专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US09332005B2 System and method for providing switch based subnet management packet (SMP) traffic protection in a middleware machine environment 有权
标题翻译：在中间件机器环境中提供基于交换机的子网管理包（SMP）流量保护的系统和方法
公开(公告)号：US09332005B2
公开(公告)日：2016-05-03
申请号：US13545803
申请日：2012-07-10
申请人： Bjørn Dag Johnsen , David Brean , Ola Tørudbakken
发明人： Bjørn Dag Johnsen , David Brean , Ola Tørudbakken
IPC分类号： H04L29/06 , H04L12/24
CPC分类号： H04L63/083 , G06F2221/2141 , H04L41/0803 , H04L63/0227 , H04L63/0236 , H04L63/162
摘要： A system and method can provide switch based subnet management packet (SMP) traffic protection in a middleware machine environment. The middleware machine environment includes a network switch that operates to receive at least one SMP destined for a subnet management agent (SMA). The network switch can check whether the at least one SMP includes a correct management key, and prevent the at least one SMP from being forwarded to the destined SMA when at least one SMP does not include the correct management key. Furthermore, the network switch can specify a different management key for each external port and can enforce separate restrictions on ingress and egress SMP traffic at a particular external port.
摘要翻译：系统和方法可以在中间件机器环境中提供基于交换机的子网管理包（SMP）流量保护。中间件机器环境包括操作以接收用于子网管理代理（SMA）的至少一个SMP的网络交换机。网络交换机可以检查至少一个SMP是否包括正确的管理密钥，并且当至少一个SMP不包括正确的管理密钥时，防止至少一个SMP被转发到目的地的SMA。此外，网络交换机可以为每个外部端口指定不同的管理密钥，并且可以对特定外部端口的入口和出口SMP流量实施单独的限制。

2. 发明授权

US09270650B2 System and method for providing secure subnet management agent (SMA) in an infiniband (IB) network 有权
标题翻译：在无限制（IB）网络中提供安全子网管理代理（SMA）的系统和方法
公开(公告)号：US09270650B2
公开(公告)日：2016-02-23
申请号：US13487973
申请日：2012-06-04
申请人： Bjørn-Dag Johnsen , Ola Tørudbakken , David Brean
发明人： Bjørn-Dag Johnsen , Ola Tørudbakken , David Brean
IPC分类号： H04L9/32 , H04L29/06 , H04L12/24 , H04L12/931
CPC分类号： H04L63/0876 , H04L9/3234 , H04L9/3271 , H04L41/12 , H04L49/20 , H04L63/0442 , H04L63/083
摘要： A system and method can provide a secure subnet management agent (SMA) in an Infiniband (IB) network. The system can comprise a host channel adapter (HCA) associated with a host, wherein the HCA operates to implement a SMA in its embedded firmware. The HCA can prevent a host administrator or software with root access to the host from changing the embedded firmware on the HCA and modifying one or more states associated with the SMA without being endorsed by a site administrator. Additionally, the SMA is associated with a management key, and the host is not allowed to observe the management key without being endorsed by a site administrator.
摘要翻译：系统和方法可以在Infiniband（IB）网络中提供安全的子网管理代理（SMA）。该系统可以包括与主机相关联的主机通道适配器（HCA），其中HCA操作以在其嵌入式固件中实现SMA。 HCA可以防止主机管理员或具有root访问主机的软件更改HCA上的嵌入式固件，并修改与SMA相关联的一个或多个状态，而不必经过站点管理员的认可。此外，SMA与管理密钥相关联，并且不允许主机在不经过站点管理员的认可的情况下观察管理密钥。

3. 发明申请

US20130019303A1 SYSTEM AND METHOD FOR PROVIDING SWITCH BASED SUBNET MANAGEMENT PACKET (SMP) TRAFFIC PROTECTION IN A MIDDLEWARE MACHINE ENVIRONMENT 有权
标题翻译：在中间件机器环境中提供基于开关的子网管理包（SMP）交通保护的系统和方法
公开(公告)号：US20130019303A1
公开(公告)日：2013-01-17
申请号：US13545803
申请日：2012-07-10
申请人： Bjørn Dag Johnsen , David Brean , Ola Tørudbakken
发明人： Bjørn Dag Johnsen , David Brean , Ola Tørudbakken
IPC分类号： G06F21/20
CPC分类号： H04L63/083 , G06F2221/2141 , H04L41/0803 , H04L63/0227 , H04L63/0236 , H04L63/162
摘要： A system and method can provide switch based subnet management packet (SMP) traffic protection in a middleware machine environment. The middleware machine environment includes a network switch that operates to receive at least one SMP destined for a subnet management agent (SMA). The network switch can check whether the at least one SMP includes a correct management key, and prevent the at least one SMP from being forwarded to the destined SMA when at least one SMP does not include the correct management key. Furthermore, the network switch can specify a different management key for each external port and can enforce separate restrictions on ingress and egress SMP traffic at a particular external port.
摘要翻译：系统和方法可以在中间件机器环境中提供基于交换机的子网管理包（SMP）流量保护。中间件机器环境包括操作以接收用于子网管理代理（SMA）的至少一个SMP的网络交换机。网络交换机可以检查至少一个SMP是否包括正确的管理密钥，并且当至少一个SMP不包括正确的管理密钥时，防止至少一个SMP被转发到目的地的SMA。此外，网络交换机可以为每个外部端口指定不同的管理密钥，并且可以对特定外部端口的入口和出口SMP流量实施单独的限制。

4. 发明申请

US20120311332A1 SYSTEM AND METHOD FOR PROVIDING SECURE SUBNET MANAGEMENT AGENT (SMA) IN AN INFINIBAND (IB) NETWORK 有权
标题翻译：用于在无线网络（IB）网络中提供安全子网管理代理（SMA）的系统和方法
公开(公告)号：US20120311332A1
公开(公告)日：2012-12-06
申请号：US13487973
申请日：2012-06-04
申请人： Bjørn-Dag Johnsen , Ola Tørudbakken , David Brean
发明人： Bjørn-Dag Johnsen , Ola Tørudbakken , David Brean
IPC分类号： H04L9/32 , G06F21/20
CPC分类号： H04L63/0876 , H04L9/3234 , H04L9/3271 , H04L41/12 , H04L49/20 , H04L63/0442 , H04L63/083
摘要： A system and method can provide a secure subnet management agent (SMA) in an Infiniband (IB) network. The system can comprise a host channel adapter (HCA) associated with a host, wherein the HCA operates to implement a SMA in its embedded firmware. The HCA can prevent a host administrator or software with root access to the host from changing the embedded firmware on the HCA and modifying one or more states associated with the SMA without being endorsed by a site administrator. Additionally, the SMA is associated with a management key, and the host is not allowed to observe the management key without being endorsed by a site administrator.
摘要翻译：系统和方法可以在Infiniband（IB）网络中提供安全的子网管理代理（SMA）。该系统可以包括与主机相关联的主机通道适配器（HCA），其中HCA操作以在其嵌入式固件中实现SMA。 HCA可以防止主机管理员或具有root访问主机的软件更改HCA上的嵌入式固件，并修改与SMA相关联的一个或多个状态，而不必经过站点管理员的认可。此外，SMA与管理密钥相关联，并且不允许主机在不经过站点管理员的认可的情况下观察管理密钥。

5. 发明授权

US07443860B2 Method and apparatus for source authentication in a communications network 有权
标题翻译：在通信网络中用于源认证的方法和装置
公开(公告)号：US07443860B2
公开(公告)日：2008-10-28
申请号：US10863854
申请日：2004-06-08
申请人： Bjorn Dag Johnsen , Christopher Jackson , David Brean , Ola Tørudbakken
发明人： Bjorn Dag Johnsen , Christopher Jackson , David Brean , Ola Tørudbakken
IPC分类号： H04L12/56
CPC分类号： H04L63/126
摘要： One embodiment of the invention provides a method of handling an incoming packet at a node in a network. The method includes associating at least one source identifier with a link into the node. A packet is then received at the node over the link, and a source identifier is extracted from the received packet. The extracted source identifier is compared with the source identifier(s) associated with the link in order to authenticate the packet.
摘要翻译：本发明的一个实施例提供一种在网络中的节点处理输入分组的方法。该方法包括将至少一个源标识符与到该节点的链路相关联。然后通过链路在节点处接收分组，并且从接收到的分组中提取源标识符。将提取的源标识符与与链路相关联的源标识符进行比较，以便认证该分组。

6. 发明授权

US07362764B2 Method and apparatus for verifying service level in a communications network 有权
标题翻译：用于验证通信网络中的服务水平的方法和装置
公开(公告)号：US07362764B2
公开(公告)日：2008-04-22
申请号：US10863019
申请日：2004-06-08
申请人： Bjorn Dag Johnsen , Christopher Jackson , David Brean , Ola Tørudbakken
发明人： Bjorn Dag Johnsen , Christopher Jackson , David Brean , Ola Tørudbakken
IPC分类号： H04L12/28
CPC分类号： H04L49/205 , H04L49/25 , H04L49/253 , H04L49/358 , H04L2012/5687
摘要： One embodiment of the invention provides apparatus and a method for handling an incoming packet at a port in a network. The port belongs to one or more partitions, and at least one service level is associated with each of the partitions. When a packet is received at the port, a partition key and a service level are extracted from the packet. The extracted partition key is used to determine the partition to which the received packet belongs. The service level extracted from the packet is then compared against the service level(s) associated with the determined partition in order to authenticate the packet. In another embodiment, the service level is correlated against a destination identifier from the packet instead of the partition key.
摘要翻译：本发明的一个实施例提供了用于在网络中的端口处理输入分组的装置和方法。该端口属于一个或多个分区，并且至少一个服务级别与每个分区相关联。当在端口接收到分组时，从分组中提取分区密钥和服务级别。提取的分区密钥用于确定接收到的分组所属的分区。然后将从分组提取的服务级别与与确定的分区相关联的服务级别进行比较，以便认证分组。在另一个实施例中，服务级别与来自分组的目的地标识符而不是分区密钥相关。

7. 发明授权

US07860096B2 Switching method and apparatus for use in a communications network 有权
标题翻译：用于通信网络的切换方法和装置
公开(公告)号：US07860096B2
公开(公告)日：2010-12-28
申请号：US10862970
申请日：2004-06-08
申请人： Bjorn Dag Johnsen , Christopher Jackson , David Brean , Ola Tørudbakken , Steinar Forsmo , Hans Rygh , Morten Schanke
发明人： Bjorn Dag Johnsen , Christopher Jackson , David Brean , Ola Tørudbakken , Steinar Forsmo , Hans Rygh , Morten Schanke
IPC分类号： H04L12/28
CPC分类号： H04L49/25 , H04L49/201 , H04L49/3009 , H04L49/358
摘要： One embodiment of the invention provides a method of operating a switch in a communications network. The method includes storing a set of routings for each port in the switch. When a packet is received at a port in the switch, the set of routings corresponding to the port at which the packet was received is accessed. A port from which to forward the packet from the switch is determined in accordance with the set of routings. The packet is then duly forwarded over the network from the port as determined by the routings.
摘要翻译：本发明的一个实施例提供了一种在通信网络中操作交换机的方法。该方法包括为交换机中的每个端口存储一组路由。当在交换机的端口接收到分组时，访问对应于接收分组的端口的路由集合。根据路由集合来确定从交换机转发分组的端口。然后通过路由确定的端口通过网络适当地转发分组。

8. 发明授权

US07398394B1 Method and apparatus for authenticating nodes in a communications network 有权
标题翻译：用于认证通信网络中的节点的方法和装置
公开(公告)号：US07398394B1
公开(公告)日：2008-07-08
申请号：US10859251
申请日：2004-06-02
申请人： Bjorn Dag Johnsen , David Brean , Christopher Jackson
发明人： Bjorn Dag Johnsen , David Brean , Christopher Jackson
IPC分类号： H04L9/00
CPC分类号： H04L63/08
摘要： A system and a method for a first node in a communications network to authenticate a second node. The second node is connected by a communications link to a port of the first node. The method comprises setting a status that the second node is regarded as untrusted by the first node, so that the first node discards selected network management messages received over the communications link from the second node while it is regarded as untrusted. The method further comprises performing an authentication protocol with the second node by receiving at least one message from the second node over the communications link. Such message is discarded if it does not form part of the authentication protocol. The first node then treats the second node as trusted if the authentication protocol is successful, so that the selected network management messages received from the second node are no longer discarded.
摘要翻译：一种用于通信网络中用于认证第二节点的第一节点的系统和方法。第二节点通过通信链路连接到第一节点的端口。该方法包括设置第二节点被认为不被第一节点信任的状态，使得第一节点在被认为是不可信的情况下丢弃通过通信链路从第二节点接收的所选择的网络管理消息。该方法还包括通过通信链路从第二节点接收至少一个消息来与第二节点执行认证协议。如果该消息不构成认证协议的一部分，则该消息被丢弃。如果认证协议成功，则第一节点将第二节点视为可信任，从而不再丢弃从第二节点接收到的所选择的网络管理消息。

9. 发明授权

US09930018B2 System and method for providing source ID spoof protection in an infiniband (IB) network 有权
公开(公告)号：US09930018B2
公开(公告)日：2018-03-27
申请号：US13488113
申请日：2012-06-04
申请人： Bjorn-Dag Johnsen , Line Holen , David Brean
发明人： Bjorn-Dag Johnsen , Line Holen , David Brean
IPC分类号： H04L29/06 , H04L12/931 , H04L12/24 , H04L9/32
CPC分类号： H04L63/0876 , H04L9/3234 , H04L9/3271 , H04L41/12 , H04L49/20 , H04L63/0442 , H04L63/083
摘要： A system and method can provide source ID spoof protection in an InfiniBand (IB) fabric. The IB fabric can support a plurality of tenants in a subnet that connects a plurality of physical servers, wherein the plurality of tenants are associated with different partitions in the subnet. Then, the plurality of tenants can use at least one shared service, and the IB fabric can be configured to determine what ID values are legal for different physical servers and different partitions.

10. 发明申请

US20050286511A1 Method and apparatus for source authentication in a communications network 有权
标题翻译：在通信网络中用于源认证的方法和装置
公开(公告)号：US20050286511A1
公开(公告)日：2005-12-29
申请号：US10863854
申请日：2004-06-08
申请人： Bjorn Johnsen , Christopher Jackson , David Brean , Ola Torudbakken
发明人： Bjorn Johnsen , Christopher Jackson , David Brean , Ola Torudbakken
IPC分类号： H04L12/28 , H04L12/56 , H04L29/06
CPC分类号： H04L63/126
摘要： One embodiment of the invention provides a method of handling an incoming packet at a node in a network. The method includes associating at least one source identifier with a link into the node. A packet is then received at the node over the link, and a source identifier is extracted from the received packet. The extracted source identifier is compared with the source identifier(s) associated with the link in order to authenticate the packet.
摘要翻译：本发明的一个实施例提供一种在网络中的节点处理输入分组的方法。该方法包括将至少一个源标识符与到该节点的链路相关联。然后通过链路在节点处接收分组，并且从接收到的分组中提取源标识符。将提取的源标识符与与链路相关联的源标识符进行比较，以便认证该分组。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式