专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20090172774A1 METHOD AND SYSTEM FOR DISTRIBUTING SECURITY POLICIES 有权
标题翻译：分配安全政策的方法和系统
公开(公告)号：US20090172774A1
公开(公告)日：2009-07-02
申请号：US12402448
申请日：2009-03-11
申请人： Shirish R. Koti , Narasimha Rao S.S. Nagampalli , Maxim A. Ivanov , Sachin C. Sheth , Emanuel Paleologu , Yun Lin , Eric E. Youngblut
发明人： Shirish R. Koti , Narasimha Rao S.S. Nagampalli , Maxim A. Ivanov , Sachin C. Sheth , Emanuel Paleologu , Yun Lin , Eric E. Youngblut
IPC分类号： G06F21/00
CPC分类号： H04L63/0218 , H04L63/0263 , H04L63/20
摘要： A method and system for distributing and enforcing security policies is provided. A firewall agent executing at a host computer system that is to be protected receives security policies for the enforcement engines responsible for enforcing the security policies on the host computer system. A security policy has rules that each provide a condition and action to be performed when the condition is satisfied. A rule also has a rule type that is used by the distribution system to identify the security components that are responsible for enforcing the rules. To distribute the security policies that have been received at a host computer system, the firewall agent identifies to which enforcement engine a rule applies based in part on rule type. The firewall agent then distributes the rule to the identified enforcement engine, which then enforces the rule.
摘要翻译：提供了分发和执行安全策略的方法和系统。在要被保护的主机计算机系统上执行的防火墙代理接收负责执行主机计算机系统上的安全策略的执行引擎的安全策略。安全策略具有规则，每个条件在条件满足时提供要执行的条件和操作。规则还具有由分发系统用于识别负责执行规则的安全组件的规则类型。为了分发在主机计算机系统上接收到的安全策略，防火墙代理将部分基于规则类型标识适用于哪个执行引擎。防火墙代理然后将规则分发到所识别的强制引擎，然后执行该规则。

2. 发明授权

US07051087B1 System and method for automatic detection and configuration of network parameters 有权
标题翻译：自动检测和配置网络参数的系统和方法
公开(公告)号：US07051087B1
公开(公告)日：2006-05-23
申请号：US09587204
申请日：2000-06-05
申请人： Pradeep Bahl , Ramesh K. Vyaghrapuri , Florin Teodorescu , Shirish R. Koti
发明人： Pradeep Bahl , Ramesh K. Vyaghrapuri , Florin Teodorescu , Shirish R. Koti
IPC分类号： G06F15/16
CPC分类号： H04L29/1232 , H04L29/12952 , H04L61/2092 , H04L61/6077 , H04L67/125
摘要： The present invention relates to a system for automatic detection and configuration of network parameters. The system includes a first computer system for communicating to a network and at least a second computer system for providing network information. The first computer system queries the network and receives network information from the at least a second computer system before a network identification has been established for the first computer system. The system further includes a storage for storing at least one configuration associated with a network interface. The first computer system configures the network interface based upon the network information received from the at least a second computer system. Also, the first computer system may configure the network interface by determining a network identification associated with the network information and matching the at least one configuration with the network identification.
摘要翻译：本发明涉及一种用于自动检测和配置网络参数的系统。该系统包括用于与网络通信的第一计算机系统和用于提供网络信息的至少第二计算机系统。在为第一计算机系统建立网络标识之前，第一计算机系统查询网络并从至少第二计算机系统接收网络信息。该系统还包括用于存储与网络接口相关联的至少一个配置的存储器。第一计算机系统基于从至少第二计算机系统接收的网络信息配置网络接口。此外，第一计算机系统可以通过确定与网络信息相关联的网络标识并将该至少一个配置与网络标识相匹配来配置网络接口。

3. 发明授权

US07554920B2 Method and system for dynamically adjusting transmit and receive parameters for handling negative acknowledgments in reliable multicast 有权
标题翻译：用于动态调整发送和接收参数以处理可靠组播中的否定确认的方法和系统
公开(公告)号：US07554920B2
公开(公告)日：2009-06-30
申请号：US11072023
申请日：2005-03-04
申请人： Mohammad Shabbir Alam , Pradeep Bahl , Shirish R. Koti
发明人： Mohammad Shabbir Alam , Pradeep Bahl , Shirish R. Koti
IPC分类号： H04J1/16 , H04J3/14 , H04B1/44 , H04L12/28 , H04L12/56 , H04J3/26
CPC分类号： H04L1/187 , H04L1/1848 , H04L1/1887 , H04L2001/0093
摘要： A method and system for multicast network transmissions dynamically sets response time parameters for handling negative acknowledgments (NAKs). When the sender receives a NAK for a lost packet, it returns an NAK confirmation (NCF), waits for a back-off time before sending requested repair data, and then waits for a “linger time” during which the sender does not respond to other NAKs for the same lost packet. The back-off time and the linger time are dynamically set according to the position of the requested sequence number in the sender's transmit window such that the back-off time is shorter when the requested data is closer to being flushed out of the transmit window. After receiving the NCF, the receiver waits for a timeout period and resends the NAK if no repair data is received. The timeout period for data receipt is dynamically set according to a statistical average time for receiving repair data from the sender and the estimated sender's transmit window size.
摘要翻译：组播网络传输的方法和系统动态地设置用于处理否定确认（NAK）的响应时间参数。当发送方收到丢失数据包的NAK时，返回NAK确认（NCF），在发送请求的修复数据之前等待退避时间，然后等待发送方不响应的“停留时间” 同一丢失数据包的其他NAK。根据发送者发送窗口中所请求的序列号的位置动态地设置退避时间和逗留时间，使得当所请求的数据更接近被从发送窗口冲出时，退避时间较短。接收到NCF后，如果没有接收到修复数据，则接收机等待超时时间并重新发送NAK。根据用于从发送方接收修复数据的统计平均时间和估计的发送者的发送窗口大小，动态地设置数据收据的超时时间。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式