专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US06741595B2 Device for enabling trap and trace of internet protocol communications 有权
公开(公告)号：US06741595B2
公开(公告)日：2004-05-25
申请号：US10167311
申请日：2002-06-11
申请人： Robert Daniel Maher, III , James Robert Deerman , Milton Andre Lie
发明人： Robert Daniel Maher, III , James Robert Deerman , Milton Andre Lie
IPC分类号： H04L1228
CPC分类号： H04L43/026 , H04L41/0893 , H04L47/2441 , H04L63/00 , H04L63/30 , H04M3/2281 , H04M7/006
摘要： A network processing system is described that is able to monitor IP network traffic, including the ability to perform trap and trace on IP communications flowing over the IP network. The network processing system is able to scan the entire contents of data packets passing through it, and to associate related data packets into discrete sessions, or flows, which allows the network processing system to search for predetermined search criteria contained within those flows. If a flow is found to contain a predetermined search criteria, the network processing system is able to maintain a record of the flow or to replicate the flow and save it or send it to another IP address for monitoring. The monitoring of a flow can include the entire contents of the flow, or any subset of information in the flow such as call identifying information.

2. 发明授权

US07206313B2 Apparatus and method for using information in one direction of a bi-directional flow in a network to alter characteristics of the return direction flow 有权
标题翻译：在网络中的双向流的一个方向上使用信息以改变返回方向流的特征的装置和方法
公开(公告)号：US07206313B2
公开(公告)日：2007-04-17
申请号：US10166884
申请日：2002-06-11
申请人： Robert Daniel Maher, III , James Robert Deerman , Milton Andre Lie
发明人： Robert Daniel Maher, III , James Robert Deerman , Milton Andre Lie
IPC分类号： H04L12/56
CPC分类号： H04L65/1006 , H04L29/06027 , H04L47/10 , H04L47/70 , H04L47/785 , H04L47/801 , H04L47/805 , H04L47/823 , H04L47/825 , H04L65/1043 , H04L65/80
摘要： A network processing system is described that is able to bind all the network traffic related to a bi-directional communication. Unidirectional processing engines take the data from line interfaces, and associate each data packet with an identifier, which identifies the flow of which the data packet is a part. The flows examined to determine if they are part of a bi-directional communication. If the flow is part of a bi-directional communication information related to the return flow or flows is extracted and passed to the unidirectional processing engine handling the flows in the opposite direction. This processing engine then pre-allocates resources in anticipation of the return flows. The pre-allocation of resources includes creating an entry in a session memory that contains state information on the flows passing through the network processing system.
摘要翻译：描述了能够绑定与双向通信相关的所有网络流量的网络处理系统。单向处理引擎从线路接口获取数据，并将每个数据分组与标识符相关联，标识数据分组是其一部分的流程。检查流程以确定它们是否是双向通信的一部分。如果流是与返回流相关的双向通信信息的一部分，或者流被提取并传递到处理相反方向的流的单向处理引擎。然后，该处理引擎预期返回流量预先分配资源。资源的预分配包括在会话存储器中创建包含通过网络处理系统的流的状态信息的条目。

3. 发明授权

US07031316B2 Content processor 失效
公开(公告)号：US07031316B2
公开(公告)日：2006-04-18
申请号：US10108609
申请日：2002-03-28
申请人： Robert Daniel Maher, III , Aswinkumar Vishanji Rana , Milton Andre Lie , Kevin William Brandon , Mark Warden Hervin , Corey Alan Garrow
发明人： Robert Daniel Maher, III , Aswinkumar Vishanji Rana , Milton Andre Lie , Kevin William Brandon , Mark Warden Hervin , Corey Alan Garrow
IPC分类号： H04L12/56
CPC分类号： H04L47/10 , H04L29/06 , H04L47/2441 , H04L47/34 , H04L63/1416 , H04L63/145 , H04L69/22
摘要： A content processor is described that is able to scan the contents of entire data packets including header and payload information. The content processor includes a queue engine operable to reorder out of order data packets and reassemble fragmented data packets. The queue engine sends the reordered and reassembled data packets to the context engine, which schedules the packets to be scanned. The packets are scanned by the content scanning engine using one or more string memories and one or more leaf string memories. The string memories are used by the content scanning engine to determine if there is a potential match between the data packet being scanned and any of the strings contained in database of known strings. If a potential match is identified, whether or not there is an exact match is determined using the leaf string memories and the leaf string compare engine. The scanning of the data packet results in a conclusion being generated by the content scanning engine. The conclusion can be an intermediate conclusion, can be an instruction to be executed by the content processor, can instruct the context engine to forward the information to a host processor for further analysis, or can be the final conclusion sent with the data packet with routing and quality of service treatment. Other uses for the conclusion are programmable in the content processor.

4. 发明授权

US07002974B1 Learning state machine for use in internet protocol networks 失效
标题翻译：学习状态机用于互联网协议网络
公开(公告)号：US07002974B1
公开(公告)日：2006-02-21
申请号：US09885249
申请日：2001-03-28
申请人： James Robert Deerman , Aswinkumar Vishanji Rana , Milton Andre Lie , Travis Ernest Strother, Jr. , Mark Warden Hervin , John Raymond Carman , Larry Gene Maxwell , Robert Daniel Maher, III
发明人： James Robert Deerman , Aswinkumar Vishanji Rana , Milton Andre Lie , Travis Ernest Strother, Jr. , Mark Warden Hervin , John Raymond Carman , Larry Gene Maxwell , Robert Daniel Maher, III
IPC分类号： H04L12/28 , H04L12/54
CPC分类号： H04L43/026 , H04L41/06 , H04L41/0893 , H04L41/16 , H04L41/22 , H04L47/10 , H04L47/2408 , H04L47/2441 , H04L47/2458 , H04L47/32 , H04L47/50 , H04L47/6215 , H04L49/90 , H04L49/9036
摘要： A network processing system is described that is able to scan the entire contents of data packets passing through it, and to associate related data packets into discrete sessions, or flows. This ability allows the network processing system to learn characteristics of flows and events contained within those flows. Further, the network processing system can remember characteristics and events that have already been learned for use in processing future data packets. And finally, the network processing system can apply treatments to individual data packets and flows based on the characteristics and events learned, as well as previous state that has been maintained for that flow. To accomplish this, the network processing system includes processing engines, referred to as learning state machines, that scan the entire contents of data packets, use specific information in the data packets to associate the data packet with a particular session, or flow, identify characteristics of the data packet and associated flow, as well as events contained within the flow, store a state for the flow that contains the characteristics and events already learned, and determine a treatment for the data packet based on its contents and flow state.
摘要翻译：描述了能够扫描通过它的数据分组的全部内容并将相关数据分组关联成离散会话或流的网络处理系统。该能力允许网络处理系统学习这些流中包含的流和特征。此外，网络处理系统可以记住已经被学习用于处理未来数据分组的特性和事件。最后，网络处理系统可以根据学习的特征和事件，以及为该流程维护的先前状态，将处理应用于各个数据包和流。为了实现这一点，网络处理系统包括称为学习状态机的处理引擎，其扫描数据分组的整个内容，使用数据分组中的特定信息将数据分组与特定会话或流相关联，识别特征数据包和相关联的流以及包含在流中的事件存储包含已经学习的特征和事件的流的状态，并且基于其内容和流程状态确定数据分组的处理。

5. 发明授权

US07782902B2 Apparatus and method for mapping overlapping internet protocol addresses in layer two tunneling protocols 有权
标题翻译：用于在第二层隧道协议中映射重叠的互联网协议地址的装置和方法
公开(公告)号：US07782902B2
公开(公告)日：2010-08-24
申请号：US10890888
申请日：2004-07-14
申请人： James Robert Deerman , Milton Andre Lie , Aswinkumar Vishanji Rana , Robert Daniel Maher, III
发明人： James Robert Deerman , Milton Andre Lie , Aswinkumar Vishanji Rana , Robert Daniel Maher, III
IPC分类号： H04J3/16 , H04J3/22 , G06F15/173
CPC分类号： H04L61/2514 , H04L29/12009 , H04L29/12367
摘要： A method and system are described for resolving problems created by implementing multiple networks using private IP addresses and layer two tunneling protocols is described. A network processing system is operable to map flows from private IP addresses and ports on layer two tunneling protocol networks to public IP addresses and ports using the private IP addresses and ports and identifiers for the layer two tunneling protocol network. The network processing system uses its own public IP addresses and ports to anchor the traffic from the private network and performs the required mapping to pass traffic between the public and private networks.
摘要翻译：描述了解决通过使用专用IP地址实现多个网络而创建的问题的方法和系统，并且描述了第二层隧道协议。网络处理系统可操作以使用专用IP地址和第二层隧道协议网络的标识符将来自第二层隧道协议网络上的私有IP地址和端口的流映射到公共IP地址和端口。网络处理系统使用其自己的公共IP地址和端口来锚定来自专用网络的流量，并执行所需的映射以在公共和专用网络之间传递流量。

6. 发明授权

US07406709B2 Apparatus and method for allowing peer-to-peer network traffic across enterprise firewalls 有权
标题翻译：允许跨企业防火墙进行对等网络流量的设备和方法
公开(公告)号：US07406709B2
公开(公告)日：2008-07-29
申请号：US10657813
申请日：2003-09-08
申请人： Robert Daniel Maher, III , Aswinkumar Vishanji Rana , Milton Andre Lie , James Robert Deerman
发明人： Robert Daniel Maher, III , Aswinkumar Vishanji Rana , Milton Andre Lie , James Robert Deerman
IPC分类号： G06F21/00 , G06F15/16 , H04L9/00 , H04K1/00
CPC分类号： H04L63/029 , H04L29/12471 , H04L29/1249 , H04L61/2553 , H04L61/2589 , H04L67/104
摘要： A system and method for allowing bidirectional network traffic to pass through a network address translation (“NAT”)/firewall device thereby allowing bidirectional traffic to flow between the private side of the NAT/firewall device and the public side of the NAT/firewall device while maintaining security between the public side and the private side is described. A network processing system on the public side of the NAT/firewall device anchors network traffic to and from the private side of the NAT/firewall device. A traversal client resides on the private side of the NAT/firewall device and has a secure connection with the network processing system. The traversal client is operable to pass signaling packets bound for a terminal on the private side of the NAT/firewall from the network processing system. The traversal client is also operable to send test packets through the NAT/firewall to create the allocations in the NAT/firewall to allow the bidirectional traffic to pass from the public side to the private side.
摘要翻译：一种用于允许双向网络流量通过网络地址转换（“NAT”）/防火墙设备的系统和方法，从而允许双向流量在NAT /防火墙设备的私有侧与NAT /防火墙设备的公共侧之间流动同时维护公共和私人之间的安全。 NAT /防火墙设备公网侧的网络处理系统将NAT /防火墙设备私网侧的网络流量定位。遍历客户端位于NAT /防火墙设备的私有端，并与网络处理系统建立安全连接。遍历客户端可操作地从网络处理系统传递绑定在NAT /防火墙的私有端上的终端的信令分组。遍历客户端还可以通过NAT /防火墙发送测试包，以在NAT /防火墙中创建分配，以允许双向流量从公共端传递到私有端。

7. 发明授权

US07272115B2 Method and apparatus for enforcing service level agreements 有权
标题翻译：执行服务级别协议的方法和设备
公开(公告)号：US07272115B2
公开(公告)日：2007-09-18
申请号：US10260768
申请日：2002-09-30
申请人： Robert Daniel Maher, III , James Robert Deerman , Milton Andre Lie , Mark Warden Hervin
发明人： Robert Daniel Maher, III , James Robert Deerman , Milton Andre Lie , Mark Warden Hervin
IPC分类号： H04L12/26 , H04L1/00 , H04J3/14 , G06F15/16 , G01R31/08 , G06F11/00
CPC分类号： H04L47/2433 , H04L41/5022 , H04L41/5083 , H04L41/5087 , H04L41/5093 , H04L47/10 , H04L47/20 , H04L47/2441
摘要： A network device for enforcing service level agreements is described that is able to scan the contents of entire data packets including header and payload information. The network device includes memory for storing subscriber information, policies and statistics. The traffic flow scanning processor scans the header and payload information from each data packet, which is used to associate each data packet with a particular subscriber, classify the type of network traffic in the data packet and to enforce the particular policies associated with the subscriber. The traffic flow scanning processor produces a treatment for the data packet based on the scanning. The scanned data packets and the associated treatments are then passed to a quality of service processor, which modifies the data packets if necessary and enforces resource allocation according to the preprogrammed policies.
摘要翻译：描述了用于执行服务水平协议的网络设备，其能够扫描包括报头和有效载荷信息的整个数据分组的内容。网络设备包括用于存储用户信息，策略和统计信息的存储器。业务流扫描处理器从用于将每个数据分组与特定用户相关联的每个数据分组扫描报头和有效载荷信息，对数据分组中的网络流量进行分类，并强制与用户相关联的特定策略。交通流扫描处理器基于扫描产生数据分组的处理。然后将扫描的数据分组和相关联的处理传递给服务质量处理器，如果需要则修改数据分组，并根据预编程策略执行资源分配。

8. 发明授权

US06910134B1 Method and device for innoculating email infected with a virus 有权
标题翻译：用于接收感染病毒的电子邮件的方法和设备
公开(公告)号：US06910134B1
公开(公告)日：2005-06-21
申请号：US09651665
申请日：2000-08-29
申请人： Robert Daniel Maher, III , Brian Michael Forbes , Milton Andre Lie , Mark Warden Hervin
发明人： Robert Daniel Maher, III , Brian Michael Forbes , Milton Andre Lie , Mark Warden Hervin
IPC分类号： G06F21/00 , H04L29/06 , H04F9/32 , H04L9/00
CPC分类号： H04L63/145 , G06F21/564 , G06F21/568
摘要： A method and device for detecting and inoculating emails infected with viruses are described. The method involves identifying a particular traffic and its associated data packets as an email session and scanning the associated data packets in order to compare their contents with a database of known signatures. If a match is found between the data packets and a signature of a known virus, it is determined if there is an attachment to the email. If an attachment is detected, some or all of the bits of the data packets associated with the attachment are altered, thereby rendering the infected attachment harmless. The network device includes memory for storing the database of known signatures and a content processor able to compare the contents of data packets with a database of known signatures. The content processor is also operable to alter some or all of the bits of the attachment to inoculate the email and attachment.
摘要翻译：描述了用于检测和接种感染病毒的电子邮件的方法和装置。该方法涉及将特定业务及其相关联的数据分组识别为电子邮件会话并扫描相关联的数据分组，以便将其内容与已知签名的数据库进行比较。如果在数据分组和已知病毒的签名之间发现匹配，则确定是否存在对该电子邮件的附件。如果检测到附件，则与附件相关联的数据分组的一些或全部比特被改变，从而使受感染的附件无害化。网络设备包括用于存储已知签名的数据库的存储器和能够将数据分组的内容与已知签名的数据库进行比较的内容处理器。内容处理器还可操作地改变附件的部分或全部位以接收电子邮件和附件。

9. 发明授权

US07894432B2 Apparatus and method creating virtual routing domains in an internet protocol network 有权
标题翻译：在互联网协议网络中创建虚拟路由域的装置和方法
公开(公告)号：US07894432B2
公开(公告)日：2011-02-22
申请号：US11103099
申请日：2005-04-09
申请人： Ashwin Vishanji Rana , Milton Andre Lie , Robert Harold Walls , Robert Daniel Maher, III
发明人： Ashwin Vishanji Rana , Milton Andre Lie , Robert Harold Walls , Robert Daniel Maher, III
IPC分类号： H04L12/28
CPC分类号： H04L45/302 , H04L45/04 , H04L45/3065 , H04L45/38 , H04L47/10 , H04L47/20 , H04L47/2416 , H04L47/2425 , H04L47/6215 , H04L63/0272 , H04L63/1458
摘要： A method and apparatus is described that allow the creation of virtual routing domains in an IP network. These virtual routing domains allow individual networks to be configures so that it appears that its routing domain covers the entire IP address space. A network processing system is used to implement the virtual routing domains and to allow network traffic to cross the individual routing domains. The network processing system is able to use application layer information to allow the crossing of virtual routing domain boundaries. By examining application layer information the network processing system is able to look up customer/user information and use that information to determine destination virtual routing domains and route otherwise unroutable addresses between domains.
摘要翻译：描述了允许在IP网络中创建虚拟路由域的方法和装置。这些虚拟路由域允许单独的网络进行配置，以使它的路由域覆盖整个IP地址空间。网络处理系统用于实现虚拟路由域，并允许网络流量跨越各个路由域。网络处理系统能够使用应用层信息来允许跨越虚拟路由域边界。通过检查应用层信息，网络处理系统能够查找客户/用户信息，并使用该信息来确定目的地虚拟路由域，并在域间路由否则不可路由的地址。

10. 发明授权

US07471683B2 Device for enabling trap and trace of internet protocol communications 有权
标题翻译：用于启用互联网协议通信的陷阱和跟踪的设备
公开(公告)号：US07471683B2
公开(公告)日：2008-12-30
申请号：US10852343
申请日：2004-05-24
申请人： Robert Daniel Maher, III , James Robert Deerman , Milton Andre Lie
发明人： Robert Daniel Maher, III , James Robert Deerman , Milton Andre Lie
IPC分类号： H04L12/28 , H04L12/56 , H04M1/00 , H04B7/00
CPC分类号： H04L43/026 , H04L41/0893 , H04L47/2441 , H04L63/00 , H04L63/30 , H04M3/2281 , H04M7/006
摘要： A network processing system is described that is able to monitor IP network traffic, including the ability to perform trap and trace on IP communications flowing over the IP network. The network processing system is able to scan the entire contents of data packets passing through it, and to associate related data packets into discrete sessions, or flows, which allows the network processing system to search for predetermined search criteria contained within those flows. If a flow is found to contain a predetermined search criteria, the network processing system is able to maintain a record of the flow or to replicate the flow and save it or send it to another IP address for monitoring. The monitoring of a flow can include the entire contents of the flow, or any subset of information in the flow such as call identifying information.
摘要翻译：描述了能够监视IP网络流量的网络处理系统，包括对通过IP网络流动的IP通信进行陷阱和跟踪的能力。网络处理系统能够扫描通过它的数据分组的整个内容，并将相关数据分组关联成离散会话或流，这允许网络处理系统搜索包含在这些流中的预定搜索标准。如果发现流包含预定的搜索条件，则网络处理系统能够维护流的记录或复制流并将其保存或发送到另一IP地址进行监视。流的监视可以包括流的整个内容，或流中的任何信息子集，例如呼叫识别信息。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式