专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US06870811B2 Quality of service functions implemented in input interface circuit interface devices in computer network hardware 失效
标题翻译：服务质量在计算机网络硬件的输入接口电路接口设备中实现
公开(公告)号：US06870811B2
公开(公告)日：2005-03-22
申请号：US09764954
申请日：2001-01-18
申请人： Kenneth James Barker , Gordon Taylor Davis , Clark Debs Jeffries , Mark Anthony Rinaldi , Kartik Sudeep
发明人： Kenneth James Barker , Gordon Taylor Davis , Clark Debs Jeffries , Mark Anthony Rinaldi , Kartik Sudeep
IPC分类号： H04L12/56 , H04L12/28
CPC分类号： H04L47/32 , H04L47/10 , H04L47/12
摘要： The decision to discard or forward a packet is made by a flow control mechanism, upstream from the forwarding engine in the node of a communication network. The forwarding engine includes a switch with mechanism to detect congestion in the switch and return a binary signal B indicating congestion or no congestion. The flow control mechanism uses B and other network related information to generate a probability transmission table against which received packets are tested to determine proactively whether a packet is to be discarded or forwarded.
摘要翻译：通过在通信网络的节点中的转发引擎的上游的流控制机制来进行丢弃或转发分组的决定。转发引擎包括具有检测交换机拥塞的机制的交换机，并返回指示拥塞或不拥塞的二进制信号B. 流控制机制使用B和其他网络相关信息来生成概率传输表，对其接收到的分组进行测试，以主动确定分组是否被丢弃或转发。

2. 发明授权

US07403527B2 Lookups by collisionless direct tables and cams 有权
标题翻译：通过无碰撞直接表和凸轮进行查找
公开(公告)号：US07403527B2
公开(公告)日：2008-07-22
申请号：US11867963
申请日：2007-10-05
申请人： Gordon Taylor Davis , Andreas Guenther Herkersdorf , Clark Debs Jeffries , Mark Anthony Rinaldi
发明人： Gordon Taylor Davis , Andreas Guenther Herkersdorf , Clark Debs Jeffries , Mark Anthony Rinaldi
IPC分类号： G06F12/00 , H04L12/56
CPC分类号： H04L49/3009 , H04L45/745 , H04L45/7453 , H04L49/351
摘要： A structure and technique for preventing collisions using a hash table in conjunction with a CAM to identify and prevent collision of binary keys. A portion of the hash value of a binary key, which does not collide with a portion of the hash value of any other reference binary key, is used as an entry in the hash table. If two or more binary keys have identical values of the portions of the hash values, each of these binary keys are stored in their entirety, in the CAM. The key in the CAM provides a pointer to a data structure where the action associated with that binary key is stored. If the binary key is not found in the CAM, the binary key is hashed, and a specific entry in the hash table is selected using a portion of this hash value.
摘要翻译：一种用于使用散列表与CAM结合来防止冲突的结构和技术，以识别和防止二进制密钥的冲突。不与任何其他参考二进制密钥的散列值的一部分相冲突的二进制密钥的散列值的一部分被用作散列表中的条目。如果两个或更多个二进制密钥具有相同的哈希值部分的值，则这些二进制密钥中的每一个都将全部存储在CAM中。 CAM中的关键字提供了指向数据结构的指针，其中存储与该二进制密钥相关联的动作。如果在CAM中没有找到二进制密钥，则二进制密钥被散列，并且使用该哈希值的一部分来选择散列表中的特定条目。

3. 发明授权

US07349397B2 Lookups by collisionless direct tables and CAMS 有权
标题翻译：通过无碰撞直接表和CAMS查找
公开(公告)号：US07349397B2
公开(公告)日：2008-03-25
申请号：US11462071
申请日：2006-08-03
申请人： Gordon Taylor Davis , Andreas Guenther Herkersdorf , Clark Debs Jeffries , Mark Anthony Rinaldi
发明人： Gordon Taylor Davis , Andreas Guenther Herkersdorf , Clark Debs Jeffries , Mark Anthony Rinaldi
IPC分类号： G06F12/00 , H04L12/56
CPC分类号： H04L49/3009 , H04L45/745 , H04L45/7453 , H04L49/351
摘要： A structure and technique for preventing collisions using a hash table in conjunction with a CAM to identify and prevent collisions of binary keys. A portion of the hash value of a binary key, which does not collide with a portion of the hash value of any other reference binary key, is used as an entry in the hash table. If two or more binary keys have identical values of the portions of the hash values, each of these binary keys are stored in their entirety, in the CAM. The key in the CAM provides a pointer to a data structure where the action associated with that binary key is stored. If the binary key is not found in the CAM, the binary key is hashed, and a specific entry in the hash table is selected using a portion of this hash value.
摘要翻译：一种用于使用散列表与CAM结合来防止冲突的结构和技术，以识别和防止二进制键的冲突。不与任何其他参考二进制密钥的散列值的一部分相冲突的二进制密钥的散列值的一部分被用作散列表中的条目。如果两个或更多个二进制密钥具有相同的哈希值部分的值，则这些二进制密钥中的每一个都将全部存储在CAM中。 CAM中的关键字提供了指向数据结构的指针，其中存储与该二进制密钥相关联的动作。如果在CAM中没有找到二进制密钥，则二进制密钥被散列，并且使用该哈希值的一部分来选择散列表中的特定条目。

4. 发明授权

US07116664B2 Lookups by collisionless direct tables and CAMs 失效
标题翻译：通过无碰撞直接表和CAM进行查找
公开(公告)号：US07116664B2
公开(公告)日：2006-10-03
申请号：US10144610
申请日：2002-05-13
申请人： Gordon Taylor Davis , Andreas Guenther Herkersdorf , Clark Debs Jeffries , Mark Anthony Rinaldi
发明人： Gordon Taylor Davis , Andreas Guenther Herkersdorf , Clark Debs Jeffries , Mark Anthony Rinaldi
IPC分类号： G06F12/00 , H04L12/56
CPC分类号： H04L49/3009 , H04L45/745 , H04L45/7453 , H04L49/351
摘要： A structure and technique for preventing collisions using a hash table in conjunction with a CAM to identify and prevent collisions of binary keys. A portion of the hash value of a binary key, which does not collide with a portion of the hash value of any other reference binary key, is used as an entry in the hash table. If two or more binary keys have identical values of the portions of the hash values, each of these binary keys are stored in their entirety, in the CAM. The key in the CAM provides a pointer to a data structure where the action associated with that binary key is stored. If the binary key is not found in the CAM, the binary key is hashed, and a specific entry in the hash table is selected using a portion of this hash value.
摘要翻译：一种用于使用散列表与CAM结合来防止冲突的结构和技术，以识别和防止二进制键的冲突。不与任何其他参考二进制密钥的散列值的一部分相冲突的二进制密钥的散列值的一部分被用作散列表中的条目。如果两个或更多个二进制密钥具有相同的哈希值部分的值，则这些二进制密钥中的每一个都将全部存储在CAM中。 CAM中的关键字提供了指向数据结构的指针，其中存储与该二进制密钥相关联的动作。如果在CAM中没有找到二进制密钥，则二进制密钥被散列，并且使用该哈希值的一部分来选择散列表中的特定条目。

5. 发明授权

US08081632B2 Lookups by collisionless direct tables and CAMS 有权
标题翻译：通过无碰撞直接表和CAMS查找
公开(公告)号：US08081632B2
公开(公告)日：2011-12-20
申请号：US11962558
申请日：2007-12-21
申请人： Gordon Taylor Davis , Andreas Guenther Herkersdorf , Clark Debs Jeffries , Mark Anthony Rinaldi
发明人： Gordon Taylor Davis , Andreas Guenther Herkersdorf , Clark Debs Jeffries , Mark Anthony Rinaldi
IPC分类号： G06F12/00 , H04L12/56
CPC分类号： H04L49/3009 , H04L45/745 , H04L45/7453 , H04L49/351
摘要： Computers are caused to provide a hash table wherein each entry is associated with a binary key and indexed by a selected portion of a hash value of the associated key, and points to a data structure location for storing non-selected portions of, or the entire hash value of, the binary key, and action data corresponding to the value of the binary key. Content addressable memory entries store a binary key, or a value unique to it, and an association to a corresponding action. Pointers to the data structure use selected portions of binary key hash values as an index when not selected portions of hash values of other binary keys, and associations are established between CAM entry and associated data structure locations when selected portions of the hash values of the binary keys are the same as selected portions of hash values of one or more other binary keys.
摘要翻译：导致计算机提供散列表，其中每个条目与二进制密钥相关联并由相关联的密钥的哈希值的选定部分索引，并且指向用于存储未选择的部分或全部的数据结构位置哈希值，二进制密钥和对应于二进制密钥值的动作数据。内容可寻址存储器条目存储二进制密钥或其唯一值，以及与相应操作的关联。指向数据结构的指针使用二进制密钥散列值的选定部分作为索引，当未选择其他二进制密钥的散列值部分时，以及在CAM条目和相关联的数据结构位置之间建立关联时，二进制对象的哈希值的选定部分键与一个或多个其他二进制键的哈希值的选定部分相同。

6. 发明授权

US07107344B2 Connection allocation technology 失效
标题翻译：连接分配技术
公开(公告)号：US07107344B2
公开(公告)日：2006-09-12
申请号：US09931540
申请日：2001-08-16
申请人： Gordon Taylor Davis , Clark Debs Jeffries , Mark Anthony Rinaldi
发明人： Gordon Taylor Davis , Clark Debs Jeffries , Mark Anthony Rinaldi
IPC分类号： G06F15/16
CPC分类号： H04L69/16 , H04L67/14 , H04L69/163
摘要： A method and apparatus useful in network management which makes intelligent, high speed, connection allocation decisions, overcoming difficulties encountered heretofore and providing enhanced network services. During episodes of network congestion, some connection requests for a class of service of low value and with currently a high number of existing connections may be purposefully ignored (not acknowledged with an Acknowledge (ACK) packet) so that the processing capability of a device will not become overwhelmed, causing the dropping of new connection is to note the numbers of connections of different classes relative to their service-level contracts, to ignore abundant, low-value connection requests in accordance with value policies when and only when necessary, and to insure that valuable new connection requests that conform to their contract connection rates can be intelligently accommodated.
摘要翻译：一种在网络管理中有用的方法和装置，其实现智能，高速，连接分配决策，克服迄今遇到的困难并提供增强的网络服务。在网络拥塞发生期间，可以有目的地忽略一些低价值服务和当前具有大量现有连接的连接请求（未被确认（ACK）分组确认），使得设备的处理能力将不会变得不堪重负，导致新连接的下降是注意到不同类别与其服务级别合同的连接数量，当且仅在必要时根据价值政策忽略丰富的低价值连接请求，并且确保符合其合同连接率的有价值的新连接请求可以被智能地适应。

7. 发明申请

US20100241746A1 Method, Program and System for Efficiently Hashing Packet Keys into a Firewall Connection Table 有权
标题翻译：方法，程序和系统有效地将数据包密钥散列到防火墙连接表中
公开(公告)号：US20100241746A1
公开(公告)日：2010-09-23
申请号：US12796363
申请日：2010-06-08
申请人： Everett Arthur Corl, JR. , Gordon Taylor Davis , Clark Debs Jeffries , Steven Richard Perrin , Hiroshi Takada , Victoria Sue Thio
发明人： Everett Arthur Corl, JR. , Gordon Taylor Davis , Clark Debs Jeffries , Steven Richard Perrin , Hiroshi Takada , Victoria Sue Thio
IPC分类号： G06F15/173
CPC分类号： H04L29/12009 , H04L29/12462 , H04L29/12481 , H04L45/745 , H04L61/255 , H04L61/2557
摘要： A method for increasing the capacity of a connection table in a firewall accelerator by means of mapping packets in one session with some common security actions into one table entry. For each of five Network Address Translation (NAT) configurations, a hash function is specified. The hash function takes into account which of four possible arrival types a packet at a firewall accelerator may have. When different arrival types of packets in the same session are processed, two or more arrival types may have the same hash value.
摘要翻译：一种通过将一个会话中的分组映射到一个表条目中的一些常见安全措施来增加防火墙加速器中连接表的容量的方法。对于五种网络地址转换（NAT）配置中的每一种，都指定了一个散列函数。散列函数考虑了防火墙加速器可能具有的四个可能的到达类型中的哪一个。当处理相同会话中的不同到达类型的分组时，两个或多个到达类型可以具有相同的哈希值。

8. 发明授权

US07796513B2 Packet classification using modified range labels 失效
标题翻译：数据包分类使用修改的范围标签
公开(公告)号：US07796513B2
公开(公告)日：2010-09-14
申请号：US12187188
申请日：2008-08-06
申请人： Claude Basso , Jean Louis Calvignac , Gordon Taylor Davis , Clark Debs Jeffries
发明人： Claude Basso , Jean Louis Calvignac , Gordon Taylor Davis , Clark Debs Jeffries
IPC分类号： H04L12/26
CPC分类号： H04L45/00 , H04L12/4625 , H04L45/54 , H04L45/7453 , H04L63/0263
摘要： A method and system for encoding a set of range labels for each parameter field in a packet classification key in such a way as to require preferably only a single entry per rule in a final processing stage of a packet classifier. Multiple rules are sorted accorded to their respective significance. A range, based on a parameter in the packet header, is previously determined. Multiple rules are evaluated according to an overlapping of rules according to different ranges. Upon a determination that two or more rules overlap, each overlapping rule is expanded into multiple unique segments that identify unique range intersections. Each cluster of overlapping ranges is then offset so that at least one bit in a range for the rule remains unchanged. The range segments are then converted from binary to Gray code, which results in the ability to determine a CAM entry to use for each range.
摘要翻译：一种方法和系统，用于以分组分类密钥中的每个参数字段的一组范围标签进行编码，以便在分组分类器的最后处理阶段中优选地仅需要每个规则仅一个条目。根据各自的意义对多个规则进行排序。预先确定基于分组报头中的参数的范围。根据不同范围的规则重叠来评估多个规则。在确定两个或更多个规则重叠时，每个重叠规则被扩展为识别唯一范围交点的多个唯一段。然后，每个重叠范围的簇被偏移，使得该规则的范围中的至少一个位保持不变。范围段然后从二进制转换为格雷码，这导致确定每个范围使用的CAM条目的能力。

9. 发明授权

US07769858B2 Method for efficiently hashing packet keys into a firewall connection table 失效
标题翻译：将数据包密钥高效地散列到防火墙连接表中的方法
公开(公告)号：US07769858B2
公开(公告)日：2010-08-03
申请号：US11063950
申请日：2005-02-23
申请人： Everett Arthur Corl, Jr. , Gordon Taylor Davis , Clark Debs Jeffries , Steven Richard Perrin , Hiroshi Takada , Victoria Sue Thio
发明人： Everett Arthur Corl, Jr. , Gordon Taylor Davis , Clark Debs Jeffries , Steven Richard Perrin , Hiroshi Takada , Victoria Sue Thio
IPC分类号： G06F15/173
CPC分类号： H04L29/12009 , H04L29/12462 , H04L29/12481 , H04L45/745 , H04L61/255 , H04L61/2557
摘要： A method for increasing the capacity of a connection table in a firewall accelerator by means of mapping packets in one session with some common security actions into one table entry. For each of five Network Address Translation (NAT) configurations, a hash function is specified. The hash function takes into account which of four possible arrival types a packet at a firewall accelerator may have. When different arrival types of packets in the same session are processed, two or more arrival types may have the same hash value.
摘要翻译：一种通过将一个会话中的分组映射到一个表条目中的一些常见安全措施来增加防火墙加速器中连接表的容量的方法。对于五种网络地址转换（NAT）配置中的每一种，都指定了一个散列函数。散列函数考虑了防火墙加速器可能具有的四个可能的到达类型中的哪一个。当处理相同会话中的不同到达类型的分组时，两个或多个到达类型可以具有相同的哈希值。

10. 发明授权

US07466687B2 Packet classification using modified range labels 失效
标题翻译：数据包分类使用修改的范围标签
公开(公告)号：US07466687B2
公开(公告)日：2008-12-16
申请号：US10425097
申请日：2003-04-28
申请人： Claude Basso , Jean Louis Calvignac , Gordon Taylor Davis , Clark Debs Jeffries
发明人： Claude Basso , Jean Louis Calvignac , Gordon Taylor Davis , Clark Debs Jeffries
IPC分类号： H04L12/28
CPC分类号： H04L45/00 , H04L12/4625 , H04L45/54 , H04L45/7453 , H04L63/0263
摘要： A method and system for encoding a set of range labels for each parameter field in a packet classification key in such a way as to require preferably only a single entry per rule in a final processing stage of a packet classifier. Multiple rules are sorted accorded to their respective significance. A range, based on a parameter in the packet header, is previously determined. Multiple rules are evaluated according to an overlapping of rules according to different ranges. Upon a determination that two or more rules overlap, each overlapping rule is expanded into multiple unique segments that identify unique range intersections. Each cluster of overlapping ranges is then offset so that at least one bit in a range for the rule remains unchanged. The range segments are then converted from binary to Gray code, which results in the ability to determine a CAM entry to use for each range.
摘要翻译：一种方法和系统，用于以分组分类密钥中的每个参数字段的一组范围标签进行编码，以便在分组分类器的最后处理阶段中优选地仅需要每个规则仅一个条目。根据各自的意义对多个规则进行排序。预先确定基于分组报头中的参数的范围。根据不同范围的规则重叠来评估多个规则。在确定两个或更多个规则重叠时，每个重叠规则被扩展为识别唯一范围交点的多个唯一段。然后，每个重叠范围的簇被偏移，使得该规则的范围中的至少一个位保持不变。范围段然后从二进制转换为格雷码，这导致确定每个范围使用的CAM条目的能力。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式