专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08161145B2 Method for managing of denial of service attacks using bandwidth allocation technology 失效
标题翻译：使用带宽分配技术管理拒绝服务攻击的方法
公开(公告)号：US08161145B2
公开(公告)日：2012-04-17
申请号：US10375799
申请日：2003-02-27
申请人： Brian E. Carpenter , Clark D. Jeffries , Andreas Kind , Michael S. Siegel
发明人： Brian E. Carpenter , Clark D. Jeffries , Andreas Kind , Michael S. Siegel
IPC分类号： G06F15/173
CPC分类号： H04L63/1458
摘要： A method for managing attacks in a computer system is disclosed. The computer system is used in sending, receiving, or sending and receiving a plurality of packets, which include a plurality of administrative packets. The method includes determining whether a congestion of the administrative packets exists. Congestion of the administrative packets indicates that a potential attack exists. The method also includes discarding a portion of the plurality of administrative packets if it is declared that the congestion of the administrative packets exists. The portion of the plurality of packets is sufficient to ensure that a remaining portion of the plurality of packets transmitted is not more than a maximum administrative packet bandwidth limit and, if the plurality of administrative packets present a sufficient offered load, not less than a minimum administrative packet bandwidth guarantee.
摘要翻译：公开了一种用于管理计算机系统中的攻击的方法。计算机系统用于发送，接收或发送和接收包括多个管理分组的多个分组。该方法包括确定是否存在管理分组的拥塞。拥塞管理包表示存在潜在的攻击。如果声明存在管理分组的拥塞，则该方法还包括丢弃多个管理分组的一部分。多个分组的部分足以确保所发送的多个分组的剩余部分不大于最大管理分组带宽限制，并且如果多个管理分组呈现足够的提供的负载，则不小于最小管理包带宽保证。

2. 发明授权

US07349342B2 Traffic metering in data networks 失效
标题翻译：数据网络中的流量计量
公开(公告)号：US07349342B2
公开(公告)日：2008-03-25
申请号：US10390385
申请日：2003-03-17
申请人： Brian E. Carpenter , Clark D. Jeffries , Andreas Kind
发明人： Brian E. Carpenter , Clark D. Jeffries , Andreas Kind
IPC分类号： G01R31/08 , H04L1/00
CPC分类号： H04L47/20 , H04L43/00 , H04L43/0894 , H04L43/16 , H04L47/215 , H04L47/22 , H04L47/31
摘要： Methods and apparatus are provided for metering data packets having a plurality of different packet lengths in a data communications network. A token count TC is incremented at a token increment rate CIR subject to an upper limit CBS on the token count. On arrival of a packet of length L tokens, it is determined if both TC>0 and TC+n≧L, where n is a defined number of tokens. If so, the data packet is categorized as in profile and L tokens are subtracted from the token count TC. Otherwise the data packet is categorized out of profile. In some embodiments, n is set to a value in the range 0
摘要翻译：提供了用于在数据通信网络中计量具有多个不同分组长度的数据分组的方法和装置。令牌计数T C C以在令牌计数上受到上限CBS的令牌增量率CIR递增。在长度为L个令牌的分组到达时，确定是否都有T个C 0和T C + n> = L，其中n是确定数量的令牌。如果是这样，则数据分组被归类为简档，并且从令牌计数T C C中减去L个令牌。否则数据包将被分类出来。在一些实施例中，将n设置为0

3. 发明授权

US06625773B1 System for multicast communications in packet switched networks 有权
标题翻译：分组交换网络中的组播通信系统
公开(公告)号：US06625773B1
公开(公告)日：2003-09-23
申请号：US09329101
申请日：1999-06-09
申请人： Richard H. Boivie , Brian E. Carpenter , Kiyoshi Maruyama
发明人： Richard H. Boivie , Brian E. Carpenter , Kiyoshi Maruyama
IPC分类号： H04L118
CPC分类号： H04L12/1868 , H04L1/1607 , H04L1/1809 , H04L45/04 , H04L45/16 , H04L45/34 , H04L2001/0093
摘要： A multicast communication system for small groups using a protocol to indicate to routers receiving a packet according to the protocol to perform the following process: (1) determining a next hop for each of the destination nodes listed in the packet received; (2) partitioning the destination nodes into groups according to the next hop determined for each destination node in the preceding step; (3) replicating the packet such that there is at least one copy of the packet for each of the next hops; (4) modifying the list of addresses for the destination nodes such that the list of addresses for each of the next hops includes only the addresses for the destination nodes to be routed in that next hop; and (5) transmitting the modified copies of the packet to the next hops found in the previous steps for routing to the addresses included in each packet.
摘要翻译：一种用于使用协议的小组的组播通信系统，用于向根据协议接收分组的路由器指示以执行以下过程：（1）确定接收到的分组中列出的每个目的地节点的下一跳; （2）根据在前一步骤中为每个目的地节点确定的下一跳，将目的节点划分成组; （3）复制分组，使得每个下一跳具有至少一个分组副本; （4）修改目的地节点的地址列表，使得下一跳中的每一个的地址列表仅包括在该下一跳中要路由的目的地节点的地址; 以及（5）将所述分组的修改副本发送到在前述步骤中找到的下一跳，以路由到每个分组中包括的地址。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式