专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US07472416B2 Preventing network reset denial of service attacks using embedded authentication information 有权
标题翻译：使用嵌入式认证信息防止网络重置拒绝服务攻击
公开(公告)号：US07472416B2
公开(公告)日：2008-12-30
申请号：US10842015
申请日：2004-05-06
申请人： Anantha Ramaiah , Shrirang Bage , Amol Khare , Mitesh Dalal
发明人： Anantha Ramaiah , Shrirang Bage , Amol Khare , Mitesh Dalal
IPC分类号： G06F11/00
CPC分类号： H04L63/1458 , H04L1/16 , H04L63/1466
摘要： Approaches for preventing TCP RST attacks intended to cause denial of service in packet-switched networks are disclosed. In one approach, upon receiving a TCP RST packet, an endpoint node determines whether the TCP segment contains valid authentication information. The TCP RST segment is accepted and the TCP connection is closed only when the authentication information is valid. Authentication information may comprise a reset type values, and either initial sequence numbers of both endpoints, or a copy of a TCP header and options values previously sent by the endpoint node that is performing the authentication. Thus, attacks are thwarted because an attacker cannot know or reasonably guess the required authentication information.
摘要翻译：公开了用于防止在分组交换网络中导致拒绝服务的TCP RST攻击的方法。在一种方法中，在接收到TCP RST分组时，端点节点确定TCP分段是否包含有效的认证信息。 TCP RST段被接受，只有认证信息有效时才关闭TCP连接。认证信息可以包括复位类型值，以及两个端点的初始序列号，或TCP头部的副本以及由执行认证的端点节点先前发送的选项值。因此，攻击是挫败的，因为攻击者无法知道或合理地猜测所需的身份验证信息。

2. 发明申请

US20070101129A1 Approaches for automatically switching message authentication keys 有权
标题翻译：自动切换消息认证密钥的方法
公开(公告)号：US20070101129A1
公开(公告)日：2007-05-03
申请号：US11261683
申请日：2005-10-28
申请人： John Wong , Anantha Ramaiah , Amol Khare , Mitesh Dalal , Shrirang Bage , Lin Han
发明人： John Wong , Anantha Ramaiah , Amol Khare , Mitesh Dalal , Shrirang Bage , Lin Han
IPC分类号： H04L9/00
CPC分类号： H04L69/16 , H04L63/0846 , H04L63/12 , H04L69/163
摘要： Approaches are disclosed for switching transport protocol connection keys. A method of automatically changing a message authentication key at each of two endpoints of a connection in a telecommunications network comprises testing a sequence value received in each of a plurality of data segments on the connection; and selecting a next message authentication key, from among a plurality of stored message authentication keys, for use in authenticating subsequently received data segments, when the sequence value matches a specified characteristic.
摘要翻译：公开了用于切换传输协议连接密钥的方法。一种在电信网络中的连接的两个端点中的每个端点处自动改变消息认证密钥的方法包括测试在所述连接上的多个数据段中的每一个中接收到的序列值; 以及当所述序列值与特定特征匹配时，从多个存储的消息认证密钥中选择用于认证随后接收的数据段的下一个消息认证密钥。

3. 发明授权

US08639822B2 Extending application-layer sessions based on out-of-order messages 有权
标题翻译：根据乱序消息扩展应用层会话
公开(公告)号：US08639822B2
公开(公告)日：2014-01-28
申请号：US12986929
申请日：2011-01-07
申请人： Anantha Ramaiah , Keyur Patel , Shrirang Bage
发明人： Anantha Ramaiah , Keyur Patel , Shrirang Bage
IPC分类号： H04L29/06
CPC分类号： H04L49/355
摘要： A method and non-transitory computer-readable medium are disclosed for extending a hold timer that binds an application-layer session when a transport-layer out-of-order message queue includes an out-of-order message for the application-layer session. An application receives an application-layer message from transport protocol logic that is configured to deliver in-order application-layer messages to the application. The received application-layer message is a next in-order application-layer message for an application-layer session that is bound by a hold timer. After an amount time has passed, the application detects an expiration of the hold timer. In response, rather than immediately tearing down the application-layer session, the application inspects an out-of-order queue of the transport protocol logic. The hold timer is extended when the out-of-order queue includes an out-of-order application-layer message for the application-layer session. In one aspect, the transport protocol logic includes an application programming interface that provides the application with access to the out-of-order queue.
摘要翻译：公开了一种方法和非暂时性计算机可读介质，用于在传输层无序消息队列包括用于应用层会话的无序消息时扩展绑定应用层会话的保持定时器。应用程序从传输协议逻辑接收应用层消息，该消息被配置为向应用程序发送按顺序的应用层消息。接收到的应用层消息是由保持定时器绑定的应用层会话的下一个按顺序应用层消息。经过一段时间后，应用程序会检测到保持定时器的到期。作为响应，应用程序不是立即拆除应用程序层会话，而是检查传输协议逻辑的乱序队列。当无序队列包含用于应用层会话的无序应用层消息时，保持定时器被扩展。在一个方面，传输协议逻辑包括向应用程序提供对无序队列的访问的应用编程接口。

4. 发明申请

US20120179934A1 EXTENDING APPLICATION-LAYER SESSIONS BASED ON OUT-OF-ORDER MESSAGES 有权
标题翻译：基于超时信息扩展应用层会议
公开(公告)号：US20120179934A1
公开(公告)日：2012-07-12
申请号：US12986929
申请日：2011-01-07
申请人： Anantha RAMAIAH , Keyur PATEL , Shrirang BAGE
发明人： Anantha RAMAIAH , Keyur PATEL , Shrirang BAGE
IPC分类号： G06F15/16 , G06F11/14
CPC分类号： H04L49/355
摘要： A method and non-transitory computer-readable medium are disclosed for extending a hold timer that binds an application-layer session when a transport-layer out-of-order message queue includes an out-of-order message for the application-layer session. An application receives an application-layer message from transport protocol logic that is configured to deliver in-order application-layer messages to the application. The received application-layer message is a next in-order application-layer message for an application-layer session that is bound by a hold timer. After an amount time has passed, the application detects an expiration of the hold timer. In response, rather than immediately tearing down the application-layer session, the application inspects an out-of-order queue of the transport protocol logic. The hold timer is extended when the out-of-order queue includes an out-of-order application-layer message for the application-layer session. In one aspect, the transport protocol logic includes an application programming interface that provides the application with access to the out-of-order queue.
摘要翻译：公开了一种方法和非暂时性计算机可读介质，用于在传输层无序消息队列包括用于应用层会话的无序消息时扩展绑定应用层会话的保持定时器。应用程序从传输协议逻辑接收应用层消息，该消息被配置为向应用程序发送按顺序的应用层消息。接收到的应用层消息是由保持定时器绑定的应用层会话的下一个按顺序应用层消息。经过一段时间后，应用程序会检测到保持定时器的到期。作为响应，应用程序不是立即拆除应用程序层会话，而是检查传输协议逻辑的乱序队列。当无序队列包含用于应用层会话的无序应用层消息时，保持定时器被扩展。在一个方面，传输协议逻辑包括向应用程序提供对无序队列的访问的应用编程接口。

5. 发明申请

US20050216954A1 Preventing network reset denial of service attacks using embedded authentication information 有权
标题翻译：使用嵌入式认证信息防止网络重置拒绝服务攻击
公开(公告)号：US20050216954A1
公开(公告)日：2005-09-29
申请号：US10842015
申请日：2004-05-06
申请人： Anantha Ramaiah , Shrirang Bage , Amol Khare , Mitesh Dalal
发明人： Anantha Ramaiah , Shrirang Bage , Amol Khare , Mitesh Dalal
IPC分类号： H04L1/16 , H04L9/00 , H04L29/06
CPC分类号： H04L63/1458 , H04L1/16 , H04L63/1466
摘要： Approaches for preventing TCP RST attacks intended to cause denial of service in packet-switched networks are disclosed. In one approach, upon receiving a TCP RST packet, an endpoint node determines whether the TCP segment contains valid authentication information. The TCP RST segment is accepted and the TCP connection is closed only when the authentication information is valid. Authentication information may comprise a reset type values, and either initial sequence numbers of both endpoints, or a copy of a TCP header and options values previously sent by the endpoint node that is performing the authentication. Thus, attacks are thwarted because an attacker cannot know or reasonably guess the required authentication information.
摘要翻译：公开了用于防止在分组交换网络中导致拒绝服务的TCP RST攻击的方法。在一种方法中，在接收到TCP RST分组时，端点节点确定TCP分段是否包含有效的认证信息。 TCP RST段被接受，只有认证信息有效时才关闭TCP连接。认证信息可以包括复位类型值，以及两个端点的初始序列号，或TCP头部的副本以及由执行认证的端点节点先前发送的选项值。因此，攻击是挫败的，因为攻击者无法知道或合理地猜测所需的身份验证信息。

6. 发明授权

US07412600B2 Approaches for automatically switching message authentication keys 有权
标题翻译：自动切换消息认证密钥的方法
公开(公告)号：US07412600B2
公开(公告)日：2008-08-12
申请号：US11261683
申请日：2005-10-28
申请人： John C. Wong , Anantha Ramaiah , Amol Khare , Mitesh Dalal , Shrirang Bage , Lin Han
发明人： John C. Wong , Anantha Ramaiah , Amol Khare , Mitesh Dalal , Shrirang Bage , Lin Han
IPC分类号： H04L29/00
CPC分类号： H04L69/16 , H04L63/0846 , H04L63/12 , H04L69/163
摘要： Approaches are disclosed for switching transport protocol connection keys. A method of automatically changing a message authentication key at each of two endpoints of a connection in a telecommunications network comprises testing a sequence value received in each of a plurality of data segments on the connection; and selecting a next message authentication key, from among a plurality of stored message authentication keys, for use in authenticating subsequently received data segments, when the sequence value matches a specified characteristic.
摘要翻译：公开了用于切换传输协议连接密钥的方法。一种在电信网络中的连接的两个端点中的每个端点处自动改变消息认证密钥的方法包括测试在所述连接上的多个数据段中的每一个中接收到的序列值; 以及当所述序列值与特定特征匹配时，从多个存储的消息认证密钥中选择用于认证随后接收的数据段的下一个消息认证密钥。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式