专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

51. 发明授权

US08312129B1 Using virtual networking devices to connect managed computer networks 有权
标题翻译：使用虚拟网络设备连接被管理的计算机网络
公开(公告)号：US08312129B1
公开(公告)日：2012-11-13
申请号：US13194840
申请日：2011-07-29
申请人： Kevin Christopher Miller , Eric Jason Brandwine , Andrew J. Doane
发明人： Kevin Christopher Miller , Eric Jason Brandwine , Andrew J. Doane
IPC分类号： G06F15/16
CPC分类号： H04L49/252 , H04L29/06 , H04L29/08072 , H04L41/0803 , H04L41/12 , H04L45/02 , H04L49/15 , H04L49/70 , H04L65/1069
摘要： Techniques are described for providing managed virtual computer networks whose configured logical network topology may have one or more virtual networking devices, such as by a network-accessible configurable network service, with corresponding networking functionality provided for communications between multiple computing nodes of a virtual computer network by emulating functionality that would be provided by the networking devices if they were physically present. The networking functionality provided for a managed computer network may include supporting a connection between that managed computer network and other managed computer networks, such as via a provided virtual peering router to which each of the managed computer networks may connect, with the functionality of the virtual peering router being emulated by modules of the configurable network service without physically providing the virtual peering router, including to manage data communications between computing nodes of the inter-connected managed computer networks in accordance with client-specified configuration information.
摘要翻译：描述了用于提供被管理的虚拟计算机网络的技术，其被配置的逻辑网络拓扑可以具有一个或多个虚拟网络设备，诸如通过网络可访问的可配置网络服务，具有为虚拟计算机网络的多个计算节点之间的通信提供的相应的网络功能通过模拟由网络设备提供的功能，如果它们是物理存在的。为受管理的计算机网络提供的联网功能可以包括支持该被管理的计算机网络与其他被管理的计算机网络之间的连接，例如经由所提供的虚拟对等路由器，每个被管理的计算机网络可以连接到该虚拟对等路由器与虚拟的对等路由器被可配置网络服务的模块仿真，而不物理地提供虚拟对等路由器，包括根据客户端指定的配置信息来管理连接在一起的被管理计算机网络的计算节点之间的数据通信。

52. 发明授权

US08239572B1 Custom routing decisions 有权
公开(公告)号：US08239572B1
公开(公告)日：2012-08-07
申请号：US12827398
申请日：2010-06-30
申请人： Eric Jason Brandwine , Swaminathan Sivasubramanian , Bradley E. Marshall , Tate Andrew Certain
发明人： Eric Jason Brandwine , Swaminathan Sivasubramanian , Bradley E. Marshall , Tate Andrew Certain
IPC分类号： G06F15/16 , G06F15/177
CPC分类号： G06F9/45558 , G06F2009/45595 , H04L45/04
摘要： With the advent of virtualization technologies, networks and routing for those networks can now be simulated using commodity hardware rather than actual routers. For example, virtualization technologies such as those provided by VMWare, XEN, or User-Mode Linux can be adapted to allow a single physical computing machine to be shared among multiple virtual networks by providing each virtual network user with one or more virtual machines hosted by the single physical computing machine, with each such virtual machine being a software simulation acting as a distinct logical computing system that provides users with the illusion that they are the sole operators and administrators of a given hardware computing resource. In addition, routing can be accomplished through software, providing additional routing flexibility to the virtual network in comparison with traditional routing. As a result, in some implementations, supplemental information other than packet information can be used to determine network routing.

53. 发明授权

US08201237B1 Establishing secure remote access to private computer networks 有权
标题翻译：建立对私有计算机网络的安全远程访问
公开(公告)号：US08201237B1
公开(公告)日：2012-06-12
申请号：US12332231
申请日：2008-12-10
申请人： Andrew J. Doane , Eric Jason Brandwine
发明人： Andrew J. Doane , Eric Jason Brandwine
IPC分类号： H04L29/06
CPC分类号： H04L63/0272 , H04L61/2069 , H04L63/10 , H04L67/18 , H04L67/34 , H04L67/36
摘要： Techniques are described for providing users with access to computer networks, such as to enable users to interact with a remote configurable network service to create and configure computer networks that are provided by the configurable network service for use by the users. Secure private access between a computer network provided for a user by the configurable network service and one or more other remote computing systems of the user (e.g., a remote private network) may be enabled in various ways. For example, a user may programmatically invoke an API provided by the configurable network service to obtain assistance in establishing remote access from a remote location to a provided computer network of the configurable network service, such as to establish a VPN connection from the remote location to the provided computer network using hardware and/or software supplied to the remote location in response to the API invocation.
摘要翻译：描述了用于向用户提供对计算机网络的访问的技术，例如使得用户能够与远程可配置网络服务交互以创建和配置由可配置网络服务提供以供用户使用的计算机网络。通过可配置网络服务为用户提供的计算机网络与用户的一个或多个其他远程计算系统（例如，远程专用网络）之间的安全私人访问可以以各种方式启用。例如，用户可以以编程方式调用可配置网络服务提供的API，以获得建立从远程位置到所提供的可配置网络服务的计算机网络的远程访问的帮助，例如建立从远程位置到提供的计算机网络使用响应于API调用提供给远程位置的硬件和/或软件。

54. 发明授权

US08131852B1 Using virtual networking devices to manage routing communications between connected computer networks 有权
标题翻译：使用虚拟网络设备来管理连接的计算机网络之间的路由通信
公开(公告)号：US08131852B1
公开(公告)日：2012-03-06
申请号：US13094334
申请日：2011-04-26
申请人： Kevin Christopher Miller , Eric Jason Brandwine , Andrew J. Doane
发明人： Kevin Christopher Miller , Eric Jason Brandwine , Andrew J. Doane
IPC分类号： G06F15/16
CPC分类号： H04L41/0803 , H04L12/6418 , H04L29/06 , H04L29/08072 , H04L41/5054 , H04L67/141 , H04L67/16
摘要： Techniques are described for providing managed virtual computer networks whose configured logical network topology may have one or more virtual networking devices, such as by a network-accessible configurable network service, with corresponding networking functionality provided for communications between multiple computing nodes of a virtual computer network by emulating functionality that would be provided by the networking devices if they were physically present. The networking functionality provided for a managed computer network may include supporting a connection between that managed computer network and one or more other managed computer networks, such as via a provided virtual peering router to which each of the managed computer networks may connect, with the functionality of the virtual peering router being emulated by modules of the configurable network service without physically providing the virtual peering router, including to manage routing communications between the inter-connected managed computer networks in accordance with client-specified configuration information.
摘要翻译：描述了用于提供被管理的虚拟计算机网络的技术，其被配置的逻辑网络拓扑可以具有一个或多个虚拟网络设备，诸如通过网络可访问的可配置网络服务，具有为虚拟计算机网络的多个计算节点之间的通信提供的相应的网络功能通过模拟由网络设备提供的功能，如果它们是物理存在的。为被管理的计算机网络提供的联网功能可以包括支持该被管理计算机网络与一个或多个其他被管理的计算机网络之间的连接，诸如经由所提供的虚拟对等路由器，每个被管理的计算机网络可以连接到该虚拟对等路由器与功能虚拟对等路由器被可配置网络服务的模块仿真，而不物理地提供虚拟对等路由器，包括根据客户端指定的配置信息来管理连接在一起的被管理计算机网络之间的路由通信。

55. 发明授权

US09524167B1 Providing location-specific network access to remote services 有权
标题翻译：提供位置特定的网络访问远程服务
公开(公告)号：US09524167B1
公开(公告)日：2016-12-20
申请号：US12332241
申请日：2008-12-10
申请人： Daniel T. Cohn , Eric Jason Brandwine , Andrew J. Doane
发明人： Daniel T. Cohn , Eric Jason Brandwine , Andrew J. Doane
IPC分类号： G06F15/16 , G06F15/177 , G06F15/173 , G06F9/30 , G06F9/38 , H04L12/46 , H04L29/06
CPC分类号： H04L63/0272 , G06F9/30098 , G06F9/384 , G06F9/3842 , G06F9/3863 , G06F9/3885 , H04L12/4633 , H04L12/4641 , H04L12/4675 , H04L41/0886 , H04L61/2076
摘要： Techniques are described for providing users with access to computer networks, such as to enable users to create and configure computer networks that are provided by a remote configurable network service for the users' use. Computer networks provided by the configurable network service may be configured to be private computer networks that are accessible only by the users who create them, and may each be created and configured by a client of the configurable network service to be an extension to an existing computer network of the client, such as a private computer network extension to an existing private computer network of the client. In addition, access to remote resource services may be configured and provided from such computer networks in various manners, such as to automatically include access control information to limit access to particular resources to computing nodes at the location of that provided computer network.
摘要翻译：描述了为用户提供对计算机网络的访问的技术，例如使得用户能够创建和配置由远程可配置网络服务提供以供用户使用的计算机网络。由可配置网络服务提供的计算机网络可以被配置为专用计算机网络，其仅由创建它们的用户可访问，并且可以由可配置网络服务的客户端创建和配置，以作为现有计算机的扩展客户端的网络，如私有计算机网络扩展到客户端的现有专用计算机网络。此外，可以以各种方式从这样的计算机网络配置和提供对远程资源服务的访问，诸如自动包括访问控制信息，以限制对提供的计算机网络的位置处的计算节点的特定资源的访问。

56. 发明授权

US09304800B1 Using virtual provisioning machines to provision devices 有权
标题翻译：使用虚拟配置机器来配置设备
公开(公告)号：US09304800B1
公开(公告)日：2016-04-05
申请号：US13535496
申请日：2012-06-28
申请人： Thomas Bradley Scholl , Eric Jason Brandwine , Zachary J. Hansen , Richard M. Lotz
发明人： Thomas Bradley Scholl , Eric Jason Brandwine , Zachary J. Hansen , Richard M. Lotz
IPC分类号： G06F9/455 , G06F9/50
CPC分类号： G06F9/45537 , G06F9/45558 , G06F9/5077 , G06F2009/45562
摘要： Systems and methods are disclosed for establishing a connection between a provisioning environment having one or more virtual provisioning machines associated therewith and a set of devices located remotely from the provisioning environment, and for facilitating establishment of a provisioned state for the set of remote devices based at least in part on a provisioning state associated with the virtual provisioning machines.
摘要翻译：公开了用于建立具有一个或多个与其相关联的虚拟供应机器的供应环境和远离供应环境的一组设备之间的连接的系统和方法，并且用于基于以下方式为所述一组远程设备建立供应状态至少部分地基于与虚拟配置机器相关联的供应状态。

57. 发明授权

US09294507B1 Techniques for data security in a multi-tenant environment 有权
标题翻译：多租户环境中的数据安全技术
公开(公告)号：US09294507B1
公开(公告)日：2016-03-22
申请号：US13535143
申请日：2012-06-27
申请人： Gregory B. Roth , Eric Jason Brandwine , Graeme D. Baer
发明人： Gregory B. Roth , Eric Jason Brandwine , Graeme D. Baer
IPC分类号： G06F21/31 , H04L29/06
CPC分类号： H04L63/102 , G06F9/455 , G06F21/31 , G06F21/606 , H04L63/105 , H04L63/20
摘要： The usage of data in a multi-tenant environment can be controlled by utilizing functionality at the hypervisor level of various resources in the environment. Data can be associated with various tags, security levels, and/or compartments. The ability of resources or entities to access the data can depend at least in part upon whether the resources or entities are also associated with the tags, security levels, and/or compartments. Limitations on the usage of the data can be controlled by one or more policies associated with the tags, security levels, and/or compartments. A control service can monitor traffic to enforce the appropriate rules or policies, and in some cases can prevent encrypted traffic from passing beyond a specified egress point unless the encryption was performed by a trusted resource with the appropriate permissions.
摘要翻译：可以通过利用环境中各种资源的虚拟机管理程序级别的功能来控制在多租户环境中的数据的使用。数据可以与各种标签，安全级别和/或隔离专区相关联。资源或实体访问数据的能力至少部分取决于资源或实体是否也与标签，安全级别和/或隔离专区相关联。可以通过与标签，安全级别和/或隔间相关联的一个或多个策略来控制数据使用的限制。控制服务可以监视流量以执行相应的规则或策略，并且在某些情况下可以防止加密流量超出指定的出口点，除非加密是由具有适当权限的受信任资源执行的。

58. 发明授权

US09215076B1 Key generation for hierarchical data access 有权
标题翻译：层次数据访问的密钥生成
公开(公告)号：US09215076B1
公开(公告)日：2015-12-15
申请号：US13431882
申请日：2012-03-27
申请人： Gregory B. Roth , Marc R. Barbour , Bradley Jeffery Behm , Cristian M. Ilac , Eric Jason Brandwine
发明人： Gregory B. Roth , Marc R. Barbour , Bradley Jeffery Behm , Cristian M. Ilac , Eric Jason Brandwine
IPC分类号： H04L29/06 , H04L9/32
CPC分类号： H04L63/062 , G06F21/64 , H04L9/0836 , H04L9/321 , H04L9/3242 , H04L9/3247 , H04L63/06 , H04L63/08 , H04L2209/38 , H04L2209/60 , H04L2463/061
摘要： Systems and methods for authentication generate keys from secret credentials shared between authenticating parties and authenticators. Generation of the keys may involve utilizing specialized information in the form of parameters that are used to specialize keys. Keys and/or information derived from keys held by multiple authorities may be used to generate other keys such that signatures requiring such keys and/or information can be verified without access to the keys. Keys may also be derived to form a hierarchy of keys that are distributed such that a key holder's ability to decrypt data depends on the key's position in the hierarchy relative to the position of a key used to encrypt the data. Key hierarchies may also be used to distribute key sets to content processing devices to enable the devices to decrypt content such that sources or potential sources of unauthorized content are identifiable from the decrypted content.
摘要翻译：用于认证的系统和方法从认证方和认证者之间共享的秘密凭证生成密钥。密钥的生成可以涉及利用用于专门化密钥的参数形式的专门信息。可以使用由多个机构保存的密钥导出的密钥和/或信息来生成其他密钥，使得可以在不访问密钥的情况下验证需要这样的密钥和/或信息的签名。还可以导出密钥以形成分布的密钥的层次结构，使得密钥持有者解密数据的能力取决于密钥在层级中相对于用于加密数据的密钥的位置的位置。密钥层次也可以用于将密钥集分配给内容处理设备，以使得设备能够解密内容，使得未经授权的内容的源或潜在来源可以从解密的内容中识别。

59. 发明授权

US09106540B2 Providing logical networking functionality for managed computer networks 有权
标题翻译：为管理的计算机网络提供逻辑网络功能
公开(公告)号：US09106540B2
公开(公告)日：2015-08-11
申请号：US12414260
申请日：2009-03-30
申请人： Daniel T. Cohn , Eric Jason Brandwine , Andrew J. Doane
发明人： Daniel T. Cohn , Eric Jason Brandwine , Andrew J. Doane
IPC分类号： H04L12/24 , H04L12/46 , H04L12/701
CPC分类号： H04L41/0803 , G06F9/45558 , G06F2009/45595 , G06F2209/5011 , H04L12/4641 , H04L41/0213 , H04L41/0806 , H04L41/0893 , H04L41/12 , H04L45/00 , H04L45/02 , H04L67/10
摘要： Techniques are described for providing logical networking functionality for managed computer networks, such as for virtual computer networks provided on behalf of users or other entities. In some situations, a user may configure or otherwise specify a network topology for a virtual computer network, such as a logical network topology that separates multiple computing nodes of the virtual computer network into multiple logical sub-networks and/or that specifies one or more logical networking devices for the virtual computer network. After a network topology is specified for a virtual computer network, logical networking functionality corresponding to the network topology may be provided in various manners, such as without physically implementing the network topology for the virtual computer network. In some situations, the computing nodes may include virtual machine nodes hosted on one or more physical computing machines or systems, such as by or on behalf of one or more users.
摘要翻译：描述了用于为被管理的计算机网络提供逻辑网络功能的技术，例如用于代表用户或其他实体提供的虚拟计算机网络。在某些情况下，用户可以配置或以其他方式指定虚拟计算机网络的网络拓扑，例如将虚拟计算机网络的多个计算节点分成多个逻辑子网络的逻辑网络拓扑和/或指定一个或多个用于虚拟计算机网络的逻辑网络设备。在为虚拟计算机网络指定了网络拓扑之后，可以以各种方式提供与网络拓扑相对应的逻辑网络功能，例如不物理实现虚拟计算机网络的网络拓扑。在一些情况下，计算节点可以包括托管在一个或多个物理计算机或系统上的虚拟机节点，诸如由一个或多个用户代表或代表一个或多个用户。

60. 发明授权

US09094421B1 Using virtual networking devices to connect managed computer networks 有权
标题翻译：使用虚拟网络设备连接被管理的计算机网络
公开(公告)号：US09094421B1
公开(公告)日：2015-07-28
申请号：US13620809
申请日：2012-09-15
申请人： Kevin Christopher Miller , Eric Jason Brandwine , Andrew J. Doane
发明人： Kevin Christopher Miller , Eric Jason Brandwine , Andrew J. Doane
IPC分类号： G06F15/16 , H04L29/06 , H04L29/08
CPC分类号： H04L49/252 , H04L29/06 , H04L29/08072 , H04L41/0803 , H04L41/12 , H04L45/02 , H04L49/15 , H04L49/70 , H04L65/1069
摘要： Techniques are described for providing managed virtual computer networks whose configured logical network topology may have one or more virtual networking devices, such as by a network-accessible configurable network service, with corresponding networking functionality provided for communications between multiple computing nodes of a virtual computer network by emulating functionality that would be provided by the networking devices if they were physically present. The networking functionality provided for a managed computer network may include supporting a connection between that managed computer network and other managed computer networks, such as via a provided virtual peering router to which each of the managed computer networks may connect, with the functionality of the virtual peering router being emulated by modules of the configurable network service without physically providing the virtual peering router, including to manage data communications between computing nodes of the inter-connected managed computer networks in accordance with client-specified configuration information.
摘要翻译：描述了用于提供被管理的虚拟计算机网络的技术，其被配置的逻辑网络拓扑可以具有一个或多个虚拟网络设备，诸如通过网络可访问的可配置网络服务，具有为虚拟计算机网络的多个计算节点之间的通信提供的相应的网络功能通过模拟由网络设备提供的功能，如果它们是物理存在的。为受管理的计算机网络提供的联网功能可以包括支持该被管理的计算机网络与其他被管理的计算机网络之间的连接，例如经由所提供的虚拟对等路由器，每个被管理的计算机网络可以连接到该虚拟对等路由器与虚拟的对等路由器被可配置网络服务的模块仿真，而不物理地提供虚拟对等路由器，包括根据客户端指定的配置信息来管理连接在一起的被管理计算机网络的计算节点之间的数据通信。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式