专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US11625491B1 Managing network traffic with sensitive data 有权
公开(公告)号：US11625491B1
公开(公告)日：2023-04-11
申请号：US16993977
申请日：2020-08-14
申请人： F5 Networks, Inc.
发明人： Mark Ernest Quevedo , Graham Rein Alderson
IPC分类号： G06F21/60 , G06F21/62 , H04L9/32 , H04L9/40
摘要： Technology related to managing network traffic with sensitive data is disclosed. In one example, a method can include performing a cryptographic transformation of sensitive data of a request from a requestor for a resource. A portion of the cryptographic transformation of the sensitive data of the request can be transmitted to a sensitive data server. One or more possible matches to the cryptographic transformation of the sensitive data of the request can be received from the sensitive data server. A match to the cryptographic transformation can be identified within the one of the one or more possible matches. In response to identifying the match, an access policy for the requestor or the resource can be changed.

2. 发明授权

US11616806B1 Methods for protecting web based resources from D/DoS attacks and devices thereof 有权
公开(公告)号：US11616806B1
公开(公告)日：2023-03-28
申请号：US15149981
申请日：2016-05-09
申请人： F5 Networks, Inc.
发明人： Yaniv Shemesh , David Stav
IPC分类号： H04L9/40
摘要： A method, non-transitory computer readable medium and device that assists with preventing distributed denial of service attack includes receiving a request for a web resource from a client computing device. The received requested for the web resource is determined for presence of referrer header information. When the received request is determined to include the referrer header information, then the referrer header information is checked whether it includes a known domain and a valid cookie associated with the known domain. A distributed denial of service attack is prevented by providing a proactive challenge to the requesting client computing device when received request for the web resource does not include the referrer header information or when the referrer header information comprises the known domain and does not include the valid cookie.

3. 发明授权

US11537716B1 Methods for detecting changes to a firmware and devices thereof 有权
公开(公告)号：US11537716B1
公开(公告)日：2022-12-27
申请号：US16682281
申请日：2019-11-13
申请人： F5 Networks, Inc.
发明人： Sanjay Choudhary , Jason Thomas Shriver , John Morris Hall
IPC分类号： G06F21/57 , H04L9/40 , H04L9/06
摘要： Methods, non-transitory computer readable media, network traffic manager apparatuses, and systems that assist with detecting changes to a firmware software components, and configuration parameters includes obtaining an executable file comprising a basic input-output system firmware and software component data of a hardware component at run-time. A hash value for the obtained executable file at the run-time is identified. The identified hash value is compared with a stored hash value associated with the obtained executable file to determine when the obtained executable file is unmodified, wherein the stored hash value was determined at a build time of the hardware component. The obtained executable file of the hardware component is executed when the obtained executable file is determined to be unmodified.

4. 发明授权

US11457095B1 Stateless communication using a stateful protocol 有权
公开(公告)号：US11457095B1
公开(公告)日：2022-09-27
申请号：US16916861
申请日：2020-06-30
申请人： F5 Networks, Inc.
发明人： Peter Michael Thornewell , John Francis Tavares , Robert Andrew Kovalchik
IPC分类号： G06F15/173 , H04L69/16 , H04L9/40 , H04L67/14 , H04L47/32
摘要： Embodiments are directed to stateless communication using a stateful protocol. One or more NTMAs may establish a connection with a client computer based on data exchanged with a the client computer using the stateful protocol. The exchanged data may include validation information provided by the one or more NTMAs. The exchanged data and other information associated with the connection may be discarded from one or more memories of the one or more NTMAs. A network packet communicated over the network using the stateful protocol may be obtained. Verification information and candidate validation information may be generated based on one or more characteristics of the network packet. The network packet may be validated based on a comparison of the verification information and the candidate validation information. A reply that adheres to the stateful protocol may be provided to the client computer based on the validated network packet.

5. 发明申请

US20220179678A1 METHODS FOR APPLICATION DEPLOYMENT ACROSS MULTIPLE COMPUTING DOMAINS AND DEVICES THEREOF 有权
公开(公告)号：US20220179678A1
公开(公告)日：2022-06-09
申请号：US17544046
申请日：2021-12-07
申请人： F5 Networks, Inc.
发明人： Timothy Worsley , Timothy S. Michels , Joel Benjamin Moses
IPC分类号： G06F9/455 , H04L67/1095 , H04L12/46 , H04L47/2475
摘要： Technology related to application deployment across network devices including smart network interface cards. In one example, a method includes distributing an application across a plurality of locally connected computing subdomains. The subdomains can include a mixture of general and special purpose computing subdomains, such as for example, a main computer and an associated smart network interface devices or systems, such as for example a smart network interface card (NIC). The subdomains can each run hypervisors that are bridged to allow a single virtual machine to operate across the subdomains. The application can include multiple portions. For example, an application can be split by different functionalities. The application portions can be tagged to indicate which subdomain they are to be executed within. If the chosen subdomain has available the requisite resources, the application can be detached and distributed to the chosen subdomain.

6. 发明授权

US11122083B1 Methods for managing network connections based on DNS data and network policies and devices thereof 有权
公开(公告)号：US11122083B1
公开(公告)日：2021-09-14
申请号：US16125272
申请日：2018-09-07
申请人： F5 Networks, Inc.
发明人： Mark Quevedo
IPC分类号： H04L29/06 , H04L29/12
摘要： Methods, non-transitory computer readable media, and network traffic manager apparatus that assists with managing network connections includes obtaining a destination internet protocol (IP) address and a domain name from a received request sent by a client. A determination is made about when the obtained domain name identifies a trusted service and the obtained destination IP address is included in a current host IP address list. The obtained destination IP address is replaced with a new IP address from the current host IP address list when the obtained domain name is determined to be present and the obtained destination IP address is determined to be absent from the current host IP address list. The received request is managed based on one or more network policies, wherein one of the one or more network policies includes providing the client access to the service identified by the obtained domain name hosted at the replaced new IP address.

7. 发明授权

US11063758B1 Methods for facilitating cipher selection and devices thereof 有权
公开(公告)号：US11063758B1
公开(公告)日：2021-07-13
申请号：US15726451
申请日：2017-10-06
申请人： F5 Networks, Inc.
发明人： Saxon Amdahl
IPC分类号： H04L9/14 , H04L9/08 , H04L29/06 , G06F21/60 , G06F3/0482
摘要： Methods, non-transitory computer readable media, and network traffic management apparatuses that obtain one or more custom selection rules and one or more custom priority rules via a graphical user interface (GUI). One or more of the custom selection rules are applied to a cipher suite database to generate a result set of cipher suites. The cipher suite database includes a plurality of cipher suite sets. One or more of the custom priority rules are applied to the result set of cipher suites to generate an ordered result set of cipher suites. A cipher string is generated based on the ordered result set of cipher suites. The cipher string is stored in a secure socket layer (SSL) profile to be used during negotiation of secure network sessions.

8. 发明授权

US10958625B1 Methods for secure access to services behind a firewall and devices thereof 有权
公开(公告)号：US10958625B1
公开(公告)日：2021-03-23
申请号：US16294822
申请日：2019-03-06
申请人： F5 Networks, Inc.
发明人： Peter M. Thornewell , David D. Schmitt , Alan Mimms , Saxon Amdahl , Bill Baumann
IPC分类号： H04L29/06 , H04L29/08
摘要： Methods, non-transitory computer readable media, rendezvous gateway (RG) apparatuses, and network security systems that send an RG synchronization message (SYN) to an application in a secure domain following receipt, from a client, of a client SYN comprising an indication of the application. A rendezvous agent (RA) SYN is received, via a firewall coupled to the security domain and in response to the RG SYN, from an RA in the secure domain. A first RG synchronization-acknowledgement message (SYN+ACK) is sent to the client in response to the client SYN. A second RG SYN+ACK is sent, via the firewall, to the RA in response to the RA SYN. The RA is notified of receipt of a client acknowledgement message (ACK) from the client. An RA ACK is received, from the RA and via the firewall, in response to the notification, to thereby establish a full connection between the client and the application.

9. 发明申请

US20210051002A1 Accessing Security Hardware Keys 有权
公开(公告)号：US20210051002A1
公开(公告)日：2021-02-18
申请号：US16541981
申请日：2019-08-15
申请人： F5 Networks, Inc.
发明人： Liang Cheng , Andrey Jivsov , Neha Kochar
IPC分类号： H04L9/08 , H04L9/30
摘要： Technology related to accessing security hardware keys is disclosed. In one example, a method includes receiving an initial request to perform a first cryptographic operation using a key stored in security hardware circuitry. In response to servicing the initial request, a persistent attribute of the key can be used to query the security hardware circuitry to receive a volatile attribute of the key. The volatile attribute of the key can be stored external to the security hardware circuitry to enable subsequent requests to perform cryptographic operations on the security hardware circuitry without querying the security hardware circuitry for the volatile attribute of the key. A subsequent request referencing the key can be received. The subsequent request can be serviced by using the security hardware circuitry and identifying the key using the stored volatile attribute of the key without querying the security hardware circuitry for the volatile attribute of the key.

10. 再颁专利

USRE48382E1 Security for WAP servers 有权
公开(公告)号：USRE48382E1
公开(公告)日：2021-01-05
申请号：US15482681
申请日：2017-04-07
申请人： F5 Networks, Inc.
发明人： David Mowshowitz
IPC分类号： G06F7/04 , H04L29/06 , G06F21/31
摘要： A method and system for improving the security and control of internet/network web application processes, such as web applications. The invention enables validation of requests from web clients before the request reaches a web application server. Incoming web client requests are compared to an application model that may include an allowed navigation path within an underlying web application. Requests inconsistent with the application model are blocked before reaching the application server. The invention may also verify that application state data sent to application servers has not been inappropriately modified. Furthermore, the invention enables application models to be automatically generated by employing, for example, a web crawler to probe target applications. Once a preliminary application model is generated it can be operated in a training mode. An administrator may tune the application model by adding a request that was incorrectly marked as non-compliant to the application model.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式