专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

131. 发明授权

US07975044B1 Automated disambiguation of fixed-serverport-based applications from ephemeral applications 有权
标题翻译：从临时应用程序自动消除基于固定服务器端口的应用程序
公开(公告)号：US07975044B1
公开(公告)日：2011-07-05
申请号：US11317256
申请日：2005-12-27
申请人： Oliver Spatscheck , Subhabrata Sen , Jacobus E. Van der Merwe , Patrick McDaniel
发明人： Oliver Spatscheck , Subhabrata Sen , Jacobus E. Van der Merwe , Patrick McDaniel
IPC分类号： G06F15/173
CPC分类号： G06F9/54 , H04L43/00 , H04L43/026 , H04L69/326
摘要： Provided are methods for partitioning communication data in a network and disambiguating fixed or non-ephemeral communication data from ephemeral communication data and services. In one example, kmeans data clustering is used to partition or cluster server ports based on a location of the server ports in a 2-dimensional space. The location of the server ports may be based on a number of connections per server port and the number of servers using that port.
摘要翻译：提供了用于分割网络中的通信数据并且从短暂通信数据和服务中消除固定或非短暂通信数据的方法。在一个示例中，kmeans数据集群用于基于二维空间中的服务器端口的位置对服务器端口进行分区或集群。服务器端口的位置可以基于每个服务器端口的多个连接以及使用该端口的服务器数量。

132. 发明申请

US20110153719A1 Integrated Adaptive Anycast for Content Distribution 有权
标题翻译：内容分发的综合自适应任播
公开(公告)号：US20110153719A1
公开(公告)日：2011-06-23
申请号：US12645006
申请日：2009-12-22
申请人： Mario Santoro , Herani Brotman , Alan L. Glasser , James Miros , Oliver Spatscheck , Jacobus Van der Merwe
发明人： Mario Santoro , Herani Brotman , Alan L. Glasser , James Miros , Oliver Spatscheck , Jacobus Van der Merwe
IPC分类号： G06F15/16
CPC分类号： H04L43/08 , H04L29/12066 , H04L45/126 , H04L61/1511 , H04L61/2007 , H04L67/1002 , H04L67/1008 , H04L67/1021
摘要： A system includes first and second cache servers a domain name server, and a route controller. The cache servers are each configured to respond to an anycast address. Additionally, the first cache server is configured to respond to a first unicast address, and the second cache server is configured to respond to a second unicast address. The router controller configured to determine wither the status of the first cache server is non-overloaded, overloaded, or offline. The route controller is further configured to instruct the domain name server to provide the second unicast address when the status is overloaded or offline, and modify routing of the anycast address to direct a content request sent to the anycast address to the second cache server when the status is offline. The domain name server is configured to receive a request from a requestor for a cache server address. Additionally, the domain name server is configured to provide an anycast address to the requestor when the status of the first cache server is non-overloaded, and provide the second unicast address to the requestor when the status of the first cache server is offline or overloaded.
摘要翻译：系统包括第一和第二缓存服务器，域名服务器和路由控制器。每个缓存服务器都配置为响应任播地址。此外，第一缓存服务器被配置为响应第一单播地址，并且第二高速缓存服务器被配置为响应第二单播地址。配置为确定第一个缓存服务器的状态的路由器控制器是非重载的，过载的或离线的。路由控制器还被配置为当状态过载或离线时，指示域名服务器提供第二单播地址，并且修改任播地址的路由以将发送到任播地址的内容请求定向到第二高速缓存服务器状态离线域名服务器被配置为从缓存服务器地址的请求者接收请求。此外，当第一缓存服务器的状态不重载时，域名服务器被配置为向请求者提供任播地址，并且当第一缓存服务器的状态离线或超载时，向请求者提供第二单播地址。

133. 发明申请

US20110134748A1 Bulk Data Transport in a Network 有权
标题翻译：网络中的批量数据传输
公开(公告)号：US20110134748A1
公开(公告)日：2011-06-09
申请号：US12632967
申请日：2009-12-08
申请人： Oliver Spatscheck , Han Q. Nguyen , Steven H. Nurenberg , Gregory J. Smith
发明人： Oliver Spatscheck , Han Q. Nguyen , Steven H. Nurenberg , Gregory J. Smith
IPC分类号： H04L1/00 , G06F11/00
CPC分类号： H04L47/12 , H04L1/0041 , H04L1/0083 , H04L1/1812 , H04L1/22 , H04L12/18 , H04L47/11 , H04L47/24 , H04L47/32
摘要： A network is configured to utilize available bandwidth to conduct bulk data transfers without substantially affecting the successful transmission of time-sensitive traffic in the network. In order to avoid this interference, the packets carrying data for bulk data transfers are associated with a low priority class such that the routers of the network will preferentially drop these packets over packets associated with the normal traffic of the network. As such, when the normal traffic peaks or there are link failures or equipment failures, the normal traffic is preferentially transmitted over the bulk-transfer traffic and thus the bulk-transfer traffic dynamically adapts to changes in the available bandwidth of the network. Further, to reduce the impact of dropped packets for the bulk-transfer traffic, the packets of the bulk-transfer traffic are encoded at or near the source component using a loss-resistant transport protocol so that the dropped packets can be reproduced at a downstream link.
摘要翻译：网络被配置为利用可用带宽进行批量数据传输，而不会基本上影响网络中对时间敏感业务的成功传输。为了避免这种干扰，承载大量数据传输数据的分组与低优先级类相关联，使得网络的路由器将优先通过与网络的正常业务相关联的分组来丢弃这些分组。因此，当正常流量峰值或存在链路故障或设备故障时，通常的业务优先通过批量传输业务传输，因此批量传输业务动态地适应网络可用带宽的变化。此外，为了减少丢弃的分组对于批量传输业务的影响，使用丢失传输协议将批量传输业务的分组编码在源组件或其附近，使得丢弃的分组可以在下游再现链接。

134. 发明申请

US20110035282A1 Consumer Sensitive Electronic Billboards 审中-公开
标题翻译：消费敏感电子广告牌
公开(公告)号：US20110035282A1
公开(公告)日：2011-02-10
申请号：US12537882
申请日：2009-08-07
申请人： Oliver Spatscheck , Subhabrata Sen
发明人： Oliver Spatscheck , Subhabrata Sen
IPC分类号： G06Q30/00
CPC分类号： G06Q30/02 , G06Q30/0261 , G06Q30/0273 , G06Q30/0275 , G09F2027/001
摘要： A method and system for advertising on an electronic billboard is capable of adapting over time to advertising criteria associated with actual viewers of the billboard. Mobile device users in a vicinity of the billboard are identified. User profiles indicative of fixed network and/or wireless network usage for the mobile device users are analyzed for pertinent advertising criteria. The predominant advertising criteria may be used to select the billboard content. The content may also be obtained via an auction for the billboard display and/or the advertising criteria.
摘要翻译：用于在电子广告牌上进行广告的方法和系统能够随着时间而适应与广告牌的实际观众相关联的广告标准。识别广告牌附近的移动设备用户。针对相关广告标准分析指示移动设备用户的固定网络和/或无线网络使用的用户简档。主要的广告标准可以用于选择广告牌内容。也可以通过用于广告牌显示和/或广告标准的拍卖来获得内容。

135. 发明申请

US20100064131A1 METHOD AND APPARATUS FOR AUTOMATICALLY CONSTRUCTING APPLICATION SIGNATURES 审中-公开
标题翻译：自动构建应用信号的方法和装置
公开(公告)号：US20100064131A1
公开(公告)日：2010-03-11
申请号：US12619620
申请日：2009-11-16
申请人： Oliver Spatscheck , Subhabrata Sen , Dongmei Wang
发明人： Oliver Spatscheck , Subhabrata Sen , Dongmei Wang
IPC分类号： H04L29/06
CPC分类号： H04L47/10 , H04L47/2441 , H04L69/22
摘要： The present invention relates to a method and system for the automated construction of application signatures. In one example, an approach for automatically constructing accurate signatures for individual applications, with minimal human involvement or application domain knowledge, is provided. Given a training data set containing the application traffic, the Automated Construction of Application Signatures (ACAS) system uses a combination of statistical, information theoretic and combinatorial optimization techniques, to derive application-layer signatures from the payload of packets, e.g., IP packets. Evaluations with a range of applications demonstrate that the derived signatures are very accurate and scale to identifying a large number of flows in real time on high-speed links.
摘要翻译：本发明涉及一种用于自动构建应用签名的方法和系统。在一个示例中，提供了一种用于以最小的人为参与或应用领域知识为个体应用自动构建准确签名的方法。给定包含应用流量的训练数据集，自动构建应用签名（ACAS）系统使用统计，信息理论和组合优化技术的组合来从分组的有效载荷（例如IP分组）中导出应用层签名。使用一系列应用程序的评估表明，派生的签名非常准确，可扩展到在高速链路上实时识别大量的流量。

136. 发明授权

US07451214B1 Method and apparatus for packet analysis in a network 有权
标题翻译：网络中分组分析的方法和装置
公开(公告)号：US07451214B1
公开(公告)日：2008-11-11
申请号：US11589016
申请日：2006-10-27
申请人： Charles D. Cranor , Theodore Johnson , Oliver Spatscheck , Divesh Srivastava
发明人： Charles D. Cranor , Theodore Johnson , Oliver Spatscheck , Divesh Srivastava
IPC分类号： G06F15/173
CPC分类号： H04L43/00 , H04L43/106
摘要： A method and system for monitoring traffic in a data communication network and for extracting useful statistics and information is disclosed. In accordance with an embodiment of the invention, a network interface card has a run-time system and one or more processing blocks executing on the network interface. The run-time system module feeds information derived from a network packet to the processing modules which process the information and generate output such as condensed statistics about the packets traveling through the network.
摘要翻译：公开了一种用于监视数据通信网络中的业务并提取有用统计信息的方法和系统。根据本发明的实施例，网络接口卡具有运行时系统和在网络接口上执行的一个或多个处理块。运行时系统模块将从网络数据包导出的信息提供给处理信息的处理模块，并生成关于通过网络传播的数据包的统计信息的输出。

137. 发明授权

US07444371B2 Method and apparatus for limiting reuse of domain name system response information 有权
标题翻译：限制域名系统响应信息重用的方法和装置
公开(公告)号：US07444371B2
公开(公告)日：2008-10-28
申请号：US10798076
申请日：2004-03-11
申请人： Frederick Douglis , Michael Rabinovich , Oliver Spatscheck
发明人： Frederick Douglis , Michael Rabinovich , Oliver Spatscheck
IPC分类号： G06F15/16 , G06F15/173
CPC分类号： H04L29/12811 , H04L29/12066 , H04L61/1511 , H04L61/6009 , H04L67/1002 , H04L2029/06054
摘要： A method of limiting reuse of domain name information includes the steps of requesting the information by a local domain name server from an authoritative domain name server, and providing this information to a requestor, such as a client or server. The domain name information includes an allowable usage limit that represents a maximum number of times that the information can be provided to the requestor before revalidating the information. A system for limiting reuse of domain name information includes an authoritative domain name server, a local domain name server, and a requestor. The authoritative server provides the information, which includes the allowable usage limit, in response to a request by the local server. The request from the local server may include the number of times that the local server provided the information to one or more requestors as an observed usage.
摘要翻译：一种限制域名信息重用的方法包括以下步骤：从权威域名服务器请求本地域名服务器的信息，并将该信息提供给诸如客户端或服务器的请求者。域名信息包括允许的使用限制，其表示在重新验证信息之前可以向请求者提供信息的最大次数。限制域名信息重用的系统包括权威域名服务器，本地域名服务器和请求者。权威服务器响应本地服务器的请求提供信息，其中包括允许的使用限制。来自本地服务器的请求可以包括本地服务器向一个或多个请求者提供信息作为观察到的使用的次数。

138. 发明授权

US07386631B1 Apparatus and methods for providing translucent proxies in a communications network 失效
标题翻译：在通信网络中提供半透明代理的装置和方法
公开(公告)号：US07386631B1
公开(公告)日：2008-06-10
申请号：US11213061
申请日：2005-08-26
申请人： Sandeep Sibal , Oliver Spatscheck , Pablo Rodriguez
发明人： Sandeep Sibal , Oliver Spatscheck , Pablo Rodriguez
IPC分类号： G06F15/16 , G06F15/173
CPC分类号： H04L69/16 , H04L67/28 , H04L67/2871 , H04L69/163
摘要： The Translucent Proxying of TCP (TPOT) device and methods use TCP-OPTIONS and IP tunneling to guarantee that all IP packets belonging to a specific TCP connection will traverse the proxy which intercepts the first packet of data. This guarantee allows the ad-hoc deployment of TPOT devices anywhere within the communication network, and does not restrict the placement of proxy devices at the edge of the network. Furthermore, no extra signaling support is required for the TPOT device to properly function while the addition of TPOT devices to communication networks significantly improves the throughput of intercepted TCP packets of data.
摘要翻译： TCP（TPOT）设备和方法的半透明代理使用TCP-OPTIONS和IP隧道来保证属于特定TCP连接的所有IP包将遍历拦截第一个数据包的代理。此保证允许在通信网络内的任何地方临时部署TPOT设备，并且不会限制代理设备在网络边缘的位置。此外，当TPOT设备添加到通信网络时，TPOT设备不需要额外的信令支持，从而显着提高了所拦截的TCP数据包的吞吐量。

139. 发明申请

US20060239219A1 Application signature based traffic classification 审中-公开
标题翻译：基于应用签名的流量分类
公开(公告)号：US20060239219A1
公开(公告)日：2006-10-26
申请号：US11321054
申请日：2005-12-30
申请人： Patrick Haffner , Subhabrata Sen , Oliver Spatscheck , Dongmei Wang
发明人： Patrick Haffner , Subhabrata Sen , Oliver Spatscheck , Dongmei Wang
IPC分类号： H04B7/212
CPC分类号： H04L41/142 , H04L43/028 , H04L43/0823 , H04L63/0227
摘要： A method for identifying traffic to an application including the steps of monitoring communication traffic in a network, identifying data from communication traffic content, and constructing a model for mapping the communication traffic for an application derived from data identified from the communication traffic content is described. A related system and computer readable medium for performing the method is also described. The described method and system has utility in a wide array of networks including IP networks.
摘要翻译：一种用于识别对应用的业务的方法，包括以下步骤：监视网络中的通信业务，从通信业务内容识别数据，以及构建用于映射从通信业务内容识别的数据导出的应用的通信业务的模型。还描述了用于执行该方法的相关系统和计算机可读介质。所描述的方法和系统在包括IP网络的广泛网络中具有实用性。

140. 发明申请

US20060190998A1 Determining firewall rules for reverse firewalls 审中-公开
标题翻译：确定反向防火墙的防火墙规则
公开(公告)号：US20060190998A1
公开(公告)日：2006-08-24
申请号：US11290976
申请日：2005-11-30
申请人： William Aiello , Charles Kalmanek , William Leighton , Patrick McDaniel , Subhabrata Sen , Oliver Spatscheck , Jacobus Van der Merwe
发明人： William Aiello , Charles Kalmanek , William Leighton , Patrick McDaniel , Subhabrata Sen , Oliver Spatscheck , Jacobus Van der Merwe
IPC分类号： G06F15/16
CPC分类号： H04W28/00 , H04L43/16 , H04L63/0236 , H04L63/0254 , H04L63/0263 , H04L63/029
摘要： A reverse firewall for removing undesirable traffic from a computing network, such as a virtual private network (VPN), is disclosed. The reverse firewall uses firewall rules that may be determined and maintained within the enterprise network to control communication sent between computers in the computing network. The reverse firewall rules may be used to identify the communications between computers in the network that are undesirable and/or intrusive. For example, a computer in a network that is infected with a worm or that is surreptitiously hosting a denial-of-service attack may be identified by the reverse firewall and quarantined. The reverse firewall may be implemented in hardware and/or software.
摘要翻译：公开了用于从诸如虚拟专用网（VPN）的计算网络去除不期望的业务的反向防火墙。反向防火墙使用可以在企业网络内确定和维护的防火墙规则来控制计算网络中计算机之间发送的通信。反向防火墙规则可用于识别网络中不希望的和/或侵入的计算机之间的通信。例如，网络中受感染蠕虫或暗中托管拒绝服务攻击的计算机可能由反向防火墙识别，并被隔离。反向防火墙可以在硬件和/或软件中实现。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式