专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08537660B2 High availability transport protocol method and apparatus 有权
公开(公告)号：US08537660B2
公开(公告)日：2013-09-17
申请号：US12830948
申请日：2010-07-06
申请人： Anantha Ramaiah , Chandrashekhar Appanna , Amol Khare
发明人： Anantha Ramaiah , Chandrashekhar Appanna , Amol Khare
IPC分类号： G01R31/08 , G06F11/00 , G08C15/00 , H04J1/16 , H04J3/14 , H04L1/00 , H04L12/26
CPC分类号： H04L41/0668 , H04L69/16 , H04L69/40
摘要： A system and method supporting efficient, scalable stateful switchover of transport layer connections in a telecommunications network element. One method involves receiving, at a network element comprising an active transport protocol process coupled to a standby protocol process, a request to configure a first transport layer connection maintained at the active transport protocol process for stateful switchover; receiving an event associated with the first transport layer connection; creating a message containing replicated event information based on the received event; sending the message to the standby transport protocol process; and processing the message at the standby transport protocol process, wherein the standby transport protocol process replicates state information for the first connection.

2. 发明授权

US07472416B2 Preventing network reset denial of service attacks using embedded authentication information 有权
标题翻译：使用嵌入式认证信息防止网络重置拒绝服务攻击
公开(公告)号：US07472416B2
公开(公告)日：2008-12-30
申请号：US10842015
申请日：2004-05-06
申请人： Anantha Ramaiah , Shrirang Bage , Amol Khare , Mitesh Dalal
发明人： Anantha Ramaiah , Shrirang Bage , Amol Khare , Mitesh Dalal
IPC分类号： G06F11/00
CPC分类号： H04L63/1458 , H04L1/16 , H04L63/1466
摘要： Approaches for preventing TCP RST attacks intended to cause denial of service in packet-switched networks are disclosed. In one approach, upon receiving a TCP RST packet, an endpoint node determines whether the TCP segment contains valid authentication information. The TCP RST segment is accepted and the TCP connection is closed only when the authentication information is valid. Authentication information may comprise a reset type values, and either initial sequence numbers of both endpoints, or a copy of a TCP header and options values previously sent by the endpoint node that is performing the authentication. Thus, attacks are thwarted because an attacker cannot know or reasonably guess the required authentication information.
摘要翻译：公开了用于防止在分组交换网络中导致拒绝服务的TCP RST攻击的方法。在一种方法中，在接收到TCP RST分组时，端点节点确定TCP分段是否包含有效的认证信息。 TCP RST段被接受，只有认证信息有效时才关闭TCP连接。认证信息可以包括复位类型值，以及两个端点的初始序列号，或TCP头部的副本以及由执行认证的端点节点先前发送的选项值。因此，攻击是挫败的，因为攻击者无法知道或合理地猜测所需的身份验证信息。

3. 发明申请

US20070101129A1 Approaches for automatically switching message authentication keys 有权
标题翻译：自动切换消息认证密钥的方法
公开(公告)号：US20070101129A1
公开(公告)日：2007-05-03
申请号：US11261683
申请日：2005-10-28
申请人： John Wong , Anantha Ramaiah , Amol Khare , Mitesh Dalal , Shrirang Bage , Lin Han
发明人： John Wong , Anantha Ramaiah , Amol Khare , Mitesh Dalal , Shrirang Bage , Lin Han
IPC分类号： H04L9/00
CPC分类号： H04L69/16 , H04L63/0846 , H04L63/12 , H04L69/163
摘要： Approaches are disclosed for switching transport protocol connection keys. A method of automatically changing a message authentication key at each of two endpoints of a connection in a telecommunications network comprises testing a sequence value received in each of a plurality of data segments on the connection; and selecting a next message authentication key, from among a plurality of stored message authentication keys, for use in authenticating subsequently received data segments, when the sequence value matches a specified characteristic.
摘要翻译：公开了用于切换传输协议连接密钥的方法。一种在电信网络中的连接的两个端点中的每个端点处自动改变消息认证密钥的方法包括测试在所述连接上的多个数据段中的每一个中接收到的序列值; 以及当所述序列值与特定特征匹配时，从多个存储的消息认证密钥中选择用于认证随后接收的数据段的下一个消息认证密钥。

4. 发明申请

US20070047446A1 Method and apparatus for updating best path based on real-time congestion feedback 有权
标题翻译：基于实时拥塞反馈更新最佳路径的方法和装置
公开(公告)号：US20070047446A1
公开(公告)日：2007-03-01
申请号：US11216589
申请日：2005-08-30
申请人： Mitesh Dalal , Pritam Shah , Amol Khare , Vamsidhar Valluri
发明人： Mitesh Dalal , Pritam Shah , Amol Khare , Vamsidhar Valluri
IPC分类号： H04L12/26 , H04L12/56
CPC分类号： H04L45/04 , H04L45/02 , H04L45/125 , H04L45/22 , H04L45/38 , H04L45/42 , H04L45/70 , H04L47/31
摘要： Techniques are provided for updating best path based on real-time congestion feedback. A method comprises monitoring packets received from an internetworked system, wherein the packets are received on one of a plurality of external interfaces of a networking device; detecting that a received packet includes real-time information that signals a present or pending congestion condition on a path from the external interfaces of the networking device to the internetworked system; notifying a control logic of the real-time information; receiving from the control logic control information defining a change in one or more paths from the external interfaces to the internetworked system; and changing the one or more paths from the external interfaces to the internetworked system. Examining ingress traffic on external interfaces of an internetworked system can cause changes to routes, routing policies and PBRs in routers of the first internetworked system in response to real-time congestion.
摘要翻译：提供了基于实时拥塞反馈来更新最佳路径的技术。一种方法包括监视从互联网络系统接收的分组，其中分组在网络设备的多个外部接口之一上被接收; 检测所接收的分组包括实时信息，所述实时信息表示从所述网络设备的外部接口到所述互联网络系统的路径上的当前或未完成拥塞状况; 通知实时信息的控制逻辑; 从控制逻辑控制信息接收定义从外部接口到互联网系统的一个或多个路径的变化; 并将一个或多个路径从外部接口改变为互联网络系统。检查互联网络系统的外部接口上的入口流量可能会导致第一个互联网络系统的路由器中的路由，路由策略和PBR的更改，以响应实时拥塞。

5. 发明申请

US20070044150A1 Preventing network reset denial of service attacks 有权
标题翻译：防止网络重置拒绝服务攻击
公开(公告)号：US20070044150A1
公开(公告)日：2007-02-22
申请号：US11540526
申请日：2006-09-28
申请人： Mitesh Dalal , Amol Khare , Randall Stewart
发明人： Mitesh Dalal , Amol Khare , Randall Stewart
IPC分类号： G06F12/14
CPC分类号： H04L63/1458 , H04L1/16
摘要： Approaches for preventing TCP RST attacks and TCP SYN attacks in packet-switched networks are disclosed. In one approach, upon receiving a TCP RST packet, a first endpoint node challenges the second endpoint node in the then-current connection using an acknowledgement message. If the connection is genuinely closed, the second endpoint node responds with a RST packet carrying an expected next sequence value. The first endpoint node takes no action if no RST packet is received. Thus, attacks are thwarted because an attacker does not receive the acknowledgment message and therefore cannot provide the exact expected next sequence value.
摘要翻译：公开了在分组交换网络中防止TCP RST攻击和TCP SYN攻击的方法。在一种方法中，在接收到TCP RST分组时，第一端点节点使用确认消息来挑战当前连接中的第二端点节点。如果连接真正关闭，则第二端点节点用携带预期下一个序列值的RST分组进行响应。如果没有接收到RST数据包，则第一个端点节点不采取任何操作。因此，攻击被阻止，因为攻击者没有收到确认消息，因此无法提供确切的预期下一个序列值。

6. 发明申请

US20060184647A1 Method and apparatus to modify network identifiers at data servers 有权
标题翻译：在数据服务器上修改网络标识符的方法和装置
公开(公告)号：US20060184647A1
公开(公告)日：2006-08-17
申请号：US11059754
申请日：2005-02-16
申请人： Vineet Dixit , Mitesh Dalal , Amol Khare , Mahadev Somasundaram
发明人： Vineet Dixit , Mitesh Dalal , Amol Khare , Mahadev Somasundaram
IPC分类号： G06F15/16
CPC分类号： H04L63/0272 , H04L63/0281 , H04L63/168 , H04L67/02
摘要： A method of modifying network identifiers at data servers is disclosed. A virtual private network (VPN) gateway server generates a Hypertext Transfer Protocol (HTTP) request. The HTTP request not only requests data from a data server that is within a VPN, but also instructs the data server to modify (“mangle”) URLs that are contained within the requested data so that the URLs refer to the VPN gateway server. The VPN gateway server sends the HTTP request toward the data server. As a result, the data server modifies the URLs so that the VPN gateway server does not need to. When such a modified URLs is selected in a web browser, the web browser generates an HTTP request that is directed to the VPN gateway server's URL, which, unlike the unmodified URLs, can be resolved by domain name servers that are outside of the VPN.
摘要翻译：公开了一种在数据服务器上修改网络标识符的方法。虚拟专用网（VPN）网关服务器生成超文本传输协议（HTTP）请求。 HTTP请求不仅请求来自VPN内的数据服务器的数据，而且还指示数据服务器修改（“处理”）所请求数据中包含的URL，以便URL引用到VPN网关服务器。 VPN网关服务器向数据服务器发送HTTP请求。因此，数据服务器修改URL，以便VPN网关服务器不需要。当在网络浏览器中选择这样的修改的URL时，网络浏览器生成针对VPN网关服务器的URL的HTTP请求，该请求与未修改的URL不同，可以由VPN外的域名服务器来解决。

7. 发明申请

US20100296516A1 HIGH AVAILABILITY TRANSPORT PROTOCOL METHOD AND APPARATUS 有权
标题翻译：高可用性运输协议方法和设备
公开(公告)号：US20100296516A1
公开(公告)日：2010-11-25
申请号：US12830948
申请日：2010-07-06
申请人： Anantha Ramaiah , Chandrashekhar Appanna , Amol Khare
发明人： Anantha Ramaiah , Chandrashekhar Appanna , Amol Khare
IPC分类号： H04L12/56
CPC分类号： H04L41/0668 , H04L69/16 , H04L69/40
摘要： A system and method supporting efficient, scalable stateful switchover of transport layer connections in a telecommunications network element. One method involves receiving, at a network element comprising an active transport protocol process coupled to a standby protocol process, a request to configure a first transport layer connection maintained at the active transport protocol process for stateful switchover; receiving an event associated with the first transport layer connection; creating a message containing replicated event information based on the received event; sending the message to the standby transport protocol process; and processing the message at the standby transport protocol process, wherein the standby transport protocol process replicates state information for the first connection.
摘要翻译：一种支持电信网络元件中传输层连接的有效，可扩展的状态切换的系统和方法。一种方法包括在包括与备用协议进程相关联的活动传输协议进程的网络元件处接收配置在活动传输协议进程处保持的用于状态切换的第一传输层连接的请求; 接收与所述第一传输层连接相关联的事件; 基于接收到的事件创建包含复制事件信息的消息; 将消息发送到备用传输协议进程; 以及在所述备用传输协议过程处理所述消息，其中所述备用传输协议进程复制所述第一连接的状态信息。

8. 发明授权

US07751311B2 High availability transport protocol method and apparatus 有权
标题翻译：高可用性传输协议方法和装置
公开(公告)号：US07751311B2
公开(公告)日：2010-07-06
申请号：US11134678
申请日：2005-05-19
申请人： Anantha Ramaiah , Chandrashekhar Appanna , Amol Khare
发明人： Anantha Ramaiah , Chandrashekhar Appanna , Amol Khare
IPC分类号： G01R31/08 , G06F11/00 , G08C15/00 , H04J1/16 , H04J3/14 , H04L1/00 , H04L12/26
CPC分类号： H04L41/0668 , H04L69/16 , H04L69/40
摘要： A system and method supporting efficient, scalable stateful switchover of transport layer connections in a telecommunications network element. One method involves receiving, at a network element comprising an active transport protocol process coupled to a standby protocol process, a request to configure a first transport layer connection maintained at the active transport protocol process for stateful switchover; receiving an event associated with the first transport layer connection; creating a message containing replicated event information based on the received event; sending the message to the standby transport protocol process; and processing the message at the standby transport protocol process, wherein the standby transport protocol process replicates state information for the first connection.
摘要翻译：一种支持电信网络元件中传输层连接的有效，可扩展的状态切换的系统和方法。一种方法包括在包括与备用协议进程相关联的活动传输协议进程的网络元件处接收配置在活动传输协议进程处保持的用于状态切换的第一传输层连接的请求; 接收与所述第一传输层连接相关联的事件; 基于接收到的事件创建包含复制事件信息的消息; 将消息发送到备用传输协议进程; 以及在所述备用传输协议过程处理所述消息，其中所述备用传输协议进程复制所述第一连接的状态信息。

9. 发明申请

US20070171828A1 Method of determining a maximum transmission unit value of a network path using transport layer feedback 有权
标题翻译：使用传输层反馈来确定网络路径的最大传输单元值的方法
公开(公告)号：US20070171828A1
公开(公告)日：2007-07-26
申请号：US11338591
申请日：2006-01-23
申请人： Mitesh Dalal , Randall Stewart , Amol Khare , Vineet Dixit , Srinivas Subramanian
发明人： Mitesh Dalal , Randall Stewart , Amol Khare , Vineet Dixit , Srinivas Subramanian
IPC分类号： H04L12/26 , H04J1/16 , H04J3/24
CPC分类号： H04L47/10 , H04L47/365
摘要： A network element implementing a method for determining an optimal maximum transmission unit (MTU) value on a path between two nodes in a network is described. A sending node interested in learning the optimal MTU path value allows fragmentation of datagrams sent on the path, selects an initial MTU, and sends one or more data packets to a receiving node. Upon receiving the data the receiver determines if fragmentation occurred. If no fragmentation occurred then the MTU path selected is the optimal MTU for the given path between the nodes. If fragmentation did occur then the sender is notified that the selected MTU was not the optimal MTU for the path. Either the receiver proposes a new MTU for the path, or the sender selects a new, smaller MTU. The process repeats until the receiver detects no fragmentation.
摘要翻译：描述了实现用于确定网络中两个节点之间的路径上的最佳最大传输单元（MTU）值的方法的网络元件。有兴趣学习最佳MTU路径值的发送节点允许在路径上发送的数据报的分段，选择初始MTU，并将一个或多个数据分组发送到接收节点。在接收到数据后，接收机确定是否发生分段。如果没有发生碎片，则选择的MTU路径是节点之间给定路径的最优MTU。如果发生碎片，则发送者被通知所选择的MTU不是该路径的最佳MTU。接收方为路径提出新的MTU，或者发送方选择一个新的较小的MTU。该过程重复，直到接收器没有检测到碎片。

10. 发明申请

US20050229244A1 Method and apparatus for preventing network attacks by authenticating internet control message protocol packets 有权
标题翻译：通过认证互联网控制消息协议包来防止网络攻击的方法和装置
公开(公告)号：US20050229244A1
公开(公告)日：2005-10-13
申请号：US10820980
申请日：2004-04-07
申请人： Amol Khare , Mitesh Dalal , Anantha Ramaiah , Sharad Ahlawat
发明人： Amol Khare , Mitesh Dalal , Anantha Ramaiah , Sharad Ahlawat
IPC分类号： G06F11/30 , G06F12/14 , H04L9/00 , H04L9/32 , H04L29/06
CPC分类号： H04L63/12 , H04L63/1458 , H04L63/1466
摘要： A method of preventing an attack on a network, the method comprising the computer-implemented steps of receiving an ICMP packet that includes a copy of a header associated with a connection in a connection-oriented transport protocol; obtaining a packet sequence value from the header; determining if the packet sequence value is valid; and updating a parameter value associated with the transport protocol connection only if the packet sequence value is determined to be valid. Use of the disclosed method enables authenticating ICMP packets so that responsive measures of a network element, such as adjusting an MTU value, are performed only when the ICMP packet is determined to be authentic.
摘要翻译：一种防止对网络的攻击的方法，所述方法包括计算机实现的步骤，用于接收包括与面向连接的传输协议中的连接相关联的报头的副本的ICMP分组; 从头部获取分组序列值; 确定分组序列值是否有效; 以及仅当所述分组序列值被确定为有效时，才更新与所述传输协议连接相关联的参数值。使用所公开的方法使得能够认证ICMP分组，使得仅当确定ICMP分组是可信的时候才执行诸如调整MTU值的网元的响应度量。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式