专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US07590632B1 Method for serializer maintenance and coalescing 有权
标题翻译：串行器维护和聚结方法
公开(公告)号：US07590632B1
公开(公告)日：2009-09-15
申请号：US11045237
申请日：2005-01-28
申请人： Germano Caronni , Raphael J. Rom , Glenn C. Scott
发明人： Germano Caronni , Raphael J. Rom , Glenn C. Scott
IPC分类号： G06F7/00 , G06F17/30 , G06F17/00 , G06F3/00 , G06F9/44 , G06F9/46 , G06F13/00
CPC分类号： G06F9/52 , Y10S707/99944 , Y10S707/99953
摘要： A method for serializer maintenance and coalescing in a distributed object store (DOS) including a first partition and a second partition, involving requesting an update of an object, wherein the object includes an active globally unique identifier (AGUID) object and at least one version globally unique identifier (VGUID) object, wherein the least one VGUID object includes a first generation number and a first serializer name, determining whether a first serializer is located in the first partition using the first serializer name, wherein the first serializer is associated with the first generation number, if the first serializer is not located in the first partition, constructing a second serializer using the first serializer name, assigning a second generation number to the second serializer, obtaining an order of the update to the object using the second serializer, and creating a new VGUID object.
摘要翻译：一种在包括请求对象的更新的包括第一分区和第二分区的分布式对象存储（DOS）中的序列化程序维护和合并的方法，其中所述对象包括活动的全局唯一标识符（AGUID）对象和至少一个版本全球唯一标识符（VGUID）对象，其中所述至少一个VGUID对象包括第一代号和第一串行器名称，使用所述第一串行器名称确定所述第一分区是否位于所述第一分区中，其中所述第一串行器与所述第一序列化器相关联第一编号，如果第一串行器不位于第一分区中，则使用第一串行器名称构建第二串行器，向第二串行器分配第二代数，使用第二串行器获取更新对象的顺序，并创建一个新的VGUID对象。

2. 发明授权

US07765581B1 System and method for enabling scalable security in a virtual private network 有权
标题翻译：用于实现虚拟专用网络中的可扩展安全性的系统和方法
公开(公告)号：US07765581B1
公开(公告)日：2010-07-27
申请号：US09457914
申请日：1999-12-10
申请人： Germano Caronni , Amit Gupta , Sandeep Kumar , Tom R. Markson , Christoph L. Schuba , Glenn C. Scott
发明人： Germano Caronni , Amit Gupta , Sandeep Kumar , Tom R. Markson , Christoph L. Schuba , Glenn C. Scott
IPC分类号： H04L9/00
CPC分类号： H04L63/0272 , H04L29/12009 , H04L29/12367 , H04L29/12396 , H04L29/12471 , H04L29/12528 , H04L61/2514 , H04L61/2525 , H04L61/2553 , H04L61/2575
摘要： Methods and systems consistent with the present invention provide dynamic security policies that change the granularity of the security at the node level, process level, or socket level. Specifically, a channel number and virtual address are associated with various processes included in a process table. Since a security policy is required for all processes, secure and insecure processes located on the same channel may communicate with one another. Moreover, processes located on different channels may communicate with one another by a gateway that connects both channels. This scalable blanketing security approach provides an institutionalized method for securing any process, node or socket by providing a unique mechanism for policy enforcement at runtime or by changing the security policies.
摘要翻译：与本发明一致的方法和系统提供动态安全策略，其改变节点级别，过程级别或套接字级别的安全性的粒度。具体地，通道号和虚拟地址与包括在处理表中的各种处理相关联。由于所有进程都需要安全策略，因此位于同一通道上的安全和不安全进程可能会相互通信。此外，位于不同信道上的进程可以通过连接两个信道的网关彼此通信。这种可扩展的覆盖安全方法提供了一种制度化的方法，用于通过在运行时或通过更改安全策略提供用于策略实施的唯一机制来保护任何进程，节点或套接字。

3. 发明授权

US07751569B2 Group admission control apparatus and methods 有权
标题翻译：集体准入控制装置及方法
公开(公告)号：US07751569B2
公开(公告)日：2010-07-06
申请号：US10299454
申请日：2002-11-19
申请人： Germano Caronni , Glenn C. Scott
发明人： Germano Caronni , Glenn C. Scott
IPC分类号： H04L9/00
CPC分类号： H04L9/0833 , H04L9/0891 , H04L2209/42 , H04L2209/60
摘要： The present invention uses a group key management scheme for admission control while enabling various conventional approaches toward establishing peer-to-peer security. Various embodiments of the invention can provide peer-to-peer confidentiality and authenticity, such that other parties, such as group members, can not understand communications not intended for them. A group key may be used in combination with known unicast security protocols to establish, implicitly or explicitly, proof of group membership together with bi-lateral secure communication.
摘要翻译：本发明使用用于准入控制的组密钥管理方案，同时支持各种常规方法来建立点对点安全性。本发明的各种实施例可以提供点对点保密性和真实性，使得诸如群组成员之类的其他方不能理解不针对他们的通信。组密钥可以与已知的单播安全协议组合使用，以便与双向安全通信一起建立，隐式或明确地证明组成员资格。

4. 发明授权

US07336790B1 Decoupling access control from key management in a network 有权
标题翻译：将访问控制从网络中的密钥管理中解耦
公开(公告)号：US07336790B1
公开(公告)日：2008-02-26
申请号：US09458020
申请日：1999-12-10
申请人： Germano Caronni , Amit Gupta , Tom R. Markson , Sandeep Kumar , Christoph L. Schuba , Glenn C. Scott
发明人： Germano Caronni , Amit Gupta , Tom R. Markson , Sandeep Kumar , Christoph L. Schuba , Glenn C. Scott
IPC分类号： H04L9/32
CPC分类号： H04L63/0272
摘要： Methods and systems consistent with the present invention provide a Supernet, a private network constructed out of components from a public-network infrastructure. Supernet nodes can be located on virtually any device in the public network (e.g., the Internet), and both their communication and utilization of resources occur in a secure manner. As a result, the users of a Supernet benefit from their network infrastructure being maintained for them as part of the public-network infrastructure, while the level of security they receive is similar to that of a private network. The Supernet has an access control component and a key management component which are decoupled. The access control component implements an access control policy that determines which users are authorized to use the network, and the key management component implements the network's key management policies, which indicate when keys are generated and what encryption algorithm is used. Both access control and key management are separately configurable. Thus, the Supernet provides great flexibility by allowing different key management policies to be used with the same access control component.
摘要翻译：与本发明一致的方法和系统提供了一种Supernet，一种由公共网络基础设施的组件构成的私有网络。超网络节点可以位于公共网络（例如，因特网）中的几乎任何设备上，并且资源的通信和利用都以安全的方式发生。因此，Supernet的用户受益于其网络基础架构，作为公共网络基础架构的一部分，而其接收的安全级别与私有网络的安全级别相似。 Supernet具有访问控制组件和分离的密钥管理组件。访问控制组件实现访问控制策略，其确定哪些用户被授权使用网络，并且密钥管理组件实现网络的密钥管理策略，其指示生成密钥以及使用什么加密算法。访问控制和密钥管理都可以单独配置。因此，通过允许不同的密钥管理策略与相同的访问控制组件一起使用，Supernet提供了极大的灵活性。

5. 发明授权

US07657543B1 Method and system for creating and using shadow roots 有权
标题翻译：创建和使用阴影根的方法和系统
公开(公告)号：US07657543B1
公开(公告)日：2010-02-02
申请号：US11045961
申请日：2005-01-28
申请人： Germano Caronni , Raphael J. Rom , Glenn C. Scott
发明人： Germano Caronni , Raphael J. Rom , Glenn C. Scott
IPC分类号： G06F17/30
CPC分类号： G06F9/52 , Y10S707/99944 , Y10S707/99953
摘要： A method for storing a first copy of an object, including obtaining the object including a globally unique identifier (GUID), generating a first derived GUID using the GUID of the object, storing the first copy of the object identified by the first derived GUID in a root node of the object, publishing possession of the first copy of the object identified by the first derived GUID by the root node of the object, associating a first shadow root with the first copy of the object, and storing the first copy of the object identified by the GUID in the first shadow root.
摘要翻译：一种用于存储对象的第一副本的方法，包括获取包含全局唯一标识符（GUID）的对象，使用对象的GUID生成第一派生GUID，将由第一派生GUID标识的对象的第一副本存储在所述对象的根节点，通过所述对象的根节点发布由所述第一派生GUID标识的所述对象的第一副本的所有权，将所述第一影子根与所述对象的第一副本相关联，以及存储所述对象的所述第一副本由GUID在第一个阴影根中标识的对象。

6. 发明授权

US06938169B1 Channel-specific file system views in a private network using a public-network infrastructure 有权
标题翻译：使用公共网络基础设施的专用网络中的通道特定文件系统视图
公开(公告)号：US06938169B1
公开(公告)日：2005-08-30
申请号：US09457895
申请日：1999-12-10
申请人： Germano Caronni , Amit Gupta , Tom R. Markson , Sandeep Kumar , Christoph L. Schuba , Glenn C. Scott
发明人： Germano Caronni , Amit Gupta , Tom R. Markson , Sandeep Kumar , Christoph L. Schuba , Glenn C. Scott
IPC分类号： G06F17/30 , H04L29/06 , G06F12/14 , G06F11/30
CPC分类号： H04L63/0272 , G06F17/30067 , H04L63/0442 , H04L63/08
摘要： Methods and systems consistent with the present invention provide a Supernet, a private network constructed out of components from a public-network infrastructure. The Supernet provides channel-specific file system views such that the file system of the Supernet is partitioned on a per-channel basis so that nodes on one channel see a different view of the network file system than the nodes on a different channel.
摘要翻译：与本发明一致的方法和系统提供了一种Supernet，一种由公共网络基础设施的组件构成的私有网络。 Supernet提供特定于频道的文件系统视图，使得Supernet的文件系统在每个频道的基础上进行分区，以便一个频道上的节点与不同频道上的节点相比，看到网络文件系统的不同视图。

7. 发明授权

US06970941B1 System and method for separating addresses from the delivery scheme in a virtual private network 有权
标题翻译：用于在虚拟专用网络中将地址从传送方案分离的系统和方法
公开(公告)号：US06970941B1
公开(公告)日：2005-11-29
申请号：US09458043
申请日：1999-12-10
申请人： Germano Caronni , Amit Gupta , Sandeep Kulmar , Tom R. Markson , Christoph L. Schuba , Glenn C. Scott
发明人： Germano Caronni , Amit Gupta , Sandeep Kulmar , Tom R. Markson , Christoph L. Schuba , Glenn C. Scott
IPC分类号： H04L12/46 , H04L29/06 , H04L29/12 , G06F15/173 , G06F15/16
CPC分类号： H04L63/0272 , H04L12/4679 , H04L29/12009 , H04L29/12396 , H04L29/12528 , H04L61/2525 , H04L61/2575
摘要： Methods and systems consistent with the present invention establish a virtual network on top of current IP network naming schemes. The virtual network uses a separate layer to create a modification to the IP packet format that is used to separate network behavior from addressing. As a result of the modification to the packet format, any type of delivery method may be assigned to any address or group of addresses. The virtual network also maintains secure communications between nodes, while providing the flexibility of assigning delivery methods independent of the delivery addresses.
摘要翻译：与本发明一致的方法和系统在当前IP网络命名方案之上建立虚拟网络。虚拟网络使用单独的层来创建用于将网络行为与寻址分离的IP包格式的修改。作为对分组格式的修改的结果，可以将任何类型的传送方法分配给任何地址或地址组。虚拟网络还维护节点之间的安全通信，同时提供独立于传送地址的分配传送方法的灵活性。

8. 发明授权

US06870842B1 Using multicasting to provide ethernet-like communication behavior to selected peers on a network 有权
标题翻译：使用组播为网络上的选定对等体提供类似以太网的通信行为
公开(公告)号：US06870842B1
公开(公告)日：2005-03-22
申请号：US09457915
申请日：1999-12-10
申请人： Germano Caronni , Amit Gupta , Tom R. Markson , Sandeep Kumar , Christoph L. Schuba , Glenn C. Scott
发明人： Germano Caronni , Amit Gupta , Tom R. Markson , Sandeep Kumar , Christoph L. Schuba , Glenn C. Scott
IPC分类号： H04L12/18 , H04L12/28 , H04L12/56
CPC分类号： H04L12/18
摘要： Methods and systems consistent with the present invention provide a Supernet, a private network constructed out of components from a public-network infrastructure. Supernet nodes can be located on virtually any device in the public network (e.g., the Internet), and both their communication and utilization of resources occur in a secure manner. The Supernet also uses multicast communication to create Ethernet-like communication between its nodes. In using multicasting, each communication of each node on a channel in the private network is sent to a multicast address which sends it to all of the nodes on the channel. Sending a copy of every communication to all of the other nodes on the channel makes system tasks, like debugging, easy for the nodes on the channel. The multicasting provided by the private network is dynamic in that multicast addresses can be assigned for use by a channel and reclaimed so as to allow sharing of the multicast addresses.
摘要翻译：与本发明一致的方法和系统提供了一种Supernet，一种由公共网络基础设施的组件构成的私有网络。超网络节点可以位于公共网络（例如，因特网）中的几乎任何设备上，并且资源的通信和利用都以安全的方式发生。 Supernet还使用组播通信在其节点之间创建类似以太网的通信。在使用多播时，专网中信道上的每个节点的每个通信都被发送到多播地址，将其发送到该信道上的所有节点。将每个通信的副本发送到通道上的所有其他节点，使得系统任务（如调试）对于通道上的节点很容易。由私有网络提供的多播是动态的，因为多播地址可以被分配给信道使用并被回收以允许多播地址的共享。

9. 发明授权

US06643701B1 Method and apparatus for providing secure communication with a relay in a network 有权
标题翻译：用于提供与网络中的中继器的安全通信的方法和装置
公开(公告)号：US06643701B1
公开(公告)日：2003-11-04
申请号：US09441451
申请日：1999-11-17
申请人： Ashar Aziz , Geoffrey Baehr , Germano Caronni , Amit Gupta , Vipul Gupta , Glenn C. Scott
发明人： Ashar Aziz , Geoffrey Baehr , Germano Caronni , Amit Gupta , Vipul Gupta , Glenn C. Scott
IPC分类号： G06F1516
CPC分类号： H04L63/0442 , G06F21/33 , G06F21/445 , G06Q20/367 , G06Q20/382 , H04L63/0823 , H04L63/166 , H04L67/14
摘要： Methods and systems of the present invention include providing a connection between a first computer and a second computer by receiving, at a third computer, information regarding one of the first and second computers to facilitate establishment of a secure connection between the first computer and the second computer, creating a first end-to-end security link between the first computer and third computer, and creating a second end-to-end security link between the second computer and the third computer to establish the secure connection. The first and second computers could be a client and a server on the Internet, and these methods and systems can, for example, increase the possible number of new secure connections to the server. The third computer also permits processing of information transmitted between the client and server in the third computer. For example, the information could be reformatted or used in testing a process of one of the first and second computers.
摘要翻译：本发明的方法和系统包括通过在第三计算机处接收关于第一和第二计算机之一的信息来提供第一计算机和第二计算机之间的连接，以便于建立第一计算机与第二计算机之间的安全连接计算机，在第一计算机和第三计算机之间创建第一端到端安全链路，以及在第二计算机和第三计算机之间创建第二端到端安全链路以建立安全连接。第一和第二台计算机可以是因特网上的客户端和服务器，并且这些方法和系统可以例如增加到服务器的可能数量的新的安全连接。第三计算机还允许在第三计算机中处理在客户端和服务器之间传送的信息。例如，可以将信息重新格式化或用于测试第一和第二计算机之一的过程。

10. 发明授权

US07778970B1 Method and system for managing independent object evolution 有权
标题翻译：用于管理独立对象演化的方法和系统
公开(公告)号：US07778970B1
公开(公告)日：2010-08-17
申请号：US11045223
申请日：2005-01-28
申请人： Germano Caronni , Raphael J. Rom , Glenn C. Scott
发明人： Germano Caronni , Raphael J. Rom , Glenn C. Scott
IPC分类号： G06F7/00 , G06F17/00
CPC分类号： G06F9/52 , Y10S707/99944 , Y10S707/99953
摘要： A method for managing object evolution in a distributed object store (DOS) involving requesting an update of an object, wherein the object includes an active globally unique identifier (AGUID) object and at least one version globally unique identifier (VGUID) object, wherein the at least one VGUID object includes a first generation number and a first serializer name, locating a first serializer using the first serializer name, wherein the first serializer is associated with the first generation number, obtaining an order of the update using the first serializer, and creating a new VGUID object, wherein the new VGUID object includes a new version number, the first generation number, and the first serializer name.
摘要翻译：一种用于管理涉及请求对象的更新的分布式对象存储（DOS）中的对象演进的方法，其中所述对象包括活动全局唯一标识符（AGUID）对象和至少一个版本全局唯一标识符（VGUID）对象，其中，至少一个VGUID对象包括第一代号和第一串行器名称，使用第一串行器名称定位第一串行器，其中第一串行器与第一代数相关联，使用第一串行器获得更新的顺序，以及创建新的VGUID对象，其中新的VGUID对象包括新版本号，第一代号和第一串行器名称。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式