专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08885487B2 Congestion and thru-put visibility and isolation 有权
标题翻译：拥塞和透明度的可见性和隔离度
公开(公告)号：US08885487B2
公开(公告)日：2014-11-11
申请号：US12884935
申请日：2010-09-17
申请人： Eric A. Voit , Robert T. Baum , Jeffrey I. Winter
发明人： Eric A. Voit , Robert T. Baum , Jeffrey I. Winter
IPC分类号： H04L12/26
CPC分类号： H04L43/0888 , H04L41/0253 , H04L41/12 , H04L41/5038
摘要： Offering vertical services to subscribers and service providers is an avenue to immediately improve the competitiveness of digital subscriber line access service, for example of the type offered by a local exchange carrier. To deliver high-quality vertical services, however, the underlying ADSL Data Network (ADN) or the like needs to establish Quality of Service (QoS) as a core characteristic and offer an efficient mechanism for insertion of the vertical services. The inventive network architecture introduces QoS into the ADN, in a manner that enables the delivery of sophisticated and demanding IP-based services to subscribers, does not affect existing Internet tiers of service, and is cost-effective in terms of initial costs, build-out, and ongoing operations. The architecture utilizes a switch capable of examining and selectively forwarding packets or frames based on higher layer information in the protocol stack, that is to say on information that is encapsulated in the layer-2 information utilized to define normal connectivity through the network. The switch enables segregation of upstream traffic by type and downstream aggregation of Internet traffic together with traffic from a local services domain for vertical services and other local services. Systems coupled to the local services domain alone or in combination with software in servers and/or a user's computer enable a testing of connectivity, throughput, QoS metrics and the like through selected points of the ADN network.
摘要翻译：向订户和服务提供商提供垂直服务是立即提高数字用户线接入服务竞争力的途径，例如本地交换运营商提供的类型。然而，为了提供高质量的垂直服务，基础的ADSL数据网络（ADN）等需要建立服务质量（QoS）作为核心特征，并提供插入垂直服务的有效机制。本发明的网络架构将QoS引入到ADN中，使得能够向订户提供复杂且苛刻的基于IP的服务，不影响现有的互联网层级，并且在初始成本方面是成本有效的，外出和正在进行的操作。该架构使用能够基于协议栈中的较高层信息检查和选择性地转发分组或帧的交换机，也就是说，封装在用于定义通过网络的正常连接的第二层信息中的信息。交换机可以通过互联网流量的类型和下游聚合以及来自用于垂直服务和其他本地服务的本地服务域的流量来隔离上游流量。与本地服务域单独耦合或与服务器和/或用户计算机中的软件相结合的系统能够通过ADN网络的选定点测试连接性，吞吐量，QoS度量等。

2. 发明授权

US08411672B2 Methods and apparatus for providing emergency telephone service to IP-based telephone users 有权
公开(公告)号：US08411672B2
公开(公告)日：2013-04-02
申请号：US12829170
申请日：2010-07-01
申请人： Robert T. Baum , Jim Curry
发明人： Robert T. Baum , Jim Curry
IPC分类号： H04L12/66
CPC分类号： H04L45/60 , H04L29/12018 , H04L29/12028 , H04L29/12122 , H04L29/1216 , H04L29/12226 , H04L45/00 , H04L45/54 , H04L45/742 , H04L61/10 , H04L61/103 , H04L61/1547 , H04L61/157 , H04L61/2015
摘要： For purposes of servicing emergency calls, such as 911 calls, a telephone number is associated with each edge router port used to provide IP service to a customer premise location. A telephone number is associated with the edge router port and the corresponding customer location. The telephone number and location information are stored in a database used for providing emergency calling party location information. When a switch used for routing IP calls detects a telephone call to an emergency call center it determines the edge router port from which the call was placed and the telephone number associated with the port for emergency call purposes. The call is then forwarded to the emergency call service center with the determined telephone number being supplied as the calling party number. Performing a lookup operation using the supplied telephone number the emergency service operator determines the location from which the call was placed.

3. 发明授权

US08402559B2 IP based security applications using location, port and/or device identifier information 有权
标题翻译：基于IP的安全应用程序使用位置，端口和/或设备标识符信息
公开(公告)号：US08402559B2
公开(公告)日：2013-03-19
申请号：US12949357
申请日：2010-11-18
申请人： Robert T Baum
发明人： Robert T Baum
IPC分类号： G06F11/00
CPC分类号： H04L63/1466 , H04L29/12839 , H04L61/2015 , H04L61/6022 , H04L63/1408
摘要： Methods and apparatus for determining, in a reliable manner, a port, physical location and/or device identifier, such as a MAC address, associated with a device using an IP address and for using such information, e.g., to support one or more security applications is described. Supported security applications include restricting access to services based on the location of a device seeking access to a service, determining the location of stolen devices, and verifying the location of the source of a message or other IP signal, e.g., to determine if a prisoner is contacting a monitoring service from a predetermined location.
摘要翻译：以可靠的方式确定与使用IP地址的设备相关联的端口，物理位置和/或设备标识符（例如MAC地址）以及用于使用这样的信息的方法和装置，例如支持一个或多个安全性描述应用程序。支持的安全应用包括基于寻求对服务的访问的设备的位置来限制对服务的访问，确定被盗设备的位置以及验证消息或其它IP信号的源的位置，例如以确定是否一个囚犯正在从预定位置接触监视服务。

4. 发明申请

US20120185917A1 SECURITY EXTENSIONS USING AT LEAST A PORTION OF LAYER 2 INFORMATION OR BITS IN THE PLACE OF LAYER 2 INFORMATION 有权
标题翻译：安全延伸至少使用层2的信息或位置的2层信息
公开(公告)号：US20120185917A1
公开(公告)日：2012-07-19
申请号：US13332890
申请日：2011-12-21
申请人： Robert T. Baum
发明人： Robert T. Baum
IPC分类号： G06F21/00 , H04L9/32 , G06F7/04
CPC分类号： H04L29/08027 , G06Q20/382 , H04L12/4633 , H04L12/4641 , H04L45/04 , H04L61/10 , H04L61/35 , H04L61/6022 , H04L63/107 , H04L63/126 , H04L63/162 , H04L69/08 , H04L69/18 , H04L69/22 , H04L69/324 , H04L69/325 , H04L2212/00 , H04L2463/102
摘要： Information applied to a packet at an ingress port of a network may be used for enhancing security. The information applied to a packet may be “context information” which replaces at least some bits of layer 2 information (e.g., a header). Users or customers may define security policies. They may define different security policies for different types of transactions. They may also define security policies based on the location from which the transaction originated. If the customer is an organization with different classes of users, it may define different security policies. The class of user may be identified based on at least a part of the “context information”. At least a part of the context information may also be used to monitor a location from which a transaction originated, thereby permitting fraudulent uses to be traced.
摘要翻译：在网络的入口处应用于分组的信息可以用于增强安全性。应用于分组的信息可以是替换层2信息（例如，报头）的至少一些比特的“上下文信息”。用户或客户可以定义安全策略。他们可以为不同类型的交易定义不同的安全策略。他们还可以根据交易发起的位置来定义安全策略。如果客户是具有不同类别用户的组织，则可以定义不同的安全策略。可以基于“上下文信息”的至少一部分来识别用户类。上下文信息的至少一部分也可以用于监视从其发生交易的位置，从而允许跟踪欺骗性用途。

5. 发明授权

US08087064B1 Security extensions using at least a portion of layer 2 information or bits in the place of layer 2 information 有权
标题翻译：使用第2层信息或位置的至少一部分的第2层信息的安全扩展
公开(公告)号：US08087064B1
公开(公告)日：2011-12-27
申请号：US09910429
申请日：2001-07-20
申请人： Robert T. Baum
发明人： Robert T. Baum
IPC分类号： G06F7/04 , H04L29/06 , H04L9/32
CPC分类号： H04L29/08027 , G06Q20/382 , H04L12/4633 , H04L12/4641 , H04L45/04 , H04L61/10 , H04L61/35 , H04L61/6022 , H04L63/107 , H04L63/126 , H04L63/162 , H04L69/08 , H04L69/18 , H04L69/22 , H04L69/324 , H04L69/325 , H04L2212/00 , H04L2463/102
摘要： Using information applied to a packet at an ingress port of a network for enhancing security such as user authentication for example. Such authentication may be applied in addition to (i.e., as an extension of) other authentication measures. The information applied to a packet may be “context information” which replaces at least some bits of layer 2 information (e.g., a header). Users or customers may define security policies. They may define different security policies for different types of transactions. They may also define security policies based on the location from which the transaction originated. If the customer is an organization with different classes of users, it may define different security policies based on the type of transaction, the location from which the transaction originated, and/or the class of user. The class of user may be identified based on at least a part of the “context information”. At least a part of the context information may also be used to monitor a location from which a transaction originated, thereby permitting fraudulent uses to be traced.
摘要翻译：使用应用于网络入口端口的数据包的信息来增强安全性，例如用户认证。除了其他认证措施（即作为其扩展）之外，还可以应用这种认证。应用于分组的信息可以是替换层2信息（例如，报头）的至少一些比特的“上下文信息”。用户或客户可以定义安全策略。他们可以为不同类型的交易定义不同的安全策略。他们还可以根据交易发起的位置来定义安全策略。如果客户是具有不同类别用户的组织，则可以基于事务的类型，发起交易的位置和/或用户类来定义不同的安全策略。可以基于“上下文信息”的至少一部分来识别用户类。上下文信息的至少一部分也可以用于监视从其发生交易的位置，从而允许跟踪欺骗性用途。

6. 发明申请

US20110067119A1 IP BASED SECURITY APPLICATIONS USING LOCATION, PORT AND/OR DEVICE IDENTIFIER INFORMATION 有权
标题翻译：基于IP的安全应用程序使用位置，端口和/或设备标识符信息
公开(公告)号：US20110067119A1
公开(公告)日：2011-03-17
申请号：US12949357
申请日：2010-11-18
申请人： Robert T. Baum
发明人： Robert T. Baum
IPC分类号： G06F21/00 , G06F15/16
CPC分类号： H04L63/1466 , H04L29/12839 , H04L61/2015 , H04L61/6022 , H04L63/1408
摘要： Methods and apparatus for determining, in a reliable manner, a port, physical location and/or device identifier, such as a MAC address, associated with a device using an IP address and for using such information, e.g., to support one or more security applications is described. Supported security applications include restricting access to services based on the location of a device seeking access to a service, determining the location of stolen devices, and verifying the location of the source of a message or other IP signal, e.g., to determine if a prisoner is contacting a monitoring service from a predetermined location.
摘要翻译：以可靠的方式确定与使用IP地址的设备相关联的端口，物理位置和/或设备标识符（例如MAC地址）以及用于使用这样的信息的方法和装置，例如支持一个或多个安全性描述应用程序。支持的安全应用包括基于寻求对服务的访问的设备的位置来限制对服务的访问，确定被盗设备的位置以及验证消息或其它IP信号的源的位置，例如以确定是否一个囚犯正在从预定位置接触监视服务。

7. 发明授权

US07801158B2 Congestion and thru-put visibility and isolation 有权
标题翻译：拥塞和透明度的可见性和隔离度
公开(公告)号：US07801158B2
公开(公告)日：2010-09-21
申请号：US11312347
申请日：2005-12-21
申请人： Eric A. Voit , Robert T. Baum , Jeffrey I. Winter
发明人： Eric A. Voit , Robert T. Baum , Jeffrey I. Winter
IPC分类号： H04L12/28 , G06F15/16
CPC分类号： H04L43/0888 , H04L41/0253 , H04L41/12 , H04L41/5038
摘要： Offering vertical services to subscribers and service providers is an avenue to immediately improve the competitiveness of digital subscriber line access service, for example of the type offered by a local exchange carrier. To deliver high-quality vertical services, however, the underlying ADSL Data Network (ADN) or the like needs to establish Quality of Service (QoS) as a core characteristic and offer an efficient mechanism for insertion of the vertical services. The inventive network architecture introduces QoS into the ADN, in a manner that enables the delivery of sophisticated and demanding IP-based services to subscribers, does not affect existing Internet tiers of service, and is cost-effective in terms of initial costs, build-out, and ongoing operations. The architecture utilizes a switch capable of examining and selectively forwarding packets or frames based on higher layer information in the protocol stack, that is to say on information that is encapsulated in the layer-2 information utilized to define normal connectivity through the network. The switch enables segregation of upstream traffic by type and downstream aggregation of Internet traffic together with traffic from a local services domain for vertical services and other local services. Systems coupled to the local services domain alone or in combination with software in servers and/or a user's computer enable a testing of connectivity, throughput, QoS metrics and the like through selected points of the ADN network.
摘要翻译：向订户和服务提供商提供垂直服务是立即提高数字用户线接入服务竞争力的途径，例如本地交换运营商提供的类型。然而，为了提供高质量的垂直服务，基础的ADSL数据网络（ADN）等需要建立服务质量（QoS）作为核心特征，并提供插入垂直服务的有效机制。本发明的网络架构将QoS引入到ADN中，使得能够向订户提供复杂且苛刻的基于IP的服务，不影响现有的互联网层级，并且在初始成本方面是成本有效的，外出和正在进行的操作。该架构使用能够基于协议栈中的较高层信息来检查和选择性地转发分组或帧的交换机，也就是说封装在用于定义通过网络的正常连接的第二层信息中的信息。交换机可以通过互联网流量的类型和下游聚合以及来自用于垂直服务和其他本地服务的本地服务域的流量来隔离上游流量。与本地服务域单独耦合或与服务器和/或用户计算机中的软件相结合的系统能够通过ADN网络的选定点测试连接性，吞吐量，QoS度量等。

8. 发明授权

US07315554B2 Simple peering in a transport network employing novel edge devices 有权
标题翻译：在采用新型边缘设备的运输网络中进行简单的对等
公开(公告)号：US07315554B2
公开(公告)日：2008-01-01
申请号：US09834573
申请日：2001-04-12
申请人： Robert T. Baum , Eric A. Voit
发明人： Robert T. Baum , Eric A. Voit
IPC分类号： H04L12/66 , H04L12/56
CPC分类号： H04L63/0272 , H04L12/4633 , H04L12/4641 , H04L29/06 , H04L29/12009 , H04L29/12018 , H04L29/12783 , H04L29/12839 , H04L45/04 , H04L45/245 , H04L61/10 , H04L61/35 , H04L61/6022 , H04L63/101 , H04L63/104 , H04L69/08 , H04L69/18 , H04L69/22 , H04L69/324 , H04L69/325 , H04L2212/00 , H04L2463/102
摘要： Simple peering is provided in a novel network in which transport technology is independent of network access technology. An out-of-band network may be used to carry advertisements to an update facility. The update facility may use layer 3 destination address information and at least a part of context information (to identify customers uniquely) to determine a layer 3 address of an edge device of the transport network associated with an addressed customer device. Virtual private networks are supported, as context information is used to distinguish different customers with overlapping layer 3 addresses.
摘要翻译：传输技术独立于网络接入技术的新型网络中提供简单的对等。可以使用带外网络将广告传送到更新设施。更新设施可以使用层3目的地地址信息和至少一部分上下文信息（以唯一地识别客户端）来确定与寻址的客户设备相关联的传输网络的边缘设备的层3地址。支持虚拟专用网络，因为上下文信息用于区分具有重叠的第3层地址的不同客户端。

9. 发明授权

US06993026B1 Methods, apparatus and data structures for preserving address and service level information in a virtual private network 有权
公开(公告)号：US06993026B1
公开(公告)日：2006-01-31
申请号：US09652095
申请日：2000-08-31
申请人： Robert T. Baum , Eric A. Voit
发明人： Robert T. Baum , Eric A. Voit
IPC分类号： H04L12/28 , H04J3/16
CPC分类号： H04L29/12018 , H04L12/4633 , H04L12/4641 , H04L29/06 , H04L29/12009 , H04L45/04 , H04L45/245 , H04L61/10 , H04L69/22 , H04L69/324 , H04L69/325 , H04L2212/00 , Y02D50/30
摘要： Supporting virtual private networks by using a new layer 3 address to encapsulate a network-bound packet so that its context information, from which a layer 2 (e.g., MAC) address can be derived, is preserved. If this encapsulation was not done, the layer 2 address would change over each segment of the network. Thus, the encapsulation preserves the concept of group identification, using at least a part of the context, over the entire network and not just at the edge of the network. If a packet is received from the network (to be forwarded to a customer), the layer 3 address that was added in the encapsulation is stripped off. The original layer 3 destination address may be used with a client device addressing table to determine a new context information, and a layer 2 (e.g., MAC) address of a destination client device. If the client device addressing table does not include entries corresponding to the layer 3 destination address, an address resolution protocol (or “ARP”) may be broadcast to request such information or contents of inbound packets may be observed (snooping). The packet may then be forwarded to an aggregation device.

10. 发明授权

US06771673B1 Methods and apparatus and data structures for providing access to an edge router of a network 有权
标题翻译：用于提供对网络的边缘路由器的访问的方法和装置和数据结构
公开(公告)号：US06771673B1
公开(公告)日：2004-08-03
申请号：US09652822
申请日：2000-08-31
申请人： Robert T. Baum , Eric A. Voit
发明人： Robert T. Baum , Eric A. Voit
IPC分类号： H04J304
CPC分类号： H04L63/0272 , H04L29/12009 , H04L29/12018 , H04L61/10 , H04L63/101 , H04L69/08 , H04L69/18
摘要： Aggregating physical connections from customers for presentation to an access router and de-aggregating traffic from a shared link(s) from the access router. Ports of an aggregation unit may be configured such that each has a unique identifier in the place of information (e.g., the layer 2 address) originally in the layer 2 header. The layer 2 (e.g., MAC) address of the customer device connected with the port can be associated with, and therefore determined from, the IP address of the attached device. When a packet is received from a customer, information in the layer 2 header is changed to a unique identifier assigned to a logical port or interface associated with the physical port. When a packet is received from the access router, it is placed on the port assigned to the logical port associated with the destination layer 2 address (or associated with other bits of the unique bit string and at least some of those bits are replaced with the destination layer 2 address of the device associated with the port.
摘要翻译：聚合来自客户的物理连接，以呈现到接入路由器，并从接入路由器解除来自共享链路的流量。聚合单元的端口可以被配置为使得每个具有唯一的标识符来代替最初在层2报头中的信息（例如，层2地址）。与端口连接的客户设备的层2（例如，MAC）地址可以与所连接设备的IP地址相关联，并因此与其相关联。当从客户接收到分组时，层2报头中的信息被改变为分配给与物理端口相关联的逻辑端口或接口的唯一标识符。当从接入路由器接收到分组时，它被放置在分配给与目的地层2地址相关联的逻辑端口的端口上（或与唯一位串的其他位相关联，并且这些位中的至少一些被替换为与端口相关联的设备的目的地层2地址。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式