专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

21. 发明申请

US20130152162A1 METHOD AND SYSTEM FOR AUTHORIZING A LEVEL OF ACCESS OF A CLIENT TO A VIRTUAL PRIVATE NETWORK CONNECTION, BASED ON A CLIENT-SIDE ATTRIBUTE 有权
标题翻译：基于客户端属性来授权客户访问虚拟私有网络连接的方法和系统
公开(公告)号：US20130152162A1
公开(公告)日：2013-06-13
申请号：US13760898
申请日：2013-02-06
申请人： AMARNATH MULLICK , Charu Venkatraman , Shashi Nanjundaswamy , Junxiao He , Ajay Soni
发明人： AMARNATH MULLICK , Charu Venkatraman , Shashi Nanjundaswamy , Junxiao He , Ajay Soni
IPC分类号： H04L29/06
CPC分类号： H04L63/20 , H04L63/0272 , H04L63/102 , H04L63/105
摘要： An appliance and method for authorizing a level of access of a client to a virtual private network connection, based on a client-side attribute includes the step of establishing, by an appliance, a control connection with a client upon receiving a client request to establish a virtual private network connection with a network. The appliance transmits, via the control connection, a request to the client to evaluate at least one clause of a security string, the at least one clause including an expression associated with a client-side attribute. The client transmits, via the control connection, a response to the appliance comprising a result of evaluating the at least one clause by the client. The appliance assigns the client to an authorization group based on the result of evaluation of the at least one clause.
摘要翻译：基于客户端属性来授权客户端访问虚拟专用网络连接的级别的设备和方法包括以下步骤：当设备在接收到建立客户端请求时建立与客户端的控制连接与网络的虚拟专用网络连接。该设备经由控制连接向客户端发送请求以评估安全字符串的至少一个子句，所述至少一个子句包括与客户端属性相关联的表达式。客户端经由控制连接发送对设备的响应，包括由客户端评估至少一个子句的结果。该设备基于至少一个子句的评估结果将客户端分配给授权组。

22. 发明授权

US08418243B2 Systems and methods of providing an intranet internet protocol address to a client on a virtual private network 有权
标题翻译：在虚拟专用网络上向客户端提供内联网互联网协议地址的系统和方法
公开(公告)号：US08418243B2
公开(公告)日：2013-04-09
申请号：US11465980
申请日：2006-08-21
申请人： Charu Venkatraman , Junxiao He , Ajay Soni
发明人： Charu Venkatraman , Junxiao He , Ajay Soni
IPC分类号： H04L29/00
CPC分类号： H04L63/0272 , H04L63/166
摘要： The intranet IP address management solution of the appliance and/or client described herein provides an environment for efficiently assigning, managing and querying virtual private network addresses, referred to as intranet IP (IIP) addresses of virtual private network users, such as a multitude of SSL VPN users on an enterprise network. The appliance provides techniques and policies for assigning previously assigned virtual private network addresses of a user to subsequent sessions of the user as the user logs in multiple times or roams between access points. This technique is referred to IIP stickiness as the appliance attempts to provide the same IIP address to a roaming VPN user. The appliance also provides a configurable user domain naming policy so that one can ping or query the virtual private network address of a user by an easily referenceable host name identifying the user. The appliance and/or client agent also provide techniques to allow applications to seamlessly and transparently communicate on the virtual private network using the virtual private network address of the user or client on the private network.
摘要翻译：本文描述的设备和/或客户端的Intranet IP地址管理解决方案提供了一种用于有效地分配，管理和查询虚拟专用网地址的环境，被称为虚拟专用网络用户的内部网IP（IIP）地址，诸如大量企业网络上的SSL VPN用户。该设备提供用于在用户多次登录或者在接入点之间漫游时将用户先前分配的虚拟专用网地址分配给用户的后续会话的技术和策略。该技术被称为IIP粘性，因为设备试图向漫游VPN用户提供相同的IIP地址。该设备还提供可配置的用户域命名策略，以便可以通过标识用户的易于引用的主机名来ping或查询用户的虚拟专用网络地址。设备和/或客户端代理还提供技术，以允许应用程序使用专用网络上的用户或客户端的虚拟专用网地址在虚拟专用网络上无缝和透明地通信。

23. 发明申请

US20080046993A1 METHOD AND SYSTEM FOR AUTHORIZING A LEVEL OF ACCESS OF A CLIENT TO A VIRTUAL PRIVATE NETWORK CONNECTION, BASED ON A CLIENT-SIDE ATTRIBUTE 有权
标题翻译：基于客户端属性来授权客户访问虚拟私有网络连接的方法和系统
公开(公告)号：US20080046993A1
公开(公告)日：2008-02-21
申请号：US11465915
申请日：2006-08-21
申请人： Amarnath Mullick , Charu Venkatraman , Shashi Nanjundaswamy , Junxiao He , Ajay Soni
发明人： Amarnath Mullick , Charu Venkatraman , Shashi Nanjundaswamy , Junxiao He , Ajay Soni
IPC分类号： G06F17/00
CPC分类号： H04L63/20 , H04L63/0272 , H04L63/102 , H04L63/105
摘要： An appliance and method for authorizing a level of access of a client to a virtual private network connection, based on a client-side attribute includes the step of establishing, by an appliance, a control connection with a client upon receiving a client request to establish a virtual private network connection with a network. The appliance transmits, via the control connection, a request to the client to evaluate at least one clause of a security string, the at least one clause including an expression associated with a client-side attribute. The client transmits, via the control connection, a response to the appliance comprising a result of evaluating the at least one clause by the client. The appliance assigns the client to an authorization group based on the result of evaluation of the at least one clause.
摘要翻译：基于客户端属性来授权客户端访问虚拟专用网络连接的级别的设备和方法包括以下步骤：当设备在接收到建立客户端请求时建立与客户端的控制连接与网络的虚拟专用网络连接。该设备经由控制连接向客户端发送请求以评估安全字符串的至少一个子句，所述至少一个子句包括与客户端属性相关联的表达式。客户端经由控制连接发送对设备的响应，包括由客户端评估至少一个子句的结果。该设备基于至少一个子句的评估结果将客户端分配给授权组。

24. 发明申请

US20080031265A1 SYSTEMS AND METHODS FOR USING A CLIENT AGENT TO MANAGE ICMP TRAFFIC IN A VIRTUAL PRIVATE NETWORK ENVIRONMENT 有权
标题翻译：使用客户端在虚拟私有网络环境中管理ICMP流量的系统和方法
公开(公告)号：US20080031265A1
公开(公告)日：2008-02-07
申请号：US11462253
申请日：2006-08-03
申请人： Amarnath Mullick , Charu Venkatraman , Shashi Nanjundaswami , Junxiao He , Roy Rajan , Ajay Soni
发明人： Amarnath Mullick , Charu Venkatraman , Shashi Nanjundaswami , Junxiao He , Roy Rajan , Ajay Soni
IPC分类号： H04L12/56
CPC分类号： H04L12/4641 , H04L41/046 , H04L41/0893 , H04L43/00 , H04L43/0811 , H04L43/0817 , H04L43/10 , H04L63/0272 , H04L63/166
摘要： Systems and methods are described for using a client agent executing on a client to send ICMP messages to an appliance connected via a virtual private network Methods include: establishing, via a client agent executing on a client, a transport layer virtual private network connection with an appliance; intercepting, by the client agent at the network layer, an ICMP request originating from the client; and transmitting, by the client agent via a transport layer connection, the ICMP request to the appliance. Addition methods describe determining, by the appliance, the address identified by the ICMP request corresponds to a second client, the second client also connected via a virtual private network to the remote machine; and transmitting, by the appliance to the second client via the virtual private network connection, the ICMP request. Corresponding systems are also described.
摘要翻译：描述了使用在客户端上执行的客户端代理将ICMP消息发送到经由虚拟专用网连接的设备的系统和方法。方法包括：通过在客户端上执行的客户端代理来建立传输层虚拟专用网络连接器具; 由网络层的客户代理拦截来自客户端的ICMP请求; 以及由所述客户端代理经由传输层连接向所述设备发送所述ICMP请求。附加方法描述了由设备确定由ICMP请求标识的地址对应于第二客户端，第二客户端还经由虚拟专用网络连接到远程机器; 以及由所述设备经由所述虚拟专用网络连接向所述第二客户端发送所述ICMP请求。还描述了相应的系统。

25. 发明授权

US08261057B2 System and method for establishing a virtual private network 有权
标题翻译：用于建立虚拟专用网络的系统和方法
公开(公告)号：US08261057B2
公开(公告)日：2012-09-04
申请号：US12794446
申请日：2010-06-04
申请人： Prabakar Sundarrajan , Junxiao He , Ajay Soni , Shashidhara Nanjundaswamy , Arkesh Kumar
发明人： Prabakar Sundarrajan , Junxiao He , Ajay Soni , Shashidhara Nanjundaswamy , Arkesh Kumar
IPC分类号： G06F9/00
CPC分类号： H04L63/0272 , H04L63/029 , H04L63/0428 , H04L63/164 , H04L63/166 , H04L67/2814 , H04L67/289 , H04L67/34
摘要： A system and method for establishing a virtual private network (VPN) between a client and a private data communication network. An encrypted data communication session, such as a—Secure Sockets Layer (SSL) data communication session, is established between a gateway and the client over a public data communication network. The gateway then sends a programming component to the client for automatic installation and execution thereon. The programming component operates to intercept communications from client applications destined for resources on the private data communication network and to send the intercepted communications to the gateway via the encrypted data communication session instead of to the resources on the private data communication network.
摘要翻译：一种用于在客户机和专用数据通信网络之间建立虚拟专用网络（VPN）的系统和方法。通过公共数据通信网络在网关和客户端之间建立诸如安全套接层（SSL）数据通信会话之类的加密数据通信会话。网关然后将编程组件发送到客户端，以便在其上进行自动安装和执行。编程组件用于截取来自专用于专用数据通信网络上的资源的客户端应用程序的通信，并通过加密的数据通信会话而不是私有数据通信网络上的资源将拦截的通信发送到网关。

26. 发明授权

US07757074B2 System and method for establishing a virtual private network 有权
标题翻译：用于建立虚拟专用网络的系统和方法
公开(公告)号：US07757074B2
公开(公告)日：2010-07-13
申请号：US11039946
申请日：2005-01-24
申请人： Prabakar Sundarrajan , Junxiao He , Ajay Soni , Shashidhara Nanjundaswamy , Arkesh Kumar
发明人： Prabakar Sundarrajan , Junxiao He , Ajay Soni , Shashidhara Nanjundaswamy , Arkesh Kumar
IPC分类号： G06F9/00
CPC分类号： H04L63/0272 , H04L63/029 , H04L63/0428 , H04L63/164 , H04L63/166 , H04L67/2814 , H04L67/289 , H04L67/34
摘要： A system and method for establishing a virtual private network (VPN) between a client and a private data communication network. An encrypted data communication session, such as a Secure Sockets Layer (SSL) data communication session, is established between a gateway and the client over a public data communication network. The gateway then sends a programming component to the client for automatic installation and execution thereon. The programming component operates to intercept communications from client applications destined for resources on the private data communication network and to send the intercepted communications to the gateway via the encrypted data communication session instead of to the resources on the private data communication network.
摘要翻译：一种用于在客户机和专用数据通信网络之间建立虚拟专用网络（VPN）的系统和方法。通过公共数据通信网络在网关和客户端之间建立加密的数据通信会话，例如安全套接层（SSL）数据通信会话。网关然后将编程组件发送到客户端，以便在其上进行自动安装和执行。编程组件用于截取来自专用于专用数据通信网络上的资源的客户端应用程序的通信，并通过加密的数据通信会话而不是私有数据通信网络上的资源将拦截的通信发送到网关。

27. 发明申请

US20060005240A1 System and method for establishing a virtual private network 有权
标题翻译：用于建立虚拟专用网络的系统和方法
公开(公告)号：US20060005240A1
公开(公告)日：2006-01-05
申请号：US11039946
申请日：2005-01-24
申请人： Prabakar Sundarrajan , Junxiao He , Ajay Soni , Shashidhara Nanjundaswamy , Arkesh Kumar
发明人： Prabakar Sundarrajan , Junxiao He , Ajay Soni , Shashidhara Nanjundaswamy , Arkesh Kumar
IPC分类号： G06F15/16 , G06F17/00 , G06F9/00 , H04L9/00
CPC分类号： H04L63/0272 , H04L63/029 , H04L63/0428 , H04L63/164 , H04L63/166 , H04L67/2814 , H04L67/289 , H04L67/34
摘要： A system and method for establishing a virtual private network (VPN) between a client and a private data communication network. An encrypted data communication session, such as a Secure Sockets Layer (SSL) data communication session, is established between a gateway and the client over a public data communication network. The gateway then sends a programming component to the client for automatic installation and execution thereon. The programming component operates to intercept communications from client applications destined for resources on the private data communication network and to send the intercepted communications to the gateway via the encrypted data communication session instead of to the resources on the private data communication network.
摘要翻译：一种用于在客户机和专用数据通信网络之间建立虚拟专用网络（VPN）的系统和方法。通过公共数据通信网络在网关和客户端之间建立加密的数据通信会话，例如安全套接层（SSL）数据通信会话。网关然后将编程组件发送到客户端，以便在其上进行自动安装和执行。编程组件用于截取来自专用于专用数据通信网络上的资源的客户端应用程序的通信，并通过加密的数据通信会话而不是私有数据通信网络上的资源将拦截的通信发送到网关。

28. 发明申请

US20100241846A1 SYSTEM AND METHOD FOR ESTABLISHING A VIRTUAL PRIVATE NETWORK 有权
标题翻译：建立虚拟私有网络的系统和方法
公开(公告)号：US20100241846A1
公开(公告)日：2010-09-23
申请号：US12794446
申请日：2010-06-04
申请人： Prabakar Sundarrajan , Junxiao He , Ajay Soni , Shashidhara Nanjundaswamy , Arkesh Kumar
发明人： Prabakar Sundarrajan , Junxiao He , Ajay Soni , Shashidhara Nanjundaswamy , Arkesh Kumar
IPC分类号： G06F9/00 , G06F15/16
CPC分类号： H04L63/0272 , H04L63/029 , H04L63/0428 , H04L63/164 , H04L63/166 , H04L67/2814 , H04L67/289 , H04L67/34
摘要： A system and method for establishing a virtual private network (VPN) between a client and a private data communication network. An encrypted data communication session, such as a—Secure Sockets Layer (SSL) data communication session, is established between a gateway and the client over a public data communication network. The gateway then sends a programming component to the client for automatic installation and execution thereon. The programming component operates to intercept communications from client applications destined for resources on the private data communication network and to send the intercepted communications to the gateway via the encrypted data communication session instead of to the resources on the private data communication network.
摘要翻译：一种用于在客户机和专用数据通信网络之间建立虚拟专用网络（VPN）的系统和方法。通过公共数据通信网络在网关和客户端之间建立诸如安全套接层（SSL）数据通信会话之类的加密数据通信会话。网关然后将编程组件发送到客户端，以便在其上进行自动安装和执行。编程组件用于截取来自专用于专用数据通信网络上的资源的客户端应用程序的通信，并通过加密的数据通信会话而不是私有数据通信网络上的资源将拦截的通信发送到网关。

29. 发明授权

US08726006B2 System and method for establishing a virtual private network 有权
标题翻译：用于建立虚拟专用网络的系统和方法
公开(公告)号：US08726006B2
公开(公告)日：2014-05-13
申请号：US13590630
申请日：2012-08-21
申请人： Prabakar Sundarrajan , Junxiao He , Ajay Soni , Shashidhara Nanjundaswamy , Arkesh Kumar
发明人： Prabakar Sundarrajan , Junxiao He , Ajay Soni , Shashidhara Nanjundaswamy , Arkesh Kumar
IPC分类号： G06F9/00
CPC分类号： H04L63/0272 , H04L63/029 , H04L63/0428 , H04L63/164 , H04L63/166 , H04L67/2814 , H04L67/289 , H04L67/34
摘要： A system and method for establishing a virtual private network (VPN) between a client and a private data communication network. An encrypted data communication session, such as a Secure Sockets Layer (SSL) data communication session, is established between a gateway and the client over a public data communication network. The gateway then sends a programming component to the client for automatic installation and execution thereon. The programming component operates to intercept communications from client applications destined for resources on the private data communication network and to send the intercepted communications to the gateway via the encrypted data communication session instead of to the resources on the private data communication network.
摘要翻译：一种用于在客户机和专用数据通信网络之间建立虚拟专用网络（VPN）的系统和方法。通过公共数据通信网络在网关和客户端之间建立加密的数据通信会话，例如安全套接层（SSL）数据通信会话。网关然后将编程组件发送到客户端，以便在其上进行自动安装和执行。编程组件用于截取来自专用于专用数据通信网络上的资源的客户端应用程序的通信，并通过加密的数据通信会话而不是专用数据通信网络上的资源将拦截的通信发送到网关。

30. 发明申请

US20110222535A1 Systems and Methods for Routing VPN Traffic Around Network Distribution 有权
标题翻译：用于路由网络分布的VPN流量的系统和方法
公开(公告)号：US20110222535A1
公开(公告)日：2011-09-15
申请号：US13093703
申请日：2011-04-25
申请人： Josephine Suganthi , Junxiao He , Sergey Verzunov , Anil Shetty , Charu Venkatraman
发明人： Josephine Suganthi , Junxiao He , Sergey Verzunov , Anil Shetty , Charu Venkatraman
IPC分类号： H04L12/56
CPC分类号： H04L63/0272
摘要： Methods for using a client agent to route client requests among a plurality of appliances using transport layer information include the steps of: establishing, by a client agent executing on a client, a first transport layer connection with a first appliance of a plurality of appliances, the first appliance providing access to one or more servers; establishing, by a client agent executing on the client, a second transport layer connection with a second appliance of a plurality of appliances, the second appliance providing access to one or more servers; intercepting, by the client agent, a packet transmitted by the client; selecting, by the client agent, one of the connections to transmit the intercepted packet based on a characteristic of at least one of: the transport layer connections, the plurality of appliances, or the servers; and transmitting the intercepted packet via the selected connection.
摘要翻译：使用客户端代理使用传输层信息在多个设备之间路由客户端请求的方法包括以下步骤：由在客户端上执行的客户端代理建立与多个设备的第一设备的第一传输层连接，第一个设备提供对一个或多个服务器的访问; 由在客户端上执行的客户端代理建立与多个设备的第二设备的第二传输层连接，所述第二设备提供对一个或多个服务器的访问; 由客户端代理拦截客户端发送的数据包; 基于以下至少一个的特征，由所述客户端代理选择所述连接之一来发送所截取的分组：传输层连接，所述多个设备或所述服务器; 并通过所选择的连接发送截取的分组。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式