专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08490158B2 Firewall including local bus 有权
标题翻译：防火墙包括本地总线
公开(公告)号：US08490158B2
公开(公告)日：2013-07-16
申请号：US12837271
申请日：2010-07-15
申请人： Feng Deng , Yan Ke , Dongping Luo
发明人： Feng Deng , Yan Ke , Dongping Luo
IPC分类号： G06F17/00
CPC分类号： H04L49/901 , H04L29/06 , H04L49/90 , H04L49/9057 , H04L63/02 , H04L69/16 , H04L69/22
摘要： A gateway for screening packets transferred over a network. The gateway includes a plurality of network interfaces, a memory and a memory controller. Each network interface receives and forwards messages from a network through the gateway. The memory temporarily stores packets received from a network. The memory controller couples each of the network interfaces and is configured to coordinate the transfer of received packets to and from the memory using a memory bus. The gateway includes a firewall engine couples to the memory bus. The firewall engine is operable to retrieve packets from the memory and screen each packet prior to forwarding a given packet through the gateway and out an appropriate network interface. A local bus is coupled between the firewall engine and the memory providing a second path for retrieving packets from memory when the memory bus is busy.
摘要翻译：用于筛选通过网络传输的数据包的网关。网关包括多个网络接口，存储器和存储器控制器。每个网络接口通过网关从网络接收和转发消息。存储器临时存储从网络接收的分组。存储器控制器耦合每个网络接口，并且被配置为使用存储器总线协调接收到的分组到和从存储器的传送。网关包括耦合到存储器总线的防火墙引擎。防火墙引擎可操作以从存储器检索数据包，并在通过网关转发给定的数据包之前筛选每个数据包，并从适当的网络接口中删除。本地总线耦合在防火墙引擎和存储器之间，当存储器总线忙时，提供用于从存储器检索数据包的第二路径。

2. 发明授权

US07784093B2 Firewall including local bus 有权
标题翻译：防火墙包括本地总线
公开(公告)号：US07784093B2
公开(公告)日：2010-08-24
申请号：US12040006
申请日：2008-02-29
申请人： Feng Deng , Yan Ke , Dongping Luo
发明人： Feng Deng , Yan Ke , Dongping Luo
IPC分类号： G06F17/00
CPC分类号： H04L49/901 , H04L29/06 , H04L49/90 , H04L49/9057 , H04L63/02 , H04L69/16 , H04L69/22
摘要： A gateway for screening packets transferred over a network. The gateway includes a plurality of network interfaces, a memory and a memory controller. Each network interface receives and forwards messages from a network through the gateway. The memory temporarily stores packets received from a network. The memory controller couples each of the network interfaces and is configured to coordinate the transfer of received packets to and from the memory using a memory bus. The gateway includes a firewall engine coupled to the memory bus. The firewall engine is operable to retrieve packets from the memory and screen each packet prior to forwarding a given packet through the gateway and out an appropriate network interface. A local bus is coupled between the firewall engine and the memory providing a second path for retrieving packets from memory when the memory bus is busy.
摘要翻译：用于筛选通过网络传输的数据包的网关。网关包括多个网络接口，存储器和存储器控制器。每个网络接口通过网关从网络接收和转发消息。存储器临时存储从网络接收的分组。存储器控制器耦合每个网络接口，并且被配置为使用存储器总线协调接收到的分组到和从存储器的传送。网关包括耦合到存储器总线的防火墙引擎。防火墙引擎可操作以从存储器检索数据包，并在通过网关转发给定的数据包之前筛选每个数据包，并从适当的网络接口中删除。本地总线耦合在防火墙引擎和存储器之间，当存储器总线忙时，提供用于从存储器检索数据包的第二路径。

3. 发明授权

US06701432B1 Firewall including local bus 有权
标题翻译：防火墙包括本地总线
公开(公告)号：US06701432B1
公开(公告)日：2004-03-02
申请号：US09283730
申请日：1999-04-01
申请人： Feng Deng , Yan Ke , Dongping Luo
发明人： Feng Deng , Yan Ke , Dongping Luo
IPC分类号： H04L900
CPC分类号： H04L49/901 , H04L29/06 , H04L49/90 , H04L49/9057 , H04L63/02 , H04L69/16 , H04L69/22
摘要： A gateway for screening packets transferred over a network. The gateway includes a plurality of network interfaces, a memory and a memory controller. Each network interface receives and forwards messages from a network through the gateway. The memory temporarily stores packets received from a network. The memory controller couples each of the network interfaces and is configured to coordinate the transfer of received packets to and from the memory using a memory bus. The gateway includes a firewall engine coupled to the memory bus. The firewall engine is operable to retrieve packets from the memory and screen each packet prior to forwarding a given packet through the gateway and out an appropriate network interface. A local bus is coupled between the firewall engine and the memory providing a second path for retrieving packets from memory when the memory bus is busy. An expandable external rule memory is coupled to the local bus and includes one or more rule sets accessible by the firewall engine using the local bus. The firewall engine is operable to retrieve rules from a rule set and screen packets in accordance with the retrieved rules.
摘要翻译：用于筛选通过网络传输的数据包的网关。网关包括多个网络接口，存储器和存储器控制器。每个网络接口通过网关从网络接收和转发消息。存储器临时存储从网络接收的分组。存储器控制器耦合每个网络接口，并且被配置为使用存储器总线协调接收到的分组到和从存储器的传送。网关包括耦合到存储器总线的防火墙引擎。防火墙引擎可操作以从存储器检索数据包，并在通过网关转发给定的数据包之前筛选每个数据包，并从适当的网络接口中删除。本地总线耦合在防火墙引擎和存储器之间，当存储器总线忙时，提供用于从存储器检索数据包的第二路径。可扩展外部规则存储器耦合到本地总线，并且包括可由防火墙引擎使用本地总线访问的一个或多个规则集。防火墙引擎可操作以根据检索的规则从规则集和屏幕分组检索规则。

4. 发明授权

US07363653B2 Firewall including local bus 有权
标题翻译：防火墙包括本地总线
公开(公告)号：US07363653B2
公开(公告)日：2008-04-22
申请号：US10765677
申请日：2004-01-26
申请人： Feng Deng , Yan Ke , Dongping Luo
发明人： Feng Deng , Yan Ke , Dongping Luo
IPC分类号： G06F9/00
CPC分类号： H04L49/901 , H04L29/06 , H04L49/90 , H04L49/9057 , H04L63/02 , H04L69/16 , H04L69/22
摘要： A gateway for screening packets transferred over a network. The gateway includes a plurality of network interfaces, a memory and a memory controller. Each network interface receives and forwards messages from a network through the gateway. The memory temporarily stores packets received from a network. The memory controller couples each of the network interfaces and is configured to coordinate the transfer of received packets to and from the memory using a memory bus. The gateway includes a firewall engine coupled to the memory bus. The firewall engine is operable to retrieve packets from the memory and screen each packet prior to forwarding a given packet through the gateway and out an appropriate network interface. A local bus is coupled between the firewall engine and the memory providing a second path for retrieving packets from memory when the memory bus is busy.
摘要翻译：用于筛选通过网络传输的数据包的网关。网关包括多个网络接口，存储器和存储器控制器。每个网络接口通过网关从网络接收和转发消息。存储器临时存储从网络接收的分组。存储器控制器耦合每个网络接口，并且被配置为使用存储器总线协调接收到的分组到和从存储器的传送。网关包括耦合到存储器总线的防火墙引擎。防火墙引擎可操作以从存储器检索数据包，并在通过网关转发给定的数据包之前筛选每个数据包，并从适当的网络接口中删除。本地总线耦合在防火墙引擎和存储器之间，当存储器总线忙时，提供用于从存储器检索数据包的第二路径。

5. 发明授权

US09201964B2 Identifying related entities 有权
标题翻译：识别相关实体
公开(公告)号：US09201964B2
公开(公告)日：2015-12-01
申请号：US13355697
申请日：2012-01-23
申请人： Dmitry Zhiyanov , Deqing Chen , Yan Ke
发明人： Dmitry Zhiyanov , Deqing Chen , Yan Ke
IPC分类号： G06F17/30
CPC分类号： G06F17/3087 , G06F17/30256 , G06F17/30539 , G06F17/30554 , G06F17/30864
摘要： Methods, systems, and computer-storage media having computer-usable instructions embodied thereon for identifying related entities are provided. One or more entities may be identified from a search query. The one or more entities may include any identifiable term having related information associated therewith. An entity store may be referenced to identify one or more related entities related to the entity. The one or more related entities, along with their relationship(s) to the entity (and one another, perhaps) may then be ranked and displayed to a user.
摘要翻译：提供了具有用于识别相关实体的其上包含计算机可用指令的方法，系统和计算机存储介质。可以从搜索查询中识别一个或多个实体。一个或多个实体可以包括具有与其相关联的相关信息的任何可识别术语。可以引用实体商店来标识与该实体相关的一个或多个相关实体。然后可以将一个或多个相关实体及其与实体（以及彼此）的关系排序并显示给用户。

6. 发明授权

US08654779B1 Network security device and method 有权
标题翻译：网络安全设备及方法
公开(公告)号：US08654779B1
公开(公告)日：2014-02-18
申请号：US13302808
申请日：2011-11-22
申请人： Yan Ke , Yuming Mao , Jian Tong , Guangsong Huang
发明人： Yan Ke , Yuming Mao , Jian Tong , Guangsong Huang
IPC分类号： H04L12/28
CPC分类号： H04L63/0236 , H04L63/0272 , H04L63/1416
摘要： Methods and apparatus, including computer program products, implementing and using techniques for processing a data packet. An input port receives a data packet, a switching board classifies the data packet, determines whether the data packet should be accepted, and switches the data packet to a management board if the data packet is a first data packet in a session, and to a processing board if the data packet is not a first data packet in a session. A management board receives a data packet from the switching board, examines the data packet and forwards the data packet to one of the processing boards. One or more processing boards receives non-first data packets from the switching board and data packets from the management board and processes the data packets. A firewall and a secure gateway with firewall and virtual private network functionality for processing a data packet are also described.
摘要翻译：方法和装置，包括计算机程序产品，用于处理数据包的实现和使用技术。输入端口接收数据包，交换板对数据包进行分类，确定是否接受数据包，如果数据包是会话中的第一个数据包，则将数据包切换到管理板，处理板，如果数据包不是会话中的第一个数据包。管理板从交换板接收数据包，检查数据包，并将数据包转发到其中一个处理板。一个或多个处理板从交换板和来自管理板的数据分组接收非第一数据分组并处理数据分组。还描述了防火墙和具有用于处理数据分组的防火墙和虚拟专用网络功能的安全网关。

7. 发明授权

US08614951B2 Guaranteed bandwidth sharing in a traffic shaping system 有权
标题翻译：在流量整形系统中保证带宽共享
公开(公告)号：US08614951B2
公开(公告)日：2013-12-24
申请号：US13222568
申请日：2011-08-31
申请人： Changming Liu , Yan Ke
发明人： Changming Liu , Yan Ke
IPC分类号： G08C15/00
CPC分类号： H04L47/10 , H04L47/215 , H04L47/22
摘要： In one aspect the invention provides a method for allocating bandwidth in a network appliance where the network appliance includes a plurality of guaranteed bandwidth buckets used to evaluate when to pass traffic through the network appliance. The method includes providing a shared bandwidth bucket associated with a plurality of the guaranteed bandwidth buckets, allocating bandwidth to the shared bandwidth bucket based on the underutilization of bandwidth in the plurality of guaranteed bandwidth buckets and sharing excess bandwidth developed from the underutilization of the guaranteed bandwidth allocated to the individual guaranteed bandwidth buckets. The step of sharing includes borrowing bandwidth from the shared bandwidth bucket by a respective guaranteed bandwidth bucket to allow traffic to pass immediately through the network appliance.
摘要翻译：在一个方面，本发明提供了一种在网络设备中分配带宽的方法，其中网络设备包括用于评估何时通过网络设备传送流量的多个保证带宽桶。该方法包括提供与多个保证带宽桶相关联的共享带宽桶，基于多个保证带宽桶中的带宽利用不足而分配带宽到共享带宽桶，并且分担从保证带宽的利用不足而产生的超额带宽分配给个人保证带宽桶。共享的步骤包括通过相应的保证带宽桶从共享带宽桶借用带宽，以允许流量立即通过网络设备。

8. 发明授权

US08429110B2 Pattern tree-based rule learning 有权
标题翻译：基于树型的规则学习
公开(公告)号：US08429110B2
公开(公告)日：2013-04-23
申请号：US12813171
申请日：2010-06-10
申请人： Rui Cai , Lei Zhang , Jiang-Ming Yang , Yan Ke , Xiaodong Fan , Wei-Ying Ma
发明人： Rui Cai , Lei Zhang , Jiang-Ming Yang , Yan Ke , Xiaodong Fan , Wei-Ying Ma
IPC分类号： G06F17/00 , G06N5/00
CPC分类号： G06F17/30864 , G06F17/30625
摘要： A pattern tree is constructed based on a plurality of key-value pairs representing portions of a data set. In some implementations, the pattern tree may be used for learning one or more rules for interacting with a source of the data set.
摘要翻译：基于表示数据集的部分的多个键值对来构造模式树。在一些实现中，模式树可以用于学习用于与数据集的源交互的一个或多个规则。

9. 发明授权

US07093280B2 Internet security system 有权
公开(公告)号：US07093280B2
公开(公告)日：2006-08-15
申请号：US09967893
申请日：2001-09-27
申请人： Yan Ke , Yuming Mao , Wilson Xu , Brian Yean-Shiang Leu
发明人： Yan Ke , Yuming Mao , Wilson Xu , Brian Yean-Shiang Leu
IPC分类号： H04L9/32 , G06F17/00
CPC分类号： H04L63/02 , H04L12/4641 , H04L12/4645 , H04L12/467 , H04L49/25 , H04L49/351 , H04L49/354 , H04L63/0209 , H04L63/0272 , H04L63/08 , H04L63/20
摘要： Methods and apparatus, including computer program products, implementing and using techniques for processing a data packet in a packet forwarding device. A data packet is received. A virtual local area network destination is determined for the received data packet, and a set of rules associated with the virtual local area network destination is identified. The rules are applied to the data packet. If a virtual local area network destination has been determined for the received data packet, the data packet is output to the destination, using the result from the application of the rules. If no destination has been determined, the data packet is dropped. A security system for partitioning security system resources into a plurality of separate security domains that are configurable to enforce one or more policies and to allocate security system resources to the one or more security domains, is also described.

10. 发明申请

US20110310742A1 GUARANTEED BANDWIDTH SHARING IN A TRAFFIC SHAPING SYSTEM 有权
标题翻译：在交通形成系统中保证带宽共享
公开(公告)号：US20110310742A1
公开(公告)日：2011-12-22
申请号：US13222568
申请日：2011-08-31
申请人： Changming LIU , Yan Ke
发明人： Changming LIU , Yan Ke
IPC分类号： H04L12/26
CPC分类号： H04L47/10 , H04L47/215 , H04L47/22
摘要： In one aspect the invention provides a method for allocating bandwidth in a network appliance where the network appliance includes a plurality of guaranteed bandwidth buckets used to evaluate when to pass traffic through the network appliance. The method includes providing a shared bandwidth bucket associated with a plurality of the guaranteed bandwidth buckets, allocating bandwidth to the shared bandwidth bucket based on the underutilization of bandwidth in the plurality of guaranteed bandwidth buckets and sharing excess bandwidth developed from the underutilization of the guaranteed bandwidth allocated to the individual guaranteed bandwidth buckets. The step of sharing includes borrowing bandwidth from the shared bandwidth bucket by a respective guaranteed bandwidth bucket to allow traffic to pass immediately through the network appliance.
摘要翻译：在一个方面，本发明提供了一种在网络设备中分配带宽的方法，其中网络设备包括用于评估何时通过网络设备传送流量的多个保证带宽桶。该方法包括提供与多个保证带宽桶相关联的共享带宽桶，基于多个保证带宽桶中的带宽利用不足而分配带宽到共享带宽桶，并且分担从保证带宽的利用不足而产生的超额带宽分配给个人保证带宽桶。共享的步骤包括通过相应的保证带宽桶从共享带宽桶借用带宽，以允许流量立即通过网络设备。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式