专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20080071904A1 Method and apparatus for monitoring a data stream to detect a pattern of data elements 有权
标题翻译：用于监视数据流以检测数据元素的模式的方法和装置
公开(公告)号：US20080071904A1
公开(公告)日：2008-03-20
申请号：US11523928
申请日：2006-09-19
申请人： Christoph L. Schuba , Hal L. Stern
发明人： Christoph L. Schuba , Hal L. Stern
IPC分类号： G06F15/16 , G06F15/173
CPC分类号： H04L43/18
摘要： A system that determines whether a pattern of data elements was observed in a stream of data. During operation, the system receives a query which seeks to determine whether the pattern of data elements was observed in the stream of data. In response to the query, the system performs a number of lookups in an enhanced Bloom filter to determine whether the pattern of data elements was observed in the stream of data, wherein the enhanced Bloom filter includes multiple instances of a Bloom filter, and wherein each instance of the Bloom filter is associated with a different time interval. If so, the system generates a notification that the pattern of data elements was observed.
摘要翻译：确定在数据流中是否观察到数据元素的模式的系统。在操作期间，系统接收查询，该查询试图确定在数据流中是否观察到数据元素的模式。响应于查询，系统在增强的Bloom过滤器中执行多个查找以确定在数据流中是否观察到数据元素的模式，其中增强的Bloom过滤器包括Bloom过滤器的多个实例，并且其中每个 Bloom过滤器的实例与不同的时间间隔相关联。如果是这样，系统会生成一个通知，观察数据元素的模式。

2. 发明申请

US20080071903A1 Method and apparatus for monitoring a data stream 有权
标题翻译：用于监视数据流的方法和装置
公开(公告)号：US20080071903A1
公开(公告)日：2008-03-20
申请号：US11523927
申请日：2006-09-19
申请人： Christoph L. Schuba , Hal L. Stern
发明人： Christoph L. Schuba , Hal L. Stern
IPC分类号： G06F15/173 , G06F15/16
CPC分类号： H04L43/18
摘要： A system that determines whether a data element exists within a set of data elements observed from a stream of data. During operation, the system receives a query which seeks to determine whether the data element exists within a set of data elements observed from a stream of data. In response to the query, the system performs a lookup in an enhanced Bloom filter to determine whether the pattern of data elements was observed in the stream of data, wherein the enhanced Bloom filter includes multiple instances of a Bloom filter, and wherein each instance of the Bloom filter is associated with a different time interval. If so, the system generates a notification that the data element was observed.
摘要翻译：确定数据元素是否存在于从数据流观察到的一组数据元素内的系统。在操作期间，系统接收查询，其寻求确定数据元素是否存在于从数据流观察到的一组数据元素内。响应于查询，系统在增强的Bloom过滤器中执行查找以确定在数据流中是否观察到数据元素的模式，其中增强的Bloom过滤器包括Bloom过滤器的多个实例，并且其中每个实例 Bloom过滤器与不同的时间间隔相关联。如果是这样，系统会生成一个通知，指示数据元素被观察。

3. 发明授权

US08260910B2 Method and apparatus for monitoring a data stream to detect a pattern of data elements using bloom filters 有权
标题翻译：用于监视数据流以使用布隆过滤器来检测数据元素的模式的方法和装置
公开(公告)号：US08260910B2
公开(公告)日：2012-09-04
申请号：US11523928
申请日：2006-09-19
申请人： Christoph L. Schuba , Hal L. Stern
发明人： Christoph L. Schuba , Hal L. Stern
IPC分类号： G06F15/173 , G06F7/04
CPC分类号： H04L43/18
摘要： A system that determines whether a pattern of data elements was observed in a stream of data. During operation, the system receives a query which seeks to determine whether the pattern of data elements was observed in the stream of data. In response to the query, the system performs a number of lookups in an enhanced Bloom filter to determine whether the pattern of data elements was observed in the stream of data, wherein the enhanced Bloom filter includes multiple instances of a Bloom filter, and wherein each instance of the Bloom filter is associated with a different time interval. If so, the system generates a notification that the pattern of data elements was observed.
摘要翻译：确定在数据流中是否观察到数据元素的模式的系统。在操作期间，系统接收查询，该查询试图确定在数据流中是否观察到数据元素的模式。响应于查询，系统在增强的Bloom过滤器中执行多个查找以确定在数据流中是否观察到数据元素的模式，其中增强的Bloom过滤器包括Bloom过滤器的多个实例，并且其中每个 Bloom过滤器的实例与不同的时间间隔相关联。如果是这样，系统会生成一个通知，观察数据元素的模式。

4. 发明授权

US08260909B2 Method and apparatus for monitoring a data stream 有权
标题翻译：用于监视数据流的方法和装置
公开(公告)号：US08260909B2
公开(公告)日：2012-09-04
申请号：US11523927
申请日：2006-09-19
申请人： Christoph L. Schuba , Hal L. Stern
发明人： Christoph L. Schuba , Hal L. Stern
IPC分类号： G06F15/173 , G06F7/04
CPC分类号： H04L43/18
摘要： A system that determines whether a data element exists within a set of data elements observed from a stream of data. During operation, the system receives a query which seeks to determine whether the data element exists within a set of data elements observed from a stream of data. In response to the query, the system performs a lookup in an enhanced Bloom filter to determine whether the pattern of data elements was observed in the stream of data, wherein the enhanced Bloom filter includes multiple instances of a Bloom filter, and wherein each instance of the Bloom filter is associated with a different time interval. If so, the system generates a notification that the data element was observed.
摘要翻译：确定数据元素是否存在于从数据流观察到的一组数据元素内的系统。在操作期间，系统接收查询，其寻求确定数据元素是否存在于从数据流观察到的一组数据元素内。响应于查询，系统在增强的Bloom过滤器中执行查找以确定在数据流中是否观察到数据元素的模式，其中增强的Bloom过滤器包括Bloom过滤器的多个实例，并且其中每个实例 Bloom过滤器与不同的时间间隔相关联。如果是这样，系统会生成一个通知，指示数据元素被观察。

5. 发明授权

US08064606B2 Method and apparatus for securely registering hardware and/or software components in a computer system 有权
标题翻译：用于在计算机系统中安全地注册硬件和/或软件组件的方法和装置
公开(公告)号：US08064606B2
公开(公告)日：2011-11-22
申请号：US11939416
申请日：2007-11-13
申请人： Christoph L. Schuba , James P. Hughes , Daniel E. Smith
发明人： Christoph L. Schuba , James P. Hughes , Daniel E. Smith
IPC分类号： H04L9/00 , G06Q30/00 , G06F21/00 , H04L9/14 , H04L29/06 , H04M1/68
CPC分类号： H04L9/0825
摘要： A system that securely registers components in a first system is presented. During operation, the first system receives a request from an intermediary system to obtain configuration information related to the components in the first system. In response to the request, the first system: (1) encrypts configuration information for the first system using a first encryption key; (2) encrypts the first encryption key using a second encryption key; and (3) sends the encrypted configuration information and the encrypted first encryption key to the intermediary system so that the intermediary system can forward the encrypted configuration information and the encrypted first encryption key to the second system, whereby the encrypted configuration information is cryptographically opaque to the intermediary system. Next, the second system uses the configuration information to register the components in the first system.
摘要翻译：介绍了在第一个系统中安全地注册组件的系统。在操作期间，第一系统接收来自中间系统的请求以获得与第一系统中的组件相关的配置信息。响应于该请求，第一系统：（1）使用第一加密密钥加密第一系统的配置信息; （2）使用第二加密密钥加密第一加密密钥; 和（3）将加密的配置信息和加密的第一加密密钥发送到中间系统，使得中间系统可以将加密的配置信息和加密的第一加密密钥转发到第二系统，由此加密的配置信息对于中介制度。接下来，第二系统使用配置信息来注册第一系统中的组件。

6. 发明申请

US20110067107A1 INTEGRATED INTRUSION DEFLECTION, DETECTION AND INTROSPECTION 有权
标题翻译：综合入侵偏差，检测和入侵
公开(公告)号：US20110067107A1
公开(公告)日：2011-03-17
申请号：US12625031
申请日：2009-11-24
申请人： John E. Weeks , Christoph L. Schuba
发明人： John E. Weeks , Christoph L. Schuba
IPC分类号： H04L9/32 , G06F12/14
CPC分类号： H04L63/1416 , G06F21/55 , G06F2221/2105 , H04L63/0209 , H04L63/1491
摘要： Methods and apparatus are provided for integrated deflection, detection and intrusion. Within a single computer system configured for operating system virtualization (e.g., Solaris, OpenSolaris), multiple security functions execute in logically independent zones or containers, under the control and administration of a global zone. Such functions may illustratively include a demilitarized zone (DMZ) and a honeypot. Management is facilitated because all functions work within a single operating system, which promotes the ability to configure, monitor and control each function. Any given zone can be configured with limited resources, a virtual network interface circuit and/or other features.
摘要翻译：提供了集成的偏转，检测和入侵的方法和装置。在配置为操作系统虚拟化的单个计算机系统（例如，Solaris，OpenSolaris）中，在全局区域的控制和管理下，在逻辑上独立的区域或容器中执行多个安全功能。这种功能可以说明性地包括非军事区（DMZ）和蜜罐。因为所有功能都可以在单个操作系统中运行，从而促进了配置，监视和控制各项功能的能力，从而促进了管理。任何给定的区域都可以配置有限的资源，虚拟网络接口电路和/或其他功能。

7. 发明授权

US07512071B2 Distributed flow enforcement 有权
标题翻译：分布式流量执行
公开(公告)号：US07512071B2
公开(公告)日：2009-03-31
申请号：US10876733
申请日：2004-06-25
申请人： Jason L. Goldschmidt , Christoph L. Schuba , Michael F. Speer , Benjamin H. Stoltz
发明人： Jason L. Goldschmidt , Christoph L. Schuba , Michael F. Speer , Benjamin H. Stoltz
IPC分类号： H04L12/26
CPC分类号： H04L47/2441 , H04L47/10 , H04L47/20 , H04L47/2458
摘要： A flow manager may receive packet flow rules from one or more network services and may generate a unified rule set according to the received packet flow rules. A flow manager may additionally split the unified rule set into subsets for enforcement by one or more flow enforcement devices and may install the rule subsets onto the flow enforcement devices. When splitting the unified rule set into subsets, a flow manager may analyze a network topology connecting the flow enforcement devices. A flow manager may also receive additional packet flow rules, integrate them into the unified rule set, update the rule subsets according to the additional rules, and install the updated subsets onto the flow enforcement devices.
摘要翻译：流管理器可以从一个或多个网络服务接收分组流规则，并且可以根据接收的分组流规则生成统一的规则集。流程管理器可以另外将统一规则集划分为子集以供一个或多个流量执行设备执行，并且可以将规则子集安装到流量执行设备上。当将统一规则集分成子集时，流管理器可以分析连接流执行设备的网络拓扑。流管理器还可以接收额外的分组流规则，将它们集成到统一规则集中，根据附加规则更新规则子集，并将更新的子集安装到流量执行设备上。

8. 发明授权

US06938169B1 Channel-specific file system views in a private network using a public-network infrastructure 有权
标题翻译：使用公共网络基础设施的专用网络中的通道特定文件系统视图
公开(公告)号：US06938169B1
公开(公告)日：2005-08-30
申请号：US09457895
申请日：1999-12-10
申请人： Germano Caronni , Amit Gupta , Tom R. Markson , Sandeep Kumar , Christoph L. Schuba , Glenn C. Scott
发明人： Germano Caronni , Amit Gupta , Tom R. Markson , Sandeep Kumar , Christoph L. Schuba , Glenn C. Scott
IPC分类号： G06F17/30 , H04L29/06 , G06F12/14 , G06F11/30
CPC分类号： H04L63/0272 , G06F17/30067 , H04L63/0442 , H04L63/08
摘要： Methods and systems consistent with the present invention provide a Supernet, a private network constructed out of components from a public-network infrastructure. The Supernet provides channel-specific file system views such that the file system of the Supernet is partitioned on a per-channel basis so that nodes on one channel see a different view of the network file system than the nodes on a different channel.
摘要翻译：与本发明一致的方法和系统提供了一种Supernet，一种由公共网络基础设施的组件构成的私有网络。 Supernet提供特定于频道的文件系统视图，使得Supernet的文件系统在每个频道的基础上进行分区，以便一个频道上的节点与不同频道上的节点相比，看到网络文件系统的不同视图。

9. 发明授权

US07865608B1 Method and apparatus for fast and scalable matching of structured data streams 有权
标题翻译：用于结构化数据流的快速和可扩展匹配的方法和装置
公开(公告)号：US07865608B1
公开(公告)日：2011-01-04
申请号：US11040714
申请日：2005-01-21
申请人： Christoph L. Schuba , Sumantra R. Kundu , Jason L. Goldschmidt
发明人： Christoph L. Schuba , Sumantra R. Kundu , Jason L. Goldschmidt
IPC分类号： G06F15/16
CPC分类号： H04L45/745 , H04L43/026 , H04L45/00 , H04L63/0227
摘要： One embodiment of the present invention provides a system that classifies elements in a structured data stream. Upon receiving an element from the structured data stream, the system applies a hash function to the element to generate a single hash value. Next, the system divides the single hash value into multiple sections, and uses the multiple sections as inputs to a Bloom filter to determine if a node for the element exists in an associated lookup structure. If so, the system looks up the node for the element in the associated lookup structure. Note that using the Bloom filter in this way prevents unnecessary lookups. Furthermore, using multiple sections of a single hash value as inputs to the Bloom filter eliminates the need to compute multiple hash values.
摘要翻译：本发明的一个实施例提供了一种对结构化数据流中的元素进行分类的系统。在从结构化数据流接收到元素时，系统将该哈希函数应用于该元素以生成单个哈希值。接下来，系统将单个哈希值分为多个部分，并将多个部分用作Bloom过滤器的输入，以确定元素的节点是否存在于相关联的查找结构中。如果是这样，系统将在关联的查找结构中查找元素的节点。请注意，以这种方式使用Bloom过滤器可以防止不必要的查找。此外，使用单个散列值的多个部分作为Bloom过滤器的输入消除了计算多个散列值的需要。

10. 发明申请

US20090313446A1 METHOD AND SYSTEM FOR CROSS-DOMAIN DATA SHARING 有权
标题翻译：用于跨域数据共享的方法和系统
公开(公告)号：US20090313446A1
公开(公告)日：2009-12-17
申请号：US12138106
申请日：2008-06-12
申请人： Christoph L. Schuba , John B. Levon
发明人： Christoph L. Schuba , John B. Levon
IPC分类号： G06F12/16 , G06F12/10
CPC分类号： G06F12/109 , G06F12/0284 , G06F2212/656
摘要： A method for sharing data between a first domain and a second domain, including issuing a first request for data from a storage pool by the first domain, receiving the first request by a control domain driver in a control domain, obtaining the data by the control domain driver, storing a first copy of the data in shared memory at a first physical address, updating a hypervisor page map to include an entry associating a first pseudo-physical page number with the first physical address, notifying the first domain that the first request has been completed, issuing a second request for the data by the second domain, receiving the second request by the control domain driver, determining that the first copy of the data is present in the shared memory, and updating the hypervisor page map to include an entry associating the second pseudo-physical page number with the first physical address.
摘要翻译：一种用于在第一域和第二域之间共享数据的方法，包括从第一域从存储池发出对数据的第一请求，由控制域中的控制域驱动器接收第一请求，通过控制获得数据域驱动器，以第一物理地址存储共享存储器中的数据的第一副本，更新管理程序页映射以包括将第一伪物理页号与第一物理地址相关联的条目，通知第一域第一请求已经完成，由第二域发出数据的第二请求，接收到控制域驱动器的第二请求，确定数据的第一副本存在于共享存储器中，并且更新管理程序页映射以包括条目将第二伪物理页号与第一物理地址相关联。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式