专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US06938169B1 Channel-specific file system views in a private network using a public-network infrastructure 有权
标题翻译：使用公共网络基础设施的专用网络中的通道特定文件系统视图
公开(公告)号：US06938169B1
公开(公告)日：2005-08-30
申请号：US09457895
申请日：1999-12-10
申请人： Germano Caronni , Amit Gupta , Tom R. Markson , Sandeep Kumar , Christoph L. Schuba , Glenn C. Scott
发明人： Germano Caronni , Amit Gupta , Tom R. Markson , Sandeep Kumar , Christoph L. Schuba , Glenn C. Scott
IPC分类号： G06F17/30 , H04L29/06 , G06F12/14 , G06F11/30
CPC分类号： H04L63/0272 , G06F17/30067 , H04L63/0442 , H04L63/08
摘要： Methods and systems consistent with the present invention provide a Supernet, a private network constructed out of components from a public-network infrastructure. The Supernet provides channel-specific file system views such that the file system of the Supernet is partitioned on a per-channel basis so that nodes on one channel see a different view of the network file system than the nodes on a different channel.
摘要翻译：与本发明一致的方法和系统提供了一种Supernet，一种由公共网络基础设施的组件构成的私有网络。 Supernet提供特定于频道的文件系统视图，使得Supernet的文件系统在每个频道的基础上进行分区，以便一个频道上的节点与不同频道上的节点相比，看到网络文件系统的不同视图。

2. 发明授权

US07765581B1 System and method for enabling scalable security in a virtual private network 有权
标题翻译：用于实现虚拟专用网络中的可扩展安全性的系统和方法
公开(公告)号：US07765581B1
公开(公告)日：2010-07-27
申请号：US09457914
申请日：1999-12-10
申请人： Germano Caronni , Amit Gupta , Sandeep Kumar , Tom R. Markson , Christoph L. Schuba , Glenn C. Scott
发明人： Germano Caronni , Amit Gupta , Sandeep Kumar , Tom R. Markson , Christoph L. Schuba , Glenn C. Scott
IPC分类号： H04L9/00
CPC分类号： H04L63/0272 , H04L29/12009 , H04L29/12367 , H04L29/12396 , H04L29/12471 , H04L29/12528 , H04L61/2514 , H04L61/2525 , H04L61/2553 , H04L61/2575
摘要： Methods and systems consistent with the present invention provide dynamic security policies that change the granularity of the security at the node level, process level, or socket level. Specifically, a channel number and virtual address are associated with various processes included in a process table. Since a security policy is required for all processes, secure and insecure processes located on the same channel may communicate with one another. Moreover, processes located on different channels may communicate with one another by a gateway that connects both channels. This scalable blanketing security approach provides an institutionalized method for securing any process, node or socket by providing a unique mechanism for policy enforcement at runtime or by changing the security policies.
摘要翻译：与本发明一致的方法和系统提供动态安全策略，其改变节点级别，过程级别或套接字级别的安全性的粒度。具体地，通道号和虚拟地址与包括在处理表中的各种处理相关联。由于所有进程都需要安全策略，因此位于同一通道上的安全和不安全进程可能会相互通信。此外，位于不同信道上的进程可以通过连接两个信道的网关彼此通信。这种可扩展的覆盖安全方法提供了一种制度化的方法，用于通过在运行时或通过更改安全策略提供用于策略实施的唯一机制来保护任何进程，节点或套接字。

3. 发明授权

US07336790B1 Decoupling access control from key management in a network 有权
标题翻译：将访问控制从网络中的密钥管理中解耦
公开(公告)号：US07336790B1
公开(公告)日：2008-02-26
申请号：US09458020
申请日：1999-12-10
申请人： Germano Caronni , Amit Gupta , Tom R. Markson , Sandeep Kumar , Christoph L. Schuba , Glenn C. Scott
发明人： Germano Caronni , Amit Gupta , Tom R. Markson , Sandeep Kumar , Christoph L. Schuba , Glenn C. Scott
IPC分类号： H04L9/32
CPC分类号： H04L63/0272
摘要： Methods and systems consistent with the present invention provide a Supernet, a private network constructed out of components from a public-network infrastructure. Supernet nodes can be located on virtually any device in the public network (e.g., the Internet), and both their communication and utilization of resources occur in a secure manner. As a result, the users of a Supernet benefit from their network infrastructure being maintained for them as part of the public-network infrastructure, while the level of security they receive is similar to that of a private network. The Supernet has an access control component and a key management component which are decoupled. The access control component implements an access control policy that determines which users are authorized to use the network, and the key management component implements the network's key management policies, which indicate when keys are generated and what encryption algorithm is used. Both access control and key management are separately configurable. Thus, the Supernet provides great flexibility by allowing different key management policies to be used with the same access control component.
摘要翻译：与本发明一致的方法和系统提供了一种Supernet，一种由公共网络基础设施的组件构成的私有网络。超网络节点可以位于公共网络（例如，因特网）中的几乎任何设备上，并且资源的通信和利用都以安全的方式发生。因此，Supernet的用户受益于其网络基础架构，作为公共网络基础架构的一部分，而其接收的安全级别与私有网络的安全级别相似。 Supernet具有访问控制组件和分离的密钥管理组件。访问控制组件实现访问控制策略，其确定哪些用户被授权使用网络，并且密钥管理组件实现网络的密钥管理策略，其指示生成密钥以及使用什么加密算法。访问控制和密钥管理都可以单独配置。因此，通过允许不同的密钥管理策略与相同的访问控制组件一起使用，Supernet提供了极大的灵活性。

4. 发明授权

US06870842B1 Using multicasting to provide ethernet-like communication behavior to selected peers on a network 有权
标题翻译：使用组播为网络上的选定对等体提供类似以太网的通信行为
公开(公告)号：US06870842B1
公开(公告)日：2005-03-22
申请号：US09457915
申请日：1999-12-10
申请人： Germano Caronni , Amit Gupta , Tom R. Markson , Sandeep Kumar , Christoph L. Schuba , Glenn C. Scott
发明人： Germano Caronni , Amit Gupta , Tom R. Markson , Sandeep Kumar , Christoph L. Schuba , Glenn C. Scott
IPC分类号： H04L12/18 , H04L12/28 , H04L12/56
CPC分类号： H04L12/18
摘要： Methods and systems consistent with the present invention provide a Supernet, a private network constructed out of components from a public-network infrastructure. Supernet nodes can be located on virtually any device in the public network (e.g., the Internet), and both their communication and utilization of resources occur in a secure manner. The Supernet also uses multicast communication to create Ethernet-like communication between its nodes. In using multicasting, each communication of each node on a channel in the private network is sent to a multicast address which sends it to all of the nodes on the channel. Sending a copy of every communication to all of the other nodes on the channel makes system tasks, like debugging, easy for the nodes on the channel. The multicasting provided by the private network is dynamic in that multicast addresses can be assigned for use by a channel and reclaimed so as to allow sharing of the multicast addresses.
摘要翻译：与本发明一致的方法和系统提供了一种Supernet，一种由公共网络基础设施的组件构成的私有网络。超网络节点可以位于公共网络（例如，因特网）中的几乎任何设备上，并且资源的通信和利用都以安全的方式发生。 Supernet还使用组播通信在其节点之间创建类似以太网的通信。在使用多播时，专网中信道上的每个节点的每个通信都被发送到多播地址，将其发送到该信道上的所有节点。将每个通信的副本发送到通道上的所有其他节点，使得系统任务（如调试）对于通道上的节点很容易。由私有网络提供的多播是动态的，因为多播地址可以被分配给信道使用并被回收以允许多播地址的共享。

5. 发明授权

US06977929B1 Method and system for facilitating relocation of devices on a network 有权
标题翻译：促进网络上设备重定位的方法和系统
公开(公告)号：US06977929B1
公开(公告)日：2005-12-20
申请号：US09457889
申请日：1999-12-10
申请人： Germano Caronni , Amit Gupta , Tom R. Markson , Sandeep Kumar , Christoph L. Schuba , Glenn C. Scott
发明人： Germano Caronni , Amit Gupta , Tom R. Markson , Sandeep Kumar , Christoph L. Schuba , Glenn C. Scott
IPC分类号： H04L12/18 , H04L29/06 , H04L29/12 , H04L12/56
CPC分类号： H04L61/2076 , H04L12/185 , H04L29/12301 , H04L63/0272 , H04W8/26 , H04W80/04
摘要： Methods and systems consistent with the present invention provide a Supernet, a private network constructed out of components from a public-network infrastructure. The Supernet provides flexible and dynamic mobility support. When a destination node moves to a new location, it automatically updates the sending nodes with its new IP address. The destination node can choose among a number of ways to update the sending nodes, providing flexibility not found in conventional networks. Thus, a node can change locations repeatedly and continue to communicate directly with other nodes without the use of a proxy or other middleman.
摘要翻译：与本发明一致的方法和系统提供了一种Supernet，一种由公共网络基础设施的组件构成的私有网络。 Supernet提供灵活和动态的移动支持。当目的地节点移动到新位置时，它将使用其新的IP地址自动更新发送节点。目的地节点可以选择多种方式来更新发送节点，提供在传统网络中找不到的灵活性。因此，节点可以重复地改变位置并且继续直接与其他节点通信，而不使用代理或其他中间人。

6. 发明授权

US06798782B1 Truly anonymous communications using supernets, with the provision of topology hiding 有权
标题翻译：真正的匿名通信使用超集，提供拓扑隐藏
公开(公告)号：US06798782B1
公开(公告)日：2004-09-28
申请号：US09457917
申请日：1999-12-10
申请人： Germano Caronni , Amit Gupta , Sandeep Kumar , Tom R. Markson , Christoph L. Schuba , Glenn C. Scott
发明人： Germano Caronni , Amit Gupta , Sandeep Kumar , Tom R. Markson , Christoph L. Schuba , Glenn C. Scott
IPC分类号： H04L1228
CPC分类号： H04L63/0272 , H04L29/12009 , H04L29/12433 , H04L61/2539 , H04L63/0407 , H04L63/0414 , H04L63/0421 , H04L63/08
摘要： Methods and systems consistent with the present invention provide a Supernet, a private network constructed out of components from a public-network infrastructure. Supernet nodes can be located on virtually any device in the public network (e.g., the Internet), and both their communication and utilization of resources occur in a secure manner by providing for anonymous communications within the network through addressing. As a result, the users of a Supernet benefit from their network infrastructure being maintained for them as part of the public-network infrastructure, while the level of security they receive is similar to that of a private network. Additionally, the nodes of the Supernet are not geographically restricted in that they can be connected to the Supernet from virtually any portal to the Internet in the world.
摘要翻译：与本发明一致的方法和系统提供了一种Supernet，一种由公共网络基础设施的组件构成的私有网络。超级网络节点可以位于公共网络（例如，因特网）中的几乎任何设备上，并且它们的资源的通信和利用都以安全的方式发生，通过寻址来提供网络内的匿名通信。因此，Supernet的用户受益于其网络基础架构，作为公共网络基础架构的一部分，而其接收的安全级别与私有网络的安全级别相似。此外，Supernet的节点不受地域限制，因为它们可以从世界上几乎任何门户到互联网连接到Supernet。

7. 发明申请

US20060077977A1 System and method for separating addresses from the delivery scheme in a virtual private network 有权
标题翻译：用于在虚拟专用网络中将地址从传送方案分离的系统和方法
公开(公告)号：US20060077977A1
公开(公告)日：2006-04-13
申请号：US11201160
申请日：2005-08-11
申请人： Germano Caronni , Amit Gupta , Sandeep Kumar , Tom Markson , Christoph Schuba , Glenn Scott
发明人： Germano Caronni , Amit Gupta , Sandeep Kumar , Tom Markson , Christoph Schuba , Glenn Scott
IPC分类号： H04L12/56
CPC分类号： H04L63/0272 , H04L12/4679 , H04L29/12009 , H04L29/12396 , H04L29/12528 , H04L61/2525 , H04L61/2575
摘要： Methods and systems consistent with the present invention establish a virtual network on top of current IP network naming schemes. The virtual network uses a separate layer to create a modification to the IP packet format that is used to separate network behavior from addressing. As a result of the modification to the packet format, any type of delivery method may be assigned to any address or group of addresses. The virtual network also maintains secure communications between nodes, while providing the flexibility of assigning delivery methods independent of the delivery addresses.
摘要翻译：与本发明一致的方法和系统在当前IP网络命名方案之上建立虚拟网络。虚拟网络使用单独的层来创建用于将网络行为与寻址分离的IP包格式的修改。作为对分组格式的修改的结果，可以将任何类型的传送方法分配给任何地址或地址组。虚拟网络还维护节点之间的安全通信，同时提供独立于传送地址的分配传送方法的灵活性。

8. 发明授权

US09935955B2 Systems and methods for cloud based unified service discovery and secure availability 有权
公开(公告)号：US09935955B2
公开(公告)日：2018-04-03
申请号：US15153108
申请日：2016-05-12
申请人： Purvi Desai , Vikas Mahajan , Abhinav Bansal , Ajit Singh , Sandeep Kumar , Vivek Raman
发明人： Purvi Desai , Vikas Mahajan , Abhinav Bansal , Ajit Singh , Sandeep Kumar , Vivek Raman
IPC分类号： H04L29/06 , H04L29/08 , H04L29/12
CPC分类号： H04L63/0884 , H04L61/1511 , H04L61/6063 , H04L63/0272 , H04L63/0281 , H04L67/02 , H04L67/10 , H04L67/1002 , H04L67/125 , H04L67/16 , H04L67/28 , H04L67/2814 , H04L67/2819 , H04L69/162
摘要： Systems and methods implemented by a unified agent application executed on a mobile device, for unified service discovery and secure availability include authenticating a user into a plurality of cloud services including a proxy service and a Virtual Private Network (VPN) service, wherein the proxy service is utilized for Internet traffic and the VPN service is for Intranet traffic; creating and operating a link local network at the mobile device with a virtual network interface and multiple listening sockets; and intercepting traffic at the virtual network interface from one or more client applications on the mobile device and splitting the traffic between the proxy service, the VPN service, and the Internet based on a type of the traffic, a destination, and the one or more client applications.

9. 发明申请

US20140294012A1 VLAN Bridging Path for Virtual Machines in MVRP Environment without Administrator Intervention 有权
标题翻译： MVRP环境中虚拟机的VLAN桥接路径，无需管理员干预
公开(公告)号：US20140294012A1
公开(公告)日：2014-10-02
申请号：US13853593
申请日：2013-03-29
申请人： Anil Nagarajan , Sandeep Kumar , Arvind Kubendran , Jagjeet S. Bhatia , Edgard Vargas
发明人： Anil Nagarajan , Sandeep Kumar , Arvind Kubendran , Jagjeet S. Bhatia , Edgard Vargas
IPC分类号： H04L12/931
CPC分类号： H04L49/35
摘要： A bi-directional VLAN bridging path is created on an edge switch in an MVRP environment without administrator intervention using a virtual network profile (VNP) feature running on the edge switch. The VNP feature is configured to detect a device coupled to a port of the edge switch, learn the Medium Access Control (MAC) address of the device on a MVRP-VLAN and automatically convert the MVRP-VLAN to a VNP-Dynamic-VLAN corresponding to a static VLAN to create a bi-directional VLAN Port Association (VPA) for the device.
摘要翻译：在MVRP环境的边缘交换机上创建双向VLAN桥接路径，无需管理员干预即可使用边缘交换机上运行的虚拟网络配置文件（VNP）功能。 VNP功能配置为检测耦合到边缘交换机端口的设备，了解MVRP-VLAN上设备的介质访问控制（MAC）地址，并自动将MVRP-VLAN转换为对应的VNP-Dynamic-VLAN 到静态VLAN，为设备创建双向VLAN端口关联（VPA）。

10. 发明授权

US08799511B1 Synchronizing state information between control units 有权
标题翻译：同步控制单元之间的状态信息
公开(公告)号：US08799511B1
公开(公告)日：2014-08-05
申请号：US12814198
申请日：2010-06-11
申请人： Raghunath Balakrishna , Shine-chu Wang , Umesh Krishnaswamy , Bharani Chadalavada , Sandeep Kumar , Raj Tuplur , Rajagopalan Sivaramakrishnan
发明人： Raghunath Balakrishna , Shine-chu Wang , Umesh Krishnaswamy , Bharani Chadalavada , Sandeep Kumar , Raj Tuplur , Rajagopalan Sivaramakrishnan
IPC分类号： G06F15/173
CPC分类号： G06F11/2097 , G06F11/2038 , H04L12/66
摘要： Techniques are described for synchronizing state information between a plurality of control units. A router, for example, is described that includes a primary control unit and a standby control unit. The primary control unit maintains router resources to ensure operation of the router. To ensure operation, the primary control unit receives state information from the router resources and maintains the state information for consumers, i.e. router resources that require or “consume” state information. Prior to updating the consumers with the state information, the primary control unit synchronizes the state information with the standby control unit. In the event the primary control unit fails, the standby control unit assumes control of the router resources. Upon assuming control, the standby control unit resumes updating the consumers with state information without having to “relearn” state information, e.g., by way of power cycling the router resources to a known state.
摘要翻译：描述了用于使多个控制单元之间的状态信息同步的技术。描述了路由器，其包括主控制单元和备用控制单元。主控单元维护路由器资源，确保路由器的运行。为了确保操作，主控制单元从路由器资源接收状态信息并维护消费者的状态信息，即需要或“消耗”状态信息的路由器资源。在使用状态信息更新消费者之前，主控制单元将状态信息与待机控制单元同步。在主控单元发生故障的情况下，备用控制单元承担路由器资源的控制。在进行控制时，备用控制单元通过状态信息恢复消费者的更新，而不必例如通过将路由器资源的功率循环到已知状态来“重新学习”状态信息。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式