专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

WO2008017011A2 SYSTEMS AND METHODS FOR APPLICATION-BASED INTERCEPTION AND AUTHORIZATION OF SSL/VPN TRAFFIC 审中-公开
标题翻译：用于基于应用程序的SSL / VPN流量的截取和授权的系统和方法
公开(公告)号：WO2008017011A2
公开(公告)日：2008-02-07
申请号：PCT/US2007/075035
申请日：2007-08-02
申请人： CITRIX SYSTEMS, INC. , MULLICK, Amarnath , VENKATRAMAN, Charu , HE, Junxiao , NANJUNDASWAMI, Shashi , HARRIS, James , SONI, Ajay
发明人： MULLICK, Amarnath , VENKATRAMAN, Charu , HE, Junxiao , NANJUNDASWAMI, Shashi , HARRIS, James , SONI, Ajay
IPC分类号： H04L29/06
CPC分类号： H04L63/0236 , H04L63/0245 , H04L63/0263 , H04L63/0272 , H04L63/101 , H04L63/104 , H04L63/306
摘要： A method for intercepting, by an agent of a client, communications from the client to be transmitted via a virtual private network connection includes the step of intercepting communications based on identification of an application from which the communication originates. The agent receives information identifying a first application. The agent determines a network communication transmitted by the client originates from the first application and intercepts that communication. The agent transmits the intercepted communication via the virtual private network connection. Another method is described for allowing or denying, by an appliance, access to a resource by an application on a client via a virtual private network connection includes basing the decision to allow or deny access on identification of the application. The appliance associates with the intercepted request an authorization policy based on the identity of the application. The appliance determines, using the authorization policy and the identity of the application, to either allow or deny access by the application to the resource.
摘要翻译：用于由客户机的代理拦截来自客户机的通过虚拟专用网络连接发送的通信的方法包括基于通信发起的应用的标识来拦截通信的步骤。代理接收标识第一个应用程序的信息。代理确定客户端发送的网络通信源自第一个应用程序并拦截该通信。代理通过虚拟专用网络连接发送截取的通信。描述了另一种方法，用于通过设备允许或拒绝客户端上的应用程序经由虚拟专用网络连接访问资源，包括基于决定允许还是拒绝对应用程序的标识进行访问。设备根据应用程序的身份与截获的请求关联授权策略。设备使用授权策略和应用程序的身份确定是允许还是拒绝应用程序访问资源。

2. 发明申请

WO2006004725A2 SYSTEM AND METHOD FOR ESTABLISHING A VIRTUAL PRIVATE NETWORK 审中-公开
标题翻译：建立虚拟私有网络的系统和方法
公开(公告)号：WO2006004725A2
公开(公告)日：2006-01-12
申请号：PCT/US2005/022884
申请日：2005-06-24
申请人： NETSCALER, INC. , SUNDARRAJAN, Prabakar , HE, Junxiao , SONI, Ajay , NANJUNDASWAMY, Shashidhara , KUMAR, Arkesh
发明人： SUNDARRAJAN, Prabakar , HE, Junxiao , SONI, Ajay , NANJUNDASWAMY, Shashidhara , KUMAR, Arkesh
IPC分类号： G06F15/16 , G06F17/00 , G06F9/00 , H04L9/00
CPC分类号： H04L63/0272 , H04L63/029 , H04L63/0428 , H04L63/164 , H04L63/166 , H04L67/2814 , H04L67/289 , H04L67/34
摘要： A system and method for establishing a virtual private network (VPN) between a client and a private data communication network. An encrypted data communication session, such as a Secure Sockets Layer (SSL) data communication session, is established between a gateway and the client over a public data communication network. The gateway then sends a programming component to the client for automatic installation and execution thereon. The programming component operates to intercept communications from client applications destined for resources on the private data communication network and to send the intercepted communications to the gateway via the encrypted data communication session instead of to the resources on the private data communication network.
摘要翻译：一种用于在客户机和专用数据通信网络之间建立虚拟专用网络（VPN）的系统和方法。通过公共数据通信网络在网关和客户端之间建立加密数据通信会话，例如安全套接层（SSL）数据通信会话。网关然后将编程组件发送给客户端，以便在其上进行自动安装和执行。编程组件用于截取来自专用于私有数据通信网络上的资源的客户端应用程序的通信，并通过加密的数据通信会话而不是专用数据通信网络上的资源将拦截的通信发送到网关。

3. 发明申请

WO2008091384A2 SYSTEMS AND METHODS FOR USING A CLIENT AGENT TO MANAGE ICMP TRAFFIC IN A VIRTUAL PRIVATE NETWORK ENVIRONMENT 审中-公开
标题翻译：使用客户端在虚拟私有网络环境中管理ICMP流量的系统和方法
公开(公告)号：WO2008091384A2
公开(公告)日：2008-07-31
申请号：PCT/US2007075036
申请日：2007-08-02
申请人： CITRIX SYSTEMS INC , MULLICK AMARNATH , VENKATRAMAN CHARU , HE JUNXIAO , NANJUNDASWAMI SHASHI , SONI AJAY , RAJAN ROY
发明人： MULLICK AMARNATH , VENKATRAMAN CHARU , HE JUNXIAO , NANJUNDASWAMI SHASHI , SONI AJAY , RAJAN ROY
CPC分类号： H04L12/4641 , H04L41/046 , H04L41/0893 , H04L43/00 , H04L43/0811 , H04L43/0817 , H04L43/10 , H04L63/0272 , H04L63/166
摘要： Systems and methods are described for using a client agent executing on a client to send ICMP messages to an appliance connected via a virtual private network Methods include: establishing, via a client agent executing on a client, a transport layer virtual private network connection with an appliance; intercepting, by the client agent at the network layer, an ICMP request originating from the client; and transmitting, by the client agent via a transport layer connection, the ICMP request to the appliance. Addition methods describe determining, by the appliance, the address identified by the ICMP request corresponds to a second client, the second client also connected via a virtual private network to the remote machine; and transmitting, by the appliacne to the second client via the virtual private network connection, the ICMP request. Corresponding systems are also described.
摘要翻译：描述了使用在客户端上执行的客户端代理将ICMP消息发送到经由虚拟专用网连接的设备的系统和方法。方法包括：通过在客户端上执行的客户端代理来建立传输层虚拟专用网络连接器具; 由网络层的客户代理拦截来自客户端的ICMP请求; 以及由所述客户端代理经由传输层连接向所述设备发送所述ICMP请求。附加方法描述了由设备确定由ICMP请求标识的地址对应于第二客户端，第二客户端还经由虚拟专用网络连接到远程机器; 以及通过所述应用程序经由所述虚拟专用网络连接将所述ICMP请求发送到所述第二客户端。还描述了相应的系统。

4. 发明申请

WO2008017030A3 SYSTEM AND METHOD FOR ROUTING TRAFFIC AT A CLIENT VIA A FIRST OR A SECOND TRANSPORT LAYER CONNECTION 审中-公开
标题翻译：通过第一或第二运输层连接在客户端路由交通的系统和方法
公开(公告)号：WO2008017030A3
公开(公告)日：2008-06-19
申请号：PCT/US2007075074
申请日：2007-08-02
申请人： CITRIX SYSTEMS INC , JOSEPHINE SUGANTHI , VENKATRAMAN CHARU , HE JUNXIAO , SHETTY ANIL , VERZUNOZ SERGEY
发明人： JOSEPHINE SUGANTHI , VENKATRAMAN CHARU , HE JUNXIAO , SHETTY ANIL , VERZUNOZ SERGEY
IPC分类号： H04L29/06 , H04L12/26 , H04L29/08
CPC分类号： H04L67/1008 , H04L45/24 , H04L67/1002 , H04L67/1014 , H04L67/1029 , H04L67/327 , H04L69/16 , H04L69/161 , H04L69/165
摘要： Methods for using a client agent (120) to route client requests among a plurality of appliances (200a, 200b, 200c) using transport layer information include the steps of : establishing, by a client agent (120) executing on a client (102), a first transport layer connection with a first appliance of a plurality of appliances, the first appliance providing access to one or more servers (106a, 106b); establishing, by a client agent executing on the client, a second transport layer connection with a second appliance of a plurality of appliances, the second appliance providing access to one or more servers; intercepting, by the client agent, a packet transmitted by the client; selecting, by the client agent, one of the connections to transmit the intercepted packet based on a characteristic of at least one of : the transport layer connections, the plurality of appliances, or the servers; and transmitting the intercepted packet via the selected connection.
摘要翻译：使用客户端代理（120）使用传输层信息在多个设备（200a，200b，200c）之间路由客户端请求的方法包括以下步骤：由在客户端（102）上执行的客户端代理（120）建立，与多个设备的第一设备的第一传输层连接，所述第一设备提供对一个或多个服务器（106a，106b）的访问; 由在客户端上执行的客户端代理建立与多个设备的第二设备的第二传输层连接，所述第二设备提供对一个或多个服务器的访问; 由客户端代理拦截客户端发送的数据包; 基于以下至少一个的特征，由所述客户端代理选择所述连接之一来发送所截取的分组：传输层连接，所述多个设备或所述服务器; 并通过所选择的连接发送截取的分组。

5. 发明申请

WO2008017027A1 SYSTEMS AND METHODS FOR PROVIDING MULTI-MODE TRANSPORT LAYER COMPRESSION 审中-公开
标题翻译：用于提供多模式运输层压缩的系统和方法
公开(公告)号：WO2008017027A1
公开(公告)日：2008-02-07
申请号：PCT/US2007/075070
申请日：2007-08-02
申请人： CITRIX SYSTEMS, INC. , BHUSHAN, Bharath , VENKATRAMAN, Charu , HE, Junxiao , NANJUNDASWAMI, Shashi , VERZUNOV, Sergey , SHETTY, Anil , ANNAMALAISAMI, Saravana
发明人： BHUSHAN, Bharath , VENKATRAMAN, Charu , HE, Junxiao , NANJUNDASWAMI, Shashi , VERZUNOV, Sergey , SHETTY, Anil , ANNAMALAISAMI, Saravana
IPC分类号： H04L29/06 , H04L29/08
CPC分类号： H04L69/04 , H04L67/28 , H04L67/2828 , H04L69/16 , H04L69/163 , H04L69/326
摘要： Systems and methods are disclosed for communicating compressed and uncompressed content over a transport layer connection established by an appliance between a client and a server. One method comprises the steps of: establishing, by an appliance, a transport layer connection between a client and a server, and receiving, by the appliance, a first response from the server to a first client request, and a second response from the server to a second client request The first response and the second response has uncompressed data. The method includes transmitting, by the appliance, the first response to the client. The appliance identifies first type of compression from a plurality of compression types for compressing the second response to the client, compresses the second response based on the identified compression type, and transmits the compressed second response to the client.
摘要翻译：公开了用于通过由客户端和服务器之间的设备建立的传输层连接来传送压缩和未压缩内容的系统和方法。一种方法包括以下步骤：由设备建立客户端和服务器之间的传输层连接，并且由设备接收从服务器到第一客户端请求的第一响应以及来自服务器的第二响应到第二个客户端请求第一个响应和第二个响应有未压缩的数据。该方法包括由设备向客户端发送第一响应。设备从多个压缩类型中识别第一类型的压缩，以便将第二响应压缩到客户端，并基于所识别的压缩类型来压缩第二响应，并将压缩的第二响应发送给客户端。

6. 发明申请

WO2006004725A3 SYSTEM AND METHOD FOR ESTABLISHING A VIRTUAL PRIVATE NETWORK 审中-公开
标题翻译：建立虚拟私有网络的系统和方法
公开(公告)号：WO2006004725A3
公开(公告)日：2009-06-04
申请号：PCT/US2005022884
申请日：2005-06-24
申请人： NETSCALER INC , SUNDARRAJAN PRABAKAR , HE JUNXIAO , SONI AJAY , NANJUNDASWAMY SHASHIDHARA , KUMAR ARKESH
发明人： SUNDARRAJAN PRABAKAR , HE JUNXIAO , SONI AJAY , NANJUNDASWAMY SHASHIDHARA , KUMAR ARKESH
IPC分类号： H04L9/32
CPC分类号： H04L63/0272 , H04L63/029 , H04L63/0428 , H04L63/164 , H04L63/166 , H04L67/2814 , H04L67/289 , H04L67/34
摘要： A system and method for establishing a virtual private network (VPN) between a client and a private data communication network. An encrypted data communication session, such as a Secure Sockets Layer (SSL) data communication session, is established between a gateway and the client over a public data communication network. The gateway then sends a programming component to the client for automatic installation and execution thereon. The programming component operates to intercept communications from client applications destined for resources on the private data communication network and to send the intercepted communications to the gateway via the encrypted data communication session instead of to the resources on the private data communication network.
摘要翻译：一种用于在客户机和专用数据通信网络之间建立虚拟专用网络（VPN）的系统和方法。通过公共数据通信网络在网关和客户端之间建立加密的数据通信会话，例如安全套接层（SSL）数据通信会话。网关然后将编程组件发送到客户端，以便在其上进行自动安装和执行。编程组件用于截取来自专用于专用数据通信网络上的资源的客户端应用程序的通信，并通过加密的数据通信会话而不是私有数据通信网络上的资源将拦截的通信发送到网关。

7. 发明申请

WO2008017064A3 SYSTEMS AND METHODS FOR USING AN HTTP-AWARE CLIENT AGENT 审中-公开
标题翻译：用于使用HTTP-AWARE客户端代理的系统和方法
公开(公告)号：WO2008017064A3
公开(公告)日：2008-03-20
申请号：PCT/US2007075178
申请日：2007-08-03
申请人： CITRIX SYSTEMS INC , VENKATRAMAN CHARU , HE JUNXIAO , SONI AJAY
发明人： VENKATRAMAN CHARU , HE JUNXIAO , SONI AJAY
IPC分类号： H04L29/08 , H04L29/06
CPC分类号： H04L63/0272 , H04L63/168 , H04L67/02
摘要： Systems and methods are described for using a client agent operating in a virtual private network environment to intercept HTTP communications. Methods include: intercepting at the network layer, by a client agent executing on a client, an HTTP request from an application executing on the client; modifying the HTTP request; and transmitting, via a transport layer connection, the modified HTTP request to a server. Additional methods may comprise adding, removing, or modifying at least one cookie in the HTTP request. Still other methods may comprise modifying at least one name -value pair contained in the HTTP request. Still other methods may use a client agent to manage HTTP authentication cookies.
摘要翻译：描述了使用在虚拟专用网络环境中操作的客户端代理拦截HTTP通信的系统和方法。方法包括：由在客户端上执行的客户端代理在网络层拦截来自在客户端上执行的应用的HTTP请求; 修改HTTP请求; 以及经由传输层连接将修改的HTTP请求发送到服务器。其他方法可以包括添加，移除或修改HTTP请求中的至少一个cookie。其他方法还可以包括修改HTTP请求中包含的至少一个名称 - 值对。其他方法还可以使用客户端代理来管理HTTP身份验证Cookie。

8. 发明申请

WO2006074072A3 SYSTEMS AND METHODS FOR PROVIDING CLIENT-SIDE ACCELERATION TECHNIQUES 审中-公开
标题翻译：用于提供客户端加速技术的系统和方法
公开(公告)号：WO2006074072A3
公开(公告)日：2006-12-07
申请号：PCT/US2005047433
申请日：2005-12-30
申请人： CITRIX SYSTEMS INC , SUNDARRAJAN PRABAKAR , HE JUNXIAO , SINHA RAJIV , VERZUNOV SERGEY , VENKATRAMAN CHARU , SHETTY ANIL
发明人： SUNDARRAJAN PRABAKAR , HE JUNXIAO , SINHA RAJIV , VERZUNOV SERGEY , VENKATRAMAN CHARU , SHETTY ANIL
IPC分类号： H04L29/08 , G06F9/445
CPC分类号： H04L67/34 , H04L47/10 , H04L63/0272 , H04L67/28 , H04L67/2804 , H04L67/2842 , H04L67/289 , H04L69/10 , H04L69/16 , H04L69/163
摘要： The present invention is directed towards systems and methods for dynamically deploying and executing an acceleration program on a client to improve the performance and delivery of remotely accessed applications. The acceleration program of the present invention is automatically installed and executed on a client in a manner transparent to and seamless with the operation of the client. In one embodiment, the acceleration program is dynamically provided by an appliance device upon determination by the device that the client's access to a server or remote application can be accelerated. In some embodiments, the acceleration program performs one or more of the following acceleration techniques on the client: 1) multiprotocol compression 2) transport control protocol pooling, 3) transport control protocol multiplexing 4) transport control protocol buffering and 5) caching. Also, in some embodiments, the acceleration program performs these acceleration techniques in an integrated and efficient manner at the transport layer using a kernel-level data structure. In another embodiment, the client-side acceleration program performs proxy redirection techniques to automatically bypass any intermediary devices to continuously provided access by the client to the server or a remotely accessed application.
摘要翻译：本发明针对用于在客户端上动态部署和执行加速程序以改善远程访问的应用程序的性能和传送的系统和方法。本发明的加速程序以对客户端的操作透明且无缝的方式在客户端上自动安装和执行。在一个实施例中，加速器程序由设备设备动态地提供，一旦设备确定客户端对服务器或远程应用的访问可以被加速。在一些实施例中，加速程序在客户端上执行以下加速技术中的一个或多个：1）多协议压缩2）传输控制协议池3）传输控制协议多路复用4）传输控制协议缓冲和5）高速缓存。而且，在一些实施例中，加速程序使用内核级数据结构在传输层处以集成且有效的方式执行这些加速技术。在另一个实施例中，客户端加速程序执行代理重定向技术以自动绕过任何中间设备以连续提供客户端对服务器或远程访问的应用程序的访问。

9. 发明申请

WO2006074072A2 SYSTEMS AND METHODS FOR PROVIDING CLIENT-SIDE ACCELERATION TECHNIQUES 审中-公开
标题翻译：提供客户端加速技术的系统和方法
公开(公告)号：WO2006074072A2
公开(公告)日：2006-07-13
申请号：PCT/US2005/047433
申请日：2005-12-30
申请人： CITRIX SYSTEMS, INC. , SUNDARRAJAN, Prabakar , HE, Junxiao , SINHA, Rajiv , VERZUNOV, Sergey , VENKATRAMAN, Charu , SHETTY, Anil
发明人： SUNDARRAJAN, Prabakar , HE, Junxiao , SINHA, Rajiv , VERZUNOV, Sergey , VENKATRAMAN, Charu , SHETTY, Anil
IPC分类号： H04L29/08 , G06F9/445
CPC分类号： H04L67/34 , H04L47/10 , H04L63/0272 , H04L67/28 , H04L67/2804 , H04L67/2842 , H04L67/289 , H04L69/10 , H04L69/16 , H04L69/163
摘要： The present invention is directed towards systems and methods for dynamically deploying and executing an acceleration program on a client to improve the performance and delivery of remotely accessed applications. The acceleration program of the present invention is automatically installed and executed on a client in a manner transparent to and seamless with the operation of the client. In one embodiment, the acceleration program is dynamically provided by an appliance device upon determination by the device that the client's access to a server or remote application can be accelerated. In some embodiments, the acceleration program performs one or more of the following acceleration techniques on the client: 1) multiprotocol compression 2) transport control protocol pooling, 3) transport control protocol multiplexing 4) transport control protocol buffering and 5) caching. Also, in some embodiments, the acceleration program performs these acceleration techniques in an integrated and efficient manner at the transport layer using a kernel-level data structure. In another embodiment, the client-side acceleration program performs proxy redirection techniques to automatically bypass any intermediary devices to continuously provided access by the client to the server or a remotely accessed application.
摘要翻译：本发明涉及用于在客户机上动态部署和执行加速程序以提高远程访问应用的性能和传送的系统和方法。本发明的加速程序以对客户端的操作透明和无缝的方式在客户端上自动安装和执行。在一个实施例中，当设备确定客户端对服务器或远程应用程序的访问可以被加速时，加速程序由设备设备动态地提供。在一些实施例中，加速程序在客户机上执行以下一种或多种加速技术：1）多协议压缩2）传输控制协议池3）传输控制协议复用4）传输控制协议缓冲和5）缓存。此外，在一些实施例中，加速程序使用内核级数据结构在传输层上以集成且有效的方式执行这些加速技术。在另一个实施例中，客户端加速程序执行代理重定向技术，以自动绕过任何中间设备，以连续提供客户端访问服务器或远程访问的应用程序。

10. 发明申请

WO2008091384A3 SYSTEMS AND METHODS FOR USING A CLIENT AGENT TO MANAGE ICMP TRAFFIC IN A VIRTUAL PRIVATE NETWORK ENVIRONMENT 审中-公开
公开(公告)号：WO2008091384A3
公开(公告)日：2008-07-31
申请号：PCT/US2007/075036
申请日：2007-08-02
申请人： CITRIX SYSTEMS, INC. , MULLICK, Amarnath , VENKATRAMAN, Charu , HE, Junxiao , NANJUNDASWAMI, Shashi , SONI, Ajay , RAJAN, Roy
发明人： MULLICK, Amarnath , VENKATRAMAN, Charu , HE, Junxiao , NANJUNDASWAMI, Shashi , SONI, Ajay , RAJAN, Roy
IPC分类号： H04L12/26 , H04L29/06
摘要： Systems and methods are described for using a client agent (120a) executing on a client (102a) to send ICMP messages to an appliance (200) connected via a virtual private network Methods include: establishing, via a client agent executing on a client, a transport layer virtual private network connection with an appliance; intercepting, by the client agent at the network layer, an ICMP request originating from the client; and transmitting, by the client agent via a transport layer connection, the ICMP request to the appliance. Addition methods describe determining, by the appliance, the address identified by the ICMP request corresponds to a second client, the second client also connected via a virtual private network to.the remote machine; and transmitting, by the appliacne to the second client via the virtual private network connection, the ICMP request. Corresponding systems are also described.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式