专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20090119510A1 END-TO-END NETWORK SECURITY WITH TRAFFIC VISIBILITY 审中-公开
标题翻译：具有交通可见性的端到端网络安全
公开(公告)号：US20090119510A1
公开(公告)日：2009-05-07
申请号：US11935783
申请日：2007-11-06
申请人： Men Long , Jesse Walker , David Durham , Marc Millier , Karanvir Grewal , Prashant Dewan , Uday Savagaonkar , Steven D. Williams
发明人： Men Long , Jesse Walker , David Durham , Marc Millier , Karanvir Grewal , Prashant Dewan , Uday Savagaonkar , Steven D. Williams
IPC分类号： H04L9/32
CPC分类号： H04L63/0428 , H04L9/0631 , H04L9/3242 , H04L63/08 , H04L63/1466 , H04L63/168 , H04L2209/12 , H04L2209/38
摘要： End-to-end security between clients and a server, and traffic visibility to intermediate network devices, achieved through combined mode, single pass encryption and authentication using two keys is disclosed. In various embodiments, a combined encryption-authentication unit includes a cipher unit and an authentication unit coupled in parallel to the cipher unit, and generates an authentication tag using an authentication key in parallel with the generation of the cipher text using an encryption key, where the authentication and encryption key have different key values. In various embodiments, the cipher unit operates in AES counter mode, and the authentication unit operates in parallel, in AES-GMAC mode Using a two key, single pass combined mode algorithm preserves network performance using a limited number of HW gates, while allowing an intermediate device access to the encryption key for deciphering the data, without providing that device the ability to compromise data integrity, which is preserved between the end to end devices.
摘要翻译：公开了客户机与服务器之间的端到端安全性，以及通过组合模式，单程加密和使用两个密钥的认证实现的对中间网络设备的流量可见性。在各种实施例中，组合加密认证单元包括与密码单元并行耦合的密码单元和认证单元，并且使用加密密钥与密文生成并行地使用认证密钥生成认证标签，其中认证和加密密钥具有不同的密钥值。在各种实施例中，密码单元以AES计数器模式运行，并且认证单元以AES-GMAC模式并行操作。使用双键单通组合模式算法使用有限数量的HW门保留网络性能，同时允许中间设备访问用于解密数据的加密密钥，而不提供该设备损害数据完整性的能力，这在端到端设备之间保留。

2. 发明申请

US20120096270A1 END-TO-END NETWORK SECURITY WITH TRAFFIC VISIBILITY 审中-公开
标题翻译：具有交通可见性的端到端网络安全
公开(公告)号：US20120096270A1
公开(公告)日：2012-04-19
申请号：US13337919
申请日：2011-12-27
申请人： Men Long , Jesse Walker , David Durham , Marc Millier , Karavir Grewal , Prashant Dewan , Uday Savagaonkar , Steven D. Williams
发明人： Men Long , Jesse Walker , David Durham , Marc Millier , Karavir Grewal , Prashant Dewan , Uday Savagaonkar , Steven D. Williams
IPC分类号： H04L9/32
CPC分类号： H04L63/0428 , H04L9/0631 , H04L9/3242 , H04L63/08 , H04L63/1466 , H04L63/168 , H04L2209/12 , H04L2209/38
摘要： End-to-end security between clients and a server, and traffic visibility to intermediate network devices, achieved through combined mode, single pass encryption and authentication using two keys is disclosed. In various embodiments, a combined encryption-authentication unit includes a cipher unit and an authentication unit coupled in parallel to the cipher unit, and generates an authentication tag using an authentication key in parallel with the generation of the cipher text using an encryption key, where the authentication and encryption key have different key values. In various embodiments, the cipher unit operates in AES counter mode, and the authentication unit operates in parallel, in AES-GMAC mode Using a two key, single pass combined mode algorithm preserves network performance using a limited number of HW gates, while allowing an intermediate device access to the encryption key for deciphering the data, without providing that device the ability to compromise data integrity, which is preserved between the end to end devices.
摘要翻译：公开了客户机与服务器之间的端到端安全性，以及通过组合模式，单程加密和使用两个密钥的认证实现的对中间网络设备的流量可见性。在各种实施例中，组合加密认证单元包括与密码单元并行耦合的密码单元和认证单元，并且使用加密密钥与密文生成并行地使用认证密钥生成认证标签，其中认证和加密密钥具有不同的密钥值。在各种实施例中，密码单元以AES计数器模式运行，并且认证单元以AES-GMAC模式并行操作。使用双键单通组合模式算法使用有限数量的HW门保留网络性能，同时允许中间设备访问用于解密数据的加密密钥，而不提供该设备损害数据完整性的能力，这在端到端设备之间保留。

3. 发明授权

US08467527B2 Efficient key derivation for end-to-end network security with traffic visibility 有权
标题翻译：针对具有流量可见性的端到端网络安全性的高效密钥导出
公开(公告)号：US08467527B2
公开(公告)日：2013-06-18
申请号：US12327137
申请日：2008-12-03
申请人： Men Long , Jesse Walker , Karanvir Grewal
发明人： Men Long , Jesse Walker , Karanvir Grewal
IPC分类号： H04L9/00 , G06F7/04 , G06F21/00
CPC分类号： H04L9/0866 , H04L9/0631 , H04L63/0428 , H04L63/06 , H04L2209/125
摘要： Both end-to-end security and traffic visibility may be achieved by a system using a controller that derives a cryptographic key that is different for each client based on a derivation key and a client identifier that is conveyed in each data packet. The controller distributes the derivation key to information technology monitoring devices and a server to provide traffic visibility. For large key sizes, the key may be derived using a derivation formula as follows: client_key—MSB=AES128(base_key_1, client_ID), (1) client_key—LSB=AES128(base_key_2, client_ID+pad), and (2) client_key=client_key_MSB∥client_key_LSB, where (1) and (2) are executed in parallel. The client key and a client identifier may be used so that end-to-end security may be achieved.
摘要翻译：端到端安全性和流量可见性可以由使用控制器的系统来实现，所述控制器基于在每个数据分组中传送的导出密钥和客户端标识符来导出每个客户端不同的密码密钥。控制器将派生密钥分发到信息技术监控设备和服务器，以提供流量可视性。对于较大的密钥大小，密钥可以使用以下推导公式导出：client_key-MSB = AES128（base_key_1，client_ID），（1）client_key-LSB = AES128（base_key_2，client_ID + pad）和（2）client_key = client_key_MSB‖client_key_LSB，其中（1）和（2）并行执行。可以使用客户端密钥和客户端标识符，以便可以实现端到端的安全性。

4. 发明申请

US20100135498A1 Efficient Key Derivation for End-To-End Network Security with Traffic Visibility 有权
标题翻译：针对具有流量可见性的端到端网络安全性的高效关键推导
公开(公告)号：US20100135498A1
公开(公告)日：2010-06-03
申请号：US12327137
申请日：2008-12-03
申请人： Men Long , Jesse Walker , Karanvir Grewal
发明人： Men Long , Jesse Walker , Karanvir Grewal
IPC分类号： H04L9/08 , H04L9/00
CPC分类号： H04L9/0866 , H04L9/0631 , H04L63/0428 , H04L63/06 , H04L2209/125
摘要： Both end-to-end security and traffic visibility may be achieved by a system using a controller that derives a cryptographic key that is different for each client based on a derivation key and a client identifier that is conveyed in each data packet. The controller distributes the derivation key to information technology monitoring devices and a server to provide traffic visibility. For large key sizes, the key may be derived using a derivation formula as follows: client_key—MSB=AES128(base_key_1, client_ID), (1) client_key—LSB=AES128(base_key_2, client_ID+pad), and (2) client_key=client_key_MSB∥client_key_LSB, where (1) and (2) are executed in parallel. The client key and a client identifier may be used so that end-to-end security may be achieved.
摘要翻译：端到端安全性和流量可见性可以由使用控制器的系统来实现，所述控制器基于在每个数据分组中传送的导出密钥和客户端标识符来导出每个客户端不同的密码密钥。控制器将派生密钥分发到信息技术监控设备和服务器，以提供流量可视性。对于较大的密钥大小，密钥可以使用以下推导公式导出：client_key-MSB = AES128（base_key_1，client_ID），（1）client_key-LSB = AES128（base_key_2，client_ID + pad）和（2）client_key = client_key_MSB‖client_key_LSB，其中（1）和（2）并行执行。可以使用客户端密钥和客户端标识符，以便可以实现端到端的安全性。

5. 发明申请

US20070239875A1 Method and apparatus for maintaining local area network("LAN") and wireless LAN ("WLAN") security associations 有权
标题翻译：用于维护局域网（“LAN”）和无线局域网（“WLAN”）安全关联的方法和装置
公开(公告)号：US20070239875A1
公开(公告)日：2007-10-11
申请号：US11393018
申请日：2006-03-29
申请人： Kapil Sood , Jesse Walker , Karanvir Grewal
发明人： Kapil Sood , Jesse Walker , Karanvir Grewal
IPC分类号： G06F15/16
CPC分类号： H04L63/20 , H04W52/0254 , H04W52/0258 , H04W84/12 , Y02D70/00 , Y02D70/142 , Y02D70/146
摘要： Cooperating entities share a signaling interface. Each entity establishes a security association between itself and an endpoint, and one of the entities transmits keepalive messages over a channel associated with the security association. Chipsets and systems to implement related methods are also described and claimed.
摘要翻译：合作实体共享信令接口。每个实体在其自身和端点之间建立安全关联，并且其中一个实体通过与安全关联相关联的信道发送保持活动消息。还描述和要求保护用于实现相关方法的芯片组和系统。

6. 发明申请

US20080005791A1 Method and apparatus for supporting a virtual private network architecture on a partitioned platform 有权
标题翻译：用于在分区平台上支持虚拟专用网络架构的方法和装置
公开(公告)号：US20080005791A1
公开(公告)日：2008-01-03
申请号：US11479609
申请日：2006-06-30
申请人： Ajay Gupta , Jeong Yoon , Jesse Walker , Kapil Sood , Karanvir Grewal , Hormuzd M. Khosravi
发明人： Ajay Gupta , Jeong Yoon , Jesse Walker , Kapil Sood , Karanvir Grewal , Hormuzd M. Khosravi
IPC分类号： G06F15/16
CPC分类号： H04L63/0272 , G06F21/562
摘要： A computer system includes a service partition, not directly accessible to a user, having a security agent to inspect data entering and exiting the computer system on a virtual private network (VPN) tunnel, and a service partition VPN unit to communicate with a VPN gateway. The computer system also includes a user partition, accessible to a user, having a user partition VPN unit to initiate construction of the VPN tunnel with the VPN gateway. Other embodiments are described and claimed.
摘要翻译：计算机系统包括不能直接访问用户的服务分区，具有用于检查在虚拟专用网（VPN）隧道上进入和退出计算机系统的数据的安全代理以及与VPN网关通信的服务分区VPN单元。计算机系统还包括用户可访问的用户分区，具有用户分区VPN单元以启动与VPN网关的VPN隧道的构建。描述和要求保护其他实施例。

7. 发明授权

US08281387B2 Method and apparatus for supporting a virtual private network architecture on a partitioned platform 有权
标题翻译：用于在分区平台上支持虚拟专用网络架构的方法和装置
公开(公告)号：US08281387B2
公开(公告)日：2012-10-02
申请号：US11479609
申请日：2006-06-30
申请人： Ajay Gupta , Jeong Yoon , Jesse Walker , Kapil Sood , Karanvir Grewal , Hormuzd M. Khosravi
发明人： Ajay Gupta , Jeong Yoon , Jesse Walker , Kapil Sood , Karanvir Grewal , Hormuzd M. Khosravi
IPC分类号： G06F9/00
CPC分类号： H04L63/0272 , G06F21/562
摘要： A computer system includes a service partition, not directly accessible to a user, having a security agent to inspect data entering and exiting the computer system on a virtual private network (VPN) tunnel, and a service partition VPN unit to communicate with a VPN gateway. The computer system also includes a user partition, accessible to a user, having a user partition VPN unit to initiate construction of the VPN tunnel with the VPN gateway. Other embodiments are described and claimed.
摘要翻译：计算机系统包括不能直接访问用户的服务分区，具有用于检查在虚拟专用网（VPN）隧道上进入和退出计算机系统的数据的安全代理以及与VPN网关通信的服务分区VPN单元。计算机系统还包括用户可访问的用户分区，具有用户分区VPN单元以启动与VPN网关的VPN隧道的构建。描述和要求保护其他实施例。

8. 发明申请

US20140032905A1 EFFICIENT KEY DERIVATION FOR END-TO-END NETWORK SECURITY WITH TRAFFIC VISIBILITY 有权
标题翻译：有效交付可视性的端到端网络安全的有效关键
公开(公告)号：US20140032905A1
公开(公告)日：2014-01-30
申请号：US13916027
申请日：2013-06-12
申请人： Men Long , Jesse Walker , Karanvir S. Grewal
发明人： Men Long , Jesse Walker , Karanvir S. Grewal
IPC分类号： H04L29/06
CPC分类号： H04L9/0866 , H04L9/0631 , H04L63/0428 , H04L63/06 , H04L2209/125
摘要： Both end-to-end security and traffic visibility may be achieved by a system using a controller that derives a cryptographic key that is different for each client based on a derivation key and a client identifier that is conveyed in each data packet. The controller distributes the derivation key to information technology monitoring devices and a server to provide traffic visibility. For large key sizes, the key may be derived using a derivation formula as follows: client_key_MSB=AES128(base_key_1,client_ID), (1) client_key_LSB=AES128(base_key_2,client_ID+pad),and (2) client_key=client_key_MSB∥client_key_LSB, where (1) and (2) are executed in parallel. The client key and a client identifier may be used so that end-to-end security may be achieved.
摘要翻译：端到端安全性和流量可见性可以由使用控制器的系统来实现，所述控制器基于在每个数据分组中传送的导出密钥和客户端标识符来导出每个客户端不同的密码密钥。控制器将派生密钥分发到信息技术监控设备和服务器，以提供流量可视性。对于较大的密钥大小，可以使用如下的推导公式来导出密钥：client_key_MSB = AES128（base_key_1，client_ID），（1）client_key_LSB = AES128（base_key_2，client_ID + pad）和（2）client_key =client_key_MSB‖client_key_LSB，其中（1）和（2）并行执行。可以使用客户端密钥和客户端标识符，以便可以实现端到端的安全性。

9. 发明授权

US09246679B2 Apparatus and method for negotiating pairwise master key for securing peer links in wireless mesh networks 有权
标题翻译：用于协商成对主密钥以用于保护无线网状网络中的对等链路的装置和方法
公开(公告)号：US09246679B2
公开(公告)日：2016-01-26
申请号：US11966776
申请日：2007-12-28
申请人： Meiyuan Zhao , Jesse Walker
发明人： Meiyuan Zhao , Jesse Walker
IPC分类号： H04L9/32 , G06G7/48 , C12P5/02 , H04L9/08 , H04W12/04 , H04B5/00 , H04L29/06 , H04W12/06 , H04W84/18
CPC分类号： H04L9/0844 , H04B5/0031 , H04L9/0838 , H04L63/162 , H04L2209/80 , H04W12/04 , H04W12/06 , H04W84/18
摘要： A system and method for negotiating a pairwise master key (“PMK”) in wireless mesh networks. The system includes a plurality of mesh points that are configured to perform an abbreviated handshake protocol in negotiating a PMK and establishing a secure connection. The method for establishing a negotiated PMK is based on selecting a PMK before transmitting any data, and arranging available PMKs in a predetermined list so that a PMK can be negotiated in a limited number of exchanges.
摘要翻译：一种在无线网状网络中协商成对主密钥（“PMK”）的系统和方法。该系统包括多个网点，其被配置为在协商PMK并建立安全连接时执行缩写握手协议。用于建立协商的PMK的方法是基于在发送任何数据之前选择PMK，并且将可用的PMK布置在预定列表中，使得可以在有限数量的交换中协商PMK。

10. 发明授权

US09003236B2 System and method for correct execution of software based on baseline and real time information 有权
标题翻译：基于基线和实时信息正确执行软件的系统和方法
公开(公告)号：US09003236B2
公开(公告)日：2015-04-07
申请号：US13631317
申请日：2012-09-28
申请人： David W. Grawrock , Jesse Walker , Yuriy Bulygin , Kirk D. Brannock , Matthew L. King
发明人： David W. Grawrock , Jesse Walker , Yuriy Bulygin , Kirk D. Brannock , Matthew L. King
IPC分类号： G06F11/00 , G06F11/34
CPC分类号： G06F11/3636 , G06F11/1479 , G06F11/3466 , G06F11/3616 , G06F2201/86 , G06F2201/865 , G06F2201/88
摘要： In an embodiment of the invention an application provider may include “tracing elements” in a target software application. While working with the application the trace elements are detected and provide a “baseline trace” indicating proper application execution. The provider then supplies the application, which still includes the trace elements, and the baseline trace to a user. The user operates the application to produce a “real-time trace” based on the application still having trace elements that produce trace events. A comparator then compares the baseline and real-time traces. If the traces are within a pre-determined range of each other the user has a level of assurance the software is operating correctly. If the level of assurance is low, an embodiment may trigger a hardware interrupt or similar event to prevent further execution of software. Other embodiments are described herein.
摘要翻译：在本发明的实施例中，应用提供者可以在目标软件应用中包括“跟踪元素”。在处理应用程序时，将检测到跟踪元素，并提供一个“基线跟踪”，指示正确的应用程序执行。然后，提供商将仍然包含跟踪元素的应用程序和基准跟踪提供给用户。用户根据仍然具有产生跟踪事件的微量元素的应用来操作应用以产生“实时跟踪”。比较器然后比较基线和实时迹线。如果迹线在彼此的预定范围内，则用户具有软件正确操作的保证级别。如果保证级别低，则实施例可以触发硬件中断或类似事件以防止进一步执行软件。本文描述了其它实施例。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式