专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08931073B2 Firewall access control with border gateway protocol attributes 有权
标题翻译：具有边界网关协议属性的防火墙访问控制
公开(公告)号：US08931073B2
公开(公告)日：2015-01-06
申请号：US13237678
申请日：2011-09-20
申请人： Shan Huang , Michael S. Kelsen , Ron da Silva
发明人： Shan Huang , Michael S. Kelsen , Ron da Silva
IPC分类号： H04L29/06 , H04L12/56 , H04L12/715
CPC分类号： H04L45/04 , H04L63/0227 , H04L63/0236
摘要： Packets are routed from at least one internet protocol (IP) address in accordance with border gateway protocol (BGP); while carrying out the routing in accordance with the border gateway protocol (BGP), at least one border gateway protocol (BGP) attribute associated with the at least one internet protocol (IP) address is noted. A firewall policy is applied to the packets from the at least one internet protocol (IP) address based on the at least one border gateway protocol (BGP) attribute associated with the at least one internet protocol (IP) address. Techniques may be implemented, for example, on a router or on a separate firewall device coupled to a router.
摘要翻译：数据包根据边界网关协议（BGP）从至少一个互联网协议（IP）地址路由; 在根据边界网关协议（BGP）执行路由的同时，指出与所述至少一个因特网协议（IP）地址相关联的至少一个边界网关协议（BGP）属性。基于与至少一个因特网协议（IP）地址相关联的至少一个边界网关协议（BGP）属性，将防火墙策略应用于来自所述至少一个因特网协议（IP）地址的分组。技术可以例如在路由器上或耦合到路由器的单独的防火墙设备上实现。

2. 发明授权

US08885667B2 Destination based methodology for managing network resources 有权
标题翻译：用于管理网络资源的基于目标的方法
公开(公告)号：US08885667B2
公开(公告)日：2014-11-11
申请号：US12500751
申请日：2009-07-10
申请人： Ron da Silva , Shan Huang , Michael S. Kelsen
发明人： Ron da Silva , Shan Huang , Michael S. Kelsen
IPC分类号： H04L12/801 , H04L12/823 , H04L12/851 , H04L12/413 , H04L12/927 , H04L12/813
CPC分类号： H04L47/10 , H04L12/413 , H04L47/12 , H04L47/20 , H04L47/2441 , H04L47/32 , H04L47/808
摘要： A replicator is configured to be coupled to a first packet-based network, and a packet analysis module and a router are coupled to the replicator. The router is configured to be coupled to a second packet-based network. The replicator receives packets from the first packet-based network, passes the packets to the router, and passes a copy of the packets to the packet analysis module. The packet analysis module identifies, in a set of customers of the second packet-based network, a top usage subset. The top usage subset includes those of the customers who are using more bandwidth of the second packet-based network than other ones of the customers. The top usage subset includes at least two of the customers. The packet analysis module identifies, at an entry point of the second packet-based network, routes of packets destined for the top usage subset. The router discards a predetermined percentage of the packets destined for the top usage subset. The predetermined percentage is determined in order to reduce bandwidth utilization of the second packet-based network by a desired amount. The predetermined percentage is identical for all of the customers in the top usage subset.
摘要翻译：复制器被配置为耦合到第一基于分组的网络，并且分组分析模块和路由器耦合到复制器。路由器被配置为耦合到第二基于分组的网络。复制器从第一个基于分组的网络接收分组，将分组传递给路由器，并将分组的副本传递给分组分析模块。分组分析模块在第二基于分组的网络的一组客户中识别顶部使用子集。最大的使用子集包括那些正在使用第二个基于分组的网络的带宽比其他客户的客户的那些。最高使用量子集包括至少两个客户。分组分析模块在第二基于分组的网络的入口点处识别去往顶部使用子集的分组的路由。路由器丢弃目的地为最大使用子集的预定百分比的分组。确定预定百分比以便将第二基于分组的网络的带宽利用率减少期望的量。对于最高使用子集中的所有客户，预定百分比是相同的。

3. 发明申请

US20130074174A1 FIREWALL ACCESS CONTROL WITH BORDER GATEWAY PROTOCOL ATTRIBUTES 有权
标题翻译：使用边界网关协议属性进行防火墙访问控制
公开(公告)号：US20130074174A1
公开(公告)日：2013-03-21
申请号：US13237678
申请日：2011-09-20
申请人： Shan Huang , Michael S. Kelsen , Ron Da Silva
发明人： Shan Huang , Michael S. Kelsen , Ron Da Silva
IPC分类号： G06F21/20
CPC分类号： H04L45/04 , H04L63/0227 , H04L63/0236
摘要： Packets are routed from at least one internet protocol (IP) address in accordance with border gateway protocol (BGP); while carrying out the routing in accordance with the border gateway protocol (BGP), at least one border gateway protocol (BGP) attribute associated with the at least one internet protocol (IP) address is noted. A firewall policy is applied to the packets from the at least one internet protocol (IP) address based on the at least one border gateway protocol (BGP) attribute associated with the at least one internet protocol (IP) address. Techniques may be implemented, for example, on a router or on a separate firewall device coupled to a router.
摘要翻译：数据包根据边界网关协议（BGP）从至少一个互联网协议（IP）地址路由; 在根据边界网关协议（BGP）执行路由的同时，指出与所述至少一个因特网协议（IP）地址相关联的至少一个边界网关协议（BGP）属性。基于与至少一个因特网协议（IP）地址相关联的至少一个边界网关协议（BGP）属性，将防火墙策略应用于来自所述至少一个因特网协议（IP）地址的分组。技术可以例如在路由器上或耦合到路由器的单独的防火墙设备上实现。

4. 发明申请

US20110007752A1 DESTINATION BASED METHODOLOGY FOR MANAGING NETWORK RESOURCES 有权
标题翻译：用于管理网络资源的基于目标的方法
公开(公告)号：US20110007752A1
公开(公告)日：2011-01-13
申请号：US12500751
申请日：2009-07-10
申请人： Ron da Silva , Shan Huang , Michael S. Kelsen
发明人： Ron da Silva , Shan Huang , Michael S. Kelsen
IPC分类号： H04J3/22
CPC分类号： H04L47/10 , H04L12/413 , H04L47/12 , H04L47/20 , H04L47/2441 , H04L47/32 , H04L47/808
摘要： A replicator is configured to be coupled to a first packet-based network, and a packet analysis module and a router are coupled to the replicator. The router is configured to be coupled to a second packet-based network. The replicator receives packets from the first packet-based network, passes the packets to the router, and passes a copy of the packets to the packet analysis module. The packet analysis module identifies, in a set of customers of the second packet-based network, a top usage subset. The top usage subset includes those of the customers who are using more bandwidth of the second packet-based network than other ones of the customers. The top usage subset includes at least two of the customers. The packet analysis module identifies, at an entry point of the second packet-based network, routes of packets destined for the top usage subset. The router discards a predetermined percentage of the packets destined for the top usage subset. The predetermined percentage is determined in order to reduce bandwidth utilization of the second packet-based network by a desired amount. The predetermined percentage is identical for all of the customers in the top usage subset.
摘要翻译：复制器被配置为耦合到第一基于分组的网络，并且分组分析模块和路由器耦合到复制器。路由器被配置为耦合到第二基于分组的网络。复制器从第一个基于分组的网络接收分组，将分组传递给路由器，并将分组的副本传递给分组分析模块。分组分析模块在第二基于分组的网络的一组客户中识别顶部使用子集。最大的使用子集包括那些正在使用第二个基于分组的网络的带宽比其他客户的客户的那些。最高使用量子集包括至少两个客户。分组分析模块在第二基于分组的网络的入口点处识别去往顶部使用子集的分组的路由。路由器丢弃目的地为最大使用子集的预定百分比的分组。确定预定百分比以便将第二基于分组的网络的带宽利用率减少期望的量。对于最高使用子集中的所有客户，预定百分比是相同的。

5. 发明授权

US08793714B2 Excluding specific application traffic from customer consumption data 有权
标题翻译：从客户消费数据中排除特定的应用流量
公开(公告)号：US08793714B2
公开(公告)日：2014-07-29
申请号：US13342727
申请日：2012-01-03
申请人： Michael S. Kelsen , Tushar Nakhre , Shan Huang , Andrew Danforth , Howard Pfeffer
发明人： Michael S. Kelsen , Tushar Nakhre , Shan Huang , Andrew Danforth , Howard Pfeffer
IPC分类号： H04N7/16 , H04N7/173
CPC分类号： H04N21/2543 , H04L12/1435 , H04L12/1485 , H04M15/41 , H04M15/60 , H04M15/8214 , H04N21/2541 , H04N21/25841 , H04N21/262 , H04N21/266 , H04N21/42684 , H04N21/4622 , H04N21/6118 , H04N21/6125 , H04N21/6168 , H04N21/6175 , H04N21/6402 , H04N21/64322
摘要： Techniques disclosed herein include systems and methods for excluding specific application traffic from customer consumption-based data billing counts. This is useful for excluding traffic from consumption totals where the application traffic has been accounted for using other means, such as through billing as a separate or technically distinct service. In practice, a tablet computer (or other end user device) can run a video application that uses a high-speed data network via a cable modem. This video application may be included as part of a core video package associated with a distinct cable television service. The system then provides accurate consumption billing of customer traffic that is outside of any other managed services by creating separate logical data service flows at a Cable Modem Termination System (CMTS) for excluding specific traffic counts.
摘要翻译：本文公开的技术包括用于将特定应用流量从基于消费者消费的数据计费计数中排除的系统和方法。这有助于排除使用其他方式计算应用程序流量的消费总量的流量，例如通过单独或技术上不同的服务计费。实际上，平板电脑（或其他最终用户设备）可以运行通过电缆调制解调器使用高速数据网络的视频应用程序。该视频应用可以被包括为与不同的有线电视服务相关联的核心视频包的一部分。然后，系统通过在有线调制解调器终端系统（CMTS）上创建单独的逻辑数据服务流来提供不在任何其他管理服务之外的客户流量的精确消费计费，以排除特定流量计数。

6. 发明申请

US20140237502A1 EXCLUDING SPECIFIC APPLICATION TRAFFIC FROM CUSTOMER CONSUMPTION DATA 有权
标题翻译：从客户消费数据中排除特定应用程序
公开(公告)号：US20140237502A1
公开(公告)日：2014-08-21
申请号：US14261103
申请日：2014-04-24
申请人： Michael S. Kelsen , Tushar Nakhre , Shan Huang , Andrew Danforth , Howard Pfeffer
发明人： Michael S. Kelsen , Tushar Nakhre , Shan Huang , Andrew Danforth , Howard Pfeffer
IPC分类号： H04N21/462 , H04N21/61 , H04N21/266 , H04N21/254 , H04N21/262
CPC分类号： H04N21/2543 , H04L12/1435 , H04L12/1485 , H04M15/41 , H04M15/60 , H04M15/8214 , H04N21/2541 , H04N21/25841 , H04N21/262 , H04N21/266 , H04N21/42684 , H04N21/4622 , H04N21/6118 , H04N21/6125 , H04N21/6168 , H04N21/6175 , H04N21/6402 , H04N21/64322
摘要： Techniques disclosed herein include systems and methods for excluding specific application traffic from customer consumption-based data billing counts. This is useful for excluding traffic from consumption totals where the application traffic has been accounted for using other means, such as through billing as a separate or technically distinct service. In practice, a tablet computer (or other end user device) can run a video application that uses a high-speed data network via a cable modem. This video application may be included as part of a core video package associated with a distinct cable television service. The system then provides accurate consumption billing of customer traffic that is outside of any other managed services by creating separate logical data service flows at a Cable Modem Termination System (CMTS) for excluding specific traffic counts.
摘要翻译：本文公开的技术包括用于将特定应用流量从基于消费者消费的数据计费计数中排除的系统和方法。这有助于排除使用其他方式计算应用程序流量的消费总量的流量，例如通过单独或技术上不同的服务计费。实际上，平板电脑（或其他最终用户设备）可以运行通过电缆调制解调器使用高速数据网络的视频应用程序。该视频应用可以被包括为与不同的有线电视服务相关联的核心视频包的一部分。然后，系统通过在有线调制解调器终端系统（CMTS）上创建单独的逻辑数据服务流来提供不在任何其他管理服务之外的客户流量的精确消费计费，以排除特定流量计数。

7. 发明申请

US20130174186A1 EXCLUDING SPECIFIC APPLICATION TRAFFIC FROM CUSTOMER CONSUMPTION DATA 有权
标题翻译：从客户消费数据中排除特定应用程序
公开(公告)号：US20130174186A1
公开(公告)日：2013-07-04
申请号：US13342727
申请日：2012-01-03
申请人： Michael S. Kelsen , Tushar Nakhre , Shan Huang , Andrew Danforth , Howard Pfeffer
发明人： Michael S. Kelsen , Tushar Nakhre , Shan Huang , Andrew Danforth , Howard Pfeffer
IPC分类号： H04N21/2543
CPC分类号： H04N21/2543 , H04L12/1435 , H04L12/1485 , H04M15/41 , H04M15/60 , H04M15/8214 , H04N21/2541 , H04N21/25841 , H04N21/262 , H04N21/266 , H04N21/42684 , H04N21/4622 , H04N21/6118 , H04N21/6125 , H04N21/6168 , H04N21/6175 , H04N21/6402 , H04N21/64322
摘要： Techniques disclosed herein include systems and methods for excluding specific application traffic from customer consumption-based data billing counts. This is useful for excluding traffic from consumption totals where the application traffic has been accounted for using other means, such as through billing as a separate or technically distinct service. In practice, a tablet computer (or other end user device) can run a video application that uses a high-speed data network via a cable modem. This video application may be included as part of a core video package associated with a distinct cable television service. The system then provides accurate consumption billing of customer traffic that is outside of any other managed services by creating separate logical data service flows at a Cable Modem Termination System (CMTS) for excluding specific traffic counts.
摘要翻译：本文公开的技术包括用于将特定应用流量从基于消费者消费的数据计费计数中排除的系统和方法。这有助于排除使用其他方式计算应用程序流量的消费总量的流量，例如通过单独或技术上不同的服务计费。实际上，平板电脑（或其他最终用户设备）可以运行通过电缆调制解调器使用高速数据网络的视频应用程序。该视频应用可以被包括为与不同的有线电视服务相关联的核心视频包的一部分。然后，系统通过在有线调制解调器终端系统（CMTS）上创建单独的逻辑数据服务流来提供不在任何其他管理服务之外的客户流量的精确消费计费，以排除特定流量计数。

8. 发明授权

US08276203B2 System and method for mitigating a denial of service attack in a subscriber network 有权
标题翻译：用于减轻用户网络中的拒绝服务攻击的系统和方法
公开(公告)号：US08276203B2
公开(公告)日：2012-09-25
申请号：US12614820
申请日：2009-11-09
申请人： Tushar A. Nakhre , Shan Huang , Michael S. Kelsen
发明人： Tushar A. Nakhre , Shan Huang , Michael S. Kelsen
IPC分类号： G06F21/00
CPC分类号： H04L63/1458
摘要： A system and method for mitigating a denial of service attack in a subscriber network. A traffic monitor monitors bandwidth usage of a subscriber network that is directed to a particular port. The traffic monitor detects excessive traffic based on preset thresholds or algorithms. When excessive traffic is detected, the traffic monitor may obtain the source IP address from headers in the packet stream and identify the device or devices from which the packets were delivered to the network. Using the IP addresses of affected devices, a policy may be implemented to throttle packets originating from those devices that are directed to the particular port.
摘要翻译：用于减轻用户网络中的拒绝服务攻击的系统和方法。流量监视器监视定向到特定端口的用户网络的带宽使用。流量监视器根据预设阈值或算法检测到流量过多。当检测到过多的流量时，流量监控器可以从分组流中的报头中获取源IP地址，并识别分组被传送到网络的设备或设备。使用受影响设备的IP地址，可以实施策略来调节源自指向特定端口的那些设备的数据包。

9. 发明申请

US20110113489A1 SYSTEM AND METHOD FOR MITIGATING A DENIAL OF SERVICE ATTACK IN A SUBSCRIBER NETWORK 有权
标题翻译：用于减轻订户网络服务攻击的系统和方法
公开(公告)号：US20110113489A1
公开(公告)日：2011-05-12
申请号：US12614820
申请日：2009-11-09
申请人： Tushar A. Nakhre , Shan Huang , Michael S. Kelsen
发明人： Tushar A. Nakhre , Shan Huang , Michael S. Kelsen
IPC分类号： G06F11/30
CPC分类号： H04L63/1458
摘要： A system and method for mitigating a denial of service attack in a subscriber network. A traffic monitor monitors bandwidth usage of a subscriber network that is directed to a particular port. The traffic monitor detects excessive traffic based on preset thresholds or algorithms. When excessive traffic is detected, the traffic monitor may obtain the source IP address from headers in the packet stream and identify the device or devices from which the packets were delivered to the network. Using the IP addresses of affected devices, a policy may be implemented to throttle packets originating from those devices that are directed to the particular port.
摘要翻译：用于减轻用户网络中的拒绝服务攻击的系统和方法。流量监视器监视定向到特定端口的用户网络的带宽使用。流量监视器根据预设阈值或算法检测到流量过多。当检测到过多的流量时，流量监控器可以从分组流中的报头中获取源IP地址，并识别分组被传送到网络的设备或设备。使用受影响设备的IP地址，可以实施策略来调节源自指向特定端口的那些设备的数据包。

10. 发明授权

US08910198B2 Multicast video advertisement insertion using routing protocols 有权
标题翻译：使用路由协议进行组播视频广告插入
公开(公告)号：US08910198B2
公开(公告)日：2014-12-09
申请号：US12792281
申请日：2010-06-02
申请人： Michael S. Kelsen , Kevin Noll , Howard Pfeffer
发明人： Michael S. Kelsen , Kevin Noll , Howard Pfeffer
IPC分类号： H04N7/10 , H04N7/025 , H04N21/222 , H04N21/44 , H04N21/462 , H04N21/81 , H04N21/61 , H04N21/643 , H04N21/6405
CPC分类号： H04N21/44016 , H04N21/2221 , H04N21/4622 , H04N21/6118 , H04N21/6405 , H04N21/64322 , H04N21/812
摘要： First video material is transmitted from a video source, over a video content network, to consumer premises equipment, via a hub router. The video source has a source address and there is a first path length between the hub router and the video source. Upon occurrence of a first triggering condition, a short route metric is announced from a supplemental video material server coupled to the hub router. The short route metric causes the hub router to perceive a second path length, between the hub router and the supplemental video material server, as shorter than the first path length. The supplemental video material server has a source address identical to the source address of the video source. Thus, the consumer premises equipment obtains supplemental video material from the supplemental video material server instead of first video material from the video source. Aspects of a system and a supplemental video material server are also disclosed.
摘要翻译：第一视频资料通过视频内容网络从视频源通过中枢路由器传输到消费者住宅设备。视频源具有源地址，并且在集线器路由器和视频源之间存在第一路径长度。在发生第一触发条件时，从耦合到集线器路由器的辅助视频资料服务器公布短路由度量。短路由度量使得集线器路由器感知到集线器路由器和补充视频资料服务器之间的第二路径长度小于第一路径长度。补充视频资料服务器具有与视频源的源地址相同的源地址。因此，消费者处所设备从补充视频资料服务器获取补充视频资料，而不是从视频源获得第一视频资料。还公开了系统和补充视频资料服务器的方面。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式