专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20070121596A1 System and method for providing network level and nodal level vulnerability protection in VoIP networks 有权
标题翻译：在VoIP网络中提供网络级和节点级漏洞保护的系统和方法
公开(公告)号：US20070121596A1
公开(公告)日：2007-05-31
申请号：US11502244
申请日：2006-08-09
申请人： Krishna Kurapati , Sachin Joglekar , Venkatesan Iyengar Prasanna , Satyam Tyagi , Guru Thodime , Pravin Khandelwal , Chandrasekhar Manchenella , Mukesh Singh , Raghavendra Thodime
发明人： Krishna Kurapati , Sachin Joglekar , Venkatesan Iyengar Prasanna , Satyam Tyagi , Guru Thodime , Pravin Khandelwal , Chandrasekhar Manchenella , Mukesh Singh , Raghavendra Thodime
IPC分类号： H04L12/66
CPC分类号： H04L63/0823 , H04L29/06027 , H04L63/10 , H04L63/1458 , H04L63/166 , H04L65/1079 , H04L2463/141 , H04M3/436 , H04M7/0078
摘要： The present invention provides a system, method and apparatus for providing network level and nodal level vulnerability protection in VoIP networks by receiving a communication, filtering the received communication using three or more stages selected from the group comprising a media protection and filtering plane, a policy based filtering plane, a signature based filtering plane, a protocol anomaly detection and filtering plane and a behavioral learning based filtering plane, and either allowing or denying the received communication based the filtering step. The stages are applicable to one or more protocols including SIP, IMS, UMA, H.248, H.323, RTP, CSTA/XML or a combination thereof. In addition, the stages can be implemented within a single device or are distributed across a network (e.g., SIP network, a UMA network, an IMS network or a combination thereof).
摘要翻译：本发明提供一种用于通过接收通信来在VoIP网络中提供网络级和节点级漏洞保护的系统，方法和装置，使用从包括媒体保护和过滤平面的组中选择的三个或多个阶段来过滤所接收的通信，策略基于签名的过滤平面，协议异常检测和过滤平面以及基于行为学习的过滤平面，以及基于过滤步骤允许或拒绝所接收的通信。这些阶段适用于一种或多种协议，包括SIP，IMS，UMA，H.248，H.323，RTP，CSTA / XML或其组合。此外，这些级可以在单个设备内实现，或者跨网络分布（例如，SIP网络，UMA网络，IMS网络或其组合）。

2. 发明申请

US20060036727A1 System and method for detecting and preventing denial of service attacks in a communications system 有权
公开(公告)号：US20060036727A1
公开(公告)日：2006-02-16
申请号：US10917771
申请日：2004-08-13
申请人： Krishna Kurapati , Sachin Joglekar
发明人： Krishna Kurapati , Sachin Joglekar
IPC分类号： G06F15/173 , H04L9/32
CPC分类号： H04L63/1458 , H04L2463/141
摘要： A method and system are provided for use in detecting and preventing attacks in a communications network. In one example, the method includes calculating first and second traffic volumes based on messages received at a first time and a second time, respectively. An average acceleration is calculated based on the first and second traffic volumes, and the method identifies whether the average acceleration has crossed a threshold. The messages are serviced only if the average acceleration has not crossed the threshold.

3. 发明申请

US20110173697A1 SYSTEM AND METHOD FOR DETECTING AND PREVENTING DENIAL OF SERVICE ATTACKS IN A COMMUNICATIONS SYSTEM 有权
标题翻译：用于检测和防止通信系统中服务攻击的问题的系统和方法
公开(公告)号：US20110173697A1
公开(公告)日：2011-07-14
申请号：US13052959
申请日：2011-03-21
申请人： Krishna Kurapati , Sachin Joglekar
发明人： Krishna Kurapati , Sachin Joglekar
IPC分类号： G06F11/00
CPC分类号： H04L63/1458 , H04L2463/141
摘要： A method and system are provided for use in detecting and preventing attacks in a communications network. In one example, the method includes calculating first and second traffic volumes based on messages received at a first time and a second time, respectively. An average acceleration is calculated based on the first and second traffic volumes, and the method identifies whether the average acceleration has crossed a threshold. The messages are serviced only if the average acceleration has not crossed the threshold.
摘要翻译：提供了一种用于检测和防止通信网络中的攻击的方法和系统。在一个示例中，该方法包括基于分别在第一时间和第二时间接收到的消息来计算第一和第二业务量。基于第一和第二业务量计算平均加速度，并且该方法识别平均加速度是否已经超过阈值。仅当平均加速度没有超过阈值时，消息才被服务。

4. 发明申请

US20070076853A1 System, method and apparatus for classifying communications in a communications system 有权
标题翻译：用于对通信系统中的通信进行分类的系统，方法和装置
公开(公告)号：US20070076853A1
公开(公告)日：2007-04-05
申请号：US11521427
申请日：2006-09-14
申请人： Krishna Kurapati , Nathaniel Ayewah
发明人： Krishna Kurapati , Nathaniel Ayewah
IPC分类号： H04M1/24
CPC分类号： H04M3/436 , H04L29/06027 , H04L51/12 , H04L63/1458 , H04L65/1079 , H04M7/0078
摘要： The present invention provides a system, method and apparatus for automatically classifying voice communications, such as voice messages and phone calls in prerecorded voicemails (one speaker) and two-way conversations, as either spam or legitimate signals in a communications system (e.g., SIP, IMS, UMA, etc.). More specifically, the present invention classifies a voice communication session by receiving one or more voice communication packets associated with the voice communication session, extracting one or more properties from the received voice communication packets and classifying the voice communication session based on the extracted properties. The present invention can also be implemented as a computer program embodied on a computer readable medium wherein each step is performed by one or more code segments.
摘要翻译：本发明提供一种用于在预先记录的语音邮件（一个扬声器）和双向对话中将语音通信（例如语音消息和电话）自动分类为通信系统中的垃圾邮件或合法信号的系统，方法和装置（例如，SIP ，IMS，UMA等）。更具体地，本发明通过接收与语音通信会话相关联的一个或多个语音通信分组来分类语音通信会话，从接收到的语音通信分组中提取一个或多个属性，并且基于所提取的属性对语音通信会话进行分类。本发明还可以实现为体现在计算机可读介质上的计算机程序，其中每个步骤由一个或多个代码段执行。

5. 发明授权

US07933985B2 System and method for detecting and preventing denial of service attacks in a communications system 有权
标题翻译：用于在通信系统中检测和防止拒绝服务攻击的系统和方法
公开(公告)号：US07933985B2
公开(公告)日：2011-04-26
申请号：US10917771
申请日：2004-08-13
申请人： Krishna Kurapati , Sachin Joglekar
发明人： Krishna Kurapati , Sachin Joglekar
IPC分类号： G06F15/173 , G06F21/06
CPC分类号： H04L63/1458 , H04L2463/141
摘要： A method and system are provided for use in detecting and preventing attacks in a communications network. In one example, the method includes calculating first and second traffic volumes based on messages received at a first time and a second time, respectively. An average acceleration is calculated based on the first and second traffic volumes, and the method identifies whether the average acceleration has crossed a threshold. The messages are serviced only if the average acceleration has not crossed the threshold.
摘要翻译：提供了一种用于检测和防止通信网络中的攻击的方法和系统。在一个示例中，该方法包括基于分别在第一时间和第二时间接收到的消息来计算第一和第二业务量。基于第一和第二业务量计算平均加速度，并且该方法识别平均加速度是否已经超过阈值。仅当平均加速度没有超过阈值时，消息才被服务。

6. 发明申请

US20100107230A1 SYSTEM, METHOD AND APPARATUS FOR AUTHENTICATING AND PROTECTING AN IP USER-END DEVICE 有权
标题翻译：用于认证和保护IP用户端设备的系统，方法和装置
公开(公告)号：US20100107230A1
公开(公告)日：2010-04-29
申请号：US12603236
申请日：2009-10-21
申请人： Satyam Tyagi , Guru-Prasad Thodime-Venkata
发明人： Satyam Tyagi , Guru-Prasad Thodime-Venkata
IPC分类号： H04L29/06 , G06F15/16
CPC分类号： H04L65/1076 , H04L63/08 , H04L63/083 , H04L63/101 , H04L65/1069 , H04M7/0078
摘要： A system, method and apparatus authenticates and protects an Internet Protocol (IP) user-end device by providing a client-based security software resident on the IP user-end device, authenticating the IP user-end device using the client-based security software and a network security node communicably coupled to the IP user-end device, authenticating a user of the IP user-end device whenever a trigger condition occurs using an in-band channel between the client-based security software and the network security node, and protecting the IP user-end device by: (a) screening incoming IP traffic to the IP user-end device using the client-based security software, and (b) detecting an attack or a threat involving the IP user-end device using the network security node.
摘要翻译：系统，方法和设备通过提供驻留在IP用户端设备上的基于客户端的安全软件来认证和保护因特网协议（IP）用户端设备，使用基于客户端的安全软件来认证IP用户端设备以及可通信地耦合到IP用户端设备的网络安全节点，每当使用基于客户端的安全软件和网络安全节点之间的带内信道发生触发条件时，认证IP用户端设备的用户，以及通过以下方式来保护IP用户端设备：（a）使用基于客户端的安全软件将进入的IP流量筛选到IP用户端设备，以及（b）使用所述IP用户端设备检测涉及IP用户端设备的攻击或威胁网络安全节点。

7. 发明申请

US20090168756A1 System, Method and Apparatus for Clientless Two Factor Authentication in VoIP Networks 有权
标题翻译： VoIP网络中无客户端双因素认证的系统，方法和设备
公开(公告)号：US20090168756A1
公开(公告)日：2009-07-02
申请号：US12028781
申请日：2008-02-08
申请人： Srikrishna Kurapati , Guru-Prasad Thodime-Venkata , Satyam Tyagi
发明人： Srikrishna Kurapati , Guru-Prasad Thodime-Venkata , Satyam Tyagi
IPC分类号： H04L12/66
CPC分类号： H04L65/1076 , H04L63/08 , H04L63/083 , H04L63/101 , H04L65/1069 , H04M7/0078
摘要： The present invention provides a system, method and apparatus for authenticating an Internet Protocol (IP) phone and a user of the IP phone by determining whether the IP phone is an authorized device, and whenever the IP phone is authorized and a trigger condition occurs, determining whether the user of the IP phone is authorized. The user authorization process initiates a call to the IP phone, sends a request for a passcode to the IP phone, sends a message to disable the IP phone whenever the passcode is invalid, and terminates the call. The user authentication process uses an in-band channel and the IP phone does not run a two factor authentication client application during the authentication process.
摘要翻译：本发明提供一种用于通过确定IP电话是授权设备来认证互联网协议（IP）电话和IP电话用户的系统，方法和装置，并且每当IP电话被授权并且触发条件发生时，确定IP电话的用户是否被授权。用户授权过程发起对IP电话的呼叫，向IP电话发送密码请求，每当密码无效时发送消息来禁用IP电话，并终止呼叫。用户认证过程使用带内信道，并且IP电话在认证过程期间不运行双因素认证客户端应用。

8. 发明申请

US20090217039A1 System, Method and Apparatus for Authenticating Calls 有权
标题翻译：用于认证呼叫的系统，方法和设备
公开(公告)号：US20090217039A1
公开(公告)日：2009-08-27
申请号：US12366630
申请日：2009-02-05
申请人： Srikrishna Kurapati , Rajesh Mohan , Karthikeyan Sadhasivam , Satyam Tyagi
发明人： Srikrishna Kurapati , Rajesh Mohan , Karthikeyan Sadhasivam , Satyam Tyagi
IPC分类号： H04L9/32 , G06F21/00
CPC分类号： H04M3/436 , H04L9/3215 , H04L9/3231 , H04L9/3273 , H04L63/126 , H04L63/1441 , H04L63/1483 , H04L2209/56 , H04M2203/6054
摘要： The present invention provides a system, method and apparatus for authenticating calls that is a robust Anti-vishing solution. The present invention can identify Caller ID spoofing, verify dialed number to detect man-in-the middle and verify called party against dialed digits to detect impersonation. This solution can handle calls coming from any phone any where with little impact on user experience. Two separate solutions are tailored for smart phones (communication devices capable of running application software) and traditional phones to reduce the impact to user experience while providing robust verification.
摘要翻译：本发明提供了一种用于认证作为强大的反维护解决方案的呼叫的系统，方法和装置。本发明可以识别来电显示欺骗，验证拨号号码以检测中间人员，并根据拨号数字验证被叫方以检测模拟。该解决方案可以处理来自任何手机的呼叫，对用户体验影响不大。针对智能手机（能够运行应用软件的通信设备）和传统手机定制了两个独立的解决方案，以减少对用户体验的影响，同时提供强大的验证。

9. 发明申请

US20090144820A1 System, Method and Apparatus for Protecting a Network or Device Against High Volume Attacks 有权
标题翻译：用于保护网络或设备免受大容量攻击的系统，方法和装置
公开(公告)号：US20090144820A1
公开(公告)日：2009-06-04
申请号：US11769609
申请日：2007-06-27
申请人： Srikrishna Kurapati , Sachin Purushottam Joglekar , Krishna Sobhan Bhaskar Kokkiligadda , Mukesh Kumar Singh , Samrat Saha
发明人： Srikrishna Kurapati , Sachin Purushottam Joglekar , Krishna Sobhan Bhaskar Kokkiligadda , Mukesh Kumar Singh , Samrat Saha
IPC分类号： H04N7/16
CPC分类号： H04L63/1458
摘要： The present invention provides a system, method and apparatus for protecting against high volume attacks. The present invention receives a packet, determines a source of the received packet, and updates a tree-based data structure based on the source of the received packet. The received packet is accepted or passed on whenever one or more statistics stored within the tree-based data structure do not exceed a threshold. The received packet is dropped whenever the one or more statistics exceed the threshold. The present invention can be implemented in hardware, software or a combination thereof. The software will implement the steps as one or more code segments of a computer program embodied on a computer readable medium.
摘要翻译：本发明提供一种用于防止大量攻击的系统，方法和装置。本发明接收分组，确定接收到的分组的源，并且基于接收分组的源更新基于树的数据结构。只要存储在基于树的数据结构中的一个或多个统计信息不超过阈值，接收到的数据包就被接受或传递。当一个或多个统计信息超过阈值时，接收到的数据包将被丢弃。本发明可以以硬件，软件或其组合来实现。该软件将实现步骤作为体现在计算机可读介质上的计算机程序的一个或多个代码段。

10. 发明申请

US20090094671A1 System, Method and Apparatus for Providing Security in an IP-Based End User Device 审中-公开
标题翻译：用于在基于IP的最终用户设备中提供安全性的系统，方法和装置
公开(公告)号：US20090094671A1
公开(公告)日：2009-04-09
申请号：US12189151
申请日：2008-08-09
申请人： Srikrishna Kurapati , Sudhindra Pundaleeka Herle
发明人： Srikrishna Kurapati , Sudhindra Pundaleeka Herle
IPC分类号： H04L9/00
CPC分类号： H04L63/1458 , H04L65/1079 , H04L2463/141
摘要： The present invention provides a system, method and apparatus for providing security in an IP-based end user device, such personal computer clients, hard phones, soft phones, cellular phones, dual-mode phones, handheld communication devices, wireless communications devices and any other device capable of supporting real time IP-based applications. An application layer, a TCP/IP layer and a datalink layer of the IP-based end user device are monitored. Whenever an incoming session is detected and analyzed, the incoming session is accepted whenever one or more session security parameter(s) are satisfied and the incoming session is denied whenever the session security parameter(s) are not satisfied. Whenever an incoming packet is detected and analyzed, the incoming packet is processed whenever one or more packet security parameter(s) are satisfied and the incoming packet is dropped whenever the packet security parameter(s) are not satisfied.
摘要翻译：本发明提供了一种用于在基于IP的终端用户设备，诸如个人计算机客户端，硬电话，软电话，蜂窝电话，双模式电话，手持通信设备，无线通信设备和任何其他能够支持基于IP实时应用的设备。监控基于IP的最终用户设备的应用层，TCP / IP层和数据链路层。无论何时检测和分析传入会话，只要满足一个或多个会话安全性参数，并且每当会话安全参数不满足时，传入会话被拒绝，则接收会话被接受。无论何时检测并分析输入的分组，只要满足一个或多个分组安全参数，并且每当不满足分组安全参数时，输入分组被丢弃，则进入的分组被处理。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式