专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

51. 发明授权

US08200964B2 Method and apparatus for accessing an encrypted file system using non-local keys 有权
标题翻译：使用非本地密钥访问加密文件系统的方法和装置
公开(公告)号：US08200964B2
公开(公告)日：2012-06-12
申请号：US11525799
申请日：2006-09-22
申请人： Radia J. Perlman , Sunay Tripathi
发明人： Radia J. Perlman , Sunay Tripathi
IPC分类号： G06F21/00
CPC分类号： H04L9/0891 , G06F21/6209 , G06F2221/2107 , H04L9/0894
摘要： One embodiment of the present invention provides a system for accessing an encrypted file through a file system. During operation, the system receives a request to access the encrypted file. In response to the request, the system sends an encrypted file key for the encrypted file from the file system to a tamper-resistant module. Next, the tamper-resistant module uses a master secret to decrypt the encrypted file key to restore the file key, wherein the master secret is obtained from an external source by the tamper-resistant module. The system then uses the file key to access the encrypted file.
摘要翻译：本发明的一个实施例提供一种通过文件系统访问加密文件的系统。在操作期间，系统接收到访问加密文件的请求。响应该请求，系统将加密文件的加密文件密钥从文件系统发送到防篡改模块。接下来，防篡改模块使用主秘密来解密加密文件密钥以恢复文件密钥，其中通过防篡改模块从外部源获得主密钥。然后，系统使用文件密钥访问加密文件。

52. 发明申请

US20080123858A1 Method and apparatus for accessing an encrypted file system using non-local keys 有权
标题翻译：使用非本地密钥访问加密文件系统的方法和装置
公开(公告)号：US20080123858A1
公开(公告)日：2008-05-29
申请号：US11525799
申请日：2006-09-22
申请人： Radia J. Perlman , Sunay Tripathi
发明人： Radia J. Perlman , Sunay Tripathi
IPC分类号： H04L9/08 , G06F12/14 , G06F21/24
CPC分类号： H04L9/0891 , G06F21/6209 , G06F2221/2107 , H04L9/0894
摘要： One embodiment of the present invention provides a system for accessing an encrypted file through a file system. During operation, the system receives a request to access the encrypted file. In response to the request, the system sends an encrypted file key for the encrypted file from the file system to a tamper-resistant module. Next, the tamper-resistant module uses a master secret to decrypt the encrypted file key to restore the file key, wherein the master secret is obtained from an external source by the tamper-resistant module. The system then uses the file key to access the encrypted file.
摘要翻译：本发明的一个实施例提供一种通过文件系统访问加密文件的系统。在操作期间，系统接收到访问加密文件的请求。响应该请求，系统将加密文件的加密文件密钥从文件系统发送到防篡改模块。接下来，防篡改模块使用主秘密来解密加密文件密钥以恢复文件密钥，其中通过防篡改模块从外部源获得主密钥。然后，系统使用文件密钥访问加密文件。

53. 发明授权

US07152113B2 Efficient system and method of node and link insertion for deadlock-free routing on arbitrary topologies 有权
公开(公告)号：US07152113B2
公开(公告)日：2006-12-19
申请号：US10027886
申请日：2001-10-19
申请人： John V. Reynders , Radia J. Perlman , Guy L. Steele, Jr. , Dah Ming Chiu , Miriam C. Kadansky , Murat Yuksel
发明人： John V. Reynders , Radia J. Perlman , Guy L. Steele, Jr. , Dah Ming Chiu , Miriam C. Kadansky , Murat Yuksel
IPC分类号： G06F15/16 , G06F15/173
CPC分类号： H04L45/54 , H04L45/02 , H04L45/18 , H04L45/44
摘要： A system and method for adding routing information for a node to a routing table, which efficiently makes necessary changes to the routing table to support routing to and from the node, while maintaining the deadlock-free quality of the paths described by the routing table. The routing table is generated by storing routing information in the routing table that reflects and describes a deadlock-free set of paths through a network of nodes. A row of entries is added to the routing table describing how to forward data units from the node. A column of entries is added to the routing table describing how to forward data units addressed to the node. The forwarding information within each entry added to the routing table maintains the deadlock-free quality of the set of paths represented by the forwarding table.

54. 发明授权

US07096251B2 Calculation of layered routes in a distributed manner 有权
标题翻译：以分布式方式计算分层路由
公开(公告)号：US07096251B2
公开(公告)日：2006-08-22
申请号：US10209077
申请日：2002-07-31
申请人： Dah Ming Chiu , Miriam C. Kadansky , Radia J. Perlman , Murat Yuksel
发明人： Dah Ming Chiu , Miriam C. Kadansky , Radia J. Perlman , Murat Yuksel
IPC分类号： G06F15/16
CPC分类号： H04L45/26 , H04L45/02 , H04L45/18 , H04L45/40 , H04L45/44
摘要： A distributed system and method generate “layered routes” that reflect a layered representation of a network, which representation provides deadlock-free routes. The layered representation consists of an ordered set of layers, where each layer is a deadlock-free sub-topology of the network. In determining routes, the links used in each route are constrained to be taken from layers of non-decreasing order as the route extends from source to destination. A device that determines a better or equal cost path to a destination node with respect to its current path to that node sends a route information message to its neighbor devices. The receiver of a route information message may then accept the message and begin using the new path described by the message, or reject the message without using the new path.
摘要翻译：分布式系统和方法生成反映网络的分层表示的“分层路由”，该表示提供无死锁路由。分层表示由有序的一组层组成，其中每个层是网络的无死锁子拓扑。在确定路由时，当路由从源到目的地延伸时，每个路由中使用的链路被限制为从非递减顺序的层获取。确定目的地节点相对于其到该节点的当前路径的更好或相等的成本路径的设备向其相邻设备发送路由信息消息。然后，路由信息消息的接收者可接受该消息并开始使用该消息描述的新路径，或拒绝该消息而不使用该新路径。

55. 发明授权

US06992988B2 System and method for deadlock-free routing on arbitrary network topologies 有权
标题翻译：任意网络拓扑中无死锁路由的系统和方法
公开(公告)号：US06992988B2
公开(公告)日：2006-01-31
申请号：US09933317
申请日：2001-08-20
申请人： John V. Reynders , Radia J. Perlman , Guy L. Steele, Jr.
发明人： John V. Reynders , Radia J. Perlman , Guy L. Steele, Jr.
IPC分类号： H04L12/26
CPC分类号： H04L45/42 , H04L45/12 , H04L45/18
摘要： A system and method for calculating a deadlock-free free set of paths in a network generates an ordered set of deadlock-free sub-topologies, referred to as “layers.” The ordered set of layers is then used to determine a deadlock-free set of paths through the network by performing a shortest-path route calculation with the following constraint: starting at any given layer, for each node, proceed to calculate a shortest path to every other node in the graph where, at any node being utilized to assess a given minimum path, the path may move to any higher-ordered layer, but may not return to a lower-ordered layer.
摘要翻译：用于计算网络中的无死锁空闲路径组合的系统和方法产生有序的无死锁子拓扑的一组，称为“层”。然后，使用有序的层集合通过执行具有以下约束的最短路径路由计算来确定通过网络的无死锁路径计算：从任何给定层开始，对于每个节点，继续计算最短路径图中的每个其他节点，在任何节点用于评估给定的最小路径的情况下，该路径可以移动到任何更高阶层，但是可能不返回到低阶层。

56. 发明授权

US6094525A Network addressing arrangement for backward compatible routing of an expanded address space 失效
标题翻译：扩展地址空间的向后兼容路由的网络寻址布置
公开(公告)号：US6094525A
公开(公告)日：2000-07-25
申请号：US499103
申请日：1995-07-06
申请人： Radia J. Perlman , Neal D. Castagnoli
发明人： Radia J. Perlman , Neal D. Castagnoli
IPC分类号： H04L12/56 , H04L12/46
CPC分类号： H04L45/04
摘要： An improved network addressing arrangement expands both the format of a network layer header and the address spaces of nodes coupled to computer networks in a manner that efficiently enhances routing among nodes of different domains of the networks. Specifically, the novel arrangement provides new elements to a conventional hierarchical network layer address and modifies existing elements, i.e., destination network and socket numbers, of that address to effectively create an improved network layer header.
摘要翻译：改进的网络寻址布置以有效地增强网络的不同域的节点之间的路由的方式扩展网络层头部的格式和耦合到计算机网络的节点的地址空间。具体地说，该新颖的布置为传统的分层网络层地址提供了新的元素，并修改了该地址的现有元素，即目标网络和套接字号码，以有效地创建一个改进的网络层头。

57. 发明授权

US5956335A Many to few group address translation through a network bridge 失效
标题翻译：通过网桥很少到几组群地址转换
公开(公告)号：US5956335A
公开(公告)日：1999-09-21
申请号：US151438
申请日：1993-11-12
申请人： Floyd J. Backes , William R. Hawe , G. Paul Koning , David J. Mitton , Radia J. Perlman
发明人： Floyd J. Backes , William R. Hawe , G. Paul Koning , David J. Mitton , Radia J. Perlman
IPC分类号： H04L12/18 , H04L12/46
CPC分类号： H04L45/742 , H04L12/1836 , H04L12/46 , H04L2212/00
摘要： A method for connecting a first communication system with a third communications system, by passing through a second communications system, is disclosed. A first frame is received from the first communications system, where the first frame has a multicast address as a destination address. The multicast address requires the frame to be transmitted onto the second multicast address is translated into a functional address. The functional address is written into a second frame, and the second frame is transmitted onto the second communications system. A station receiving the second frame translates the functional address into a multicast address and writes the multicast address into the destination address field of a third frame, and transmits the third frame onto the third communications system.
摘要翻译：公开了一种通过通过第二通信系统连接第一通信系统与第三通信系统的方法。从第一通信系统接收第一帧，其中第一帧具有多播地址作为目的地址。组播地址要求将帧传送到第二个组播地址，转换为功能地址。功能地址被写入第二帧，第二帧被发送到第二通信系统。接收第二帧的站将功能地址转换成多播地址，并将组播地址写入第三帧的目的地址字段，并将第三帧发送到第三通信系统。

58. 发明授权

US5856974A Internetwork address mapping gateway 失效
标题翻译：网际地址映射网关
公开(公告)号：US5856974A
公开(公告)日：1999-01-05
申请号：US600773
申请日：1996-02-13
申请人： Joseph L. Gervais , Alampoondi E. Natarajan , Michael D. Allen , Radia J. Perlman
发明人： Joseph L. Gervais , Alampoondi E. Natarajan , Michael D. Allen , Radia J. Perlman
IPC分类号： H04L29/12 , H04L12/66
CPC分类号： H04L61/2514 , H04L29/12009 , H04L29/12367 , H04L29/12424 , H04L29/12462 , H04L61/2535 , H04L61/255
摘要： The present invention is an address mapping gateway, used in an internetwork link, that associates all nodes in a domain with a single network number (referred to as a domain network address), and provides gateway-mapped node addresses that are unique within the domain. The address mapping gateway dynamically substitutes the "globally-unique" domain network address and the "domain-unique" gateway-mapped node address for a network number and node address, respectively, of a network layer address of a packet header received from a source node in the domain. Conversely, when a packet is received for a destination node in the domain, the address mapping gateway substitutes the originally-assigned network number and node address for the domain network address and gateway-mapped node address, respectively, prior to forwarding the packet to the node. Specifically, the address mapping gateway maintains an address mapping table that provides a cross-reference between (1) a source node address and the network number of the local network in which the node resides, and (2) a gateway-mapped node address generated by the address mapping gateway. Upon receipt of a packet from the source node, the address mapping gateway creates a mapping entry in the address mapping table that node and performs an address translation to a globally-unique network layer address. On the other hand, upon receipt of a packet destined for a destination node in the domain, the address mapping gateway locates the mapping entry for the packet's gateway-mapped node address and performs a reverse address translation to the originally-assigned network layer address.
摘要翻译：本发明是在互联网络链路中使用的地址映射网关，其将域中的所有节点与单个网络号码（称为域网络地址）相关联，并且提供在域内是唯一的网关映射节点地址。地址映射网关分别动态地将“全局唯一”域网络地址和“域唯一”网关映射节点地址替换为从源接收的分组报头的网络层地址的网络号和节点地址节点在域中。相反，当为域中的目的地节点接收到分组时，地址映射网关将分组的原始分配的网络号和节点地址分别替换为域网络地址和网关映射节点地址，然后将分组转发到节点。具体地说，地址映射网关维护地址映射表，其提供（1）源节点地址与节点驻留的本地网络的网络号之间的交叉引用，以及（2）生成的网关映射节点地址由地址映射网关。在从源节点接收到分组时，地址映射网关在地址映射表中创建一个映射条目，该节点并执行地址转换为全局唯一的网络层地址。另一方面，地址映射网关在接收到目的地为目的地节点的分组时，定位分组的网关映射节点地址的映射条目，并对原始分配的网络层地址进行反向地址转换。

59. 发明授权

US5511168A Virtual circuit manager for multicast messaging 失效
标题翻译：用于组播消息的虚拟电路管理器
公开(公告)号：US5511168A
公开(公告)日：1996-04-23
申请号：US86593
申请日：1993-07-01
申请人： Radia J. Perlman , William R. Hawe
发明人： Radia J. Perlman , William R. Hawe
IPC分类号： H04L12/18 , H04L12/56 , H04Q11/04 , H04L12/46 , G06F13/00 , H04Q7/22
CPC分类号： H04L49/203 , H04L12/185 , H04L45/10 , H04L45/16 , H04Q11/0478 , H04L2012/5619
摘要： A multicast connection arrangement is provided by which a source node may establish multicast virtual circuits to a group of destination nodes of an arbitrary-topology network using a single procedure, and may subsequently modify those circuits, i.e., add or delete destination nodes, with a single, related procedure. The arrangement includes a multicast setup packet for opening the multicast virtual circuits, the packet containing a multicast identifier field, a virtual circuit field and a destination field identifying a list of desired destination node addresses. The multicast setup packet may be also used to add destination nodes to the circuits while a multicast delete packet is used to delete nodes from the circuits. When adding nodes to the multicast virtual circuits, a topology analysis process is provided to prevent the formation of an unstable network topology.
摘要翻译：提供了多播连接装置，源节点可以使用单播程序向任意拓扑网络的一组目的节点建立多播虚拟电路，然后可以修改这些电路，即，添加或删除目的地节点单一相关程序。该装置包括用于打开多播虚拟电路的组播建立分组，包含多播标识符字段的分组，虚拟电路字段和标识所需目的地节点地址列表的目的地字段。多播建立分组还可以用于向电路添加目的地节点，同时使用多播删除分组从电路中删除节点。当向组播虚拟电路添加节点时，提供拓扑分析过程以防止形成不稳定的网络拓扑。

60. 发明授权

US5428615A Many to few group address translation through a network bridge 失效
标题翻译：通过网桥很少到几组群地址转换
公开(公告)号：US5428615A
公开(公告)日：1995-06-27
申请号：US278686
申请日：1994-07-21
申请人： Floyd J. Backes , William R. Hawe , G. Paul Koning , David J. Mitton , Radia J. Perlman
发明人： Floyd J. Backes , William R. Hawe , G. Paul Koning , David J. Mitton , Radia J. Perlman
IPC分类号： H04L12/18 , H04L12/46
CPC分类号： H04L45/742 , H04L12/1836 , H04L12/46 , H04L2212/00
摘要： A connection apparatus for connecting a first communication system with a second communication system and a third communication system. A first frame is received from the first communication system, where the first frame has a multicast address as a destination address, and where the destination address requires the first frame to be transmitted onto the second communication system. The multicast address is translated into a functional address, and the functional address is written into a second frame transmitted onto the second communication system. The second frame is received and is transmitted onto a third communication system, and the functional address is translated into a multicast address for the third communication system, and the multicast address is written into a destination field of the frame as it is transmitted onto the third communication system. The second communication system may be a token ring system based upon an IEEE 802.5 standard, and the functional address may be written into a DSAP field and into a PROTOCOL TYPE field of an 802.5 Standard frame.
摘要翻译：一种用于将第一通信系统与第二通信系统和第三通信系统连接的连接装置。从第一通信系统接收第一帧，其中第一帧具有多播地址作为目的地地址，并且其中目的地地址要求将第一帧发送到第二通信系统。将多播地址转换为功能地址，将功能地址写入发送到第二通信系统的第二帧。第二帧被接收并被发送到第三通信系统，并且将功能地址转换为第三通信系统的多播地址，并且将多播地址写入帧的目的地字段，因为它被发送到第三通信系统通讯系统第二通信系统可以是基于IEEE 802.5标准的令牌环系统，并且功能地址可以被写入DSAP字段和802.5标准帧的协议类型字段中。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式