专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20060161966A1 Method and system for securing a remote file system 失效
标题翻译：用于保护远程文件系统的方法和系统
公开(公告)号：US20060161966A1
公开(公告)日：2006-07-20
申请号：US11039654
申请日：2005-01-19
申请人： Narasimha Rao Nagampalli , Sachin Sheth , Shirish Koti , Yun Lin
发明人： Narasimha Rao Nagampalli , Sachin Sheth , Shirish Koti , Yun Lin
IPC分类号： H04L9/00
CPC分类号： H04L63/1408 , G06F21/6218 , H04L63/0227
摘要： A method and system for controlling access to files in a remote file system is provided. In one embodiment, a firewall system at a client computer system intercepts requests originating from the client computer system and sent to the remote file system for accessing remote files, that is, files stored on a server computer system. Upon intercepting a remote file access request (e.g., to open a remote file), the firewall system determines whether the file access request should be allowed based on access control criteria.
摘要翻译：提供了用于控制对远程文件系统中的文件的访问的方法和系统。在一个实施例中，客户端计算机系统上的防火墙系统拦截源自客户端计算机系统的请求，并发送到远程文件系统以访问远程文件，即存储在服务器计算机系统上的文件。在拦截远程文件访问请求（例如，打开远程文件）时，防火墙系统基于访问控制标准确定是否应该允许文件访问请求。

2. 发明授权

US07966643B2 Method and system for securing a remote file system 失效
标题翻译：用于保护远程文件系统的方法和系统
公开(公告)号：US07966643B2
公开(公告)日：2011-06-21
申请号：US11039654
申请日：2005-01-19
申请人： Narasimha Rao Nagampalli , Sachin C. Sheth , Shirish Koti , Yun Lin
发明人： Narasimha Rao Nagampalli , Sachin C. Sheth , Shirish Koti , Yun Lin
IPC分类号： G06F17/00 , H04L29/06
CPC分类号： H04L63/1408 , G06F21/6218 , H04L63/0227
摘要： A method and system for controlling access to files in a remote file system is provided. In one embodiment, a firewall system at a client computer system intercepts requests originating from the client computer system and sent to the remote file system for accessing remote files, that is, files stored on a server computer system. Upon intercepting a remote file access request (e.g., to open a remote file), the firewall system determines whether the file access request should be allowed based on access control criteria.
摘要翻译：提供了用于控制对远程文件系统中的文件的访问的方法和系统。在一个实施例中，客户端计算机系统上的防火墙系统拦截源自客户端计算机系统的请求，并发送到远程文件系统以访问远程文件，即存储在服务器计算机系统上的文件。在拦截远程文件访问请求（例如，打开远程文件）时，防火墙系统基于访问控制标准确定是否应该允许文件访问请求。

3. 发明申请

US20060129808A1 Method and system for distributing security policies 有权
公开(公告)号：US20060129808A1
公开(公告)日：2006-06-15
申请号：US10993688
申请日：2004-11-19
申请人： Shirish Koti , Narasimha Nagampalli , Maxim Ivanov , Sachin Sheth , Emanuel Paleologu , Yun Lin , Eric Youngblut
发明人： Shirish Koti , Narasimha Nagampalli , Maxim Ivanov , Sachin Sheth , Emanuel Paleologu , Yun Lin , Eric Youngblut
IPC分类号： H04L9/00
CPC分类号： H04L63/0218 , H04L63/0263 , H04L63/20
摘要： A method and system for distributing and enforcing security policies is provided. A firewall agent executing at a host computer system that is to be protected receives security policies for the enforcement engines responsible for enforcing the security policies on the host computer system. A security policy has rules that each provide a condition and action to be performed when the condition is satisfied. A rule also has a rule type that is used by the distribution system to identify the security components that are responsible for enforcing the rules. To distribute the security policies that have been received at a host computer system, the firewall agent identifies to which enforcement engine a rule applies based in part on rule type. The firewall agent then distributes the rule to the identified enforcement engine, which then enforces the rule.

4. 发明申请

US20060161981A1 Method and system for intercepting, analyzing, and modifying interactions between a transport client and a transport provider 有权
公开(公告)号：US20060161981A1
公开(公告)日：2006-07-20
申请号：US11040164
申请日：2005-01-19
申请人： Sachin Sheth , Shirish Koti , Vadim Eydelman , Nelamangala Srinivas
发明人： Sachin Sheth , Shirish Koti , Vadim Eydelman , Nelamangala Srinivas
IPC分类号： G06F12/14
CPC分类号： G06F9/4486 , G06F2209/542
摘要： A method and system for intercepting communications between a transport client and a transport provider is provided. An interceptor system registers to intercept calls made by the transport client to functions of the transport provider. The interceptor system also replaces callbacks of the transport client so that calls from the transport provider intended for the transport client can be intercepted. When the interceptor system intercepts the call, it provides an indication of the call to a processing component. The processing component may analyze the call and determine whether the call should be allowed or denied. The interceptor system then proceeds to process the call in accordance with the indication of the processing component.

5. 发明授权

US07831826B2 Method and system for distributing security policies 有权
标题翻译：分发安全策略的方法和系统
公开(公告)号：US07831826B2
公开(公告)日：2010-11-09
申请号：US12402448
申请日：2009-03-11
申请人： Shirish Koti , Narasimha Rao S. S. Nagampalli , Maxim Alexandrovich Ivanov , Sachin C. Sheth , Emanuel Paleologu , Yun Lin , Eric Erwin Youngblut
发明人： Shirish Koti , Narasimha Rao S. S. Nagampalli , Maxim Alexandrovich Ivanov , Sachin C. Sheth , Emanuel Paleologu , Yun Lin , Eric Erwin Youngblut
IPC分类号： G06F9/00 , H04L9/00
CPC分类号： H04L63/0218 , H04L63/0263 , H04L63/20
摘要： A method and system for distributing and enforcing security policies is provided. A firewall agent executing at a host computer system that is to be protected receives security policies for the enforcement engines responsible for enforcing the security policies on the host computer system. A security policy has rules that each provide a condition and action to be performed when the condition is satisfied. A rule also has a rule type that is used by the distribution system to identify the security components that are responsible for enforcing the rules. To distribute the security policies that have been received at a host computer system, the firewall agent identifies to which enforcement engine a rule applies based in part on rule type. The firewall agent then distributes the rule to the identified enforcement engine, which then enforces the rule.
摘要翻译：提供了分发和执行安全策略的方法和系统。在要被保护的主机计算机系统上执行的防火墙代理接收负责执行主机计算机系统上的安全策略的执行引擎的安全策略。安全策略具有规则，每个条件在条件满足时提供要执行的条件和操作。规则还具有由分发系统用于识别负责执行规则的安全组件的规则类型。为了分发在主机计算机系统上接收到的安全策略，防火墙代理将部分基于规则类型标识适用于哪个执行引擎。防火墙代理然后将规则分发到所识别的强制引擎，然后执行该规则。

6. 发明授权

US07509493B2 Method and system for distributing security policies 有权
标题翻译：分发安全策略的方法和系统
公开(公告)号：US07509493B2
公开(公告)日：2009-03-24
申请号：US10993688
申请日：2004-11-19
申请人： Shirish Koti , Narasimha Rao S. S. Nagampalli , Maxim Alexandrovich Ivanov , Sachin C. Sheth , Emanuel Paleologu , Yun Lin , Eric Erwin Youngblut
发明人： Shirish Koti , Narasimha Rao S. S. Nagampalli , Maxim Alexandrovich Ivanov , Sachin C. Sheth , Emanuel Paleologu , Yun Lin , Eric Erwin Youngblut
IPC分类号： G06F9/00 , H04L9/00
CPC分类号： H04L63/0218 , H04L63/0263 , H04L63/20
摘要： A method and system for distributing and enforcing security policies is provided. A firewall agent executing at a host computer system that is to be protected receives security policies for the enforcement engines responsible for enforcing the security policies on the host computer system. A security policy has rules that each provide a condition and action to be performed when the condition is satisfied. A rule also has a rule type that is used by the distribution system to identify the security components that are responsible for enforcing the rules. To distribute the security policies that have been received at a host computer system, the firewall agent identifies to which enforcement engine a rule applies based in part on rule type. The firewall agent then distributes the rule to the identified enforcement engine, which then enforces the rule.
摘要翻译：提供了分发和执行安全策略的方法和系统。在要被保护的主机计算机系统上执行的防火墙代理接收负责执行主机系统上的安全策略的执行引擎的安全策略。安全策略具有规则，每个条件在条件满足时提供要执行的条件和操作。规则还具有由分发系统用于识别负责执行规则的安全组件的规则类型。为了分发在主机计算机系统上接收到的安全策略，防火墙代理将部分基于规则类型标识适用于哪个执行引擎。防火墙代理然后将规则分发到所识别的强制引擎，然后执行该规则。

7. 发明授权

US07536542B2 Method and system for intercepting, analyzing, and modifying interactions between a transport client and a transport provider 有权
标题翻译：用于拦截，分析和修改运输客户端和运输提供商之间的交互的方法和系统
公开(公告)号：US07536542B2
公开(公告)日：2009-05-19
申请号：US11040164
申请日：2005-01-19
申请人： Sachin C. Sheth , Shirish Koti , Vadim Eydelman , Nelamangala Krishnaswamy Srinivas
发明人： Sachin C. Sheth , Shirish Koti , Vadim Eydelman , Nelamangala Krishnaswamy Srinivas
IPC分类号： H04L9/00
CPC分类号： G06F9/4486 , G06F2209/542
摘要： A method and system for intercepting communications between a transport client and a transport provider is provided. An interceptor system registers to intercept calls made by the transport client to functions of the transport provider. The interceptor system also replaces callbacks of the transport client so that calls from the transport provider intended for the transport client can be intercepted. When the interceptor system intercepts the call, it provides an indication of the call to a processing component. The processing component may analyze the call and determine whether the call should be allowed or denied. The interceptor system then proceeds to process the call in accordance with the indication of the processing component.
摘要翻译：提供了一种用于拦截传输客户端和传输提供者之间的通信的方法和系统。拦截器系统注册以拦截由传输客户端对传输提供者的功能所做的呼叫。拦截器系统还替换传输客户端的回调，以便可以拦截来自传输提供者的用于传输客户端的呼叫。当拦截器系统拦截呼叫时，它提供对处理组件的呼叫的指示。处理组件可以分析呼叫并确定呼叫是否应被允许或被拒绝。拦截器系统然后根据处理组件的指示继续处理呼叫。

8. 发明授权

US08224898B2 Relevance-based expiration of data 有权
标题翻译：相关性的数据到期
公开(公告)号：US08224898B2
公开(公告)日：2012-07-17
申请号：US11956481
申请日：2007-12-14
申请人： Ashutosh Tripathi , Jonathan Shriver-Blake , Amit Kripalani , Dharmanand Singh , Rohit Gupta , Shirish Koti
发明人： Ashutosh Tripathi , Jonathan Shriver-Blake , Amit Kripalani , Dharmanand Singh , Rohit Gupta , Shirish Koti
IPC分类号： G06F17/00
CPC分类号： G06F17/30011
摘要： Technologies are described herein for relevance-based expiration of data. An initial expiration time for the data is computed based upon an expiration duration associated with the data. The expiration time for the data is periodically re-computed in order to extend the expiration time. A relevance value for the meeting data is computed and the expiration time is set as a function of the computed relevance value. The relevance value may be computed as a product of a user-settable relevance value for the meeting data and a dynamic relevance point for the meeting data. When the computed expiration time for meeting data has been reached, the meeting data is expired, such as through the deletion of the meeting data.
摘要翻译：本文描述了基于相关性的数据到期的技术。基于与数据相关联的到期持续时间来计算数据的初始到期时间。定期重新计算数据的到期时间，以延长到期时间。计算会议数据的相关性值，并将过期时间设置为所计算的相关性值的函数。可以将相关性值计算为会议数据的用户可设置相关性值和会议数据的动态相关性点的乘积。当达到计算的会议数据的到期时间时，会议数据已过期，例如通过删除会议数据。

9. 发明申请

US20050147045A1 Method and system for dynamically adjusting transmit and receive parameters for handling negative acknowledgments in reliable multicast 有权
标题翻译：用于动态调整发送和接收参数以处理可靠组播中的否定确认的方法和系统
公开(公告)号：US20050147045A1
公开(公告)日：2005-07-07
申请号：US11072023
申请日：2005-03-04
申请人： Mohammad Alam , Pradeep Bahl , Shirish Koti
发明人： Mohammad Alam , Pradeep Bahl , Shirish Koti
IPC分类号： H04L1/00 , H04L1/18 , H04L12/26
CPC分类号： H04L1/187 , H04L1/1848 , H04L1/1887 , H04L2001/0093
摘要： A method and system for multicast network transmissions dynamically sets response time parameters for handling negative acknowledgments (NAKs). When the sender receives a NAK for a lost packet, it returns an NAK confirmation (NCF), waits for a back-off time before sending requested repair data, and then waits for a “linger time” during which the sender does not respond to other NAKs for the same lost packet. The back-off time and the linger time are dynamically set according to the position of the requested sequence number in the sender's transmit window such that the back-off time is shorter when the requested data is closer to being flushed out of the transmit window. After receiving the NCF, the receiver waits for a timeout period and resends the NAK if no repair data is received. The timeout period for data receipt is dynamically set according to a statistical average time for receiving repair data from the sender and the estimated sender's transmit window size.
摘要翻译：组播网络传输的方法和系统动态地设置用于处理否定确认（NAK）的响应时间参数。当发送方收到丢失数据包的NAK时，返回NAK确认（NCF），在发送请求的修复数据之前等待退避时间，然后等待发送方不响应的“停留时间” 同一丢失数据包的其他NAK。根据发送者发送窗口中所请求的序列号的位置动态地设置退避时间和逗留时间，使得当所请求的数据更接近被从发送窗口冲出时，退避时间较短。接收到NCF后，如果没有接收到修复数据，则接收机等待超时时间并重新发送NAK。根据用于从发送方接收修复数据的统计平均时间和估计的发送者的发送窗口大小，动态地设置数据收据的超时时间。

10. 发明申请

US20060005227A1 Languages for expressing security policies 审中-公开
标题翻译：表达安全策略的语言
公开(公告)号：US20060005227A1
公开(公告)日：2006-01-05
申请号：US10882438
申请日：2004-07-01
申请人： Anders Samuelsson , Thomas Fakes , Arindam Chatterjee , Art Shelest , Mark Vayman , Rajesh Dadhia , Saveen Reddy , Shirish Koti , Steven Townsend
发明人： Anders Samuelsson , Thomas Fakes , Arindam Chatterjee , Art Shelest , Mark Vayman , Rajesh Dadhia , Saveen Reddy , Shirish Koti , Steven Townsend
IPC分类号： G06F17/00
CPC分类号： G06F21/6218
摘要： Languages for expressing security policies are provided. The languages comprise rules that specify conditions and actions. The rules may be enforced by a security engine when a security enforcement event occurs. The languages support data separation, dynamic evaluation, and ordered rule scope. By separating data from logic, security engines may only need to be updated with a portion of rules that change. With dynamic evaluation, expressions of rules may be evaluated dynamically, such as by querying a database, when a security engine enforces a rule. With ordered rule scope, when a security enforcement event implicates a number of rules simultaneously, the rules may be enforced in a deterministic and logically organized manner.
摘要翻译：提供表达安全策略的语言。语言包括指定条件和操作的规则。当安全执行事件发生时，规则可能由安全引擎执行。语言支持数据分离，动态评估和有序规则范围。通过将数据与逻辑分离，安全引擎可能只需要更改一部分更改的规则。通过动态评估，可以动态地评估规则表达式，例如通过查询数据库，安全引擎执行规则时。使用有序规则范围，当安全执行事件同时涉及多个规则时，可以以确定性和逻辑上有组织的方式强制执行规则。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式