专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US09239915B2 Synchronizing between host and management co-processor for network access control 有权
公开(公告)号：US09239915B2
公开(公告)日：2016-01-19
申请号：US11904322
申请日：2007-09-26
申请人： Avigdor Eldar , Tal Roth , Hormuzd Khosravi , Tal Shustak , Yael Yanai
发明人： Avigdor Eldar , Tal Roth , Hormuzd Khosravi , Tal Shustak , Yael Yanai
IPC分类号： H04L29/06 , G06F21/33 , G06F21/71 , G06F21/85
CPC分类号： G06F21/33 , G06F21/71 , G06F21/85 , H04L63/0227 , H04L63/08 , H04L63/162
摘要： In network access controlled networks, it is desirable to prevent access to the network by any non-authenticated entities. Access control may be established through a trusted agent that, in some embodiments, may be implemented with a management co-processor. In some cases, active management technology may establish a connection while a host is inactive. Then, after the host becomes active, the host can attempt to use the management co-processor connection without obtaining the necessary authentications. This may be prevented, in some embodiments, by scanning for an active host and, if such an active host is found, blocking the host from using a layer 2 authentication channel unless the host is properly authenticated and has a proper Internet Protocol address.

2. 发明申请

US20090083844A1 Synchronizing between host and management co-processor for network access control 有权
标题翻译：同步主机和管理协处理器进行网络访问控制
公开(公告)号：US20090083844A1
公开(公告)日：2009-03-26
申请号：US11904322
申请日：2007-09-26
申请人： Avigdor Eldar , Tal Roth , Hormuzd Khosravi , Tal Shustak , Yael Yanai
发明人： Avigdor Eldar , Tal Roth , Hormuzd Khosravi , Tal Shustak , Yael Yanai
IPC分类号： G06F21/20 , G06F15/173
CPC分类号： G06F21/33 , G06F21/71 , G06F21/85 , H04L63/0227 , H04L63/08 , H04L63/162
摘要： In network access controlled networks, it is desirable to prevent access to the network by any non-authenticated entities. Access control may be established through a trusted agent that, in some embodiments, may be implemented with a management co-processor. In some cases, active management technology may establish a connection while a host is inactive. Then, after the host becomes active, the host can attempt to use the management co-processor connection without obtaining the necessary authentications. This may be prevented, in some embodiments, by scanning for an active host and, if such an active host is found, blocking the host from using a layer 2 authentication channel unless the host is properly authenticated and has a proper Internet Protocol address.
摘要翻译：在网络访问控制网络中，期望防止任何未经认证的实体访问网络。访问控制可以通过可信代理来建立，在一些实施例中，可以使用管理协处理器来实现。在某些情况下，主动管理技术可能会在主机处于非活动状态时建立连接。然后，在主机变为活动状态之后，主机可以尝试使用管理协处理器连接，而无需获得必要的认证。在一些实施例中，可以通过扫描活动主机来防止这种情况，并且如果发现这样的活动主机，则阻止主机使用第2层认证信道，除非主机被正确认证并具有适当的因特网协议地址。

3. 发明申请

US20090070467A1 Enabling access to remote entities in access controlled networks 有权
标题翻译：启用访问受控网络中的远程实体
公开(公告)号：US20090070467A1
公开(公告)日：2009-03-12
申请号：US11899991
申请日：2007-09-07
申请人： Hormuzd Khosravi , Venkat R. Gokulrangan , Tal Shustak , Avigdor Eldar
发明人： Hormuzd Khosravi , Venkat R. Gokulrangan , Tal Shustak , Avigdor Eldar
IPC分类号： G06F15/173
CPC分类号： H04L63/10 , G06F21/305 , H04L63/162
摘要： In network access control networks, it may be difficult to provide certain remote accesses such as remote boot or remote storage access. An available network connection established through chipset firmware (e.g. active management technology (AMT)) may be utilized to establish a connection and to enable the remote access. Then as soon the completion of the activity is detected, such as remote booting, then the connection may be immediately terminated to prevent access by improper agents.
摘要翻译：在网络访问控制网络中，可能难以提供某些远程访问，例如远程启动或远程存储访问。可以利用通过芯片组固件（例如主动管理技术（AMT））建立的可用网络连接来建立连接并实现远程访问。然后，一旦检测到活动的完成（例如远程启动），则可能立即终止连接，以防止不正当的代理访问。

4. 发明授权

US09178884B2 Enabling access to remote entities in access controlled networks 有权
公开(公告)号：US09178884B2
公开(公告)日：2015-11-03
申请号：US11899991
申请日：2007-09-07
申请人： Hormuzd Khosravi , Venkat R. Gokulrangan , Tal Shustak , Avigdor Eldar
发明人： Hormuzd Khosravi , Venkat R. Gokulrangan , Tal Shustak , Avigdor Eldar
IPC分类号： H04L29/06 , G06F21/30
CPC分类号： H04L63/10 , G06F21/305 , H04L63/162
摘要： In network access control networks, it may be difficult to provide certain remote accesses such as remote boot or remote storage access. An available network connection established through chipset firmware (e.g. active management technology (AMT)) may be utilized to establish a connection and to enable the remote access. Then as soon the completion of the activity is detected, such as remote booting, then the connection may be immediately terminated to prevent access by improper agents.

5. 发明授权

US08332510B2 Proxy detection by service processor 有权
标题翻译：服务处理器的代理检测
公开(公告)号：US08332510B2
公开(公告)日：2012-12-11
申请号：US12753427
申请日：2010-04-02
申请人： Hormuzd Khosravi , Dominic Fulginiti , Avigdor Eldar , Michael Navon
发明人： Hormuzd Khosravi , Dominic Fulginiti , Avigdor Eldar , Michael Navon
IPC分类号： G06F15/16
CPC分类号： H04L67/2819 , H04L67/28 , H04L69/14
摘要： Embodiments provide methods, apparatus, and systems that enable an embedded processor to detect and configure one or more network access settings. The network access settings may enable the embedded processor to communicate over a network, via out-of-band messages, with a management server or service. Other embodiments may be disclosed or claimed.
摘要翻译：实施例提供使得嵌入式处理器能够检测和配置一个或多个网络访问设置的方法，装置和系统。网络访问设置可以使嵌入式处理器能够通过带外消息通过网络与管理服务器或服务进行通信。可以公开或要求保护其他实施例。

6. 发明申请

US20110246633A1 PROXY DETECTION BY SERVICE PROCESSOR 有权
标题翻译：服务处理器的代理检测
公开(公告)号：US20110246633A1
公开(公告)日：2011-10-06
申请号：US12753427
申请日：2010-04-02
申请人： Hormuzd Khosravi , Dominic Fulginiti , Avigdor Eldar , Michael Navon
发明人： Hormuzd Khosravi , Dominic Fulginiti , Avigdor Eldar , Michael Navon
IPC分类号： G06F15/173
CPC分类号： H04L67/2819 , H04L67/28 , H04L69/14
摘要： Embodiments provide methods, apparatus, and systems that enable an embedded processor to detect and configure one or more network access settings. The network access settings may enable the embedded processor to communicate over a network, via out-of-band messages, with a management server or service. Other embodiments may be disclosed or claimed.
摘要翻译：实施例提供使得嵌入式处理器能够检测和配置一个或多个网络访问设置的方法，装置和系统。网络访问设置可以使嵌入式处理器能够通过带外消息通过网络与管理服务器或服务进行通信。可以公开或要求保护其他实施例。

7. 发明申请

US20080022355A1 Detection of network environment 有权
标题翻译：检测网络环境
公开(公告)号：US20080022355A1
公开(公告)日：2008-01-24
申请号：US11478987
申请日：2006-06-30
申请人： Hormuzd Khosravi , Karanvir Grewal , Ahuva Kroiser , Avigdor Eldar
发明人： Hormuzd Khosravi , Karanvir Grewal , Ahuva Kroiser , Avigdor Eldar
IPC分类号： H04L9/00
CPC分类号： H04L63/102 , H04L61/2015 , H04L63/0227 , H04L63/101 , H04L63/12
摘要： A method and apparatus for detection of network environment to aid policy selection for network access control. An embodiment of a method includes receiving a request to connect a device to a network and, if a security policy is received for the connection of the device, applying the policy for the device. If a security policy for the connection of the device is not received, the domain of the device is determined by determining whether the device is in an enterprise domain and determining whether the device is in a network access control domain, which allows selection of an appropriate domain/environment specific policy.
摘要翻译：一种用于检测网络环境以帮助网络访问控制的策略选择的方法和装置。一种方法的实施例包括接收将设备连接到网络的请求，并且如果接收到用于设备的连接的安全策略，则应用所述设备的策略。如果没有接收到用于连接设备的安全策略，则通过确定设备是否在企业域中并确定设备是否在网络访问控制域中来确定设备的域，这允许选择适当的域/环境特定策略。

8. 发明授权

US07814531B2 Detection of network environment for network access control 有权
标题翻译：网络访问控制网络环境检测
公开(公告)号：US07814531B2
公开(公告)日：2010-10-12
申请号：US11478987
申请日：2006-06-30
申请人： Hormuzd Khosravi , Karanvir Grewal , Ahuva Kroiser , Avigdor Eldar
发明人： Hormuzd Khosravi , Karanvir Grewal , Ahuva Kroiser , Avigdor Eldar
IPC分类号： H04L9/00 , H04L12/22
CPC分类号： H04L63/102 , H04L61/2015 , H04L63/0227 , H04L63/101 , H04L63/12
摘要： A method and apparatus for detection of network environment to aid policy selection for network access control. An embodiment of a method includes receiving a request to connect a device to a network and, if a security policy is received for the connection of the device, applying the policy for the device. If a security policy for the connection of the device is not received, the domain of the device is determined by determining whether the device is in an enterprise domain and determining whether the device is in a network access control domain, which allows selection of an appropriate domain/environment specific policy.
摘要翻译：一种检测网络环境以帮助网络访问控制的策略选择的方法和装置。一种方法的实施例包括接收将设备连接到网络的请求，并且如果接收到用于设备的连接的安全策略，则应用所述设备的策略。如果没有接收到用于连接设备的安全策略，则通过确定设备是否在企业域中并确定设备是否在网络访问控制域中来确定设备的域，这允许选择适当的域/环境特定策略。

9. 发明授权

US08713260B2 Adaptive block pre-fetching method and system 有权
标题翻译：自适应块预取方法和系统
公开(公告)号：US08713260B2
公开(公告)日：2014-04-29
申请号：US12753295
申请日：2010-04-02
申请人： Nadim Taha , Hormuzd Khosravi
发明人： Nadim Taha , Hormuzd Khosravi
IPC分类号： G06F13/00
CPC分类号： G06F12/0862
摘要： A method and system may include fetching a first pre-fetched data block having a first length greater than the length of a first requested data block, storing the first pre-fetched data block in a cache, and then fetching a second pre-fetched data block having a second length, greater than the length of a second requested data block, if data in the second requested data block is not entirely stored in a valid part of the cache. The first and second pre-fetched data blocks may be associated with a storage device over a channel. Other embodiments are described and claimed.
摘要翻译：方法和系统可以包括获取具有大于第一请求数据块的长度的第一长度的第一预取数据块，将第一预取数据块存储在高速缓存中，然后获取第二预取数据如果第二请求数据块中的数据未完全存储在高速缓存的有效部分中，则具有大于第二请求数据块的长度的第二长度的块。第一和第二预取数据块可以通过信道与存储设备相关联。描述和要求保护其他实施例。

10. 发明授权

US08434067B2 Method and system for whitelisting software components 有权
公开(公告)号：US08434067B2
公开(公告)日：2013-04-30
申请号：US13287707
申请日：2011-11-02
申请人： Gayathri Nagabhushan , Ravi Sahita , Hormuzd Khosravi , Satyajit Grover
发明人： Gayathri Nagabhushan , Ravi Sahita , Hormuzd Khosravi , Satyajit Grover
IPC分类号： G06F9/44
CPC分类号： G06F21/53 , G06F21/566 , G06F2221/2149
摘要： A method and system for whitelisting software components is disclosed. In a first operating environment, runtime information may be collected about a first loaded and executing software component. The collected information may be communicated to a second software component operating in a second operating environment that is isolated from the first operating environment. The collect runtime information may be compared with a validated set of information about the first software component. Other embodiments are described and claimed.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式