专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US09912654B2 IP security certificate exchange based on certificate attributes 有权
公开(公告)号：US09912654B2
公开(公告)日：2018-03-06
申请号：US12616789
申请日：2009-11-12
申请人： Anatoliy Panasyuk , Dharshan Rangegowda , Abhishek Shukla
发明人： Anatoliy Panasyuk , Dharshan Rangegowda , Abhishek Shukla
IPC分类号： H04L29/06 , H04L9/32
CPC分类号： H04L63/0823 , G06F2221/2105 , G06F2221/2149 , H04L9/3263 , H04L63/164 , H04L2209/76 , H04L2209/80
摘要： Architecture that provides Internet Protocol security (IPsec) certificate exchange based on certificate attributes. An IPsec endpoint can validate the security context of another IPsec endpoint certificate by referencing certificate attributes. By facilitating IPsec certificate exchange using certificate attributes rather than solely certificate roots, it is now possible to build multiple isolated network zones using a single certificate authority rather than requiring one certificate authority per zone. Moreover, the ability to use certificate attributes during the IPsec certificate exchange can be leveraged for more focused communications such as QoS (quality of service). Certificate attributes can be utilized to identify the security context of the endpoint. The IPsec certificate use can be locked down to a single IP or group of IPs.

2. 发明申请

US20110113481A1 IP SECURITY CERTIFICATE EXCHANGE BASED ON CERTIFICATE ATTRIBUTES 有权
标题翻译：基于证书属性的知识产权安全证书交换
公开(公告)号：US20110113481A1
公开(公告)日：2011-05-12
申请号：US12616789
申请日：2009-11-12
申请人： Anatoliy Panasyuk , Dharshan Rangegowda , Abhishek Shukla
发明人： Anatoliy Panasyuk , Dharshan Rangegowda , Abhishek Shukla
IPC分类号： G06F21/20
CPC分类号： H04L63/0823 , G06F2221/2105 , G06F2221/2149 , H04L9/3263 , H04L63/164 , H04L2209/76 , H04L2209/80
摘要： Architecture that provides Internet Protocol security (IPsec) certificate exchange based on certificate attributes. An IPsec endpoint can validate the security context of another IPsec endpoint certificate by referencing certificate attributes. By facilitating IPsec certificate exchange using certificate attributes rather than solely certificate roots, it is now possible to build multiple isolated network zones using a single certificate authority rather than requiring one certificate authority per zone. Moreover, the ability to use certificate attributes during the IPsec certificate exchange can be leveraged for more focused communications such as QoS (quality of service). Certificate attributes can be utilized to identify the security context of the endpoint. The IPsec certificate use can be locked down to a single IP or group of IPs.
摘要翻译：基于证书属性提供Internet协议安全（IPsec）证书交换的体系结构。 IPsec端点可以通过引用证书属性来验证另一个IPsec端点证书的安全上下文。通过使用证书属性而不仅仅是证书根源来促进IPsec证书交换，现在可以使用单个证书颁发机构构建多个隔离网络区域，而不是每个区域需要一个证书颁发机构。此外，在IPsec证书交换期间使用证书属性的能力可以用于更集中的通信，如QoS（服务质量）。可以使用证书属性来识别端点的安全上下文。 IPsec证书使用可以锁定到单个IP或一组IP。

3. 发明授权

US09379946B2 Model-based virtual networking 有权
标题翻译：基于模型的虚拟网络
公开(公告)号：US09379946B2
公开(公告)日：2016-06-28
申请号：US12616800
申请日：2009-11-12
申请人： Anatoliy Panasyuk , Dharshan Rangegowda , Ram Viswanathan , Anthony S. Chavez , Jiazhen Chen , Morgan Brown , Hasan S. Alkhatib , Geoffrey H. Outhred
发明人： Anatoliy Panasyuk , Dharshan Rangegowda , Ram Viswanathan , Anthony S. Chavez , Jiazhen Chen , Morgan Brown , Hasan S. Alkhatib , Geoffrey H. Outhred
IPC分类号： H04L12/24 , H04L29/06
CPC分类号： H04L41/145 , H04L41/12 , H04L63/102 , H04L63/20
摘要： Architecture that facilitates the virtual specification of a connection between physical endpoints. A network can be defined as an abstract connectivity model expressed in terms of the connectivity intent, rather than any specific technology. The connectivity model is translated into configuration settings, policies, firewall rules, etc., to implement the connectivity intent based on available physical networks and devices capabilities. The connectivity model defines the connectivity semantics of the network and controls the communication between the physical nodes in the physical network. The resultant virtual network may be a virtual overlay that is independent of the physical layer. Alternatively, the virtual overlay can also include elements and abstracts of the physical network(s). Moreover, automatic network security rules (e.g., Internet Protocol security-IPSec) can be derived from the connectivity model of the network.
摘要翻译：有助于物理端点之间连接的虚拟规范的体系结构。可以将网络定义为以连接意图表示的抽象连接模型，而不是任何特定技术。连接模型被转换为配置设置，策略，防火墙规则等，以实现基于可用物理网络和设备功能的连接意图。连接模型定义了网络的连接语义，并控制物理网络中的物理节点之间的通信。所得到的虚拟网络可以是独立于物理层的虚拟覆盖。或者，虚拟覆盖也可以包括物理网络的元素和摘要。此外，可以从网络的连接性模型导出自动网络安全规则（例如，因特网协议安全IPSec）。

4. 发明申请

US20110110268A1 MODEL-BASED VIRTUAL NETWORKING 有权
标题翻译：基于模型的虚拟网络
公开(公告)号：US20110110268A1
公开(公告)日：2011-05-12
申请号：US12616800
申请日：2009-11-12
申请人： Anatoliy Panasyuk , Dharshan Rangegowda , Ram Viswanathan , Anthony S. Chavez , Jiazhen Chen , Morgan Brown , Hasan S. Alkhatib , Geoffrey H. Outhred
发明人： Anatoliy Panasyuk , Dharshan Rangegowda , Ram Viswanathan , Anthony S. Chavez , Jiazhen Chen , Morgan Brown , Hasan S. Alkhatib , Geoffrey H. Outhred
IPC分类号： H04L12/28
CPC分类号： H04L41/145 , H04L41/12 , H04L63/102 , H04L63/20
摘要： Architecture that facilitates the virtual specification of a connection between physical endpoints. A network can be defined as an abstract connectivity model expressed in terms of the connectivity intent, rather than any specific technology. The connectivity model is translated into configuration settings, policies, firewall rules, etc., to implement the connectivity intent based on available physical networks and devices capabilities. The connectivity model defines the connectivity semantics of the network and controls the communication between the physical nodes in the physical network. The resultant virtual network may be a virtual overlay that is independent of the physical layer. Alternatively, the virtual overlay can also include elements and abstracts of the physical network(s). Moreover, automatic network security rules (e.g., Internet Protocol security-IPSec) can be derived from the connectivity model of the network.
摘要翻译：有助于物理端点之间连接的虚拟规范的体系结构。可以将网络定义为以连接意图表示的抽象连接模型，而不是任何特定技术。连接模型被转换为配置设置，策略，防火墙规则等，以实现基于可用物理网络和设备功能的连接意图。连接模型定义了网络的连接语义，并控制物理网络中的物理节点之间的通信。所得到的虚拟网络可以是独立于物理层的虚拟覆盖。或者，虚拟覆盖也可以包括物理网络的元素和摘要。此外，可以从网络的连接性模型导出自动网络安全规则（例如，因特网协议安全IPSec）。

5. 发明授权

US08688994B2 Federation among services for supporting virtual-network overlays 有权
标题翻译：支持虚拟网络覆盖的服务之间的联合
公开(公告)号：US08688994B2
公开(公告)日：2014-04-01
申请号：US12823891
申请日：2010-06-25
申请人： Hasan Alkhatib , Geoffrey Outhred , Deepak Bansal , Anatoliy Panasyuk , Dharshan Rangegowda , Anthony Chavez
发明人： Hasan Alkhatib , Geoffrey Outhred , Deepak Bansal , Anatoliy Panasyuk , Dharshan Rangegowda , Anthony Chavez
IPC分类号： H04L9/32 , H04L9/00 , H04L12/28 , G06F15/16 , H04N7/14
CPC分类号： G06F21/31 , H04L9/3234 , H04L9/3247 , H04L29/12264 , H04L29/12452 , H04L61/2046 , H04L61/2535 , H04L61/2546 , H04L63/0815 , H04L63/104 , H04L2209/60
摘要： Computerized methods, systems, and computer-readable media for promoting cooperation between a first and second virtual network overlay (“overlay”) are provided. The first overlay is governed by a first authority domain and includes members assigned virtual IP addresses from a first address range. The second overlay is governed by a second authority domain, which is associated with a second federation mechanism, for negotiating on behalf of the second overlay. The second federation mechanism is capable of negotiating with, or soliciting delegation of authority from, a first federation mechanism that is associated with the first authority domain. When negotiations are successful or authority is delegated, the second federation mechanism establishes a communication link between the second overlay and the first overlay or joins a member of the second overlay to the first overlay. Joining involves allocating a guest IP address from the first address range to the member.
摘要翻译：提供了用于促进第一和第二虚拟网络覆盖（“覆盖”）之间的协作的计算机化方法，系统和计算机可读介质。第一个覆盖由第一个授权域管理，并包括从第一个地址范围分配虚拟IP地址的成员。第二重叠由第二权限域管理，第二权限域与第二联合机制相关联，用于代表第二重叠进行协商。第二个联邦机制能够与第一个与第一个权威机构相关联的第一个联合机制进行谈判或者征集授权。当谈判成功或授权被授权时，第二联合机制在第二重叠和第一覆盖之间建立通信链接，或者将第二覆盖的成员连接到第一重叠。加入涉及将访客IP地址从第一个地址范围分配给该成员。

6. 发明授权

US08527615B2 Apparatus and method for determining a program neighborhood for a client node in a client-server network 有权
公开(公告)号：US08527615B2
公开(公告)日：2013-09-03
申请号：US10908202
申请日：2005-05-02
申请人： Martin Duursma , Anatoliy Panasyuk , Robert Ciraldo , Anthony Ungerman , Bradley Pedersen , Tom Davis, III , Marc Bloomfield
发明人： Martin Duursma , Anatoliy Panasyuk , Robert Ciraldo , Anthony Ungerman , Bradley Pedersen , Tom Davis, III , Marc Bloomfield
IPC分类号： G06F15/16 , G06F15/173
CPC分类号： H04L29/12113 , G06F9/54 , H04L29/06 , H04L61/1541 , H04L63/08 , H04L63/102 , H04L63/104 , H04L67/16 , H04L67/306 , H04L67/34 , H04L67/36 , H04L67/42 , H04L69/24 , H04L69/329
摘要： An apparatus and method for determining a program neighborhood of a client node in a client-server network is described. The program neighborhood of the client node includes application programs hosted by application servers on the network. The present invention enables a user of a client node to learn of these application programs. The user is not required to know where to find such applications or to manually establish links to such applications. To make the client node aware of its program neighborhood, a host server collects application-related information corresponding to application programs hosted by the servers in the network. The application-related information can include the application name, the server location of the application, minimum capabilities required of client nodes for executing the application, and those users who are authorized to use that application. User credentials are received from the client system. The user credentials are used to filter the application-related information. Information representing those application programs that are available to the client node is transmitted from the host server to the client system for display. In a Windows-based client node, the information can be represented by a graphical icon for each available application program.

7. 发明申请

US20120060204A1 Methods and Apparatus for Scalable Secure Remote Desktop Access 有权
标题翻译：可扩展安全远程桌面访问的方法和设备
公开(公告)号：US20120060204A1
公开(公告)日：2012-03-08
申请号：US13294965
申请日：2011-11-11
申请人： Anatoliy Panasyuk , Abolfazl Sirjani , Ben Walters , Michael Burr , Min-Chih Lu Earl
发明人： Anatoliy Panasyuk , Abolfazl Sirjani , Ben Walters , Michael Burr , Min-Chih Lu Earl
IPC分类号： G06F21/20
CPC分类号： H04L63/102 , G06F21/31 , G06F21/41 , G06F21/604 , G06F2221/2111
摘要： The invention provides scalable, secure, and easily administerable methods and systems for providing remote access to networked resources by combing aspects of physical access limitation measures with traditional computer access limitation measures. The methods and systems utilize an enrollment administration system for specifying enrollment rules, an enrollment system configured to communicate with the enrollment administration system to permit enrolling a first networked resource if permitted by specified enrollment rules, and a remote access system for granting a user remote access to the first networked resource if the user successfully enrolled the first networked resource.
摘要翻译：本发明提供可扩展，安全且易于管理的方法和系统，用于通过将物理访问限制措施的各个方面与传统的计算机访问限制措施相结合来提供对网络资源的远程访问。所述方法和系统利用注册管理系统来指定注册规则，注册系统被配置为与注册管理系统进行通信，以允许在指定的注册规则允许的情况下注册第一联网资源;以及用于授予用户远程访问的远程访问系统如果用户成功注册了第一个联网资源，则连接到第一个联网资源。

8. 发明申请

US20120054859A1 ADAPTIVE ELECTRONIC MESSAGE SCANNING 有权
标题翻译：自适应电子消息扫描
公开(公告)号：US20120054859A1
公开(公告)日：2012-03-01
申请号：US12872728
申请日：2010-08-31
申请人： Hans Christian Andersen , Anatoliy Panasyuk , Venkata Somanadha Sarma Remany , Bart Kus
发明人： Hans Christian Andersen , Anatoliy Panasyuk , Venkata Somanadha Sarma Remany , Bart Kus
IPC分类号： G06F15/16 , G06F21/00
CPC分类号： H04L51/12 , G06Q10/107
摘要： The present invention extends to methods, systems, and computer program products for adaptive electronic message scanning. Embodiments of the invention relate to dynamically (and potentially unpredictably) varying the depth/thoroughness of classifying electronic messages to protect against undesirable message content (e.g., SPAM, viruses, digital leakage, etc.). A minimum effectiveness is maintained and, when available resources permit, can be exceeded to provide increased protection. An optimal subset of available message classification rules can be selected on a per message basis. The selection of rules is based on available system resources, minimum desired effectiveness (e.g., defined in a Service Level Agreement (“SLA”)), and rule characteristics. Feedback loops can be used to optimize selected classification rule subsets.
摘要翻译：本发明扩展到用于自适应电子消息扫描的方法，系统和计算机程序产品。本发明的实施例涉及动态（并且潜在地不可预测地）改变分类电子消息的深度/彻底性，以防止不期望的消息内容（例如，垃圾邮件，病毒，数字泄漏等）。维持最低限度的效力，并且在可获得资源的情况下可以超过这些有效性，以提供更多的保护。可以在每个消息的基础上选择可用消息分类规则的最佳子集。规则的选择基于可用的系统资源，最小期望的有效性（例如，在服务水平协议（“SLA”）中定义）和规则特征。反馈回路可用于优化所选择的分类规则子集。

9. 发明授权

US08090874B2 Systems and methods for maintaining a client's network connection thru a change in network identifier 有权
标题翻译：通过网络标识符更改来维护客户端网络连接的系统和方法
公开(公告)号：US08090874B2
公开(公告)日：2012-01-03
申请号：US11157289
申请日：2005-06-20
申请人： Anatoliy Panasyuk , Andre Kramer , Bradley Jay Pedersen , David Sean Stone , Terry Treder
发明人： Anatoliy Panasyuk , Andre Kramer , Bradley Jay Pedersen , David Sean Stone , Terry Treder
IPC分类号： G06F15/16
CPC分类号： H04L63/0209 , G06F21/31 , H04L12/4633 , H04L63/0272 , H04L63/0281 , H04L63/0428 , H04L63/062 , H04L63/08 , H04L63/0807 , H04L63/166 , H04L67/14 , H04L69/329
摘要： The invention relates to methods and systems for reconnecting a client and providing user authentication across a reliable and persistent communication session. A first protocol that encapsulates a plurality of secondary protocols is used to communicate over a network. A first protocol service, using the first protocol, provides session persistence and a reliable connection between a client and a host service. When there is a disruption in the network connection between a client and a host service when a client roams between networks, the connection is reestablished and the client's network connection is maintained thru a change in a network identifier assigned to the client.
摘要翻译：本发明涉及用于重新连接客户端并在可靠和持续的通信会话中提供用户认证的方法和系统。封装多个辅助协议的第一协议被用于通过网络进行通信。使用第一协议的第一协议服务提供会话持久性和客户端与主机服务之间的可靠连接。当客户端和主机服务之间的网络连接发生中断时，客户端在网络之间漫游时，重新建立连接，并通过分配给客户端的网络标识符进行更改来维护客户端的网络连接。

10. 发明授权

US07984192B2 System and method for assigning unique identifiers to each remote display protocol session established via an intermediary device 有权
标题翻译：用于向通过中间设备建立的每个远程显示协议会话分配唯一标识符的系统和方法
公开(公告)号：US07984192B2
公开(公告)日：2011-07-19
申请号：US10711583
申请日：2004-09-27
申请人： Michael Burr , Min-Chih Lu Earl , Anatoliy Panasyuk , Abolfazl Sirjani
发明人： Michael Burr , Min-Chih Lu Earl , Anatoliy Panasyuk , Abolfazl Sirjani
IPC分类号： G06F13/00
CPC分类号： H04L29/12311 , H04L29/12226 , H04L29/12301 , H04L29/12783 , H04L29/12952 , H04L61/2015 , H04L61/2076 , H04L61/2084 , H04L61/35 , H04L61/6077
摘要： The invention relates to systems and methods for assigning a unique network identifier to one or more programs invoked on a computer. The computer obtains a plurality of network identifiers and associates a first network identifier to a first program invoked on the computer and associates a second network identifier, different from the first network identifier, to a second program invoked on the computer. The program may be a user session hosted by the computer, an application or an application isolation environment. The computer through a network communication interface transmits the first network identifier with the network communication of the first program and transmits the second network identifier with network communication of the second program.
摘要翻译：本发明涉及用于将唯一网络标识符分配给在计算机上调用的一个或多个程序的系统和方法。计算机获得多个网络标识符并将第一网络标识符与在计算机上调用的第一程序相关联，并将不同于第一网络标识符的第二网络标识符与在计算机上调用的第二程序相关联。程序可以是由计算机，应用程序或应用程序隔离环境托管的用户会话。通过网络通信接口的计算机通过第一程序的网络通信发送第一网络标识符，并用第二程序的网络通信发送第二网络标识符。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式