专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

71. 发明授权

US07707619B2 Method and system for troubleshooting when a program is adversely impacted by a security policy 有权
标题翻译：用于在程序受到安全策略的不利影响时进行故障排除的方法和系统
公开(公告)号：US07707619B2
公开(公告)日：2010-04-27
申请号：US11045733
申请日：2005-01-28
申请人： Art Shelest , Pradeep Bahl , Scott A. Field
发明人： Art Shelest , Pradeep Bahl , Scott A. Field
IPC分类号： H04L29/00
CPC分类号： H04L63/10 , G06F11/079 , G06F21/53 , G06F21/554
摘要： A method and system for selectively excluding a program from a security policy is provided. The security system receives from a user an indication of a program with a problem that is to be excluded from the security policy. When the program executes and a security enforcement event occurs, the security system does not apply the security policy. If the problem appears to be resolved as a result of excluding the program from the security policy, then the user may assume that the security policy is the cause of the problem.
摘要翻译：提供了一种用于从安全策略中选择性地排除程序的方法和系统。安全系统从用户接收到具有要从安全策略中排除的问题的程序的指示。当程序执行并发生安全执行事件时，安全系统不应用安全策略。如果由于从安全策略中排除程序，问题似乎得到解决，那么用户可能认为安全策略是问题的原因。

72. 发明授权

US07653700B1 System and method for performing client-centric load balancing of multiple globally-dispersed servers 有权
标题翻译：用于以多个全局分散式服务器执行以客户为中心的负载平衡的系统和方法
公开(公告)号：US07653700B1
公开(公告)日：2010-01-26
申请号：US09714406
申请日：2000-11-16
申请人： Pradeep Bahl , Feng Sun , Bernard D. Aboda , Arnold S. Miller
发明人： Pradeep Bahl , Feng Sun , Bernard D. Aboda , Arnold S. Miller
IPC分类号： G06F15/16
CPC分类号： H04L67/1008 , H04L29/12009 , H04L29/12047 , H04L43/00 , H04L43/0852 , H04L43/0882 , H04L61/15 , H04L67/101 , H04L67/1038
摘要： Presented is a system and a method for load balancing multiple globally-dispersed servers based on client-centric performance criteria. The infrastructure of the system includes load balancing domain name servers (DNS-LBs) deployed in close physical proximity to the Internet service providers' points of presence. The DNS-LBs are then able to monitor the performance of the servers from a location close to the clients, which allows the DNS-LBs to select a server that will yield the best performance from that location for the client. A second level of the infrastructure utilizes domain name servers (DNS-Bs) that are deployed on the Internet backbones and regional provides. The authoritative domain name servers (DNS-As) for the servers to be load balanced refer all name queries to these DNS-Bs. The DNS-Bs then refer the queries to one of the DNS-LBs based on a mapping of the DNS-ISP address to its physically proximate DNS-LB. The DNS-LB then returns the IP address of the server that will provide the best performance from that location.
摘要翻译：提出了一种基于以客户为中心的性能标准来负载平衡多个全局分散服务器的系统和方法。系统的基础设施包括负载平衡域名服务器（DNS-LB），部署在与Internet服务提供商的存在点紧密的物理接近处。然后，DNS-LB能够从靠近客户端的位置监控服务器的性能，从而允许DNS-LB选择将为客户端从该位置获得最佳性能的服务器。基础架构的第二级使用部署在互联网主干和区域提供的域名服务器（DNS-B）。要负载平衡的服务器的权威域名服务器（DNS-As）将所有名称查询引用到这些DNS-B。然后，DNS-B根据DNS-ISP地址与其物理上接近的DNS-LB的映射关系，将查询引用到DNS-LB之一。然后，DNS-LB返回将从该位置提供最佳性能的服务器的IP地址。

73. 发明授权

US07554920B2 Method and system for dynamically adjusting transmit and receive parameters for handling negative acknowledgments in reliable multicast 有权
标题翻译：用于动态调整发送和接收参数以处理可靠组播中的否定确认的方法和系统
公开(公告)号：US07554920B2
公开(公告)日：2009-06-30
申请号：US11072023
申请日：2005-03-04
申请人： Mohammad Shabbir Alam , Pradeep Bahl , Shirish R. Koti
发明人： Mohammad Shabbir Alam , Pradeep Bahl , Shirish R. Koti
IPC分类号： H04J1/16 , H04J3/14 , H04B1/44 , H04L12/28 , H04L12/56 , H04J3/26
CPC分类号： H04L1/187 , H04L1/1848 , H04L1/1887 , H04L2001/0093
摘要： A method and system for multicast network transmissions dynamically sets response time parameters for handling negative acknowledgments (NAKs). When the sender receives a NAK for a lost packet, it returns an NAK confirmation (NCF), waits for a back-off time before sending requested repair data, and then waits for a “linger time” during which the sender does not respond to other NAKs for the same lost packet. The back-off time and the linger time are dynamically set according to the position of the requested sequence number in the sender's transmit window such that the back-off time is shorter when the requested data is closer to being flushed out of the transmit window. After receiving the NCF, the receiver waits for a timeout period and resends the NAK if no repair data is received. The timeout period for data receipt is dynamically set according to a statistical average time for receiving repair data from the sender and the estimated sender's transmit window size.
摘要翻译：组播网络传输的方法和系统动态地设置用于处理否定确认（NAK）的响应时间参数。当发送方收到丢失数据包的NAK时，返回NAK确认（NCF），在发送请求的修复数据之前等待退避时间，然后等待发送方不响应的“停留时间” 同一丢失数据包的其他NAK。根据发送者发送窗口中所请求的序列号的位置动态地设置退避时间和逗留时间，使得当所请求的数据更接近被从发送窗口冲出时，退避时间较短。接收到NCF后，如果没有接收到修复数据，则接收机等待超时时间并重新发送NAK。根据用于从发送方接收修复数据的统计平均时间和估计的发送者的发送窗口大小，动态地设置数据收据的超时时间。

74. 发明授权

US07483992B2 Session load balancing and use of VIP as source address for inter-cluster traffic through the use of a session identifier 有权
标题翻译：会话负载平衡和使用VIP作为通过使用会话标识符的集群间流量的源地址
公开(公告)号：US07483992B2
公开(公告)日：2009-01-27
申请号：US11291803
申请日：2005-11-30
申请人： Pradeep Bahl
发明人： Pradeep Bahl
IPC分类号： G06F15/16 , G06F15/173 , H04L9/00
CPC分类号： H04L29/06 , H04L67/1002 , H04L67/1023 , H04L67/1034 , H04L69/16 , H04L69/163
摘要： A method and system for enhancing a load balancing network's ability to load balance sessions is presented. A session identifier is placed within the TCP packet to enable a new mechanism of load distribution and connection grouping within a load balancing system. Specifically, TCP is invoked by a user application to obtain a unique session identifier value. TCP places the session identifier as a sender session identifier within the OPTIONS field of the TCP header. As an alternative, a session identifier can be placed within a session header that is attached to the TCP packet. On receiving such a packet, the destination load balancing system hashes over at least the session identifier value, and the node corresponding to the results of the hash algorithm acquires the packet. This method of hashing ensures that the same node acquires all subsequently received TCP packets possessing the same session identifier regardless of the source IP address or source port information. The node then places an identical session identifier value in the form of a response session identifier in its TCP response packet. When the TCP packet with response session identifier is received at a load balancing system, the node whose session identifier matches the response session identifier acquires it. This ensures that a response to a node assigned to a virtual IP address is received by the proper node, thus preventing other member nodes assigned to the same VIP address from picking up the packet instead.
摘要翻译：提出了一种用于增强负载平衡网络负载平衡会话能力的方法和系统。会话标识符放置在TCP数据包内，以便能够在负载平衡系统内实现负载分配和连接分组的新机制。具体来说，TCP由用户应用调用以获得唯一的会话标识符值。 TCP将会话标识符作为发送者会话标识符放在TCP头的OPTIONS字段中。作为替代，可以将会话标识符放置在附加到TCP分组的会话报头内。目的负载平衡系统接收到这样一个报文时，至少对会话标识符进行散列，与散列算法结果对应的节点获取报文。这种哈希方法确保相同的节点获取具有相同会话标识符的所有随后接收的TCP分组，而不管源IP地址或源端口信息如何。然后该节点在其TCP响应分组中以响应会话标识符的形式放置相同的会话标识符值。当在负载均衡系统接收到具有响应会话标识符的TCP数据包时，其会话标识符与响应会话标识符匹配的节点获取该消息。这确保了对分配给虚拟IP地址的节点的响应由适当的节点接收，从而防止分配给相同VIP地址的其他成员节点代替该分组。

75. 发明授权

US07464265B2 Methods for iteratively deriving security keys for communications sessions 有权
标题翻译：用于迭代地导出通信会话的安全密钥的方法
公开(公告)号：US07464265B2
公开(公告)日：2008-12-09
申请号：US10138868
申请日：2002-05-03
申请人： Arun Ayyagari , Daniel R. Simon , Bernard D. Aboba , Krishna Ganugapati , Timothy M. Moore , Pradeep Bahl
发明人： Arun Ayyagari , Daniel R. Simon , Bernard D. Aboba , Krishna Ganugapati , Timothy M. Moore , Pradeep Bahl
IPC分类号： H04L9/00
CPC分类号： H04L9/0833 , H04L9/0841 , H04L63/065 , H04L63/08 , H04L63/104 , H04L67/14 , H04L2209/80 , H04L2463/061
摘要： Disclosed are methods for a client, having established one set of security keys, to establish a new set without having to communicate with an authentication server. When the client joins a group, master session security keys are derived and made known to the client and to the group's access server. From the master session security keys, the access server and client each derive transient session security keys, used for authentication and encryption. To change the transient session security keys, the access server creates “liveness” information and sends it to the client. New master session security keys are derived from the liveness information and the current set of transient session security keys. From these new master session security keys are derived new transient session security keys. This process limits the amount of data sent using one set of transient session security keys and thus limits the effectiveness of any statistical attacker.
摘要翻译：已经公开了已经建立了一组安全密钥的客户端的方法来建立新的集合而不必与认证服务器进行通信。当客户端加入一个组时，主会话安全密钥被导出，并被客户机和组的访问服务器所知。从主会话安全密钥，访问服务器和客户端都派生用于认证和加密的瞬态会话安全密钥。要更改瞬态会话安全密钥，访问服务器创建“活动”信息并将其发送给客户端。新的主会话安全密钥来源于活动信息和当前的一组暂存会话安全密钥。从这些新的主会话安全密钥导出新的临时会话安全密钥。此过程限制使用一组瞬态会话安全密钥发送的数据量，从而限制任何统计攻击者的有效性。

76. 发明申请

US20080263654A1 Dynamic security shielding through a network resource 有权
标题翻译：通过网络资源实现动态安全屏蔽
公开(公告)号：US20080263654A1
公开(公告)日：2008-10-23
申请号：US11787589
申请日：2007-04-17
申请人： Pradeep Bahl , Rajesh K. Dadhia
发明人： Pradeep Bahl , Rajesh K. Dadhia
IPC分类号： G06F9/00
CPC分类号： H04L63/145 , H04L29/12226 , H04L29/12339 , H04L61/2015 , H04L61/2503 , H04L63/0281 , H04L67/2814
摘要： Architecture for facilitating access of remote system software functionality by a host machine for the redirection of incoming and/or outgoing host traffic through the remote system for protection services to the host machine. The host machine can gain the benefits of effective protection software such as firewall, intrusion protection software, and anti-malware services, of the remote machine. The host machine can choose to exercise traffic redirection when there is a risk of being compromised, and then revert back to direct communications when the risk has been averted. The host machine takes advantage of the resources available on the remote machine in substantially realtime with minimal disruption to the host and/or the remote machine operations. This facilitates widespread and temporary protection of network systems for a more secure working environment and improved customer experience.
摘要翻译：用于促进由主机访问远程系统软件功能的架构，用于通过远程系统重定向传入和/或传出主机流量以保护服务到主机。主机可以获得远程机器的有效保护软件（如防火墙，入侵保护软件和反恶意软件服务）的好处。主机可能会在有风险的情况下选择进行流量重定向，然后在避免风险的情况下恢复直接通信。主机利用远程机器上可用的资源实质上实时地利用主机和/或远程机器操作的中断。这有助于网络系统的广泛和临时保护，以实现更安全的工作环境和改善客户体验。

77. 发明申请

US20070294755A1 Network aware firewall 有权
标题翻译：网络感知防火墙
公开(公告)号：US20070294755A1
公开(公告)日：2007-12-20
申请号：US11455328
申请日：2006-06-19
申请人： Rajesh K. Dadhia , Fabien J. Royer , Pradeep Bahl
发明人： Rajesh K. Dadhia , Fabien J. Royer , Pradeep Bahl
IPC分类号： G06F15/16
CPC分类号： H04L63/02 , H04L63/20
摘要： A system and method for a network aware firewall is disclosed. The method includes accessing a first network connection from a client computer system and determining whether the first network connection is public or private. The method further includes dynamically modifying security parameters associated with a firewall local to the client computer system in response to determining whether the network connection is public or private.
摘要翻译：公开了一种用于网络感知防火墙的系统和方法。该方法包括从客户端计算机系统访问第一网络连接并确定第一网络连接是公共的还是私有的。该方法还包括响应于确定网络连接是公共的还是私有的，动态地修改与客户端计算机系统本地的防火墙相关联的安全性参数。

78. 发明授权

US07248570B2 System and method for coordinating bandwidth usage of a communication channel by wireless network nodes 有权
标题翻译：用于协调无线网络节点对通信信道带宽利用率的系统和方法
公开(公告)号：US07248570B2
公开(公告)日：2007-07-24
申请号：US09953980
申请日：2001-09-17
申请人： Pradeep Bahl , Paramvir Bahl
发明人： Pradeep Bahl , Paramvir Bahl
IPC分类号： H04Q7/00
CPC分类号： H04W16/14 , H04W28/20 , H04W36/00 , H04W60/00 , H04W74/06 , H04W84/005 , H04W84/12 , H04W84/18
摘要： A system and method is provided for coordinating wireless bandwidth usage of a common frequency band by wireless nodes in two disjoint networks, such as an infrastructure (“IS”) network and an ad hoc (“AH”) network. When AH nodes move into the transmission range of an access point of the IS network, they register with the access point and listen to the access point to tell them when they are allowed to transmit data over a given transmission channel. The access point coordinates the bandwidth usage by broadcasting ad hoc mode poll signals to indicate that the ad hoc nodes may transmit over the channel, and sending infrastructure mode poll signals to indicate that a wireless node in the IS network can transmit over the given channel. The access point makes a fraction of the bandwidth available for communications by the wireless AH nodes in its transmission range, while guaranteeing the rest of the bandwidth for wireless nodes in the IS network.
摘要翻译：提供了一种系统和方法，用于协调诸如基础设施（“IS”）网络和自组织（“AH”）网络的两个不相交网络中的无线节点的公共频带的无线带宽利用。当AH节点移动到IS网络的接入点的传输范围时，它们向接入点注册并监听接入点，以便在允许其通过给定传输信道传输数据时告知它们。接入点通过广播自组织模式轮询信号来协调带宽使用，以指示自组织节点可以在信道上传输，并且发送基础设施模式轮询信号以指示IS网络中的无线节点可以通过给定信道进行传输。接入点使无线AH节点在其传输范围内可用于通信的一小部分带宽，同时保证IS网络中无线节点的其余带宽。

79. 发明授权

US07146418B2 Method and system for providing transparent mobility support 有权
公开(公告)号：US07146418B2
公开(公告)日：2006-12-05
申请号：US09992451
申请日：2001-11-16
申请人： Pradeep Bahl
发明人： Pradeep Bahl
IPC分类号： H04L7/38 , H04L12/28
CPC分类号： H04L65/1006 , H04L67/14 , H04L69/16 , H04L69/162 , H04W80/04 , H04W80/10
摘要： A system and method for providing transparent mobility support employs a mobile service in an API layer of an operating system to leverage the capability of a session establishment service that implements the Session Initiation Protocol or the like for locating a remote node for session setup and detecting address change of the remote node. When an application on a correspondent host (CH) wants to communicate with a second application on a mobile host (MH), the mobility service of the CH uses the session establishment service to locate the mobile host and set up a session with it, and then sets up a transport data channel for the session. When the MH changes its network address, the session establishment service of the CH finds out the new address through the operation of the session establishment protocol and reestablishes the session with the MH. The new address of the MH is then communicated to the CH's mobility service, which resets the data channel to connect to the new address, thereby allowing communication data from the first application to continue to flow to the MH.

80. 发明授权

US07146133B2 Wireless transmission interference avoidance on a device capable of carrying out wireless network communications 有权
标题翻译：能够进行无线网络通信的设备上的无线传输干扰避免
公开(公告)号：US07146133B2
公开(公告)日：2006-12-05
申请号：US10735945
申请日：2003-12-15
申请人： Pradeep Bahl , Amer Hassan
发明人： Pradeep Bahl , Amer Hassan
IPC分类号： H04B1/00 , H04B15/00
CPC分类号： H04W16/14 , H04W72/1215 , H04W88/06
摘要： A wireless technology (e.g., Wi-Fi) coexistence architecture and method are disclosed for managing potential conflicts between wireless technology interference sources. A coexistence driver maintains a conflict map identifying potentially conflicting wireless technologies on a computing device. Such technologies, due to their use of overlapping transmission frequency spectra, potentially create signal interference with one another while transmitting. Managing such conflict is carried out by initially identifying conflicts arising from wireless technology interference sources based on entries within the conflict map for a set of currently installed wireless technology interfaces. Thereafter the coexistence driver creates a virtual coexistence driver to manage an identified set of conflicting wireless technology interference sources, wherein the coexistence driver regulates transmission of data sets by wireless technology interfaces according to a coexistence scheme including priority-based data transmissions.
摘要翻译：公开了用于管理无线技术干扰源之间的潜在冲突的无线技术（例如，Wi-Fi）共存架构和方法。共存驱动程序维护在计算设备上识别潜在的冲突无线技术的冲突映射。这些技术由于使用重叠的传输频谱，在发射时可能会产生彼此的信号干扰。通过根据当前安装的一组无线技术接口的冲突图中的条目，初始地识别由无线技术干扰源产生的冲突来执行这种冲突。此后，共存驱动程序创建虚拟共存驱动程序来管理一组已识别的冲突无线技术干扰源，其中共存驱动器根据包括基于优先级的数据传输的共存方案通过无线技术接口来调节数据集的传输。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式