专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08078739B1 Solution for handling URL-substitution for data access in a private network architecture 有权
标题翻译：用于处理专用网络架构中数据访问的URL替换的解决方案
公开(公告)号：US08078739B1
公开(公告)日：2011-12-13
申请号：US10750513
申请日：2003-12-29
申请人： Mahadev Somasundaram , Senthil Sivakumar , Siva S. Jayasenan , Yongming Zhang , Todd M. Short
发明人： Mahadev Somasundaram , Senthil Sivakumar , Siva S. Jayasenan , Yongming Zhang , Todd M. Short
IPC分类号： G06F15/16
CPC分类号： H04L63/0209 , H04L63/10
摘要： Disclosed are methods and apparatus for handling requests for data from a private network. In general terms, a client who wishes access to secure data, such as a secure web page, from a private network establishes a secure connection with a secure server, such as a secure socket layer (SSL) server, of the private network. The secure server then downloads a software program for handling data requests (made by the client for data located within the private network) to the client. This software program is downloaded automatically by the secure server to the client when the client initiates a secure connection with such secure server. The downloaded software program is generally configured to modify data requests (e.g., by performing a URL substitution) sent from the client to an internal server of the private network such that the data requests are redirected to the secure server. The secure server then processes the data request (e.g., by retrieving the data from the appropriate internal server).
摘要翻译：公开了用于处理来自专用网络的数据请求的方法和装置。一般来说，希望从专用网络访问安全数据（例如安全网页）的客户端建立与专用网络的安全服务器（例如安全套接字层（SSL））服务器的安全连接。然后，安全服务器下载用于处理对客户端的数据请求（由客户端针对专用网络内的数据进行）的软件程序。当客户端启动与这种安全服务器的安全连接时，该软件程序由安全服务器自动下载到客户端。下载的软件程序通常被配置为修改从客户端发送到私有网络的内部服务器的数据请求（例如，通过执行URL替换），使得数据请求被重定向到安全服务器。然后，安全服务器处理数据请求（例如，通过从适当的内部服务器检索数据）。

2. 发明授权

US07715380B2 Apparatus and methods for handling shared services through virtual route forwarding (VRF)-aware-NAT 有权
标题翻译：通过虚拟路由转发（VRF）-aware-NAT处理共享服务的装置和方法
公开(公告)号：US07715380B2
公开(公告)日：2010-05-11
申请号：US10600893
申请日：2003-06-19
申请人： Mahadev Somasundaram
发明人： Mahadev Somasundaram
IPC分类号： H04L12/28 , H04L12/56
CPC分类号： H04L45/50 , H04L12/4675 , H04L29/12009 , H04L29/12462 , H04L29/12481 , H04L45/04 , H04L45/54 , H04L61/255 , H04L61/2557 , H04L63/0272
摘要： Methods and apparatus for performing NAT are disclosed. Specifically, NAT is performed at a service provider network device associated with an interface of a service provider network. When a packet is sent from a VPN to a node outside the service provider network (e.g., to access a shared service), the packet includes a VPN identifier (or VRF identifier) In accordance with various embodiments, each packet includes an MPLS tag that includes the VPN identifier. The VPN identifier is stored in a translation table entry. The storing of the VPN identifier will enable a reply packet from the shared service network to the customer VPN to be routed using a routing table identified by the VPN identifier.
摘要翻译：公开了用于执行NAT的方法和装置。具体地，在与服务提供商网络的接口相关联的服务提供商网络设备处执行NAT。当分组从VPN发送到服务提供商网络外部的节点（例如，访问共享服务）时，分组包括VPN标识符（或VRF标识符）根据各种实施例，每个分组包括MPLS标签，包括VPN标识符。 VPN标识符存储在转换表条目中。 VPN标识符的存储将使得能够使用由VPN标识符标识的路由表来路由从共享服务网络到客户VPN的应答分组。

3. 发明授权

US07930365B2 Method and apparatus to modify network identifiers at data servers 有权
标题翻译：在数据服务器上修改网络标识符的方法和装置
公开(公告)号：US07930365B2
公开(公告)日：2011-04-19
申请号：US11059754
申请日：2005-02-16
申请人： Vineet Ramesh Dixit , Mitesh Dalal , Amol Khare , Mahadev Somasundaram
发明人： Vineet Ramesh Dixit , Mitesh Dalal , Amol Khare , Mahadev Somasundaram
IPC分类号： G06F15/16
CPC分类号： H04L63/0272 , H04L63/0281 , H04L63/168 , H04L67/02
摘要： A method of modifying network identifiers at data servers is disclosed. A virtual private network (VPN) gateway server generates a Hypertext Transfer Protocol (HTTP) request. The HTTP request not only requests data from a data server that is within a VPN, but also instructs the data server to modify (“mangle”) URLs that are contained within the requested data so that the URLs refer to the VPN gateway server. The VPN gateway server sends the HTTP request toward the data server. As a result, the data server modifies the URLs so that the VPN gateway server does not need to. When such a modified URLs is selected in a web browser, the web browser generates an HTTP request that is directed to the VPN gateway server's URL, which, unlike the unmodified URLs, can be resolved by domain name servers that are outside of the VPN.
摘要翻译：公开了一种在数据服务器上修改网络标识符的方法。虚拟专用网（VPN）网关服务器生成超文本传输协议（HTTP）请求。 HTTP请求不仅请求来自VPN内的数据服务器的数据，而且还指示数据服务器修改（“处理”）所请求数据中包含的URL，以便URL引用到VPN网关服务器。 VPN网关服务器向数据服务器发送HTTP请求。因此，数据服务器修改URL，以便VPN网关服务器不需要。当在网络浏览器中选择这样的修改的URL时，网络浏览器生成针对VPN网关服务器的URL的HTTP请求，该请求与未修改的URL不同，可以由VPN外的域名服务器来解决。

4. 发明授权

US07280557B1 Mechanisms for providing stateful NAT support in redundant and asymetric routing environments 有权
标题翻译：在冗余和不对中路由环境中提供有状态NAT支持的机制
公开(公告)号：US07280557B1
公开(公告)日：2007-10-09
申请号：US10187168
申请日：2002-06-28
申请人： Kaushik P. Biswas , Siva S. Jayasenan , Mahadev Somasundaram , Mark A. Denny
发明人： Kaushik P. Biswas , Siva S. Jayasenan , Mahadev Somasundaram , Mark A. Denny
IPC分类号： H04J3/16
CPC分类号： H04L29/12367 , H04L29/12415 , H04L29/12481 , H04L45/22 , H04L45/58 , H04L47/125 , H04L61/2514 , H04L61/2532 , H04L61/2557 , H04L67/1002 , H04L69/40
摘要： Various techniques are described which may be used for improving traffic flows between private networks and public networks. According to one aspect of the present invention, a technique is described for implementing asymmetric routing in a NAT routing environment. Another aspect of the present invention provides a technique for implementing load balancing and resource allocation assignments among peers in a redundant, multiple NAT router environment.
摘要翻译：描述了可以用于改善专用网络和公共网络之间的业务流的各种技术。根据本发明的一个方面，描述了在NAT路由环境中实现非对称路由的技术。本发明的另一方面提供了一种用于在冗余的多个NAT路由器环境中的对等体之间实现负载平衡和资源分配分配的技术。

5. 发明申请

US20060013209A1 Apparatus and methods for handling shared services through virtual route forwarding(VRF) -aware- NAT 有权
标题翻译：通过虚拟路由转发（VRF）处理共享服务的设备和方法-aware-NAT
公开(公告)号：US20060013209A1
公开(公告)日：2006-01-19
申请号：US10600893
申请日：2003-06-19
申请人： Mahadev Somasundaram
发明人： Mahadev Somasundaram
IPC分类号： H04L12/56
CPC分类号： H04L45/50 , H04L12/4675 , H04L29/12009 , H04L29/12462 , H04L29/12481 , H04L45/04 , H04L45/54 , H04L61/255 , H04L61/2557 , H04L63/0272
摘要： Methods and apparatus for performing NAT are disclosed. Specifically, NAT is performed at a service provider network device associated with an interface of a service provider network. When a packet is sent from a VPN to a node outside the service provider network (e.g., to access a shared service), the packet includes a VPN identifier (or VRF identifier) In accordance with various embodiments, each packet includes an MPLS tag that includes the VPN identifier. The VPN identifier is stored in a translation table entry. The storing of the VPN identifier will enable a reply packet from the shared service network to the customer VPN to be routed using a routing table identified by the VPN identifier.
摘要翻译：公开了用于执行NAT的方法和装置。具体地，在与服务提供商网络的接口相关联的服务提供商网络设备处执行NAT。当分组从VPN发送到服务提供商网络外部的节点（例如，访问共享服务）时，分组包括VPN标识符（或VRF标识符）根据各种实施例，每个分组包括MPLS标签，包括VPN标识符。 VPN标识符存储在转换表条目中。 VPN标识符的存储将使得能够使用由VPN标识符标识的路由表来路由从共享服务网络到客户VPN的应答分组。

6. 发明授权

US08074275B2 Preventing network denial of service attacks by early discard of out-of-order segments 有权
标题翻译：通过早期丢弃无序段来防止网络拒绝服务攻击
公开(公告)号：US08074275B2
公开(公告)日：2011-12-06
申请号：US11345999
申请日：2006-02-01
申请人： Anantha Ramaiah , Mahadev Somasundaram , Senthil Sivakumar
发明人： Anantha Ramaiah , Mahadev Somasundaram , Senthil Sivakumar
IPC分类号： H04L12/00 , H04L12/28 , H04L29/14
CPC分类号： H04L47/10 , H04L45/54 , H04L45/58 , H04L63/1458 , H04L69/16 , H04L69/163
摘要： A method of preventing network denial of service attacks by early discard of out-of-order segments comprises creating a reassembly queue for a connection between a first network node and a second network node, wherein the connection has been established based on a transport-layer network protocol, the reassembly queue having a size based on a buffer size of an input interface with which the connection is associated. As out-of-order data segments arrive on the connection, and before other processing of the segments, whether the reassembly queue is full is determined, and the out-of-order segments are discarded if the reassembly queue is full. The size of the reassembly queue is automatically changed in response to one or more changes in any of network conditions and device resources.
摘要翻译：通过早期丢弃无序段来防止网络拒绝服务攻击的方法包括为第一网络节点和第二网络节点之间的连接创建重组队列，其中已经基于传输层建立了连接网络协议，所述重组队列具有基于与所述连接相关联的输入接口的缓冲器大小的大小。由于无序数据段到达连接，并且在段的其他处理之前，确定重新组装队列是否已满，并且如果重新组装队列已满，则会丢弃无序段。响应于任何网络条件和设备资源中的一个或多个更改，自动更改重组队列的大小。

7. 发明授权

US07480305B1 Apparatus and methods for maintaining the registration state of an IP device in a network address port translation (NAPT) environment 有权
标题翻译：用于在IP地址端口转换（NAPT）环境中维护IP设备的注册状态的装置和方法
公开(公告)号：US07480305B1
公开(公告)日：2009-01-20
申请号：US10078851
申请日：2002-02-19
申请人： Mahadev Somasundaram
发明人： Mahadev Somasundaram
IPC分类号： H04L12/28
CPC分类号： H04L29/12377 , H04L29/125 , H04L61/2517 , H04L61/2564
摘要： Disclosed are methods and apparatus for managing a registration state of an endpoint node in a network address port translation environment. A registration message is received from a first endpoint node located within a local network. The registration message is sent from the first endpoint node to a gatekeeper node, and the registration message includes a local source address of the first endpoint node, a local source port of the first endpoint node, and local call signaling information to be used by another endpoint node to initiate a data connection with the first endpoint node. The local source address of the first endpoint node is translated into a first global address. A first binding that associates the local source address with the global source address is created. The local call signaling information is translated into global call signaling information. A registration state of the first endpoint node is maintained, and the first binding is maintained based on the registration state (e.g., by using “registration doors”).
摘要翻译：公开了用于管理网络地址端口转换环境中的端点节点的注册状态的方法和装置。从位于本地网络内的第一端点节点接收注册消息。注册消息从第一端点节点发送到网守节点，并且注册消息包括第一端点节点的本地源地址，第一端点节点的本地源端口以及另一个使用的本地呼叫信令信息端点节点发起与第一端点节点的数据连接。第一个端点节点的本地源地址被转换成第一个全局地址。创建将本地源地址与全局源地址关联的第一个绑定。本地呼叫信令信息被转换成全局呼叫信令信息。维护第一端点节点的注册状态，并且基于注册状态（例如，通过使用“注册门”）来维护第一绑定。

8. 发明授权

US07334049B1 Apparatus and methods for performing network address translation (NAT) in a fully connected mesh with NAT virtual interface (NVI) 有权
标题翻译：在与NAT虚拟接口（NVI）完全连接的网络中执行网络地址转换（NAT）的设备和方法
公开(公告)号：US07334049B1
公开(公告)日：2008-02-19
申请号：US10026272
申请日：2001-12-21
申请人： Mahadev Somasundaram , Siva S. Jayasenan , Senthil M. Sivakumar
发明人： Mahadev Somasundaram , Siva S. Jayasenan , Senthil M. Sivakumar
IPC分类号： G06F15/16
CPC分类号： H04L69/22 , H04L69/16 , H04L69/161
摘要： Disclosed are methods and apparatus for performing network address translation (NAT) in a fully connected mesh with NAT virtual interface (NVI). In general terms, mechanisms (e.g., within a combination router/NAT device) are provided for translating network addresses of traffic going between two private domains or realms. These mechanisms may also be used to translate traffic going between a private and public domain. When a particular private address is translated into a public address, a binding is formed between the pre-translation address, the post-translation address, and the interface associated with the private or public address (e.g., an interface of the router/NAT device). Since bindings of different interfaces are tracked, a private address and its associated particular interface may be associated with a particular public address. Accordingly, the translation mechanisms of the present invention may be applied to two duplicate private addresses from two different private domains because the two identical private addresses are distinguished based on their different interfaces.
摘要翻译：公开的是在与NAT虚拟接口（NVI）完全连接的网络中执行网络地址转换（NAT）的方法和装置。一般来说，提供了机制（例如，在组合路由器/ NAT设备内）来翻译在两个私有域或领域之间的业务的网络地址。这些机制也可用于翻译私有和公共领域之间的交通。当特定私人地址被转换成公共地址时，在预翻译地址，翻译后地址和与专用或公共地址相关联的接口（例如，路由器/ NAT设备的接口）之间形成绑定）。由于跟踪不同接口的绑定，所以私有地址及其相关联的特定接口可以与特定的公共地址相关联。因此，本发明的翻译机制可以应用于来自两个不同私有域的两个重复私有地址，因为基于它们不同的接口区分两个相同的私有地址。

9. 发明授权

US07260649B1 Apparatus and methods for forwarding data between public networks via a private network 有权
标题翻译：用于经由专用网络在公共网络之间转发数据的装置和方法
公开(公告)号：US07260649B1
公开(公告)日：2007-08-21
申请号：US10123950
申请日：2002-04-16
申请人： Mahadev Somasundaram , Siva S. Jayasenan , Mark A. Denny
发明人： Mahadev Somasundaram , Siva S. Jayasenan , Mark A. Denny
IPC分类号： G06F15/16
CPC分类号： H04L29/12415 , H04L29/12367 , H04L61/2514 , H04L61/2532
摘要： Disclosed are methods and apparatus for handling data sent from a first public network to a second or same public network via a private network. In general terms, network translation address mechanisms are provided within the edge routers of the private network. When a first processing node sends a request to an edge router to access another processing node which resides in a public network, the edge router forms a binding based on two addresses associated with the first processing node. A first private address is initially associated with the first processing node, and the first processing node uses this private address to communicate with the private network. A second public address is also allocated to the first processing node based on the first processing node's request to communicate with a public node. The first processing node uses the allocated second public address to communicate with the requested public node.
摘要翻译：公开了用于处理经由私有网络从第一公共网络发送到第二或同一公共网络的数据的方法和装置。一般而言，在专用网络的边缘路由器内提供网络转换地址机制。当第一处理节点向边缘路由器发送请求以访问驻留在公共网络中的另一处理节点时，边缘路由器基于与第一处理节点相关联的两个地址来形成绑定。第一私有地址最初与第一处理节点相关联，并且第一处理节点使用该私有地址与私有网络进行通信。基于第一处理节点与公共节点进行通信的请求，第二公共地址也被分配给第一处理节点。第一处理节点使用所分配的第二公共地址与请求的公共节点进行通信。

10. 发明授权

US07227872B1 Mechanisms for providing stateful NAT support in redundant and asymetric routing environments 有权
公开(公告)号：US07227872B1
公开(公告)日：2007-06-05
申请号：US10235523
申请日：2002-09-04
申请人： Kaushik P. Biswas , Siva S. Jayasenan , Mahadev Somasundaram , Mark A. Denny
发明人： Kaushik P. Biswas , Siva S. Jayasenan , Mahadev Somasundaram , Mark A. Denny
IPC分类号： H04J3/16
CPC分类号： H04L29/12367 , H04L29/12415 , H04L29/12481 , H04L45/22 , H04L45/58 , H04L47/125 , H04L61/2514 , H04L61/2532 , H04L61/2557 , H04L67/1002 , H04L69/40
摘要： Various techniques are described which may be used for improving traffic flows between private networks and public networks. According to one aspect of the present invention, a technique is described for implementing asymmetric routing in a NAT routing environment. Another aspect of the present invention provides a technique for implementing load balancing and resource allocation assignments among peers in a redundant, multiple NAT router environment.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式