专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US07277931B1 Representing, configuring, administering, monitoring, and/or modeling connections using catalogs and matrixes 有权
标题翻译：使用目录和矩阵表示，配置，管理，监视和/或建模连接
公开(公告)号：US07277931B1
公开(公告)日：2007-10-02
申请号：US09327708
申请日：1999-06-08
申请人： Earl Hardin Booth , Charles Bruce Dillon , Bret Elliott Harrison , Sanjay Damodar Kamat , Charles Steven Lingafelt , Walter Cade Metz , Rajendran Rajan , Leo Temoshenko
发明人： Earl Hardin Booth , Charles Bruce Dillon , Bret Elliott Harrison , Sanjay Damodar Kamat , Charles Steven Lingafelt , Walter Cade Metz , Rajendran Rajan , Leo Temoshenko
IPC分类号： G06F15/177
CPC分类号： H04L12/66 , H04L41/00 , H04L41/12 , H04L63/20
摘要： A method, apparatus, computer product and structure is presented for representing and managing large amounts of information concerning networks of elements. While being useful for communication networks, it can be also usefully deployed in the context of other networks such as distribution and transportation networks. The method uses a hierarchical construct called “catalog”—a set of elements (which could be “atomic” elements or catalogs themselves)—to organize information about physical or abstract entities relevant for modeling the network. A matrix construct whose rows and columns constitute such elements are used to model connections at different levels of abstraction. A common framework and representation provided using these two constructs is shown to be useful for visualization, administration, configuration, modeling, monitoring and manipulation of the network.
摘要翻译：提出了一种方法，装置，计算机产品和结构，用于表示和管理有关元素网络的大量信息。在对通信网络有用的同时，也可以有效地部署在其他网络（如分销和运输网络）的上下文中。该方法使用称为“目录”的分层结构 - 一组元素（可以是“原子”元素或目录本身） - 组织有关与网络建模相关的物理或抽象实体的信息。其行和列构成这样的元素的矩阵构造用于对不同抽象级别的连接进行建模。使用这两种结构提供的通用框架和表示可以用于网络的可视化，管理，配置，建模，监控和操纵。

2. 发明授权

US06668282B1 System and method to monitor and determine if an active IPSec tunnel has become disabled 有权
标题翻译：监控和确定主动IPSec隧道是否已被禁用的系统和方法
公开(公告)号：US06668282B1
公开(公告)日：2003-12-23
申请号：US09630936
申请日：2000-08-02
申请人： Earl Hardin Booth, III , Charles Steven Lingafelt , Phuong Thanh Nguyen , Leo Temoshenko , Xiaogang Wang
发明人： Earl Hardin Booth, III , Charles Steven Lingafelt , Phuong Thanh Nguyen , Leo Temoshenko , Xiaogang Wang
IPC分类号： G06F15173
CPC分类号： H04L43/0817 , H04L41/0681 , H04L43/106 , H04L43/16 , H04L63/0272 , H04L63/0428 , H04L63/1408 , H04L63/164
摘要： A method and system for monitoring the status of an active secure tunnel between a pair of network elements in a communications network. The first network element originates and transmits an Internet Protocol Security (IPSec) test message to a second network element using a first unidirectional secure tunnel in response to the receipt of an active tunnel monitor command. The second network element receives the IPSec test message and transmits a response back to the first network element using a second unidirectional secure tunnel. The number of times that second network element failed to return a response to an IPSec test message is accumulated during a predetermined time interval and then compared with a threshold value to determine if the active secure tunnel has become disabled.
摘要翻译：一种用于监测通信网络中的一对网络元件之间的主动安全隧道的状态的方法和系统。响应于接收到主动隧道监视命令，第一网络元件使用第一单向安全隧道发起并发送到第二网络元件的互联网协议安全（IPSec）测试消息。第二网元接收IPSec测试消息，并使用第二单向安全隧道将响应发送回第一网元。在预定时间间隔期间累积第二网络元件未能返回对IPSec测试消息的响应的次数，然后与阈值进行比较，以确定主动安全隧道是否已被禁用。

3. 发明授权

US06816462B1 System and method to determine connectivity of a VPN secure tunnel 失效
标题翻译：确定VPN安全隧道连通性的系统和方法
公开(公告)号：US06816462B1
公开(公告)日：2004-11-09
申请号：US09630794
申请日：2000-08-02
申请人： Earl Hardin Booth, III , Charles Steven Lingafelt , Phuong Thanh Nguyen , Leo Temoshenko , Xiaogang Wang
发明人： Earl Hardin Booth, III , Charles Steven Lingafelt , Phuong Thanh Nguyen , Leo Temoshenko , Xiaogang Wang
IPC分类号： H04L1226
CPC分类号： H04L43/50
摘要： A method and system for determining the connectivity of a virtual private network IP security (IPSec) tunnel between two network elements by originating a plurality of connection tests between the network elements. The first network element transmits a connectivity test message to the second network element over the secure tunnel upon receipt of an initiate connectivity test command. The secure tunnel includes two unidirectional tunnels. The second network element receives the connectivity test message over the first unidirectional secure tunnel and transmits a response back to the first network element over the second unidirectional secure tunnel. The number of successful responses received from the second network element are accumulated and the results are reported back to the source of the connectivity test command.
摘要翻译：一种用于通过发起网络元件之间的多个连接测试来确定两个网络元件之间的虚拟专用网络IP安全（IPSec）隧道的连接性的方法和系统。第一网络元件在接收到启动连接测试命令时，通过安全隧道向第二网络元件发送连接测试消息。安全隧道包括两个单向隧道。第二网元通过第一单向安全隧道接收连接性测试消息，并通过第二单向安全隧道将响应发送回第一网元。累积从第二网元接收到的成功响应的数量，并将结果报告回到连接测试命令的源。

4. 发明授权

US06915436B1 System and method to verify availability of a back-up secure tunnel 有权
标题翻译：验证备用安全隧道可用性的系统和方法
公开(公告)号：US06915436B1
公开(公告)日：2005-07-05
申请号：US09630779
申请日：2000-08-02
申请人： Earl Hardin Booth, III , Charles Steven Lingafelt , Phuong Thanh Nguyen , Leo Temoshenko , Xiaogang Wang
发明人： Earl Hardin Booth, III , Charles Steven Lingafelt , Phuong Thanh Nguyen , Leo Temoshenko , Xiaogang Wang
IPC分类号： G06F11/30 , G06F15/16 , G06F15/173 , G06F21/00 , H04L12/24 , H04L12/26 , H04L29/06
CPC分类号： H04L63/1433 , G06F21/42 , H04L41/0213 , H04L43/50 , H04L69/14
摘要： A method and system for verifying the availability of a back-up virtual private network IP security (IPSec) tunnel between two network elements by originating a plurality of connection tests between the network elements. The first network element transmits a backup tunnel verification test message to the second network element over the back-up secure tunnel upon receipt of a backup tunnel verification test command. The back-up secure tunnel includes two unidirectional tunnels. The second network element receives the back-up tunnel verification test message over the first back-up unidirectional secure tunnel and transmits a response back to the first network element over the second back-up unidirectional secure tunnel. The number of failures to respond by the second network element to the backup tunnel verification tests performed during an active verification period specified in the backup tunnel verification test command are reported back to the source that initiated the back-up secure tunnel verification test.
摘要翻译：一种用于通过发起网络元件之间的多个连接测试来验证两个网络元件之间的后备虚拟专用网络IP安全（IPSec）隧道的可用性的方法和系统。第一网络元件在接收到备份隧道验证测试命令时，通过备份安全隧道将备份隧道验证测试消息发送到第二网元。备用安全隧道包括两个单向隧道。第二网元通过第一备用单向安全隧道接收备用隧道验证测试消息，并通过第二备份单向安全隧道将响应发送回第一网元。在备份隧道验证测试命令中指定的活动验证周期期间，由第二网络元件响应的备份隧道验证测试失败次数被报告回发起后台安全隧道验证测试的源。

5. 发明授权

US06622170B1 System and method for DEN/LDAP client database access with a backoff capability 有权
标题翻译：具有退避功能的DEN / LDAP客户端数据库访问的系统和方法
公开(公告)号：US06622170B1
公开(公告)日：2003-09-16
申请号：US09393641
申请日：1999-09-10
申请人： Bret Elliott Harrison , William Donald Reed , Leo Temoshenko
发明人： Bret Elliott Harrison , William Donald Reed , Leo Temoshenko
IPC分类号： G06F15177
CPC分类号： H04L67/1002 , H04L41/0893
摘要： A system and method for DEN/LDAP client database access with backoff capability. A current tree of directory information maintained at an LDAP server is used by LDAP clients to retrieve policy configuration information. When an LDAP client wishes to update policy configuration information, a new tree is created by cloning the current or a previous tree or by building a new tree. When the LDAP client is finished updating the new tree, the path for using LDAP clients is set to the new tree and the clients are requested to read LDAP policy configuration information using the new path. If the new tree of policy configuration information is found to be unsuitable, the clients' path is reset to the original tree and the clients are requested to read LDAP information policies using the reset path.
摘要翻译：用于具有退避功能的DEN / LDAP客户端数据库访问的系统和方法。目前LDAP服务器上维护的目录信息树被LDAP客户端用来检索策略配置信息。当LDAP客户端希望更新策略配置信息时，将通过克隆当前或之前的树或通过构建一个新树来创建一个新树。当LDAP客户端更新新树时，将使用LDAP客户端的路径设置为新树，并请求客户端使用新路径读取LDAP策略配置信息。如果发现策略配置信息的新树不合适，则客户端的路径将重置为原始树，并且请求客户端使用重置路径读取LDAP信息策略。

6. 发明授权

US06539483B1 System and method for generation VPN network policies 有权
标题翻译：用于生成VPN网络策略的系统和方法
公开(公告)号：US06539483B1
公开(公告)日：2003-03-25
申请号：US09481831
申请日：2000-01-12
申请人： Bret Elliott Harrison , William Donald Reed , Leo Temoshenko
发明人： Bret Elliott Harrison , William Donald Reed , Leo Temoshenko
IPC分类号： G06F1130
CPC分类号： H04L63/02 , H04L12/4641 , H04L47/24 , H04L63/0272 , H04L63/04 , H04L63/08 , H04L63/102
摘要： A system, method and program product for defining a Virtual Private Network (VPN) by the sum of a plurality of policy segments. Each policy segment is composed of a policy segment name, a policy segment type, a VPN device list, a policy template, a quality of service template and a connection type. The policy segment type can include Internet Protocol Security (IPsec), Differential Services (DiffServ) or Reservation Protocol (RSVP). The group of devices in a policy segment are it specified in a device list which is a collection of other device lists and/or device interface profiles. The group of common policy components are specified in a policy template. Policy templates contain the condition and action references that are used to generate policies for the policy segment. The condition reference includes a validity period and a traffic profile. The action reference includes at least one of an IPsec action, a DiffServ action or an RSVP action. The device list, connection type, and policy template are combined to generate all of the policies for a policy segment.
摘要翻译：一种用于通过多个策略段的总和来定义虚拟专用网（VPN）的系统，方法和程序产品。每个策略段由策略段名称，策略段类型，VPN设备列表，策略模板，服务质量模板和连接类型组成。策略段类型可以包括因特网协议安全（IPsec），差分服务（DiffServ）或预留协议（RSVP）。策略段中的设备组在设备列表中指定，该列表是其他设备列表和/或设备接口配置文件的集合。公共策略组件组在策略模板中指定。策略模板包含用于生成策略段策略的条件和操作引用。条件引用包括有效期和流量简档。动作参考包括IPsec动作，DiffServ动作或RSVP动作中的至少一个。组合设备列表，连接类型和策略模板以生成策略段的所有策略。

7. 发明授权

US06330560B1 Multiple manager to multiple server IP locking mechanism in a directory-enabled network 有权
标题翻译：在启用目录的网络中，多管理员到多个服务器IP锁定机制
公开(公告)号：US06330560B1
公开(公告)日：2001-12-11
申请号：US09394113
申请日：1999-09-10
申请人： Bret Elliott Harrison , William Donald Reed , Leo Temoshenko
发明人： Bret Elliott Harrison , William Donald Reed , Leo Temoshenko
IPC分类号： G06F1730
CPC分类号： H04L61/1523 , H04L41/28 , H04L63/10 , H04L63/102 , H04L69/16 , H04L69/162 , H04L69/163 , Y10S707/959 , Y10S707/99938 , Y10S707/99952
摘要： A system and method for a multiple manager to multiple server Internet Protocol (IP) locking application in a directory-enabled network. The IP locking application is a component of a network management application and runs on each server device. The IP locking application processes requests from a network management application on two user-defined TCP/IP port numbers. The first port is designated as the status port and can be accessed by multiple network management applications and/or multiple users to determine the identification of the network management application and/or user that has control of the second port which is designated as the lock port. The status port is used to determine whether or not the server directory is currently being updated by another network management application or user. The lock port is used to actually lock the server device by forming a connection to the port and passing the user and network management application identifiers of the lock requester. Since the lock port is a TCP/IP port, only one connection can be active at a given time. The lock is normally released by disconnecting from the port.
摘要翻译：用于多目录启用网络中多服务器Internet协议（IP）锁定应用程序的多管理员的系统和方法。 IP锁定应用程序是网络管理应用程序的组件，并在每个服务器设备上运行。 IP锁定应用程序处理来自网络管理应用程序的两个用户定义的TCP / IP端口号的请求。第一个端口被指定为状态端口，并且可被多个网络管理应用和/或多个用户访问，以确定具有被指定为锁定端口的第二端口的控制的网络管理应用和/或用户的标识。状态端口用于确定服务器目录当前是否正由另一个网络管理应用程序或用户更新。锁定端口用于通过形成与端口的连接并传递锁定请求者的用户和网络管理应用程序标识符来实际锁定服务器设备。由于锁定端口是TCP / IP端口，因此在给定的时间只能有一个连接处于活动状态。通常从端口断开锁定。

8. 发明授权

US5682523A System and method for collecting and retrieving network problem determination data with a generic collection subsystem reporting to an agent on demand 失效
标题翻译：用于通过通用收集子系统收集和检索网络问题确定数据的系统和方法，向需要的代理进行报告
公开(公告)号：US5682523A
公开(公告)日：1997-10-28
申请号：US168113
申请日：1993-12-15
申请人： David De-Hui Chen , William Frank McKenzie, Jr. , Ellen DePaolis , Leo Temoshenko
发明人： David De-Hui Chen , William Frank McKenzie, Jr. , Ellen DePaolis , Leo Temoshenko
IPC分类号： H04L12/24 , G06F17/30
CPC分类号： H04L41/046 , H04L41/06
摘要： A new system and method allow one or more Managers in a network to retrieve from an Agent problem determination data relating to the Agent's Components. The system and method of the present invention allow the Manager to use standard mechanisms to retrieve and display the Agent's problem determination data. A generic collection subsystem created by the Agent acts as an interface for the Agent to the Components for collecting and organizing the problem determination data received from the Components. The collection subsystem receives and stores problem determination data from each of the components in tables which are organized based upon the type of problem determination data. Within each table, the data objects may be stored chronologically, for example. The collection subsystem responds to all requests from the Agent for stored problem determination data. The requests may specify particular parameters such as the type of problem and time it occurred.
摘要翻译：新的系统和方法允许网络中的一个或多个管理器从与代理组件相关的代理问题确定数据中检索。本发明的系统和方法允许管理者使用标准机制来检索和显示代理的问题确定数据。由代理创建的通用集合子系统作为组件代理的接口，用于收集和组织从组件接收到的问题确定数据。收集子系统接收并存储根据问题确定数据的类型组织的表中的每个组件的问题确定数据。在每个表格中，例如，数据对象可按时间顺序存储。收集子系统响应来自代理的存储的问题确定数据的所有请求。请求可以指定特定参数，例如问题的类型和发生的时间。

9. 发明授权

US06175866B1 Method and system for generating unsupported network monitoring objects 失效
标题翻译：用于生成不支持的网络监视对象的方法和系统
公开(公告)号：US06175866B1
公开(公告)日：2001-01-16
申请号：US08977472
申请日：1997-11-24
申请人： Malcolm Herrick MacDonald Holloway , Leo Temoshenko
发明人： Malcolm Herrick MacDonald Holloway , Leo Temoshenko
IPC分类号： G06F1516
CPC分类号： H04L41/0213 , H04L41/0233 , H04L41/046 , H04L43/00 , H04L43/0817 , H04L43/0876
摘要： A method and system for monitoring and managing a network having at least one network manager resident within a network station and at least one network agent resident within a network device. The method and system accomplish their objects as follows. One or more network parameters of one or more network devices are grouped. In response to the grouping, a group monitor is constructed wherein any changes of the grouped one or more network parameters are reflected by the constructed group monitor. The constructed group monitor can thereafter be monitored for indications of changes in any of the grouped network parameters.
摘要翻译：一种用于监视和管理网络的方法和系统，该网络具有驻留在网络站内的至少一个网络管理器和驻留在网络设备内的至少一个网络代理。方法和系统完成其对象如下。一个或多个网络设备的一个或多个网络参数被分组。响应于分组，构建组监视器，其中组合的一个或多个网络参数的任何改变由构造的组监视器反映。此后可以监视构造的组监视器，以指示任何分组网络参数中的变化。

10. 发明授权

US5706508A System and method for monitoring SNMP tables 失效
标题翻译：用于监视SNMP表的系统和方法
公开(公告)号：US5706508A
公开(公告)日：1998-01-06
申请号：US042952
申请日：1993-04-05
申请人： David De-Hui Chen , William Frank McKenzie, Jr. , Zvonimir Ordanic , Leo Temoshenko
发明人： David De-Hui Chen , William Frank McKenzie, Jr. , Zvonimir Ordanic , Leo Temoshenko
IPC分类号： G06F13/00 , H04L12/24 , H04L29/06 , G06F15/40
CPC分类号： H04L41/0213 , H04L41/046 , Y10S707/99931 , Y10S707/99953
摘要： A new system and method allows a Manager in a Simple Network Management Protocol (SNMP) environment to gather updates from its Agents. The system and method comprise the unique provision of an index which is used in each of the Agent's tables for indicating the various revisions thereof. The index lexicographically increases with each revision to the table. The Manager maintains a record of the index of the data which it has received from its Agents, requesting only that data having a lexicographically larger indexing. Further, the index is used in related tables so that the tables will be kept in "sync" in that the Manager will know whether it has the latest updates so that an accurate picture may be portrayed.
摘要翻译：新的系统和方法允许管理器在简单网络管理协议（SNMP）环境中从其代理收集更新。该系统和方法包括在代理表中的每一个中用于指示其各种修订版本的索引的唯一提供。该表的索引按字典顺序增加。经理保留了其代理人收到的数据索引的记录，仅请求具有字典索引较大的数据。此外，索引在相关表中使用，因此表将保持在“同步”，因为管理器将知道它是否具有最新的更新，以便可以描绘准确的图像。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式