专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08688979B2 Means of mitigating denial of service attacks on IP fragmentation in high performance IPSEC gateways 失效
标题翻译：减轻高性能IPSEC网关IP分片拒绝服务攻击的手段
公开(公告)号：US08688979B2
公开(公告)日：2014-04-01
申请号：US13040905
申请日：2011-03-04
申请人： Craig Partridge , Walter Clark Milliken , David Patrick Mankins
发明人： Craig Partridge , Walter Clark Milliken , David Patrick Mankins
IPC分类号： H04L29/06
CPC分类号： H04L63/1458 , H04L63/164
摘要： Embodiments of the invention reduce the probability of success of a DOS attack on a node receiving packets by decreasing the probability of random collisions of packets sent by a malicious user with those sent by honest users. The probability of random collisions may be reduced in one class of embodiments of the invention by supplementing the identification field of the IP header of each transmitted packet with at least one bit from another field of the header. The probability of random collisions may be reduced in another class of embodiments of the invention by ensuring that packets sent from a transmitting IPsec node to a receiving IPsec node are not fragmented.
摘要翻译：本发明的实施例通过降低由恶意用户发送的分组与诚实用户发送的分组的随机冲突的概率来降低对接收分组的节点的DOS攻击的成功概率。通过用头部的另一个字段中的至少一个比特来补充每个发送的分组的IP报头的标识字段，可以在本发明的一类实施例中减少随机冲突的概率。通过确保从发送IPsec节点发送到接收IPsec节点的分组不被分段，可以在本发明的另一类实施例中减少随机冲突的概率。

2. 发明授权

US08438401B2 Device and method for securely storing data 有权
标题翻译：用于安全存储数据的设备和方法
公开(公告)号：US08438401B2
公开(公告)日：2013-05-07
申请号：US12564181
申请日：2009-09-22
申请人： Walter Clark Milliken
发明人： Walter Clark Milliken
IPC分类号： G06F21/00
CPC分类号： G06F21/71
摘要： Devices and methods for securely storing data are provided. A device for constructing an encryption key comprising a tamper-protection barrier that encloses one or more memory devices is provided. The memory stores data for constructing the encryption key. The memory may include a single memory device or a plurality of memory devices. The tamper-protection barrier also encloses a security processor configured to combine the data stored in the memory based in part on a function, such as a logical exclusive-or (XOR) function, to construct the encryption key. The stored data in the memory may include partial keys. These partial keys may be created based in part on applying the XOR function to an encryption key.
摘要翻译：提供了安全存储数据的设备和方法。提供了一种用于构建包括包围一个或多个存储器设备的篡改保护屏障的加密密钥的设备。存储器存储用于构建加密密钥的数据。存储器可以包括单个存储器设备或多个存储器设备。防篡改屏障还包括安全处理器，其被配置为基于部分地基于诸如逻辑异或（XOR）功能的功能来组合存储在存储器中的数据来构造加密密钥。存储器中存储的数据可以包括部分密钥。可以部分地基于将XOR功能应用于加密密钥来创建这些部分密钥。

3. 发明申请

US20100205670A1 METHOD AND APPARATUS FOR TRACING PACKETS 审中-公开
标题翻译：跟踪包包的方法和装置
公开(公告)号：US20100205670A1
公开(公告)日：2010-08-12
申请号：US12762366
申请日：2010-04-18
申请人： Walter Clark Milliken , William Timothy Strayer , Stephen Douglas Milligan , Luis Sanchez , Craig Partridge
发明人： Walter Clark Milliken , William Timothy Strayer , Stephen Douglas Milligan , Luis Sanchez , Craig Partridge
IPC分类号： G06F21/00 , G06F15/16
CPC分类号： H04L63/145 , G06F21/562 , H04L51/12
摘要： A system and method for performing source path isolation in a network. The system comprises an intrusion detection system (IDS), a source path isolation server (SS1) and at least one router configured to operate as a source path isolation router (SR1) operating within an autonomous system. When IDS detects a malicious packet, a message is sent to SS1. SS1 in turn generates a query message (QM) containing at least a portion of the malicious packet. Then, QM is sent to participating routers located one hop away. SR1 uses the query message to determine if it has observed the malicious packet by comparing it with locally stored information about packets having passed through SR1. SR1 sends a reply to SS1, and SS1 uses the reply to identify the ingress point into the network of the malicious packet.
摘要翻译：一种用于在网络中执行源路径隔离的系统和方法。该系统包括入侵检测系统（IDS），源路径隔离服务器（SS1）和至少一个被配置为在自主系统内操作的源路径隔离路由器（SR1）的路由器。当IDS检测到恶意数据包时，会向SS1发送一条消息。 SS1又产生包含至少一部分恶意数据包的查询消息（QM）。然后，QM被发送到位于一跳的参与路由器。 SR1使用查询消息来确定是否通过与通过SR1的数据包的本地存储信息进行比较来观察恶意数据包。 SR1向SS1发送回复，SS1使用该回复来识别恶意数据包网络中的入口点。

4. 发明申请

US20090313339A1 METHOD AND APPARATUS FOR TRACING PACKETS 审中-公开
标题翻译：跟踪包包的方法和装置
公开(公告)号：US20090313339A1
公开(公告)日：2009-12-17
申请号：US12249804
申请日：2008-10-10
申请人： Walter Clark Milliken , William Timothy Strayer , Stephen Douglas Milligan , Luis Sanchez , Craig Patridge
发明人： Walter Clark Milliken , William Timothy Strayer , Stephen Douglas Milligan , Luis Sanchez , Craig Patridge
IPC分类号： G06F15/173 , G06F11/00
CPC分类号： H04L63/145 , G06F21/562 , H04L51/12
摘要： A system and method for performing source path isolation in a network. The system comprises an intrusion detection system (IDS), a source path isolation server (SS1) and at least one router configured to operate as a source path isolation router (SR1) operating within an autonomous system. When IDS detects a malicious packet, a message is sent to SS1. SS1 in turn generates a query message (QM) containing at least a portion of the malicious packet. Then, QM is sent to participating routers located one hop away. SR1 uses the query message to determine if it has observed the malicious packet by comparing it with locally stored information about packets having passed through SR1. SR1 sends a reply to SS1, and SS1 uses the reply to identify the ingress point into the network of the malicious packet.
摘要翻译：一种用于在网络中执行源路径隔离的系统和方法。该系统包括入侵检测系统（IDS），源路径隔离服务器（SS1）和至少一个被配置为在自主系统内操作的源路径隔离路由器（SR1）的路由器。当IDS检测到恶意数据包时，会向SS1发送一条消息。 SS1又产生包含至少一部分恶意数据包的查询消息（QM）。然后，QM被发送到位于一跳的参与路由器。 SR1使用查询消息来确定是否通过与通过SR1的数据包的本地存储信息进行比较来观察恶意数据包。 SR1向SS1发送回复，SS1使用该回复来识别恶意数据包网络中的入口点。

5. 发明授权

US07543077B1 Ternary content addressable memory embedded in a central processing unit 有权
标题翻译：嵌入在中央处理单元中的三进制内容可寻址存储器
公开(公告)号：US07543077B1
公开(公告)日：2009-06-02
申请号：US09938921
申请日：2001-08-24
申请人： Walter Clark Milliken , Craig Partridge , Alden W. Jackson
发明人： Walter Clark Milliken , Craig Partridge , Alden W. Jackson
IPC分类号： G06F15/167 , G06F15/173
CPC分类号： G06F15/16
摘要： An arithmetic logic unit (140) improves the processing of information. The arithmetic logic unit (140) includes a register unit (250), a ternary content addressable memory (260), and an operations unit (270).
摘要翻译：算术逻辑单元（140）改善信息的处理。算术逻辑单元（140）包括寄存器单元（250），三元内容寻址存储器（260）和操作单元（270）。

6. 发明申请

US20090132669A1 HASH-BASED SYSTEMS AND METHODS FOR DETECTING AND PREVENTING TRANSMISSION OF UNWANTED E-MAIL 失效
公开(公告)号：US20090132669A1
公开(公告)日：2009-05-21
申请号：US12248790
申请日：2008-10-09
申请人： Walter Clark Milliken , William Timothy Strayer , Stephen Douglas Milligan
发明人： Walter Clark Milliken , William Timothy Strayer , Stephen Douglas Milligan
IPC分类号： G06F15/173
CPC分类号： H04L63/145 , G06F21/562 , H04L51/12
摘要： A system (120) detects transmission of potentially unwanted e-mail messages. The system (120) may receive e-mail messages and generate hash values based on one or more portions of the e-mail messages. The system (120) may then determine whether the generated hash values match hash values associated with prior e-mail messages. The system (120) may determine that one of the e-mail messages is a potentially unwanted e-mail message when one or more of the generated hash values associated with the e-mail message match one or more of the hash values associated with the prior e-mail messages.

7. 发明授权

US07512780B1 Packet-parallel high performance cryptography systems and methods 失效
标题翻译：分组并行高性能加密系统和方法
公开(公告)号：US07512780B1
公开(公告)日：2009-03-31
申请号：US10166547
申请日：2002-06-10
申请人： Walter Clark Milliken
发明人： Walter Clark Milliken
IPC分类号： H04L9/34 , G06F3/00 , G06F1/02
CPC分类号： H04L9/06 , H04L2209/125
摘要： A cryptographic system (500) includes cryptographic sub-units (510) and associated input buffers (520) connected to a scheduler (530) and a reassembler (540). The scheduler (530) receives packets, where each of the packets includes one or more data blocks, and assigns each of the packets to one of the sub-units (510). The input buffers (520) temporarily store the packets from the scheduler (530). Each of the sub-units (510) performs a cryptographic operation on the data blocks from the associated input buffer (520) to form transformed blocks. The reassembler (540) receives the transformed blocks from the sub-units (510), reassembles the packets from the transformed blocks, and outputs the reassembled packets in a same order in which the packets were received by the scheduler (530).
摘要翻译：加密系统（500）包括连接到调度器（530）和重新组装器（540）的密码子单元（510）和相关联的输入缓冲器（520）。调度器（530）接收分组，其中每个分组包括一个或多个数据块，并且将每个分组分配给子单元（510）中的一个。输入缓冲器（520）临时存储来自调度器（530）的分组。每个子单元（510）对来自相关联的输入缓冲器（520）的数据块执行密码操作以形成变换的块。重新组合器（540）从子单元（510）接收经变换的块，重新组合来自变换的块的分组，并且以调度器（530）接收分组的相同顺序输出重组的分组。

8. 发明授权

US06978384B1 Method and apparatus for sequence number checking 失效
标题翻译：序列号检查的方法和装置
公开(公告)号：US06978384B1
公开(公告)日：2005-12-20
申请号：US09955830
申请日：2001-09-19
申请人： Walter Clark Milliken
发明人： Walter Clark Milliken
IPC分类号： G06F11/30 , G06F12/14 , H04L9/00 , H04L9/32 , H04L12/56 , H04L29/06
CPC分类号： H04L47/10 , H04L47/27 , H04L47/34 , H04L63/164 , H04L69/16 , H04L69/163
摘要： Methods and systems are provided for sequence number checking. Sequence numbers of data packets are compared to a “sliding” window. The sliding window indicates a range of sequence numbers considered valid (or invalid). The size of the sliding window may be a particular value or varied. If a sequence number is “below” the sliding window, then it may be considered invalid. If a sequence number is within the sliding window, then it may be further checked to determine if a duplicate sequence number has been received. If a sequence number is “above” the sliding window, then it may be considered valid and the sliding window is advanced. The sliding window and sequence numbers are processed using multiple level bitmaps, which indicate a historical state of sequence numbers received. Furthermore, the multiple level bitmaps may comprise summary bits to summarize a state of subsequent bits.
摘要翻译：提供了序列号检查的方法和系统。将数据包的序列号与“滑动”窗口进行比较。滑动窗口指示被认为有效（或无效）的序列号范围。滑动窗口的尺寸可以是特定值或变化的。如果序列号为滑动窗口的“低于”，则可能被认为无效。如果序列号在滑动窗口内，则可以进一步检查以确定是否已经接收到重复序列号。如果顺序号是滑动窗口的“上方”，则可以认为它是有效的，并且滑动窗口前进。使用多级位图来处理滑动窗口和序列号，这些位图表示接收到的序列号的历史状态。此外，多级位图可以包括汇总位以概括后续位的状态。

9. 发明授权

US06848072B1 Network processor having cyclic redundancy check implemented in hardware 失效
标题翻译：具有在硬件中实现的循环冗余校验的网络处理器
公开(公告)号：US06848072B1
公开(公告)日：2005-01-25
申请号：US09949354
申请日：2001-09-07
申请人： Walter Clark Milliken
发明人： Walter Clark Milliken
IPC分类号： G06F3/00 , H03M13/00 , H03M13/09
CPC分类号： H03M13/09 , H03M13/6513 , H04L1/0043 , H04L1/0061 , H04L69/12 , H04L2001/0094
摘要： A network processor performs Cyclic Redundancy Check (CRC) operations using specialized hardware circuit. The network processor includes a plurality of hardwired CRC polynomials that are used to implement the CRC operations. A CRC instruction selects which polynomial to use when performing the CRC operation.
摘要翻译：网络处理器使用专用硬件电路执行循环冗余校验（CRC）操作。网络处理器包括用于实现CRC操作的多个硬连线CRC多项式。 CRC指令选择执行CRC操作时要使用的多项式。

10. 发明授权

US08204945B2 Hash-based systems and methods for detecting and preventing transmission of unwanted e-mail 失效
标题翻译：用于检测和防止不需要的电子邮件传输的基于哈希的系统和方法
公开(公告)号：US08204945B2
公开(公告)日：2012-06-19
申请号：US12248790
申请日：2008-10-09
申请人： Walter Clark Milliken , William Timothy Strayer , Stephen Douglas Milligan
发明人： Walter Clark Milliken , William Timothy Strayer , Stephen Douglas Milligan
IPC分类号： G06F15/16
CPC分类号： H04L63/145 , G06F21/562 , H04L51/12
摘要： A system (120) detects transmission of potentially unwanted e-mail messages. The system (120) may receive e-mail messages and generate hash values based on one or more portions of the e-mail messages. The system (120) may then determine whether the generated hash values match hash values associated with prior e-mail messages. The system (120) may determine that one of the e-mail messages is a potentially unwanted e-mail message when one or more of the generated hash values associated with the e-mail message match one or more of the hash values associated with the prior e-mail messages.
摘要翻译：系统（120）检测潜在的不需要的电子邮件消息的传输。系统（120）可以接收电子邮件消息并且基于电子邮件消息的一个或多个部分来生成散列值。然后，系统（120）可以确定所生成的散列值是否匹配与先前的电子邮件消息相关联的散列值。当与电子邮件消息相关联的所生成的散列值中的一个或多个匹配一个或多个与该电子邮件消息相关联的散列值时，系统（120）可以确定电子邮件消息之一是潜在的不需要的电子邮件消息以前的电子邮件。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式