US08661138B2 Group based allocation of network bandwidth 有权
标题翻译：基于组的网络带宽分配
公开(公告)号：US08661138B2
公开(公告)日：2014-02-25
申请号：US13346196
申请日：2012-01-09
申请人： Ara Bernardi , Nelamangal Krishnaswamy Srinivas , Ashwin Palekar
发明人： Ara Bernardi , Nelamangal Krishnaswamy Srinivas , Ashwin Palekar
IPC分类号： G06F15/173 , G01R31/08 , G06F15/00
CPC分类号： H04L47/10 , H04L47/125 , H04L47/2441 , H04L47/2475
摘要： The present invention extends to methods, systems, and computer program products for group based allocation of terminal server network bandwidth. Output packets are classified into groups based on classification criteria. Output packets for each group are queue into a corresponding queue. During a queue flush cycle each queue containing data is flushed for an essentially equal amount of time. Flushing each queue essentially equally reduces the negative impact that can otherwise result when a subset of sessions (or even a single session) request(s) a disproportional share of terminal server network bandwidth. Responsiveness can be further increased by distributing the essentially equal amount for each queue across the queue flush cycle.
摘要翻译：本发明扩展到用于基于组的终端服务器网络带宽分配的方法，系统和计算机程序产品。输出数据包根据分类标准分为组。每个组的输出数据包都被排队到相应的队列中。在队列刷新循环期间，每个包含数据的队列刷新基本相等的时间量。刷新每个队列基本上同样地减少了当会话（或甚至单个会话）的子集要求终端服务器网络带宽的不成比例的共享时可能导致的负面影响。通过在队列刷新循环中为每个队列分配基本上相等的量来进一步提高响应性。

33. 发明授权

US08220042B2 Creating secure interactive connections with remote resources 有权
标题翻译：使用远程资源创建安全的交互式连接
公开(公告)号：US08220042B2
公开(公告)日：2012-07-10
申请号：US11354456
申请日：2006-02-15
申请人： Costin Hagiu , Elton Saul , Rajneesh Mahajan , Sergey A. Kuzin , Joy Chik , John E. Parsons , Ashwin Palekar , Ara Bernardi
发明人： Costin Hagiu , Elton Saul , Rajneesh Mahajan , Sergey A. Kuzin , Joy Chik , John E. Parsons , Ashwin Palekar , Ara Bernardi
IPC分类号： G06F9/00
CPC分类号： H04L63/0823 , G06F21/42 , G06F21/606 , G06F2221/2107 , H04L67/14 , H04L67/141
摘要： Implementations of the present invention efficiently establish secure connections between a client and server, at least in part by authenticating the client and server early on in the connection setup phases. A client initiating a connection with a server identifies the secure communication protocols enabled at the client, and identifies these protocols in a connection request it sends to the server. The server processes the message and responds with a communication protocol it deems appropriate for the connection. The client and server then exchange appropriate authentication information, and then establish a connection session that implements the chosen communication protocol, and encrypts messages using the negotiated communication protocol. Additional implementations relate to reestablishing dropped connections behind virtual Internet Protocol addresses, without necessarily having to recommit much connection resource overhead.
摘要翻译：本发明的实施方式至少部分地通过在连接建立阶段早期认证客户端和服务器来有效地建立客户端和服务器之间的安全连接。发起与服务器的连接的客户端识别在客户端启用的安全通信协议，并在发送到服务器的连接请求中识别这些协议。服务器处理消息并使用其认为适合连接的通信协议进行响应。然后，客户端和服务器交换适当的认证信息，然后建立实现所选通信协议的连接会话，并使用协商的通信协议加密消息。其他实现涉及在虚拟因特网协议地址之后重新建立丢弃的连接，而不必重新承担大量的连接资源开销。

34. 发明授权

US07730302B2 Secure and modifiable configuration files used for remote sessions 有权
标题翻译：用于远程会话的安全和可修改的配置文件
公开(公告)号：US07730302B2
公开(公告)日：2010-06-01
申请号：US11429003
申请日：2006-05-05
申请人： Ashwin Palekar , Elton Saul , Ersev Samim Erdogan , Jeson Patel , Rajneesh Mahajan , Russell S. Morgan , Kevin London
发明人： Ashwin Palekar , Elton Saul , Ersev Samim Erdogan , Jeson Patel , Rajneesh Mahajan , Russell S. Morgan , Kevin London
IPC分类号： H04L9/12 , G06F15/177
CPC分类号： G06F21/577 , H04L63/123
摘要： Embodiments herein address some of the problems associated with compromised configuration files used in a remote sessions of a virtual computing environment. Accordingly, a subset of settings in a configuration file are secured from malicious or accidental modification, while other portions of the configuration file are modifiable by a user as desired without invalidating the integrity of the secure subset. This not only allows for the user to be assured of the integrity of the settings, but also allows an administrator of the remote or terminal server with the ability to control how and what access a client has to resources thereon. Such access may be further controlled based on a trust level between the client, server, and/or publisher of the configuration file.
摘要翻译：这里的实施例解决了与虚拟计算环境的远程会话中使用的受损配置文件相关联的一些问题。因此，配置文件中的一组设置可以防止恶意或意外修改，而配置文件的其他部分可由用户根据需要修改，而不会使安全子集的完整性无效。这不仅允许用户确保设置的完整性，而且允许远程或终端服务器的管理员能够控制客户端对其的资源的访问以及访问方式。可以基于配置文件的客户端，服务器和/或发布者之间的信任级别来进一步控制这种访问。

35. 发明申请

US20090287822A1 GROUP BASED ALLOCATION OF NETWORK BANDWIDTH 有权
标题翻译：基于组的分配网络带宽
公开(公告)号：US20090287822A1
公开(公告)日：2009-11-19
申请号：US12122475
申请日：2008-05-16
申请人： Ara Berdardi , Nelamangal Krishnaswamy Srinivas , Ashwin Palekar
发明人： Ara Berdardi , Nelamangal Krishnaswamy Srinivas , Ashwin Palekar
IPC分类号： G06F15/173
CPC分类号： H04L47/10 , H04L47/125 , H04L47/2441 , H04L47/2475
摘要： The present invention extends to methods, systems, and computer program products for group based allocation of terminal server network bandwidth. Output packets are classified into groups based on classification criteria. Output packets for each group are queue into a corresponding queue. During a queue flush cycle each queue containing data is flushed for an essentially equal amount of time. Flushing each queue essentially equally reduces the negative impact that can otherwise result when a subset of sessions (or even a single session) request(s) a disproportional share of terminal server network bandwidth. Responsiveness can be further increased by distributing the essentially equal amount for each queue across the queue flush cycle.
摘要翻译：本发明扩展到用于基于组的终端服务器网络带宽分配的方法，系统和计算机程序产品。输出数据包根据分类标准分为组。每个组的输出数据包都被排队到相应的队列中。在队列刷新循环期间，每个包含数据的队列刷新基本相等的时间量。刷新每个队列基本上同样地减少了当会话（或甚至单个会话）的子集要求终端服务器网络带宽的不成比例的共享时可能导致的负面影响。通过在队列刷新循环中为每个队列分配基本上相等的量来进一步提高响应性。

36. 发明申请

US20090187784A1 FAIR AND DYNAMIC CENTRAL PROCESSING UNIT SCHEDULING 有权
标题翻译：公平和动态中央处理单元调度
公开(公告)号：US20090187784A1
公开(公告)日：2009-07-23
申请号：US12016869
申请日：2008-01-18
申请人： Ara Bernardi , Costin Hagiu , NK Srinivas , Ashwin Palekar , Arun U. Kishan , Karthik Thirumalai
发明人： Ara Bernardi , Costin Hagiu , NK Srinivas , Ashwin Palekar , Arun U. Kishan , Karthik Thirumalai
IPC分类号： G06F1/04
CPC分类号： G06F9/5061 , G06F9/4881 , G06F2209/483 , G06F2209/5012 , G06F2209/508
摘要： Embodiments that facilitate the fair and dynamic distribution of central processing unit (CPU) time are disclosed. In accordance with one embodiment, a method includes organizing one or more processes into one or more groups. The method further includes allocating a CPU time interval for each group. The allocation of a CPU time interval for each group is accomplished by equally distributing a CPU cycle based on the number of groups. The method also includes adjusting the allocated CPU time intervals based on a change in the quantity of the one or more groups.
摘要翻译：公开了促进中央处理单元（CPU）时间的公平和动态分配的实施例。根据一个实施例，一种方法包括将一个或多个过程组织成一个或多个组。该方法还包括为每个组分配CPU时间间隔。每个组的CPU时间间隔的分配通过基于组的数量均等地分配CPU周期来实现。该方法还包括基于一个或多个组的数量的改变来调整分配的CPU时间间隔。

37. 发明授权

US07529933B2 TLS tunneling 有权
标题翻译： TLS隧道
公开(公告)号：US07529933B2
公开(公告)日：2009-05-05
申请号：US10157806
申请日：2002-05-30
申请人： Ashwin Palekar , Arun Ayyagari , Daniel R. Simon
发明人： Ashwin Palekar , Arun Ayyagari , Daniel R. Simon
IPC分类号： H04L9/00 , H04K1/00
CPC分类号： H04L63/0428 , H04L63/08 , H04L63/162
摘要： An authentication protocol can be used to establish a secure method of communication between two devices on a network. Once established, the secure communication can be used to authenticate a client through various authentication methods, providing security in environments where intermediate devices cannot be trusted, such as wireless networks, or foreign network access points. Additionally, the caching of session keys and other relevant information can enable the two securely communicating endpoints to quickly resume their communication despite interruptions, such as when one endpoint changes the access point through which it is connected to the network. Also, the secure communication between the two devices can enable users to roam off of their home network, providing a mechanism by which access through foreign networks can be granted, while allowing the foreign network to monitor and control the use of its bandwidth.
摘要翻译：可以使用认证协议来建立网络上的两个设备之间的安全通信方法。一旦建立，安全通信可以用于通过各种认证方法认证客户端，在中间设备不能被信任的环境中提供安全性，例如无线网络或外部网络接入点。此外，会话密钥和其他相关信息的高速缓存可以使得两个安全通信的端点能够快速恢复其通信，尽管中断，例如当一个端点改变其连接到网络的接入点时。而且，两台设备之间的安全通信可以使用户能够从家庭网络中漫游，从而提供通过外部网络进行访问的机制，同时允许外部网络监视和控制其带宽的使用。

38. 发明申请

US20070101409A1 Exchange of device parameters during an authentication session 审中-公开
标题翻译：在认证会话期间交换设备参数
公开(公告)号：US20070101409A1
公开(公告)日：2007-05-03
申请号：US11264439
申请日：2005-11-01
申请人： Ashwin Palekar , Hakan Berk , Mudit Goel
发明人： Ashwin Palekar , Hakan Berk , Mudit Goel
IPC分类号： H04L9/32 , G06F15/16 , G06F12/14 , G06F11/00 , G06F15/173 , G06K9/00 , G06F17/00 , G06F11/30 , G06F17/30 , G06F9/00 , G06F12/16 , G06F15/18 , G06F7/04 , G08B23/00 , G06F7/58 , G06K19/00
CPC分类号： H04L63/08 , G06F21/31 , G06F2221/2129 , H04L63/162
摘要： Methods of obtaining information during an authentication session. Information may be obtained, during the authentication session, about a device that is attempting to connect to a network. The information that is obtained may be related to health parameters of the device, or any other suitable information. Obtaining this information during an authentication session may enable determining whether to allow the device to connect to the network.
摘要翻译：在认证会话期间获取信息的方法。在认证会话期间可以获得关于尝试连接到网络的设备的信息。获得的信息可能与设备的健康参数或任何其他合适的信息相关。在认证会话期间获取该信息可以确定是否允许设备连接到网络。

39. 发明申请

US20060015935A1 Method for providing user authentication/authorization and distributed firewall utilizing same 审中-公开
公开(公告)号：US20060015935A1
公开(公告)日：2006-01-19
申请号：US11232553
申请日：2005-09-22
申请人： William Dixon , Gurdeep Pall , Ashwin Palekar , Bernard Aboba , Brian Swander
发明人： William Dixon , Gurdeep Pall , Ashwin Palekar , Bernard Aboba , Brian Swander
IPC分类号： G06F15/16
CPC分类号： H04L63/0218 , H04L63/164
摘要： The distributed firewall performs user authentication at a first level to establish a user security context for traffic from that user, and an authority context provides authorization for subsequent traffic. This authority context may be based on an underlying policy for particular types of traffic, access to particular applications, etc. Additionally, the system includes the ability to allow a user/process/application to define its own access control. The linking of the user security context from the traffic to the application is accomplished by enabling IPSec on a socket and forcing the socket to be bound in exclusive mode. The most common policy definitions may be included by default. Extensions of the Internet key exchange protocol (IKE) to provide the desired user authentication plus application/purpose are also provided. The architecture includes pluggable authorization module(s) that are called after IKE has successfully authenticated the peer, but before the connection is allowed to complete.

40. 发明授权

US08849897B2 Delegating application invocation back to client 有权
标题翻译：将应用程序调用委托给客户端
公开(公告)号：US08849897B2
公开(公告)日：2014-09-30
申请号：US11941071
申请日：2007-11-15
申请人： Amos Ortal , Nir Nice , Ashwin Palekar , Craig Alan Nelson , Paresh Ramchandra Haridas
发明人： Amos Ortal , Nir Nice , Ashwin Palekar , Craig Alan Nelson , Paresh Ramchandra Haridas
IPC分类号： G06F15/16
CPC分类号： G06F9/5027 , G06F9/451 , G06F9/452 , G06F9/5055 , G06F2209/509
摘要： Aspects of the subject matter described herein relate to delegating application invocation back to a client. In aspects, a server hosts an application that has a user interface that is presented on a client. User interaction on the user interface is encoded and sent to the server to give to the application. When the user uses the application such that another application is to be executed, a server delegator determines whether to execute the other application on the server or the client. If the application is to be executed on the client, the server delegator instructs a component that executes on the client to execute the application on the client. Otherwise, the application is executed on the server and data representing the user interface of the application is sent to the client so that the client may present the user interface to a user.
摘要翻译：本文描述的主题的方面涉及将应用调用委托给客户端。在方面，服务器托管具有在客户端上呈现的用户界面的应用程序。用户界面上的用户交互被编码并发送给服务器给予应用程序。当用户使用应用程序使得另一个应用程序被执行时，服务器委托者确定是否在服务器或客户机上执行其他应用程序。如果应用程序要在客户机上执行，则服务器委托者指示在客户机上执行的组件在客户机上执行应用程序。否则，在服务器上执行应用程序，并将表示应用程序的用户界面的数据发送给客户端，以便客户端可以向用户呈现用户界面。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式