专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08424053B2 Method of dynamically updating network security policy rules when new network resources are provisioned in a service landscape 有权
标题翻译：在服务环境中配置新的网络资源时动态更新网络安全策略规则的方法
公开(公告)号：US08424053B2
公开(公告)日：2013-04-16
申请号：US12166243
申请日：2008-07-01
申请人： Sivaram Gottimukkala , Lap Huynh , Dinakaran Joseph , Linwood Overby, Jr. , Wesley Devine , Michael Behrendt , Gerd Breiter
发明人： Sivaram Gottimukkala , Lap Huynh , Dinakaran Joseph , Linwood Overby, Jr. , Wesley Devine , Michael Behrendt , Gerd Breiter
IPC分类号： H04L29/06
CPC分类号： H04L41/5051 , H04L41/082 , H04L41/0886 , H04L41/0893 , H04L41/28 , H04L41/5003 , H04L63/0263 , H04L63/20
摘要： A computer-implemented method is provided for updating network security policy rules when network resources are provisioned in a service landscape instance. The method includes categorizing network resources in a service landscape instance based on a service landscape model. The method further includes responding to the provisioning of a network resource by automatically generating one or more security policy rules for a newly-provisioned network resource. Additionally, the method includes updating security policy rules of pre-existing network resources in the service landscape instance that are determined to be eligible to communicate with the newly-provisioned network resource so as to include the newly-provisioned network resource as a remote resource based on the service landscape model.
摘要翻译：提供了一种计算机实现的方法，用于在服务场景实例中提供网络资源时更新网络安全策略规则。该方法包括基于服务景观模型对服务景观实例中的网络资源进行分类。该方法还包括通过为新配置的网络资源自动生成一个或多个安全策略规则来响应网络资源的供应。另外，该方法包括更新确定为与新配置的网络资源通信的服务景观实例中的预先存在的网络资源的安全策略规则，以便将新配置的网络资源包括为基于远程资源的在服务景观模型上。

2. 发明授权

US07912968B2 End-to-end (e2e) service level agreement (SLA) compliance across both managed and unmanaged network segments 失效
标题翻译：托管和非托管网段的端到端（e2e）服务级别协议（SLA）合规性
公开(公告)号：US07912968B2
公开(公告)日：2011-03-22
申请号：US11847294
申请日：2007-08-29
申请人： Michael E. Baskey , Mandis S. Beigi , Sivaram Gottimukkala , Lap T. Huynh , Dinakaran Joseph , Einar Lueck , Debanjan Saha , Sambit Sahu , Dinesh C. Verma
发明人： Michael E. Baskey , Mandis S. Beigi , Sivaram Gottimukkala , Lap T. Huynh , Dinakaran Joseph , Einar Lueck , Debanjan Saha , Sambit Sahu , Dinesh C. Verma
IPC分类号： G06F15/16
CPC分类号： H04L43/0852 , H04L41/5003 , H04L41/5009 , H04L41/5019 , H04L47/10 , H04L47/18 , H04L47/20 , H04L47/2425 , H04L47/283
摘要： Embodiments of the present invention address deficiencies of the art in respect to e2e SLA support in a network of both manageable and unmanageable portions and provide a method, system and computer program product for e2e SLA compliance across both managed and unmanaged network segments. In one embodiment of the invention, a method for e2e SLA compliance across both managed and unmanaged network segments can be provided. The method can include identifying both a managed segment and an unmanaged segment of an e2e network for a communications path implicated by an SLA, determining an observed delay for the unmanaged segment of the e2e network, computing from a desired delay for the communications path and the observed delay a differential delay, and constraining the managed segment to meet the differential delay in order to assure meeting the desired delay for the communications path implicated by the SLA.
摘要翻译：本发明的实施例解决了在可管理和不可管理部分的网络中关于e2e SLA支持的本领域的缺点，并且提供了用于在被管理网络段和非管理网段之间实现e2e SLA兼容的方法，系统和计算机程序产品。在本发明的一个实施例中，可以提供一种用于在被管理网络段和非管理网段之间执行e2e SLA兼容的方法。该方法可以包括识别由SLA所涉及的通信路径的e2e网络的管理段和非托管段，确定e2e网络的非管理段的观察到的延迟，从通信路径的期望延迟和观察延迟差分延迟，并限制被管理段以满足差分延迟，以便确保满足SLA所涉及的通信路径的期望延迟。

3. 发明申请

US20080034052A1 Application Prioritization in a Stateless Protocol 失效
标题翻译：无状态协议中的应用优先级
公开(公告)号：US20080034052A1
公开(公告)日：2008-02-07
申请号：US11868481
申请日：2007-10-06
申请人： Roger Bess , Roberto Delima , Sivaram Gottimukkala , Jason Hawrysz , Lap Huynh , Dinakaran Joseph , John Majikes
发明人： Roger Bess , Roberto Delima , Sivaram Gottimukkala , Jason Hawrysz , Lap Huynh , Dinakaran Joseph , John Majikes
IPC分类号： G06F15/16
CPC分类号： H04L29/06 , H04L67/02 , H04L67/142 , H04L67/322 , H04L69/329
摘要： Techniques are disclosed that enable an application to prioritize its traffic in an application-specific manner, such that traffic which is most important to this application can be prioritized over traffic that is less important to this application, where this prioritization information is reflected in differential treatment of the traffic within the network. An application conveys relative priority information for its traffic to a Web proxy or edge server, and this device then consults stored policy information to determine how the traffic should be prioritized in the network. The Web proxy also ensures that usage of network resources is balanced among multiple applications. Cookies are used for transmitting priority information between the edge server and application in an efficient manner.
摘要翻译：公开了使应用能够以特定于应用的方式对其流量进行优先级排序的技术，使得对该应用最重要的流量可以优先于对该应用不那么重要的流量，其中该优先级信息反映在差分处理的网络中的流量。应用程序将其流量的相对优先级信息传达给Web代理或边缘服务器，然后该设备将查询存储的策略信息，以确定流量在网络中的优先级。 Web代理还确保在多个应用程序之间平衡网络资源的使用。 Cookie用于以有效的方式在边缘服务器和应用程序之间传输优先级信息。

4. 发明申请

US20100005505A1 METHOD OF DYNAMICALLY UPDATING NETWORK SECURITY POLICY RULES WHEN NEW NETWORK RESOURCES ARE PROVISIONED IN A SERVICE LANDSCAPE 有权
标题翻译：新的网络资源在服务环境中提供时，动态更新网络安全政策规则的方法
公开(公告)号：US20100005505A1
公开(公告)日：2010-01-07
申请号：US12166243
申请日：2008-07-01
申请人： Sivaram Gottimukkala , Lap Huynh , Dinakaran Joseph , Gerd Brieter , Linwood Overby, JR. , Wesley Devine , Michael Behrendt
发明人： Sivaram Gottimukkala , Lap Huynh , Dinakaran Joseph , Gerd Brieter , Linwood Overby, JR. , Wesley Devine , Michael Behrendt
IPC分类号： G06F21/00 , G06N5/02
CPC分类号： H04L41/5051 , H04L41/082 , H04L41/0886 , H04L41/0893 , H04L41/28 , H04L41/5003 , H04L63/0263 , H04L63/20
摘要： A computer-implemented method is provided for updating network security policy rules when network resources are provisioned in a service landscape instance. The method includes categorizing network resources in a service landscape instance based on a service landscape model. The method further includes responding to the provisioning of a network resource by automatically generating one or more security policy rules for a newly-provisioned network resource. Additionally, the method includes updating security policy rules of pre-existing network resources in the service landscape instance that are determined to be eligible to communicate with the newly-provisioned network resource so as to include the newly-provisioned network resource as a remote resource based on the service landscape model.
摘要翻译：提供了一种计算机实现的方法，用于在服务场景实例中提供网络资源时更新网络安全策略规则。该方法包括基于服务景观模型对服务景观实例中的网络资源进行分类。该方法还包括通过为新配置的网络资源自动生成一个或多个安全策略规则来响应网络资源的供应。另外，该方法包括更新确定为与新配置的网络资源通信的服务景观实例中的预先存在的网络资源的安全策略规则，以便将新配置的网络资源包括为基于远程资源的在服务景观模型上。

5. 发明申请

US20080259790A1 RELIABLE AND RESILIENT END-TO-END CONNECTIVITY FOR HETEROGENEOUS NETWORKS 失效
标题翻译：可靠和灵活的异构网络的端到端连接
公开(公告)号：US20080259790A1
公开(公告)日：2008-10-23
申请号：US11738499
申请日：2007-04-22
申请人： Dinakaran Joseph , Jon K. Franks , Christopher N. Freeman , Sivaram Gottimukkala , Jason P. Hawrysz , Lap T. Huynh , Barry Mosakowski
发明人： Dinakaran Joseph , Jon K. Franks , Christopher N. Freeman , Sivaram Gottimukkala , Jason P. Hawrysz , Lap T. Huynh , Barry Mosakowski
IPC分类号： H04J1/16
CPC分类号： H04L41/022
摘要： Embodiments of the present invention address deficiencies of the art in respect to connectivity management in a heterogeneous network and provide a method, system and computer program product for resilient and reliable end-to-end connectivity in a heterogeneous network. In one embodiment of the invention, a method for resilient and reliable end-to-end connectivity in a heterogeneous network environment can be provided. The method can include creating an instance of an abstracted network resource model (NRM) for a heterogeneous network environment of different network resource nodes. The method further can include binding an application endpoint in the instance of the abstracted NRM with a connectivity endpoint for a first of the different network resource nodes. The method yet further can include detecting an outage in the first of the different network resource nodes. Finally, the method can include re-binding the application endpoint to a second of the different network resource nodes in response to detecting the outage.
摘要翻译：本发明的实施例解决了异构网络中的连接性管理方面的技术缺陷，并提供了用于异构网络中的弹性和可靠的端到端连接的方法，系统和计算机程序产品。在本发明的一个实施例中，可以提供一种用于异构网络环境中的弹性且可靠的端到端连接的方法。该方法可以包括为不同网络资源节点的异构网络环境创建抽象网络资源模型（NRM）的实例。该方法还可以包括将抽象NRM的实例中的应用端点与第一个不同网络资源节点的连接性端点绑定。该方法还可以包括检测第一不同网络资源节点中的中断。最后，该方法可以包括响应于检测到中断而将应用端点重新绑定到不同网络资源节点中的第二个。

6. 发明授权

US06996553B2 Fast policy classification for strings 有权
公开(公告)号：US06996553B2
公开(公告)日：2006-02-07
申请号：US10109185
申请日：2002-03-28
申请人： Dakshi Agrawal , Douglas Morgan Freimuth , Sivaram Gottimukkala , Lap Thiet Huynh , Dinakaran B. Joseph , John J. Majikes , David Paul Olshefski
发明人： Dakshi Agrawal , Douglas Morgan Freimuth , Sivaram Gottimukkala , Lap Thiet Huynh , Dinakaran B. Joseph , John J. Majikes , David Paul Olshefski
IPC分类号： G06F17/30
CPC分类号： H04L47/20 , G06F17/30949 , H04L47/15 , H04L47/70 , H04L47/782 , Y10S707/99932 , Y10S707/99933
摘要： A fast policy classification method and system. A policy differentiator can be provided which can include a policy repository configured to store hierarchical policy classification trees. The policy differentiator further can include a hashing module configured to produce integer values for string based selector attributes. In one aspect of the invention, the hashing module can include a longest string hashing function. A policy matching engine can be provided which is configured to locate policy rules in the hierarchical policy classification trees according to the integer values produced for the string based selector attributes. Finally, a policy matching engine interface can be provided through which policy queries and resulting policy decisions of the policy matching engine can be communicated between the policy matching engine and the policy enforcement entity.

7. 发明授权

US09715401B2 Securing live migration of a virtual machine from a secure virtualized computing environment, over an unsecured network, to a different virtualized computing environment 有权
公开(公告)号：US09715401B2
公开(公告)日：2017-07-25
申请号：US12210249
申请日：2008-09-15
申请人： Wesley M. Devine , Sivaram Gottimukkala , Lap T. Huynh , Dinakaran Joseph , Michael S. Law , Linwood H. Overby, Jr.
发明人： Wesley M. Devine , Sivaram Gottimukkala , Lap T. Huynh , Dinakaran Joseph , Michael S. Law , Linwood H. Overby, Jr.
IPC分类号： G06F9/455
CPC分类号： G06F9/45558 , G06F9/4856 , G06F2009/4557
摘要： In an embodiment of the invention, a method for secure live migration of a virtual machine (VM) in a virtualized computing environment can include selecting a VM in a secure virtualized computing environment for live migration to a different virtualized computing environment and blocking data communications with the selected VM and other VMs in the secure virtualized computing environment. The selected VM can be live migrated to the different virtualized computing environment and the VM can be restarted in the different virtualized computing environment. Notably, a secure communicative link can be established between the restarted VM and at least one other of the VMs in the secure virtualized computing environment. Finally, data communications between the restarted VM and the at least one other of the VMs can be enabled over the secure communicative link.

8. 发明授权

US07821921B2 Reliable and resilient end-to-end connectivity for heterogeneous networks 失效
标题翻译：异构网络的可靠和有弹性的端到端连接
公开(公告)号：US07821921B2
公开(公告)日：2010-10-26
申请号：US11738499
申请日：2007-04-22
申请人： Dinakaran Joseph , Jon K. Franks , Christopher N. Freeman , Sivaram Gottimukkala , Jason P. Hawrysz , Lap T Huynh , Barry Mosakowski
发明人： Dinakaran Joseph , Jon K. Franks , Christopher N. Freeman , Sivaram Gottimukkala , Jason P. Hawrysz , Lap T Huynh , Barry Mosakowski
IPC分类号： H04J1/16 , G06F11/00 , G06F15/173
CPC分类号： H04L41/022
摘要： Embodiments of the present invention address deficiencies of the art in respect to connectivity management in a heterogeneous network and provide a method, system and computer program product for resilient and reliable end-to-end connectivity in a heterogeneous network. In one embodiment of the invention, a method for resilient and reliable end-to-end connectivity in a heterogeneous network environment can be provided. The method can include creating an instance of an abstracted network resource model (NRM) for a heterogeneous network environment of different network resource nodes. The method further can include binding an application endpoint in the instance of the abstracted NRM with a connectivity endpoint for a first of the different network resource nodes. The method yet further can include detecting an outage in the first of the different network resource nodes. Finally, the method can include re-binding the application endpoint to a second of the different network resource nodes in response to detecting the outage.
摘要翻译：本发明的实施例解决了异构网络中的连接性管理方面的技术缺陷，并且提供了一种用于异构网络中的弹性且可靠的端到端连接的方法，系统和计算机程序产品。在本发明的一个实施例中，可以提供一种用于异构网络环境中的弹性且可靠的端到端连接的方法。该方法可以包括为不同网络资源节点的异构网络环境创建抽象网络资源模型（NRM）的实例。该方法还可以包括将抽象NRM的实例中的应用端点与第一个不同网络资源节点的连接性端点绑定。该方法还可以包括检测第一不同网络资源节点中的中断。最后，该方法可以包括响应于检测到中断而将应用端点重新绑定到不同网络资源节点中的第二个。

9. 发明授权

US07337236B2 Application prioritization in a stateless protocol 有权
标题翻译：无状态协议中的应用优先级
公开(公告)号：US07337236B2
公开(公告)日：2008-02-26
申请号：US10188678
申请日：2002-07-02
申请人： Roger A. Bess , Roberto Delima , Sivaram Gottimukkala , Jason Paul Hawrysz , Lap Thiet Huynh , Dinakaran D. Joseph , John J. Majikes
发明人： Roger A. Bess , Roberto Delima , Sivaram Gottimukkala , Jason Paul Hawrysz , Lap Thiet Huynh , Dinakaran D. Joseph , John J. Majikes
IPC分类号： G06F15/15
CPC分类号： H04L29/06 , H04L67/02 , H04L67/142 , H04L67/322 , H04L69/329
摘要： Techniques are disclosed that enable an application to prioritize its traffic in an application-specific manner, such that traffic which is most important to this application can be prioritized over traffic that is less important to this application, where this prioritization information is reflected in differential treatment of the traffic within the network. An application conveys relative priority information for its traffic to a Web proxy or edge server, and this device then consults stored policy information to determine how the traffic should be prioritized in the network. The Web proxy also ensures that usage of network resources is balanced among multiple applications. Cookies are used for transmitting priority information between the edge server and application in an efficient manner.
摘要翻译：公开了使应用能够以特定于应用的方式对其流量进行优先级排序的技术，使得对该应用最重要的流量可以优先于对该应用不那么重要的流量，其中该优先级信息反映在差分处理的网络中的流量。应用程序将其流量的相对优先级信息传达到Web代理或边缘服务器，然后该设备将查询存储的策略信息，以确定流量在网络中的优先级。 Web代理还确保在多个应用程序之间平衡网络资源的使用。 Cookie用于以有效的方式在边缘服务器和应用程序之间传输优先级信息。

10. 发明授权

US08458763B2 Method of automating and personalizing systems to satisfy security requirements in an end-to-end service landscape 有权
标题翻译：自动化和个性化系统以满足端到端服务环境中的安全要求的方法
公开(公告)号：US08458763B2
公开(公告)日：2013-06-04
申请号：US12166236
申请日：2008-07-01
申请人： Sivaram Gottimukkala , Lap Huynh , Dinakaran Joseph , Michael Law , Linwood Overby, Jr. , Wesley Devine , Michael Behrendt , Gerd Breiter
发明人： Sivaram Gottimukkala , Lap Huynh , Dinakaran Joseph , Michael Law , Linwood Overby, Jr. , Wesley Devine , Michael Behrendt , Gerd Breiter
IPC分类号： G06F17/00 , H04L9/00
CPC分类号： H04L63/20 , G06F21/57
摘要： A computer-implemented method of enabling security in network resources provisioned as part of a service landscape instance is provided. The method includes initiating an orchestration process for creating a landscape service instance to provide services to a service subscriber over a data communications network. The method further includes deriving from the orchestration process at least one parameter, and generating at least one security configuration profile based upon the at least one parameter for at least one system of the landscape service instance.
摘要翻译：提供了一种实现作为服务场景实例的一部分提供的网络资源中的安全性的计算机实现的方法。该方法包括启动业务流程以创建横向服务实例以通过数据通信网络向服务订户提供服务。该方法还包括从编排过程导出至少一个参数，并且基于景观服务实例的至少一个系统的至少一个参数来生成至少一个安全配置简档。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式