专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20070294699A1 CONDITIONALLY RESERVING RESOURCES IN AN OPERATING SYSTEM 审中-公开
标题翻译：在运行系统中有条件地保留资源
公开(公告)号：US20070294699A1
公开(公告)日：2007-12-20
申请号：US11424681
申请日：2006-06-16
申请人： Pradeep Bahl , Narasimha Rao S. S. Nagampalli , Ramesh Chinta
发明人： Pradeep Bahl , Narasimha Rao S. S. Nagampalli , Ramesh Chinta
IPC分类号： G06F9/46
CPC分类号： G06F9/5027 , G06F21/52 , G06F21/62 , G06F2209/5014
摘要： A facility is provided for conditionally reserving resources in an operating system. In various embodiments, the facility receives an indication of a conditional reservation declarator that identifies at least a resource, an action, a condition, and a principal. The conditional reservation declarator can specify a directive that corresponds to the identified resource, action, condition, and principal. The facility configures itself to apply the specified directive in relation to the identified action and resource when the principal attempts to perform the identified action in relation to the identified resource and the condition is met. The facility can apply the specified directive when it determines that the principal is attempting to perform the identified action on the identified resource when the condition is met.
摘要翻译：提供了一种在操作系统中有条件地保留资源的设施。在各种实施例中，设施接收标识至少资源，动作，条件和委托人的条件保留声明符的指示。条件保留声明符可以指定与所标识的资源，动作，条件和主体相对应的指令。当主体尝试执行与识别的资源相关的已识别动作并满足条件时，该工具将自身配置为应用与所识别的动作和资源有关的指定指令。当该条件确定主体正在尝试在满足条件时对所标识的资源执行已识别的操作时，该工具可以应用指定的指令。

2. 发明授权

US07603708B2 Securing network services using network action control lists 有权
标题翻译：使用网络动作控制列表保护网络服务
公开(公告)号：US07603708B2
公开(公告)日：2009-10-13
申请号：US11181376
申请日：2005-07-13
申请人： Pradeep Bahl , Ramesh Chinta , Narasimha Rao S. S. Nagampalli , Scott A Field
发明人： Pradeep Bahl , Ramesh Chinta , Narasimha Rao S. S. Nagampalli , Scott A Field
IPC分类号： G06F11/00 , G06F12/14 , G06F12/16 , G08B23/00
CPC分类号： H04L63/1441 , H04L63/101
摘要： A computer system having secured network services is presented. The computer system comprises a processor, a memory, and a network action processing module. The network action processing module processes network actions from one or more network services executing on the computer system. The computer system is further configured to execute at least network service performing network actions in conjunction with the network action processing module. Upon receiving a network action from a network service, the network action processing module determines whether the network action is a valid network action according to a network action control list. If the network action is determined to not be a valid network action, the network action is blocked. Alternatively, if the network action is determined to be a valid network action, the network action is permitted to be completed.
摘要翻译：提出了一种具有安全网络服务的计算机系统。计算机系统包括处理器，存储器和网络动作处理模块。网络动作处理模块处理来自在计算机系统上执行的一个或多个网络服务的网络动作。该计算机系统进一步被配置为至少执行网络服务，与网络动作处理模块一起执行网络动作。网络动作处理模块从网络服务接收到网络动作后，根据网络动作控制列表判断网络动作是否为有效的网络动作。如果网络动作被确定为不是有效的网络动作，则网络动作被阻止。或者，如果网络动作被确定为有效的网络动作，则允许网络动作被完成。

3. 发明授权

US07979865B2 Identifying separate threads executing within a single process 有权
标题翻译：识别单个进程中执行的单独线程
公开(公告)号：US07979865B2
公开(公告)日：2011-07-12
申请号：US11266506
申请日：2005-11-03
申请人： Narasimha Rao S. S. Nagampalli , Pradeep Bahl , Ramesh Chinta
发明人： Narasimha Rao S. S. Nagampalli , Pradeep Bahl , Ramesh Chinta
IPC分类号： G06F9/46
CPC分类号： G06F9/4843 , G06F9/5027 , G06F2209/5018
摘要： A computer-readable medium bearing computer-executable instructions which, when executed on a computer, carry out a method for handling a request for an operating system service is presented. The method comprises receiving a request for execution of an operating system service. The corresponding operating system service is then identified. A unique service identifier that corresponds to the requested operating system service is obtained. A service thread is generated, the thread being associated with an executing process. Storage associated with the service thread is initialized with the unique service identifier. Thereafter, the execution of the service thread is initiated.
摘要翻译：一种具有计算机可执行指令的计算机可读介质，其在计算机上执行时执行用于处理对操作系统服务的请求的方法。该方法包括接收执行操作系统服务的请求。然后识别相应的操作系统服务。获得与所请求的操作系统服务相对应的唯一服务标识符。生成服务线程，线程与执行进程相关联。与服务线程相关联的存储将使用唯一的服务标识符初始化。此后，启动服务线程的执行。

4. 发明授权

US09191397B2 Extension model for improved parsing and describing protocols 有权
标题翻译：扩展模型，用于改进解析和描述协议
公开(公告)号：US09191397B2
公开(公告)日：2015-11-17
申请号：US12147895
申请日：2008-06-27
申请人： Ramesh Chinta , Crystal Li , Vladimir Lifliand , Narasimha Rao S. S. Nagampalli
发明人： Ramesh Chinta , Crystal Li , Vladimir Lifliand , Narasimha Rao S. S. Nagampalli
IPC分类号： G06F15/173 , H04L29/06 , H04L12/26
CPC分类号： H04L63/1408 , H04L43/18 , H04L69/03
摘要： Described is a technology by which an engine parses data based upon modules arranged in a tree-like model structure. Only those modules that meet a condition with respect to the data are invoked for processing the data. Each child module specifies a parent module and specifies a condition for when the parent is to invoke the child module. As a module processes the data, if a child module's specified condition is met, it invokes the corresponding child module, (which in turn may invoke a lower child if its condition is met, and so on). When the data corresponds to protocols, the model facilitates protocol layering. A top level parent may represent one protocol (e.g., TCP), a child beneath may represent a lower-layer protocol (e.g., HTTP), whose children may handle certain types of HTTP commands, or correspond to a signature that the child module is programmed to detect.
摘要翻译：描述了一种基于布置在树状模型结构中的模块来分析数据的技术。仅调用满足数据条件的模块才能处理数据。每个子模块指定一个父模块，并指定父级何时调用子模块的条件。作为一个模块处理数据，如果满足子模块的指定条件，它将调用相应的子模块（如果满足其条件，则该模块又可以调用下一个子级别，等等）。当数据对应于协议时，该模型便于协议分层。顶级父级可以表示一个协议（例如，TCP），下面的小孩可以表示较低层协议（例如，HTTP），其小孩可以处理某些类型的HTTP命令，或对应于子模块所在的签名编程检测。

5. 发明申请

US20090327993A1 Extension Model for Improved Parsing and Describing Protocols 有权
标题翻译：改进解析和描述协议的扩展模型
公开(公告)号：US20090327993A1
公开(公告)日：2009-12-31
申请号：US12147895
申请日：2008-06-27
申请人： Ramesh Chinta , Jason Li , Vladimir Lifliand , Narasimha Rao S. S. Nagampalli
发明人： Ramesh Chinta , Jason Li , Vladimir Lifliand , Narasimha Rao S. S. Nagampalli
IPC分类号： G06F9/44 , G06N5/02
CPC分类号： H04L63/1408 , H04L43/18 , H04L69/03
摘要： Described is a technology by which an engine parses data based upon modules arranged in a tree-like model structure. Only those modules that meet a condition with respect to the data are invoked for processing the data. Each child module specifies a parent module and specifies a condition for when the parent is to invoke the child module. As a module processes the data, if a child module's specified condition is met, it invokes the corresponding child module, (which in turn may invoke a lower child if its condition is met, and so on). When the data corresponds to protocols, the model facilitates protocol layering. A top level parent may represent one protocol (e.g., TCP), a child beneath may represent a lower-layer protocol (e.g., HTTP), whose children may handle certain types of HTTP commands, or correspond to a signature that the child module is programmed to detect.
摘要翻译：描述了一种基于布置在树状模型结构中的模块来分析数据的技术。仅调用满足数据条件的模块才能处理数据。每个子模块指定一个父模块，并指定父级何时调用子模块的条件。作为一个模块处理数据，如果满足子模块的指定条件，它将调用相应的子模块（如果满足其条件，则该模块又可以调用下一个子级别，等等）。当数据对应于协议时，该模型便于协议分层。顶级父级可以表示一个协议（例如，TCP），下面的小孩可以表示较低层协议（例如，HTTP），其小孩可以处理某些类型的HTTP命令，或对应于子模块所在的签名编程检测。

6. 发明授权

US07831826B2 Method and system for distributing security policies 有权
标题翻译：分发安全策略的方法和系统
公开(公告)号：US07831826B2
公开(公告)日：2010-11-09
申请号：US12402448
申请日：2009-03-11
申请人： Shirish Koti , Narasimha Rao S. S. Nagampalli , Maxim Alexandrovich Ivanov , Sachin C. Sheth , Emanuel Paleologu , Yun Lin , Eric Erwin Youngblut
发明人： Shirish Koti , Narasimha Rao S. S. Nagampalli , Maxim Alexandrovich Ivanov , Sachin C. Sheth , Emanuel Paleologu , Yun Lin , Eric Erwin Youngblut
IPC分类号： G06F9/00 , H04L9/00
CPC分类号： H04L63/0218 , H04L63/0263 , H04L63/20
摘要： A method and system for distributing and enforcing security policies is provided. A firewall agent executing at a host computer system that is to be protected receives security policies for the enforcement engines responsible for enforcing the security policies on the host computer system. A security policy has rules that each provide a condition and action to be performed when the condition is satisfied. A rule also has a rule type that is used by the distribution system to identify the security components that are responsible for enforcing the rules. To distribute the security policies that have been received at a host computer system, the firewall agent identifies to which enforcement engine a rule applies based in part on rule type. The firewall agent then distributes the rule to the identified enforcement engine, which then enforces the rule.
摘要翻译：提供了分发和执行安全策略的方法和系统。在要被保护的主机计算机系统上执行的防火墙代理接收负责执行主机计算机系统上的安全策略的执行引擎的安全策略。安全策略具有规则，每个条件在条件满足时提供要执行的条件和操作。规则还具有由分发系统用于识别负责执行规则的安全组件的规则类型。为了分发在主机计算机系统上接收到的安全策略，防火墙代理将部分基于规则类型标识适用于哪个执行引擎。防火墙代理然后将规则分发到所识别的强制引擎，然后执行该规则。

7. 发明授权

US07509493B2 Method and system for distributing security policies 有权
标题翻译：分发安全策略的方法和系统
公开(公告)号：US07509493B2
公开(公告)日：2009-03-24
申请号：US10993688
申请日：2004-11-19
申请人： Shirish Koti , Narasimha Rao S. S. Nagampalli , Maxim Alexandrovich Ivanov , Sachin C. Sheth , Emanuel Paleologu , Yun Lin , Eric Erwin Youngblut
发明人： Shirish Koti , Narasimha Rao S. S. Nagampalli , Maxim Alexandrovich Ivanov , Sachin C. Sheth , Emanuel Paleologu , Yun Lin , Eric Erwin Youngblut
IPC分类号： G06F9/00 , H04L9/00
CPC分类号： H04L63/0218 , H04L63/0263 , H04L63/20
摘要： A method and system for distributing and enforcing security policies is provided. A firewall agent executing at a host computer system that is to be protected receives security policies for the enforcement engines responsible for enforcing the security policies on the host computer system. A security policy has rules that each provide a condition and action to be performed when the condition is satisfied. A rule also has a rule type that is used by the distribution system to identify the security components that are responsible for enforcing the rules. To distribute the security policies that have been received at a host computer system, the firewall agent identifies to which enforcement engine a rule applies based in part on rule type. The firewall agent then distributes the rule to the identified enforcement engine, which then enforces the rule.
摘要翻译：提供了分发和执行安全策略的方法和系统。在要被保护的主机计算机系统上执行的防火墙代理接收负责执行主机系统上的安全策略的执行引擎的安全策略。安全策略具有规则，每个条件在条件满足时提供要执行的条件和操作。规则还具有由分发系统用于识别负责执行规则的安全组件的规则类型。为了分发在主机计算机系统上接收到的安全策略，防火墙代理将部分基于规则类型标识适用于哪个执行引擎。防火墙代理然后将规则分发到所识别的强制引擎，然后执行该规则。

8. 发明授权

US08281013B2 Non-disruptive, reliable live migration of virtual machines with network data reception directly into virtual machines' memory 有权
标题翻译：虚拟机无间断可靠的实时迁移，网络数据接收直接进入虚拟机内存
公开(公告)号：US08281013B2
公开(公告)日：2012-10-02
申请号：US13194402
申请日：2011-07-29
申请人： Sambhrama Madhusudhan Mundkur , Alireza Dabagh , Dustin Lyle Green , Narasimha Rao S. S. Nagampalli
发明人： Sambhrama Madhusudhan Mundkur , Alireza Dabagh , Dustin Lyle Green , Narasimha Rao S. S. Nagampalli
IPC分类号： G06F9/455
CPC分类号： G06F13/4022
摘要： Techniques are disclosed for the non-disruptive and reliable live migration of a virtual machine (VM) from a source host to a target host, where network data is placed directly into the VM's memory. When a live migration begins, a network interface card (NIC) of the source stops placing newly received packets into the VM's memory. A virtual server driver (VSP) on the source stores the packets being processed and forces a return of the memory where the packets are stored to the NIC. When the VM has been migrated to the target, and the source VSP has transferred the stored packets to the target host, the VM resumes processing the packets, and when the VM sends messages to the target NIC that the memory associated with a processed packet is free, a VSP on the target intercepts that message, blocking the target NIC from receiving it.
摘要翻译：公开了技术，用于将虚拟机（VM）从源主机到目标主机的非中断和可靠的实时迁移，其中网络数据被直接放置到VM的存储器中。当实时迁移开始时，源的网络接口卡（NIC）会将新接收的数据包放入虚拟机的内存中。源上的虚拟服务器驱动程序（VSP）存储正在处理的数据包，并强制将存储在数据包中的内存返回给NIC。当VM已经迁移到目标，并且源VSP已经将存储的分组传送到目标主机时，VM恢复处理分组，并且当VM向目标NIC发送消息时，与处理的分组相关联的存储器是免费，目标上的VSP拦截该消息，阻止目标NIC接收它。

9. 发明授权

US07783803B2 Pairing service technologies 有权
标题翻译：配对服务技术
公开(公告)号：US07783803B2
公开(公告)日：2010-08-24
申请号：US12264130
申请日：2008-11-03
申请人： David J. Roth , Daniel J. Driscoll , Huseyin G. Gok , Douglas Brubacher , Daniel L. Conti , Yatharth Gupta , David A. Roberts , Narasimha Rao S. S. Nagampalli , Jeffrey T. Smith , Ashraf M. Hamad
发明人： David J. Roth , Daniel J. Driscoll , Huseyin G. Gok , Douglas Brubacher , Daniel L. Conti , Yatharth Gupta , David A. Roberts , Narasimha Rao S. S. Nagampalli , Jeffrey T. Smith , Ashraf M. Hamad
IPC分类号： G06F13/42 , G06F15/16
CPC分类号： G06F9/4413 , H04W4/20 , H04W4/21
摘要： Pairing service technologies is described. In embodiment(s), peripheral devices can be discovered, such as by a computer device, and a peripheral device can be configured with multiple services that each correspond to one or more data communication protocols. The multiple services of the peripheral device can be determined, and a pairing sequence can be prioritized for the multiple services. The data communication protocol(s) can then be paired according to the pairing sequence to configure the multiple services of the peripheral device.
摘要翻译：描述配对服务技术。在实施例中，可以例如通过计算机设备来发现外围设备，并且外围设备可以配置有多个服务，每个服务对应于一个或多个数据通信协议。可以确定外围设备的多个服务，并且可以为多个服务优先配对配对顺序。然后可以根据配对顺序将数据通信协议配对，以配置外围设备的多个业务。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式