专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US07716369B2 Data transmission system with a mechanism enabling any application to run transparently over a network address translation device 失效
标题翻译：数据传输系统具有使任何应用程序透明地通过网络地址转换设备运行的机制
公开(公告)号：US07716369B2
公开(公告)日：2010-05-11
申请号：US10638504
申请日：2003-08-11
申请人： Jean-François Le Pennec , Aurélien Bruno , Nicolas Grisi , Jean-Marie Sommerlatt , Bernard Amadei
发明人： Jean-François Le Pennec , Aurélien Bruno , Nicolas Grisi , Jean-Marie Sommerlatt , Bernard Amadei
IPC分类号： G06F15/16
CPC分类号： H04L29/12509 , H04L29/12537 , H04L61/2567 , H04L61/2578 , H04L63/0272 , H04L63/164
摘要： Data transmission system based upon the Internet protocol (IP) comprising a private transmission network (18) and a public transmission network or the like (16) interconnected by a network address translation device NAT (12) wherein at least a workstation WS (10) connected to said private transmission network has to establish a communication with a peer device (14) connected to the public transmission network, the local IP address of each data packet from the workstation WS being translated into a NAT address used to provide the route through the public transmission network. The system includes a registration server (19) connected to the public transmission network for registering the local IP address corresponding to the NAT address and providing the correspondence between the NAT address and the local IP address to the peer device in order for this one to replace in the IP header of each data packet received by the peer device, the NAT address by the local IP address.
摘要翻译：基于包括由网络地址转换装置NAT（12）互连的专用传输网络（18）和公共传输网络（16）的因特网协议（IP）的数据传输系统，其中至少一个工作站WS（10）连接到所述专用传输网络必须与连接到公共传输网络的对等设备（14）建立通信，来自工作站WS的每个数据分组的本地IP地址被翻译成用于提供路由的NAT地址公共传输网络。该系统包括连接到公共传输网络的注册服务器（19），用于注册与NAT地址相对应的本地IP地址，并且向对等设备提供NAT地址和本地IP地址之间的对应关系，以使其替换在对端设备收到的每个数据包的IP报头中，通过本地IP地址的NAT地址。

2. 发明授权

US07392379B2 Firewall system for interconnecting two IP networks managed by two different administrative entities 失效
标题翻译：用于互连由两个不同管理实体管理的两个IP网络的防火墙系统
公开(公告)号：US07392379B2
公开(公告)日：2008-06-24
申请号：US11831631
申请日：2007-07-31
申请人： Jean-François Le Pennec , Aurélien Bruno , Nicolas Grisi , Jean-Marie Sommerlatt
发明人： Jean-François Le Pennec , Aurélien Bruno , Nicolas Grisi , Jean-Marie Sommerlatt
IPC分类号： G06F9/00
CPC分类号： H04L41/042 , H04L29/12339 , H04L61/2503 , H04L63/0209 , H04L63/0263 , H04L63/0272
摘要： Firewall system for interconnecting a first IP network (10) to a second IP network (16), these networks belonging to two different entities having each a different administration wherein any data packet transmitted/received by the first IP network is filtered by using a first firewall function and any data packet transmitted/received by the second IP network is filtered by using a second firewall function. The system comprises essentially a single firewall device (20) including filtering means (41, 43) performing both first firewall function and second firewall function, a console port (37) enabling the administrator in charge of each IP network to enter filtering rules for updating the associated firewall function and control means (39, 47, 49) interconnecting the console port and the filtering means for transmitting thereto the filtering rules so that each administrator may independently manage the system from the console port.
摘要翻译：用于将第一IP网络（10）互连到第二IP网络（16）的防火墙系统，属于具有不同管理的两个不同实体的这些网络，其中由第一IP网络发送/接收的任何数据分组通过使用第一IP网络防火墙功能和由第二IP网络发送/接收的任何数据包通过使用第二防火墙功能进行过滤。该系统基本上包括单个防火墙设备（20），其包括执行第一防火墙功能和第二防火墙功能的过滤装置（41,43），使得管理员能够负责每个IP网络的控制台端口（37）输入用于更新的过滤规则相关联的防火墙功能和控制装置（39,47,49），其互连控制台端口和过滤装置，用于向其发送过滤规则，使得每个管理员可以从控制台端口独立地管理系统。

3. 发明授权

US07320143B2 Method of gaining secure access to intranet resources 有权
标题翻译：获取安全访问内部网资源的方法
公开(公告)号：US07320143B2
公开(公告)日：2008-01-15
申请号：US10638860
申请日：2003-08-11
申请人： Jean-François Le Pennec , Aurélien Bruno , Nicolas Grisi , Jean-Marie Sommerlatt
发明人： Jean-François Le Pennec , Aurélien Bruno , Nicolas Grisi , Jean-Marie Sommerlatt
IPC分类号： G06F17/30 , G06F7/04 , G06K9/00 , H03M1/68 , H04L9/00 , H04L9/32 , H04K1/00 , H04N7/16
CPC分类号： H04L63/12 , H04L63/1466
摘要： Method of gaining secure access from a host (13) to Intranet resources provided by at least a content server (18) in a data transmission system wherein the host is connected to the content server through a gateway (17). Such a method consists in generating and sending at predetermined transmission instants from either the host or the gateway verification messages wherein each verification message contains a signature which depends upon the data exchanged between the host and the gateway since the preceding verification message, the host and the gateway also called peer devices having at their disposal a same algorithm defining which of them sends a verification message at each of the predetermined instants.
摘要翻译：从数据传输系统获得从主机（13）到由至少内容服务器（18）提供的内联网资源的安全访问的方法，其中主机通过网关（17）连接到内容服务器。这种方法包括：从主机或网关验证消息的预定传输时刻生成和发送，其中每个验证消息包含取决于主机与网关之间交换的数据的签名，因为前述验证消息，主机和网关还称为具有相同算法的对等设备，其定义了在每个预定时刻中的哪一个发送验证消息。

4. 发明授权

US08132251B2 Firewall system for interconnecting two IP networks managed by two different administrative entities 有权
标题翻译：用于互连由两个不同管理实体管理的两个IP网络的防火墙系统
公开(公告)号：US08132251B2
公开(公告)日：2012-03-06
申请号：US12115392
申请日：2008-05-05
申请人： Jean-François Le Pennec , Aurélien Bruno , Nicolas Grisi , Jean-Marie Sommerlatt
发明人： Jean-François Le Pennec , Aurélien Bruno , Nicolas Grisi , Jean-Marie Sommerlatt
IPC分类号： H04L29/02
CPC分类号： H04L41/042 , H04L29/12339 , H04L61/2503 , H04L63/0209 , H04L63/0263 , H04L63/0272
摘要： Firewall system for interconnecting a first IP network (10) to a second IP network (16), these networks belonging to two different entities having each a different administration wherein any data packet transmitted/received by the first IP network is filtered by using a first firewall function and any data packet transmitted/received by the second IP network is filtered by using a second firewall function. The system comprises essentially a single firewall device (20) including filtering means (41, 43) performing both first firewall function and second firewall function, a console port (37) enabling the administrator in charge of each IP network to enter filtering rules for updating the associated firewall function and control means (39, 47, 49) interconnecting the console port and the filtering means for transmitting thereto the filtering rules so that each administrator may independently manage the system from the console port.
摘要翻译：用于将第一IP网络（10）互连到第二IP网络（16）的防火墙系统，属于具有不同管理的两个不同实体的这些网络，其中由第一IP网络发送/接收的任何数据分组通过使用第一IP网络防火墙功能和由第二IP网络发送/接收的任何数据包通过使用第二防火墙功能进行过滤。该系统基本上包括单个防火墙设备（20），其包括执行第一防火墙功能和第二防火墙功能的过滤装置（41,43），使得管理员能够负责每个IP网络的控制台端口（37）输入用于更新的过滤规则相关联的防火墙功能和控制装置（39,47,49），其互连控制台端口和过滤装置，用于向其发送过滤规则，使得每个管理员可以从控制台端口独立地管理系统。

5. 发明授权

US07716331B2 Method of gaining secure access to intranet resources 有权
标题翻译：获取安全访问内部网资源的方法
公开(公告)号：US07716331B2
公开(公告)日：2010-05-11
申请号：US11986534
申请日：2007-11-21
申请人： Jean-François Le Pennec , Aurélien Bruno , Nicolas Grisi , Jean-Marie Sommerlatt
发明人： Jean-François Le Pennec , Aurélien Bruno , Nicolas Grisi , Jean-Marie Sommerlatt
IPC分类号： G06F15/173 , H04L9/32 , G06F11/00 , G06F12/14
CPC分类号： H04L63/12 , H04L63/1466
摘要： Method of gaining secure access from a host (13) to Intranet resources provided by at least a content server (18) in a data transmission system wherein the host is connected to the content server through a gateway (17). Such a method consists in generating and sending at predetermined transmission instants from either the host or the gateway verification messages wherein each verification message contains a signature which depends upon the data exchanged between the host and the gateway since the preceding verification message, the host and the gateway also called peer devices having at their disposal same algorithm defining which of them sends a verification message at each of the predetermined instants.
摘要翻译：从数据传输系统获得从主机（13）到由至少内容服务器（18）提供的内联网资源的安全访问的方法，其中主机通过网关（17）连接到内容服务器。这种方法包括：从主机或网关验证消息的预定传输时刻生成和发送，其中每个验证消息包含取决于主机与网关之间交换的数据的签名，因为前述验证消息，主机和网关还称之为具有相同算法的对等设备，其定义了在每个预定时刻中的哪一个发送验证消息。

6. 发明授权

US07299353B2 Firewall system for interconnecting two IP networks managed by two different administrative entities 有权
标题翻译：用于互连由两个不同管理实体管理的两个IP网络的防火墙系统
公开(公告)号：US07299353B2
公开(公告)日：2007-11-20
申请号：US10638839
申请日：2003-08-11
申请人： Jean-François Le Pennec , Aurélien Bruno , Nicolas Grisi , Jean-Marie Sommerlatt
发明人： Jean-François Le Pennec , Aurélien Bruno , Nicolas Grisi , Jean-Marie Sommerlatt
IPC分类号： G06F1/24
CPC分类号： H04L41/042 , H04L29/12339 , H04L61/2503 , H04L63/0209 , H04L63/0263 , H04L63/0272
摘要： Firewall system for interconnecting a first IP network (10) to a second IP network (16), these networks belonging to two different entities having each a different administration wherein any data packet transmitted/received by the first IP network is filtered by using a first firewall function and any data packet transmitted/received by the second IP network is filtered by using a second firewall function. The system comprises essentially a single firewall device (20) including filtering means (41, 43) performing both first firewall function and second firewall function, a console port (37) enabling the administrator in charge of each IP network to enter filtering rules for updating the associated firewall function and control means (39, 47, 49) interconnecting the console port and the filtering means for transmitting thereto the filtering rules so that each administrator may independently manage the system from the console port.
摘要翻译：用于将第一IP网络（10）互连到第二IP网络（16）的防火墙系统，属于具有不同管理的两个不同实体的这些网络，其中由第一IP网络发送/接收的任何数据分组通过使用第一IP网络防火墙功能和由第二IP网络发送/接收的任何数据包通过使用第二防火墙功能进行过滤。该系统基本上包括单个防火墙设备（20），其包括执行第一防火墙功能和第二防火墙功能的过滤装置（41,43），使得管理员能够负责每个IP网络的控制台端口（37）输入用于更新的过滤规则相关联的防火墙功能和控制装置（39,47,49），其互连控制台端口和过滤装置，用于向其发送过滤规则，使得每个管理员可以从控制台端口独立地管理系统。

7. 发明申请

US20070271605A1 FIREWALL SYSTEM FOR INTERCONNECTING TWO IP NETWORKS MANAGED BY TWO DIFFERENT ADMINISTRATIVE ENTITIES 失效
标题翻译：用于互连两个不同管理实体管理的两个IP网络的防火墙系统
公开(公告)号：US20070271605A1
公开(公告)日：2007-11-22
申请号：US11831631
申请日：2007-07-31
申请人： Jean-Francois Le Pennec , Aurelien Bruno , Nicolas Grisi , Jean-Marie Sommerlatt
发明人： Jean-Francois Le Pennec , Aurelien Bruno , Nicolas Grisi , Jean-Marie Sommerlatt
IPC分类号： G06F15/16
CPC分类号： H04L41/042 , H04L29/12339 , H04L61/2503 , H04L63/0209 , H04L63/0263 , H04L63/0272
摘要： Firewall system for interconnecting a first IP network (10) to a second IP network (16), these networks belonging to two different entities having each a different administration wherein any data packet transmitted/received by the first IP network is filtered by using a first firewall function and any data packet transmitted/received by the second IP network is filtered by using a second firewall function. The system comprises essentially a single firewall device (20) including filtering means (41, 43) performing both first firewall function and second firewall function, a console port (37) enabling the administrator in charge of each IP network to enter filtering rules for updating the associated firewall function and control means (39, 47, 49) interconnecting the console port and the filtering means for transmitting thereto the filtering rules so that each administrator may independently manage the system from the console port.
摘要翻译：用于将第一IP网络（10）互连到第二IP网络（16）的防火墙系统，属于具有不同管理的两个不同实体的这些网络，其中由第一IP网络发送/接收的任何数据分组通过使用第一IP网络防火墙功能和由第二IP网络发送/接收的任何数据包通过使用第二防火墙功能进行过滤。该系统基本上包括单个防火墙设备（20），其包括执行第一防火墙功能和第二防火墙功能的过滤装置（41,43），使得管理员能够负责每个IP网络的控制台端口（37）输入用于更新的过滤规则相关联的防火墙功能和控制装置（39,47,49），其互连控制台端口和过滤装置，用于向其发送过滤规则，使得每个管理员可以从控制台端口独立地管理系统。

8. 发明申请

US20080147871A1 Method of gaining secure access to intranet resources 有权
标题翻译：获取安全访问内部网资源的方法
公开(公告)号：US20080147871A1
公开(公告)日：2008-06-19
申请号：US11986534
申请日：2007-11-21
申请人： Jean-Francois Le Pennec , Aurelien Bruno , Nicolas Grisi , Jean-Marie Sommerlatt
发明人： Jean-Francois Le Pennec , Aurelien Bruno , Nicolas Grisi , Jean-Marie Sommerlatt
IPC分类号： G06F15/16
CPC分类号： H04L63/12 , H04L63/1466
摘要： Method of gaining secure access from a host (13) to Intranet resources provided by at least a content server (18) in a data transmission system wherein the host is connected to the content server through a gateway (17). Such a method consists in generating and sending at predetermined transmission instants from either the host or the gateway verification messages wherein each verification message contains a signature which depends upon the data exchanged between the host and the gateway since the preceding verification message, the host and the gateway also called peer devices having at their disposal same algorithm defining which of them sends a verification message at each of the predetermined instants.
摘要翻译：从数据传输系统获得从主机（13）到由至少内容服务器（18）提供的内联网资源的安全访问的方法，其中主机通过网关（17）连接到内容服务器。这种方法包括：从主机或网关验证消息的预定传输时刻生成和发送，其中每个验证消息包含取决于主机与网关之间交换的数据的签名，因为前述验证消息，主机和网关还称之为具有相同算法的对等设备，其定义了在每个预定时刻中的哪一个发送验证消息。

9. 发明申请

US20050283639A1 Path analysis tool and method in a data transmission network including several internet autonomous systems 审中-公开
标题翻译：包括几个互联网自主系统在内的数据传输网络中的路径分析工具和方法
公开(公告)号：US20050283639A1
公开(公告)日：2005-12-22
申请号：US10638445
申请日：2003-08-11
申请人： Jean-Francois Le Pennec , Aurelien Bruno , Nicolas Grisi , Jean-Marie Sommerlatt
发明人： Jean-Francois Le Pennec , Aurelien Bruno , Nicolas Grisi , Jean-Marie Sommerlatt
IPC分类号： H04L12/24 , G06F11/00
CPC分类号： H04L41/00
摘要： Method for performing the analysis of the characteristics of a data path from a first data processing device to a second data processing device through a network comprising at least an autonomous system consisting in defining a scenario file the scenario to be used, such a scenario including the actions to be used, building a parameter file defining the parameters to be used in the actions, running at least one analysis module based upon the actions of the scenario file and the parameters of the parameter file, the analysis module calling at least a predefined information requesting procedure, and storing in at least an output file the data resulting from the running of the analysis modules
摘要翻译：用于通过网络执行从第一数据处理设备到第二数据处理设备的数据路径的特性的分析的方法，所述网络包括至少包括将待使用的场景定义为场景文件的自治系统，要使用的动作，构建定义要在动作中使用的参数的参数文件，基于脚本文件的动作和参数文件的参数运行至少一个分析模块，分析模块至少调用预定义的信息请求过程，并且至少在输出文件中存储由分析模块运行产生的数据

10. 发明授权

US08136152B2 Method and system for securely scanning network traffic 有权
标题翻译：安全扫描网络流量的方法和系统
公开(公告)号：US08136152B2
公开(公告)日：2012-03-13
申请号：US12105756
申请日：2008-04-18
申请人： Joel Balissat , Claude Galand , Jean-Francois Le Pennec , Jean-Marie Sommerlatt
发明人： Joel Balissat , Claude Galand , Jean-Francois Le Pennec , Jean-Marie Sommerlatt
IPC分类号： G06F15/00
CPC分类号： H04L63/0209 , H04L63/0272 , H04L63/0435 , H04L63/0464
摘要： A method and system for implementing secure network communications between a first device and a second device, at least one of the devices communicating with the other device via a firewall device, are provided. The method and system may include obtaining an encryption parameter that is shared by the first device, second device and firewall device. A data packet sent by the first device may then be copied within the firewall device, so that decryption of the copy of the data packet within a portion of the firewall device may take place. In particular, the portion of the firewall device in which decryption takes place is defined such that contents of the portion are inaccessible to an operator of the firewall device. Thus, scanning of the decrypted copy of the data packet for compliance with a predetermined criterion may take place within the firewall device, without an operator of the firewall device having access to the contents of the data packet to be transmitted. Thereafter, the original data packet can be forwarded to its originally intended recipient.
摘要翻译：提供了一种用于在第一设备和第二设备之间实现安全网络通信的方法和系统，至少一个设备经由防火墙设备与另一设备通信。该方法和系统可以包括获得由第一设备，第二设备和防火墙设备共享的加密参数。然后可以在防火墙设备内复制由第一设备发送的数据分组，从而可以在防火墙设备的一部分内对数据分组的副本进行解密。特别地，定义防火墙设备中发生解密的部分，使得该部分的内容对于防火墙设备的操作者是不可访问的。因此，在防火墙设备内可以进行符合预定标准的数据分组的解密副本的扫描，而防火墙设备的操作者可以访问要发送的数据分组的内容。此后，可以将原始数据分组转发到其原始的接收者。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式