专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US07120930B2 Method and apparatus for control of security protocol negotiation 有权
公开(公告)号：US07120930B2
公开(公告)日：2006-10-10
申请号：US10172683
申请日：2002-06-13
申请人： Thomas Albert Maufer , Sameer Nanda , Paul J. Sidenblad
发明人： Thomas Albert Maufer , Sameer Nanda , Paul J. Sidenblad
IPC分类号： G06F15/16
CPC分类号： H04L63/0272 , H04L29/12018 , H04L29/12216 , H04L29/12367 , H04L29/12462 , H04L29/1249 , H04L61/10 , H04L61/2015 , H04L61/2514 , H04L61/255 , H04L61/256 , H04L63/0428 , H04L63/061 , H04L63/164 , H04L69/24
摘要： Method and apparatus for enhanced security for communication over a network, and more particularly to control of security protocol negotiation to enable multiple clients to establish a virtual private network connection with a same remote address, is described. A mapping table accessible by a gateway computer is used to form associations between a local address for the client and a destination address for a peer and a Security Parameters Index associated with IPSec-protected traffic from the peer. When a packet is received at the gateway from a client it is checked to determine if it is an Internet Key Exchange (IKE) packet, whether an IKE session has already been recorded from this client in the mapping table for the destination address in the IKE packet, whether a Security Parameters Index has been observed in the clear from a remote computer associated with the destination address.

2. 发明授权

US07143188B2 Method and apparatus for network address translation integration with internet protocol security 有权
公开(公告)号：US07143188B2
公开(公告)日：2006-11-28
申请号：US10172046
申请日：2002-06-13
申请人： Thomas Albert Maufer , Sameer Nanda , Paul J. Sidenblad
发明人： Thomas Albert Maufer , Sameer Nanda , Paul J. Sidenblad
IPC分类号： G06F15/16 , G06F9/00 , H04L9/00
CPC分类号： H04L63/0428 , H04L29/06 , H04L29/12018 , H04L29/12216 , H04L29/12367 , H04L29/125 , H04L29/12528 , H04L61/10 , H04L61/2015 , H04L61/2514 , H04L61/2564 , H04L61/2575 , H04L63/164 , H04L69/24
摘要： Method and apparatus for enhanced security for communication over a network, and more particularly to Network Address Translation (NAT) integration Internet Protocol Security (IPSec), is described. A client computer makes a second address request in order to prompt an address server to provide a public address. This address, recorded in a mapping table accessible by a gateway computer. This public address is used as a source address for packets from a client using IPSec. When the gateway computer identifies a packet's source address as one of it's public addresses, NAT is suspended for this packet, and the packet is routed without NAT. Incoming traffic is routed using the mapping table.

3. 发明授权

US07191331B2 Detection of support for security protocol and address translation integration 有权
标题翻译：检测支持安全协议和地址转换整合
公开(公告)号：US07191331B2
公开(公告)日：2007-03-13
申请号：US10172345
申请日：2002-06-13
申请人： Thomas Albert Maufer , Sameer Nanda , Paul J. Sidenblad
发明人： Thomas Albert Maufer , Sameer Nanda , Paul J. Sidenblad
IPC分类号： H04L9/00
CPC分类号： H04L63/0428 , H04L29/06 , H04L29/12018 , H04L29/12216 , H04L29/12301 , H04L29/12367 , H04L29/125 , H04L61/10 , H04L61/2015 , H04L61/2076 , H04L61/2514 , H04L61/2564 , H04L63/164 , H04L69/24
摘要： Method and apparatus for integration of network address translation and source address security, including, but not limited to, determining whether a gateway computer is integrated for network address translation and source address security, is described. A client computer requests a first address from the gateway computer and then requests a second address from the gateway computer. The latter request is done with a different client identifier that is nearly equivalent, except for one bit, to the client identifier used for the prior address request. If the gateway computer is integrated for network address translation and source address security, in response to the latter request a public address will be provided from the gateway computer to the client computer.
摘要翻译：描述了用于集成网络地址转换和源地址安全性的方法和装置，包括但不限于确定网关计算机是否被集成用于网络地址转换和源地址安全性。客户端计算机从网关计算机请求第一地址，然后从网关计算机请求第二地址。后一个请求使用与用于先前地址请求的客户端标识符几乎相同的除了一位之外的不同的客户端标识符来完成。如果网关计算机被集成用于网络地址转换和源地址安全性，则响应于后一请求，将从网关计算机向客户端计算机提供公共地址。

4. 发明授权

US07143137B2 Method and apparatus for security protocol and address translation integration 有权
公开(公告)号：US07143137B2
公开(公告)日：2006-11-28
申请号：US10172352
申请日：2002-06-13
申请人： Thomas Albert Maufer , Sameer Nanda , Paul J. Sidenblad
发明人： Thomas Albert Maufer , Sameer Nanda , Paul J. Sidenblad
IPC分类号： G06F15/16 , G06F9/00 , H04L9/00
CPC分类号： H04L63/0428 , H04L29/12018 , H04L29/12216 , H04L29/12367 , H04L29/12462 , H04L29/12481 , H04L29/1249 , H04L61/10 , H04L61/2015 , H04L61/2514 , H04L61/255 , H04L61/2557 , H04L61/256 , H04L63/164 , H04L69/24
摘要： Method and apparatus for Internet Protocol Security (IPSec) and Network Address Translation (NAT) integration is described. A client obtains a public address from a gateway for IPSec communication. A mapping table is used to form associations between a local address for the client and a destination address for a peer, an Internet Security Association and Key Management Protocol (ISAKMP) Initiator Cookie and a Security Parameters Index associated with communication between the client and the peer. Incoming and outgoing routing may be done at the gateway using the mapping table.

5. 发明授权

US06590861B1 Combining virtual local area networks and load balancing with fault tolerance in a high performance protocol 失效
标题翻译：在高性能协议中组合虚拟局域网和负载平衡与容错
公开(公告)号：US06590861B1
公开(公告)日：2003-07-08
申请号：US09272083
申请日：1999-03-18
申请人： RamKrishna Vepa , Roman Baker , Sameer Nanda , James Binder , Thomas Albert Maufer
发明人： RamKrishna Vepa , Roman Baker , Sameer Nanda , James Binder , Thomas Albert Maufer
IPC分类号： H04J116
CPC分类号： H04L47/125 , H04L12/4641 , H04L12/4691 , H04L67/1002 , H04L67/1034 , H04L69/14 , H04L69/32 , H04L69/40 , H04L2029/06054
摘要： A method to send and receive data packets over a network of computer systems (e.g., a plurality of virtual local area networks [VLANs] compliant with the IEEE 802.1Q standard) using a server computer system adapted to have a plurality of network interface cards (NICs) coupled thereto. An outgoing data packet is addressed using a first media access control (MAC) address, wherein the first MAC address is a virtual MAC address representing the plurality of NICs. A NIC is selected from the plurality of NICs using a load balancing scheme. The functionality of the selected NIC is verified using a fault tolerance scheme. The first MAC address in the outgoing data packet is replaced with a second MAC address, wherein the second MAC address represents the selected NIC. The outgoing data packet is then transmitted using the selected NIC. For an incoming data packet received at one of the plurality of NICs, the existing MAC address in the incoming data packet is replaced with the first MAC address. Thus, the present embodiment of the present invention provides a high performance method that supports multiple VLANs and elegantly combines a load balance scheme and a fault tolerance scheme into a software element implemented on a server computer system.
摘要翻译：一种使用适于具有多个网络接口卡的服务器计算机系统通过计算机系统的网络（例如，符合IEEE 802.1Q标准的多个虚拟局域网[VLAN]）发送和接收数据分组的方法（ NIC）。使用第一媒体访问控制（MAC）地址寻址输出数据分组，其中第一MAC地址是表示多个NIC的虚拟MAC地址。使用负载平衡方案从多个NIC中选择NIC。使用容错方案验证所选NIC的功能。输出数据包中的第一个MAC地址被替换为第二个MAC地址，其中第二个MAC地址表示所选择的NIC。然后使用所选择的NIC传输传出的数据分组。对于在多个NIC之一处接收到的输入数据分组，输入数据分组中的现有MAC地址被替换为第一MAC地址。因此，本发明的实施例提供了一种支持多个VLAN的高性能方法，并且将负载平衡方案和容错方案优雅地组合到在服务器计算机系统上实现的软件元素中。

6. 发明授权

US06683882B1 Method and system for directing transmission of IPX control packets to influence reception of IPX data packets 失效
标题翻译：用于指导IPX控制分组传输以影响IPX数据分组的接收的方法和系统
公开(公告)号：US06683882B1
公开(公告)日：2004-01-27
申请号：US09437592
申请日：1999-11-09
申请人： Thomas Albert Maufer , Roman Baker
发明人： Thomas Albert Maufer , Roman Baker
IPC分类号： H04L1228
CPC分类号： H04L67/325 , H04L69/18 , H04L69/329
摘要： A method and system for directing transmission of internetwork packet exchange (IPX) control packets to influence reception of IPX data packets. Specifically, one embodiment of the present invention includes a method for directing transmission of an internetwork packet exchange (IPX) control packet. The method includes the step of determining a primary NIC from a plurality of NICs of a server computer system. Additionally, the method includes the step of recognizing an IPX control packet before the IPX control packet is transmitted over a network. Furthermore, the method includes the step of directing the IPX control packet to be transmitted over the network by the primary NIC.
摘要翻译：一种用于引导网络分组交换（IPX）控制分组的传输以影响IPX数据分组的接收的方法和系统。具体地，本发明的一个实施例包括一种用于引导网络分组交换（IPX）控制分组的传输的方法。该方法包括从服务器计算机系统的多个NIC确定主NIC的步骤。另外，该方法包括在通过网络发送IPX控制分组之前识别IPX控制分组的步骤。此外，该方法包括通过主NIC指示IPX控制分组通过网络传输的步骤。

7. 发明授权

US07558873B1 Method for compressed large send 有权
标题翻译：压缩大发送方法
公开(公告)号：US07558873B1
公开(公告)日：2009-07-07
申请号：US10141039
申请日：2002-05-08
申请人： Thomas Albert Maufer
发明人： Thomas Albert Maufer
IPC分类号： G06F15/16
CPC分类号： H04L69/04 , H04L63/164 , H04L69/24
摘要： Method for Internet Protocol Payload Compression (IPComp) and Large Send is described. More particularly, a Large Send initiated by a computer is used to trigger an IPComp negotiation. After agreement on IPComp, data blocks for such a Large Send are compressed in accordance with an agreed upon compression algorithm prior to being divided up into smaller blocks, such as being divided by a maximum transmission unit, for sending. To further improve performance, a intelligent network interface with Large Send and IPComp capabilities is used for offloading Large Send and IPComp functions.
摘要翻译：描述了Internet协议有效负载压缩（IPComp）和大发送的方法。更具体地，由计算机发起的大发送被用于触发IPComp协商。在IPComp协议之后，这种大发送的数据块在被划分成更小的块之前，按照约定的压缩算法进行压缩，例如被最大传输单元除以进行发送。为了进一步提高性能，使用具有大发送和IPComp功能的智能网络接口来卸载大发送和IPComp功能。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式