专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US06701432B1 Firewall including local bus 有权
标题翻译：防火墙包括本地总线
公开(公告)号：US06701432B1
公开(公告)日：2004-03-02
申请号：US09283730
申请日：1999-04-01
申请人： Feng Deng , Yan Ke , Dongping Luo
发明人： Feng Deng , Yan Ke , Dongping Luo
IPC分类号： H04L900
CPC分类号： H04L49/901 , H04L29/06 , H04L49/90 , H04L49/9057 , H04L63/02 , H04L69/16 , H04L69/22
摘要： A gateway for screening packets transferred over a network. The gateway includes a plurality of network interfaces, a memory and a memory controller. Each network interface receives and forwards messages from a network through the gateway. The memory temporarily stores packets received from a network. The memory controller couples each of the network interfaces and is configured to coordinate the transfer of received packets to and from the memory using a memory bus. The gateway includes a firewall engine coupled to the memory bus. The firewall engine is operable to retrieve packets from the memory and screen each packet prior to forwarding a given packet through the gateway and out an appropriate network interface. A local bus is coupled between the firewall engine and the memory providing a second path for retrieving packets from memory when the memory bus is busy. An expandable external rule memory is coupled to the local bus and includes one or more rule sets accessible by the firewall engine using the local bus. The firewall engine is operable to retrieve rules from a rule set and screen packets in accordance with the retrieved rules.
摘要翻译：用于筛选通过网络传输的数据包的网关。网关包括多个网络接口，存储器和存储器控制器。每个网络接口通过网关从网络接收和转发消息。存储器临时存储从网络接收的分组。存储器控制器耦合每个网络接口，并且被配置为使用存储器总线协调接收到的分组到和从存储器的传送。网关包括耦合到存储器总线的防火墙引擎。防火墙引擎可操作以从存储器检索数据包，并在通过网关转发给定的数据包之前筛选每个数据包，并从适当的网络接口中删除。本地总线耦合在防火墙引擎和存储器之间，当存储器总线忙时，提供用于从存储器检索数据包的第二路径。可扩展外部规则存储器耦合到本地总线，并且包括可由防火墙引擎使用本地总线访问的一个或多个规则集。防火墙引擎可操作以根据检索的规则从规则集和屏幕分组检索规则。

2. 发明授权

US07784093B2 Firewall including local bus 有权
标题翻译：防火墙包括本地总线
公开(公告)号：US07784093B2
公开(公告)日：2010-08-24
申请号：US12040006
申请日：2008-02-29
申请人： Feng Deng , Yan Ke , Dongping Luo
发明人： Feng Deng , Yan Ke , Dongping Luo
IPC分类号： G06F17/00
CPC分类号： H04L49/901 , H04L29/06 , H04L49/90 , H04L49/9057 , H04L63/02 , H04L69/16 , H04L69/22
摘要： A gateway for screening packets transferred over a network. The gateway includes a plurality of network interfaces, a memory and a memory controller. Each network interface receives and forwards messages from a network through the gateway. The memory temporarily stores packets received from a network. The memory controller couples each of the network interfaces and is configured to coordinate the transfer of received packets to and from the memory using a memory bus. The gateway includes a firewall engine coupled to the memory bus. The firewall engine is operable to retrieve packets from the memory and screen each packet prior to forwarding a given packet through the gateway and out an appropriate network interface. A local bus is coupled between the firewall engine and the memory providing a second path for retrieving packets from memory when the memory bus is busy.
摘要翻译：用于筛选通过网络传输的数据包的网关。网关包括多个网络接口，存储器和存储器控制器。每个网络接口通过网关从网络接收和转发消息。存储器临时存储从网络接收的分组。存储器控制器耦合每个网络接口，并且被配置为使用存储器总线协调接收到的分组到和从存储器的传送。网关包括耦合到存储器总线的防火墙引擎。防火墙引擎可操作以从存储器检索数据包，并在通过网关转发给定的数据包之前筛选每个数据包，并从适当的网络接口中删除。本地总线耦合在防火墙引擎和存储器之间，当存储器总线忙时，提供用于从存储器检索数据包的第二路径。

3. 发明授权

US07363653B2 Firewall including local bus 有权
标题翻译：防火墙包括本地总线
公开(公告)号：US07363653B2
公开(公告)日：2008-04-22
申请号：US10765677
申请日：2004-01-26
申请人： Feng Deng , Yan Ke , Dongping Luo
发明人： Feng Deng , Yan Ke , Dongping Luo
IPC分类号： G06F9/00
CPC分类号： H04L49/901 , H04L29/06 , H04L49/90 , H04L49/9057 , H04L63/02 , H04L69/16 , H04L69/22
摘要： A gateway for screening packets transferred over a network. The gateway includes a plurality of network interfaces, a memory and a memory controller. Each network interface receives and forwards messages from a network through the gateway. The memory temporarily stores packets received from a network. The memory controller couples each of the network interfaces and is configured to coordinate the transfer of received packets to and from the memory using a memory bus. The gateway includes a firewall engine coupled to the memory bus. The firewall engine is operable to retrieve packets from the memory and screen each packet prior to forwarding a given packet through the gateway and out an appropriate network interface. A local bus is coupled between the firewall engine and the memory providing a second path for retrieving packets from memory when the memory bus is busy.
摘要翻译：用于筛选通过网络传输的数据包的网关。网关包括多个网络接口，存储器和存储器控制器。每个网络接口通过网关从网络接收和转发消息。存储器临时存储从网络接收的分组。存储器控制器耦合每个网络接口，并且被配置为使用存储器总线协调接收到的分组到和从存储器的传送。网关包括耦合到存储器总线的防火墙引擎。防火墙引擎可操作以从存储器检索数据包，并在通过网关转发给定的数据包之前筛选每个数据包，并从适当的网络接口中删除。本地总线耦合在防火墙引擎和存储器之间，当存储器总线忙时，提供用于从存储器检索数据包的第二路径。

4. 发明授权

US08490158B2 Firewall including local bus 有权
标题翻译：防火墙包括本地总线
公开(公告)号：US08490158B2
公开(公告)日：2013-07-16
申请号：US12837271
申请日：2010-07-15
申请人： Feng Deng , Yan Ke , Dongping Luo
发明人： Feng Deng , Yan Ke , Dongping Luo
IPC分类号： G06F17/00
CPC分类号： H04L49/901 , H04L29/06 , H04L49/90 , H04L49/9057 , H04L63/02 , H04L69/16 , H04L69/22
摘要： A gateway for screening packets transferred over a network. The gateway includes a plurality of network interfaces, a memory and a memory controller. Each network interface receives and forwards messages from a network through the gateway. The memory temporarily stores packets received from a network. The memory controller couples each of the network interfaces and is configured to coordinate the transfer of received packets to and from the memory using a memory bus. The gateway includes a firewall engine couples to the memory bus. The firewall engine is operable to retrieve packets from the memory and screen each packet prior to forwarding a given packet through the gateway and out an appropriate network interface. A local bus is coupled between the firewall engine and the memory providing a second path for retrieving packets from memory when the memory bus is busy.
摘要翻译：用于筛选通过网络传输的数据包的网关。网关包括多个网络接口，存储器和存储器控制器。每个网络接口通过网关从网络接收和转发消息。存储器临时存储从网络接收的分组。存储器控制器耦合每个网络接口，并且被配置为使用存储器总线协调接收到的分组到和从存储器的传送。网关包括耦合到存储器总线的防火墙引擎。防火墙引擎可操作以从存储器检索数据包，并在通过网关转发给定的数据包之前筛选每个数据包，并从适当的网络接口中删除。本地总线耦合在防火墙引擎和存储器之间，当存储器总线忙时，提供用于从存储器检索数据包的第二路径。

5. 发明授权

US07581163B1 Detection of corrupted memory pointers within a packet-processing device 有权
标题翻译：检测包处理设备内的损坏的内存指针
公开(公告)号：US07581163B1
公开(公告)日：2009-08-25
申请号：US11445369
申请日：2006-06-01
申请人： Aibing Zhou , Dongping Luo
发明人： Aibing Zhou , Dongping Luo
IPC分类号： G06F11/00
CPC分类号： G06F11/141 , H04L63/1416
摘要： Techniques are described for detecting corruption of buffer pointers passed between a local processor and a remote processor on a network device. For example, the first processor, which may be a memory controller, receives and stores packets within memory. A second processor, such as a host processor for the network device, is coupled to the first processor by a bus. The first processor communicates a memory pointer associated with an a given packet to the second processor for processing of the packet, and maintains a backup copy of the memory pointer. Upon receiving the memory pointer back from the second processor, the first processor compares at least a portion of the memory pointer received from the second processor with an equivalent portion of the copy of the memory pointer to determine whether the received memory pointer has been corrupted.
摘要翻译：描述了用于检测在网络设备上的本地处理器和远程处理器之间传递的缓冲器指针的损坏的技术。例如，可以是存储器控制器的第一处理器在存储器内接收并存储分组。诸如用于网络设备的主机处理器的第二处理器通过总线耦合到第一处理器。第一处理器将与给定分组相关联的存储器指针与第二处理器通信以处理分组，并且维护存储器指针的备份副本。在从第二处理器接收到存储器指针之后，第一处理器将从第二处理器接收的存储器指针的至少一部分与存储器指针的副本的等效部分进行比较，以确定所接收的存储器指针是否已被破坏。

6. 发明授权

US07990861B1 Session-based sequence checking 有权
标题翻译：基于会话的序列检查
公开(公告)号：US07990861B1
公开(公告)日：2011-08-02
申请号：US11278475
申请日：2006-04-03
申请人： Xiangdong Jin , Dongping Luo
发明人： Xiangdong Jin , Dongping Luo
IPC分类号： G01R31/08 , G01F11/00 , G08C15/00 , H04J1/16 , H04J3/14 , H04L1/00 , H04L12/26 , G06F15/16
CPC分类号： H04L1/1832
摘要： A device may include logic configured to receive a data unit intended for a destination device and to obtain information from the data unit. The logic may be configured to identify a window using the obtained information, where the window has a range determined by a lower boundary and an upper boundary. The logic may be configured to forward the data unit to the destination device when a portion of the data unit information is within the window.
摘要翻译：设备可以包括被配置为接收旨在用于目的地设备的数据单元并且从数据单元获取信息的逻辑。逻辑可以被配置为使用获得的信息来识别窗口，其中窗口具有由下边界和上边界确定的范围。逻辑可以被配置为当数据单元信息的一部分在窗口内时将数据单元转发到目的地设备。

7. 发明授权

US08001524B1 Instruction extension for linked list lookup 有权
标题翻译：链表查找指令扩展
公开(公告)号：US08001524B1
公开(公告)日：2011-08-16
申请号：US11458589
申请日：2006-07-19
申请人： Wen Wei , Dongping Luo , Lidong Zhao
发明人： Wen Wei , Dongping Luo , Lidong Zhao
IPC分类号： G06F9/44
CPC分类号： G06F17/30949
摘要： A system uses software to perform a first portion of a linked list traversal process, where the first portion obtains a pointer that corresponds to a key and where the pointer points into a linked list. The system further uses hardware and the obtained pointer to perform a second portion of the linked list traversal process, where the second portion locates data from the linked list that is associated with the key.
摘要翻译：系统使用软件来执行链表遍历过程的第一部分，其中第一部分获得对应于密钥的指针，并且指针指向链表。该系统进一步使用硬件和获得的指针来执行链表遍历处理的第二部分，其中第二部分定位与该密钥相关联的链表中的数据。

8. 发明授权

US07930516B1 Linked list traversal with reduced memory accesses 有权
标题翻译：链接列表遍历，减少内存访问
公开(公告)号：US07930516B1
公开(公告)日：2011-04-19
申请号：US12551066
申请日：2009-08-31
申请人： Xiangdong Jin , Dongping Luo , Wen Wei
发明人： Xiangdong Jin , Dongping Luo , Wen Wei
IPC分类号： G06F13/00 , G06F13/28 , G06F7/00 , G06F17/30
CPC分类号： G06F17/30958 , G06F17/3033
摘要： A linked list traversal system identifies when a linked list has become inefficient, either through attack or an undue multiplicity of collisions. A data unit is parsed to extract a key. A first hash result associated with the key is calculated based on a first hash function. A first linked list is identified based on the first hash result. It is determined whether the first linked list has been compromised. A second hash result associated with the key is calculated based on a second hash function when the first linked list has been compromised. A second linked list is established based on the second hash result, where the second hash result is different from the first hash result.
摘要翻译：链表遍历系统通过攻击或不正当的多重冲突来识别链表何时变得无效。解析数据单元以提取密钥。基于第一哈希函数来计算与密钥相关联的第一哈希结果。基于第一哈希结果识别第一链表。确定第一个链表是否已被破坏。当第一个链表被破坏时，基于第二哈希函数计算与密钥相关联的第二哈希结果。基于第二哈希结果建立第二链表，其中第二哈希结果与第一哈希结果不同。

9. 发明授权

US07600094B1 Linked list traversal with reduced memory accesses 有权
标题翻译：链接列表遍历，减少内存访问
公开(公告)号：US07600094B1
公开(公告)日：2009-10-06
申请号：US11427952
申请日：2006-06-30
申请人： Xiangdong Jin , Dongping Luo , Wen Wei
发明人： Xiangdong Jin , Dongping Luo , Wen Wei
IPC分类号： G06F9/26 , G06F9/34 , G06F17/00
CPC分类号： G06F17/30958 , G06F17/3033
摘要： A linked list traversal system identifies when a linked list has become inefficient, either through attack or an undue multiplicity of collisions. A data unit is parsed to extract a key. A first hash result associated with the key is calculated based on a first hash function. A first linked list is identified based on the first hash result. It is determined whether the first linked list has been compromised. A second hash result associated with the key is calculated based on a second hash function when the first linked list has been compromised. A second linked list is established based on the second hash result, where the second hash result is different from the first hash result.
摘要翻译：链表遍历系统通过攻击或不正当的多重冲突来识别链表何时变得无效。解析数据单元以提取密钥。基于第一哈希函数来计算与密钥相关联的第一哈希结果。基于第一哈希结果识别第一链表。确定第一个链表是否已被破坏。当第一个链表被破坏时，基于第二哈希函数计算与密钥相关联的第二哈希结果。基于第二哈希结果建立第二链表，其中第二哈希结果与第一哈希结果不同。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式