专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08490153B2 Automatically generating rules for connection security 有权
标题翻译：自动生成连接安全性规则
公开(公告)号：US08490153B2
公开(公告)日：2013-07-16
申请号：US13292018
申请日：2011-11-08
申请人： Charles D. Bassett , Eran Yariv , Ian M. Carbaugh , Lokesh Srinivas Koppolu , Maksim Noy , Sarah A. Wahlert , Pradeep Bahl
发明人： Charles D. Bassett , Eran Yariv , Ian M. Carbaugh , Lokesh Srinivas Koppolu , Maksim Noy , Sarah A. Wahlert , Pradeep Bahl
IPC分类号： H04L29/06
CPC分类号： H04L63/0263 , H04L63/20
摘要： A method and system for creating security policies for firewall and connection policies in an integrated manner is provided. The security system provides a user interface through which a user can define a security rule that specifies both a firewall policy and a connection policy. After the security rule is specified, the security system automatically generates a firewall rule and a connection rule to implement the security rule. The security system provides the firewall rule to a firewall engine that is responsible for enforcing the firewall rules and provides the connection rule to an IPsec engine that is responsible for enforcing the connection rules.
摘要翻译：提供了以综合方式为防火墙和连接策略创建安全策略的方法和系统。安全系统提供用户界面，用户可以通过该界面定义指定防火墙策略和连接策略的安全规则。指定安全规则后，安全系统自动生成防火墙规则和连接规则，实现安全规则。安全系统向防火墙引擎提供防火墙规则，该引擎负责执行防火墙规则，并向负责执行连接规则的IPsec引擎提供连接规则。

2. 发明申请

US20120054825A1 AUTOMATICALLY GENERATING RULES FOR CONNECTION SECURITY 有权
标题翻译：自动生成连接安全规则
公开(公告)号：US20120054825A1
公开(公告)日：2012-03-01
申请号：US13292018
申请日：2011-11-08
申请人： Charles D. Bassett , Eran Yariv , Ian M. Carbaugh , Lokesh Srinivas Koppolu , Maksim Noy , Sarah A. Wahlert , Pradeep Bahl
发明人： Charles D. Bassett , Eran Yariv , Ian M. Carbaugh , Lokesh Srinivas Koppolu , Maksim Noy , Sarah A. Wahlert , Pradeep Bahl
IPC分类号： G06F21/00
CPC分类号： H04L63/0263 , H04L63/20
摘要： A method and system for creating security policies for firewall and connection policies in an integrated manner is provided. The security system provides a user interface through which a user can define a security rule that specifies both a firewall policy and a connection policy. After the security rule is specified, the security system automatically generates a firewall rule and a connection rule to implement the security rule. The security system provides the firewall rule to a firewall engine that is responsible for enforcing the firewall rules and provides the connection rule to an IPsec engine that is responsible for enforcing the connection rules.
摘要翻译：提供了以综合方式为防火墙和连接策略创建安全策略的方法和系统。安全系统提供用户界面，用户可以通过该界面定义指定防火墙策略和连接策略的安全规则。指定安全规则后，安全系统自动生成防火墙规则和连接规则，实现安全规则。安全系统向防火墙引擎提供防火墙规则，该引擎负责执行防火墙规则，并向负责执行连接规则的IPsec引擎提供连接规则。

3. 发明授权

US08056124B2 Automatically generating rules for connection security 有权
标题翻译：自动生成连接安全性规则
公开(公告)号：US08056124B2
公开(公告)日：2011-11-08
申请号：US11183317
申请日：2005-07-15
申请人： Charles D. Bassett , Eran Yariv , Ian M. Carbaugh , Lokesh Srinivas Koppolu , Maksim Noy , Sarah A. Wahlert , Pradeep Bahl
发明人： Charles D. Bassett , Eran Yariv , Ian M. Carbaugh , Lokesh Srinivas Koppolu , Maksim Noy , Sarah A. Wahlert , Pradeep Bahl
IPC分类号： G06F9/00 , G06F15/16 , G06F17/00
CPC分类号： H04L63/0263 , H04L63/20
摘要： A method and system for creating security policies for firewall and connection policies in an integrated manner is provided. The security system provides a user interface through which a user can define a security rule that specifies both a firewall policy and a connection policy. After the security rule is specified, the security system automatically generates a firewall rule and a connection rule to implement the security rule. The security system provides the firewall rule to a firewall engine that is responsible for enforcing the firewall rules and provides the connection rule to an IPsec engine that is responsible for enforcing the connection rules.
摘要翻译：提供了以综合方式为防火墙和连接策略创建安全策略的方法和系统。安全系统提供用户界面，用户可以通过该界面定义指定防火墙策略和连接策略的安全规则。指定安全规则后，安全系统自动生成防火墙规则和连接规则，实现安全规则。安全系统向防火墙引擎提供防火墙规则，该引擎负责执行防火墙规则，并向负责执行连接规则的IPsec引擎提供连接规则。

4. 发明申请

US20070016945A1 Automatically generating rules for connection security 有权
标题翻译：自动生成连接安全性规则
公开(公告)号：US20070016945A1
公开(公告)日：2007-01-18
申请号：US11183317
申请日：2005-07-15
申请人： Charles Bassett , Eran Yariv , Ian Carbaugh , Lokesh Koppolu , Maksim Noy , Sarah Wahlert , Pradeep Bahl
发明人： Charles Bassett , Eran Yariv , Ian Carbaugh , Lokesh Koppolu , Maksim Noy , Sarah Wahlert , Pradeep Bahl
IPC分类号： G06F15/16
CPC分类号： H04L63/0263 , H04L63/20
摘要： A method and system for creating security policies for firewall and connection policies in an integrated manner is provided. The security system provides a user interface through which a user can define a security rule that specifies both a firewall policy and a connection policy. After the security rule is specified, the security system automatically generates a firewall rule and a connection rule to implement the security rule. The security system provides the firewall rule to a firewall engine that is responsible for enforcing the firewall rules and provides the connection rule to an IPsec engine that is responsible for enforcing the connection rules.
摘要翻译：提供了以综合方式为防火墙和连接策略创建安全策略的方法和系统。安全系统提供用户界面，用户可以通过该界面定义指定防火墙策略和连接策略的安全规则。指定安全规则后，安全系统自动生成防火墙规则和连接规则，实现安全规则。安全系统向防火墙引擎提供防火墙规则，该引擎负责执行防火墙规则，并向负责执行连接规则的IPsec引擎提供连接规则。

5. 发明授权

US08909743B2 Dynamic session maintenance for mobile computing devices 有权
标题翻译：移动计算设备的动态会话维护
公开(公告)号：US08909743B2
公开(公告)日：2014-12-09
申请号：US13157089
申请日：2011-06-09
申请人： Pradeep Bahl
发明人： Pradeep Bahl
IPC分类号： G06F15/177 , H04L29/12
CPC分类号： H04L61/1511 , H04L29/12066 , H04L29/12301 , H04L61/2015 , H04L61/2076
摘要： A framework and method are disclosed for supporting changed addresses by mobile network nodes. Such support is provided through enhancements to the mobile network nodes and utilizes DNS servers, Dynamic Host Configuration Protocol (DHCP), and virtual private network (VPN) servers—or their functional equivalents—to dynamically assign a current network address to a mobile node, provide the current network address to an authoritative name server, and thereafter have correspondent nodes update their addresses for the mobile node based upon an address provided by the authoritative name server. A mobile node registers all of its name-to-address mappings with its authoritative DNS server using a time to live of zero. Furthermore, when a mobile node moves outside its home security domain, the mobile node initiates a virtual private network connection to a virtual private server for a security domain.
摘要翻译：公开了用于支持移动网络节点改变的地址的框架和方法。通过对移动网络节点的增强来提供这样的支持，并且利用DNS服务器，动态主机配置协议（DHCP）和虚拟专用网络（VPN）服务器或其功能等效物来动态地为移动节点分配当前网络地址，将当前网络地址提供给权威的名称服务器，然后基于由权威名称服务器提供的地址，对应节点更新其移动节点的地址。移动节点通过其权威DNS服务器将所有名称与地址映射注册为零。此外，当移动节点移动到其家庭安全域之外时，移动节点发起到用于安全域的虚拟专用服务器的虚拟专用网络连接。

6. 发明授权

US08676969B2 Network classification 有权
标题翻译：网络分类
公开(公告)号：US08676969B2
公开(公告)日：2014-03-18
申请号：US13300743
申请日：2011-11-21
申请人： Pradeep Bahl , Christopher J. Corbett , Mohamed Jawad Khaki
发明人： Pradeep Bahl , Christopher J. Corbett , Mohamed Jawad Khaki
IPC分类号： G06F15/173
CPC分类号： H04L43/08 , H04L41/00 , H04L41/0233 , H04L41/0803 , H04L41/0853 , H04L41/12 , H04L41/14 , H04L41/145 , H04L41/28 , H04L63/20
摘要： Network DNA may be determined for a computer network that taxonomically classifies the computer network. Network DNA may include derived network DNA components and raw network DNA components. Raw network DNA components may be acquired from local or remote sources. Derived network DNA components may be generated according to derived network DNA component specifications. Derived network DNA component specifications may reference raw network DNA components. Network DNA determined for the computer network may include a network species component capable of indicating network species classifications for computer networks. Network species classifications may include enterprise network, home network and public place network. Network species classifications may be determined as a function of network security, network management and network addressing. One or more network DNA stores may be configured to store network DNA for computer networks. Network DNA stores may store network DNA history as well as current network DNA.
摘要翻译：可以为对计算机网络进行分类分类的计算机网络确定网络DNA。网络DNA可以包括衍生的网络DNA组分和原始网络DNA组分。原始网络DNA组件可以从本地或远程来源获取。衍生网络DNA组分可以根据衍生网络DNA组分规格生成。衍生网络DNA组件规范可以参考原始网络DNA组件。为计算机网络确定的网络DNA可以包括能够指示计算机网络的网络物种分类的网络物种组件。网络物种分类可能包括企业网络，家庭网络和公共场所网络。网络物种分类可以根据网络安全，网络管理和网络寻址来确定。一个或多个网络DNA存储可以被配置为存储用于计算机网络的网络DNA。网络DNA存储可以存储网络DNA历史以及当前的网络DNA。

7. 发明申请

US20110131658A1 DYNAMIC RISK MANAGEMENT 有权
标题翻译：动态风险管理
公开(公告)号：US20110131658A1
公开(公告)日：2011-06-02
申请号：US13023518
申请日：2011-02-08
申请人： Pradeep Bahl
发明人： Pradeep Bahl
IPC分类号： G06F21/00
CPC分类号： G06F21/577 , H04L41/28 , H04L63/1416
摘要： A dynamic risk management system for operating systems that provides monitoring, detection, assessment, and follow-up action to reduce the risk whenever it rises. The system enables an operating system to protect itself automatically in dynamic environments. The risk management system monitors a diverse set of attributes of the system which determines the security state of the system and is indicative of the risk the system is under. Based on a specification of risk levels for the various attributes and for their combinations, the risk management system determines whether one or more actions are required to alleviate the overall risk to the system.
摘要翻译：操作系统的动态风险管理系统，提供监控，检测，评估和后续行动，以便在风险上升时降低风险。该系统使操作系统能够在动态环境中自动保护自身。风险管理系统监视系统的各种属性集，该属性决定系统的安全状态，并指示系统所处的风险。基于各种属性及其组合的风险级别规范，风险管理系统确定是否需要一个或多个动作来减轻系统的整体风险。

8. 发明授权

US07610057B2 Selecting a wireless networking technology on a device capable of carrying out wireless network communications via multiple wireless technologies 有权
标题翻译：在能够通过多种无线技术进行无线网络通信的设备上选择无线网络技术
公开(公告)号：US07610057B2
公开(公告)日：2009-10-27
申请号：US10830516
申请日：2004-04-23
申请人： Pradeep Bahl , Paramvir Bahl , Amer Hassan
发明人： Pradeep Bahl , Paramvir Bahl , Amer Hassan
IPC分类号： H04B7/00 , H04W4/00 , H04M1/00
CPC分类号： H04W88/06 , H04L12/5692
摘要： Criteria-driven methods and a framework are disclosed that facilitate configuration/selection of one or more wireless network interfaces/networks for carrying out wireless communications on a computing device. The wireless network interface selection and coexistence driver architecture described herein facilitates automated selection of a particular mode of network access based upon status information provided by a set of network interface drivers associated with particular network interfaces and wireless technologies. Furthermore, a criteria-driven interface/network selection framework is described that is potentially invoked in a variety of situations including, but not limited to, when an application is invoked or to select another interface/network to avoid detected interference.
摘要翻译：公开了标准驱动的方法和框架，其促进用于在计算设备上执行无线通信的一个或多个无线网络接口/网络的配置/选择。这里描述的无线网络接口选择和共存驱动器架构基于由与特定网络接口和无线技术相关联的一组网络接口驱动器提供的状态信息来促进对特定模式的网络访问的自动选择。此外，描述了在各种情况下可能调用的标准驱动的接口/网络选择框架，包括但不限于当应用被调用时或者选择另一个接口/网络以避免检测到的干扰。

9. 发明授权

US07505756B2 Dynamic online subscription for wireless wide-area networks 有权
标题翻译：无线广域网的动态在线订阅
公开(公告)号：US07505756B2
公开(公告)日：2009-03-17
申请号：US10778849
申请日：2004-02-13
申请人： Pradeep Bahl
发明人： Pradeep Bahl
IPC分类号： H04M1/66
CPC分类号： H04W12/06 , H04L63/0853 , H04L63/16 , H04W74/00 , H04W84/04 , H04W99/00
摘要： Methods and systems are provided for dynamically subscribing for access to a wireless wide-area network via an online process. Subscription information and user credentials are digitally transmitted by a network carrier to a networking device and is stored locally by the device in a SmartCard, other portable medium, or on the device's hard drive. The locally stored credentials and information may subsequently be updated wirelessly. No human interaction is required to subscribe, and access may be limited by a variety of criteria. A subscription may be used to access networks operated by multiple network carriers.
摘要翻译：提供的方法和系统用于通过在线处理来动态地订阅对无线广域网的访问。订阅信息和用户凭证由网络运营商数字地传输到网络设备，并由设备本地存储在智能卡，其他便携式媒体或设备的硬盘驱动器上。随后可以无线地更新本地存储的凭证和信息。订阅不需要人为的互动，并且访问可能受到各种标准的限制。可以使用订阅来访问由多个网络运营商操作的网络。

10. 发明申请

US20060047791A1 System and method of assigning and reclaiming static addresses through the dynamic host configuration protocol 有权
公开(公告)号：US20060047791A1
公开(公告)日：2006-03-02
申请号：US11206380
申请日：2005-08-18
申请人： Pradeep Bahl
发明人： Pradeep Bahl
IPC分类号： G06F15/177
CPC分类号： H04L61/2015
摘要： Presented is a system and method for providing centralized address management of static IP addresses through the dynamic host control protocol. Static or permanent IP addresses are those addresses assigned by DHCP having an infinite lease time. The assignment of such static IP addresses follows the conventional DHCP mechanism for the assignment of other IP addresses. However, the centralized reclamation of a statically or permanently assigned IP address by a network administrator through the DHCP server presents novel aspects of the invention heretofore unknown. Specifically, through the system and method of the present invention, the DHCP server is capable of reclaiming at any point in time, a statically or permanently assigned IP address by transmitting a DHCP RECLAIM command to the DHCP client, or through its relay agent. In the normal situation, the DHCP client acknowledges the RECLAIM command, allowing the IP address to be placed in the FREE state. If, however, the DHCP client does not respond or the responses are not received by the DHCP server, the DHCP server marks the state of the IP address as DEPRECATED. The state of the IP address will be changed from DEPRECATED to FREE once a number of retries of the RECLAIM process has been completed, or a maximum period of time has passed. Security mechanisms to prevent a malicious attacker from reclaiming static IP address from DHCP clients are also presented.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式