专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US07412600B2 Approaches for automatically switching message authentication keys 有权
标题翻译：自动切换消息认证密钥的方法
公开(公告)号：US07412600B2
公开(公告)日：2008-08-12
申请号：US11261683
申请日：2005-10-28
申请人： John C. Wong , Anantha Ramaiah , Amol Khare , Mitesh Dalal , Shrirang Bage , Lin Han
发明人： John C. Wong , Anantha Ramaiah , Amol Khare , Mitesh Dalal , Shrirang Bage , Lin Han
IPC分类号： H04L29/00
CPC分类号： H04L69/16 , H04L63/0846 , H04L63/12 , H04L69/163
摘要： Approaches are disclosed for switching transport protocol connection keys. A method of automatically changing a message authentication key at each of two endpoints of a connection in a telecommunications network comprises testing a sequence value received in each of a plurality of data segments on the connection; and selecting a next message authentication key, from among a plurality of stored message authentication keys, for use in authenticating subsequently received data segments, when the sequence value matches a specified characteristic.
摘要翻译：公开了用于切换传输协议连接密钥的方法。一种在电信网络中的连接的两个端点中的每个端点处自动改变消息认证密钥的方法包括测试在所述连接上的多个数据段中的每一个中接收到的序列值; 以及当所述序列值与特定特征匹配时，从多个存储的消息认证密钥中选择用于认证随后接收的数据段的下一个消息认证密钥。

2. 发明申请

US20070101129A1 Approaches for automatically switching message authentication keys 有权
标题翻译：自动切换消息认证密钥的方法
公开(公告)号：US20070101129A1
公开(公告)日：2007-05-03
申请号：US11261683
申请日：2005-10-28
申请人： John Wong , Anantha Ramaiah , Amol Khare , Mitesh Dalal , Shrirang Bage , Lin Han
发明人： John Wong , Anantha Ramaiah , Amol Khare , Mitesh Dalal , Shrirang Bage , Lin Han
IPC分类号： H04L9/00
CPC分类号： H04L69/16 , H04L63/0846 , H04L63/12 , H04L69/163
摘要： Approaches are disclosed for switching transport protocol connection keys. A method of automatically changing a message authentication key at each of two endpoints of a connection in a telecommunications network comprises testing a sequence value received in each of a plurality of data segments on the connection; and selecting a next message authentication key, from among a plurality of stored message authentication keys, for use in authenticating subsequently received data segments, when the sequence value matches a specified characteristic.
摘要翻译：公开了用于切换传输协议连接密钥的方法。一种在电信网络中的连接的两个端点中的每个端点处自动改变消息认证密钥的方法包括测试在所述连接上的多个数据段中的每一个中接收到的序列值; 以及当所述序列值与特定特征匹配时，从多个存储的消息认证密钥中选择用于认证随后接收的数据段的下一个消息认证密钥。

3. 发明授权

US07472416B2 Preventing network reset denial of service attacks using embedded authentication information 有权
标题翻译：使用嵌入式认证信息防止网络重置拒绝服务攻击
公开(公告)号：US07472416B2
公开(公告)日：2008-12-30
申请号：US10842015
申请日：2004-05-06
申请人： Anantha Ramaiah , Shrirang Bage , Amol Khare , Mitesh Dalal
发明人： Anantha Ramaiah , Shrirang Bage , Amol Khare , Mitesh Dalal
IPC分类号： G06F11/00
CPC分类号： H04L63/1458 , H04L1/16 , H04L63/1466
摘要： Approaches for preventing TCP RST attacks intended to cause denial of service in packet-switched networks are disclosed. In one approach, upon receiving a TCP RST packet, an endpoint node determines whether the TCP segment contains valid authentication information. The TCP RST segment is accepted and the TCP connection is closed only when the authentication information is valid. Authentication information may comprise a reset type values, and either initial sequence numbers of both endpoints, or a copy of a TCP header and options values previously sent by the endpoint node that is performing the authentication. Thus, attacks are thwarted because an attacker cannot know or reasonably guess the required authentication information.
摘要翻译：公开了用于防止在分组交换网络中导致拒绝服务的TCP RST攻击的方法。在一种方法中，在接收到TCP RST分组时，端点节点确定TCP分段是否包含有效的认证信息。 TCP RST段被接受，只有认证信息有效时才关闭TCP连接。认证信息可以包括复位类型值，以及两个端点的初始序列号，或TCP头部的副本以及由执行认证的端点节点先前发送的选项值。因此，攻击是挫败的，因为攻击者无法知道或合理地猜测所需的身份验证信息。

4. 发明申请

US20050216954A1 Preventing network reset denial of service attacks using embedded authentication information 有权
标题翻译：使用嵌入式认证信息防止网络重置拒绝服务攻击
公开(公告)号：US20050216954A1
公开(公告)日：2005-09-29
申请号：US10842015
申请日：2004-05-06
申请人： Anantha Ramaiah , Shrirang Bage , Amol Khare , Mitesh Dalal
发明人： Anantha Ramaiah , Shrirang Bage , Amol Khare , Mitesh Dalal
IPC分类号： H04L1/16 , H04L9/00 , H04L29/06
CPC分类号： H04L63/1458 , H04L1/16 , H04L63/1466
摘要： Approaches for preventing TCP RST attacks intended to cause denial of service in packet-switched networks are disclosed. In one approach, upon receiving a TCP RST packet, an endpoint node determines whether the TCP segment contains valid authentication information. The TCP RST segment is accepted and the TCP connection is closed only when the authentication information is valid. Authentication information may comprise a reset type values, and either initial sequence numbers of both endpoints, or a copy of a TCP header and options values previously sent by the endpoint node that is performing the authentication. Thus, attacks are thwarted because an attacker cannot know or reasonably guess the required authentication information.
摘要翻译：公开了用于防止在分组交换网络中导致拒绝服务的TCP RST攻击的方法。在一种方法中，在接收到TCP RST分组时，端点节点确定TCP分段是否包含有效的认证信息。 TCP RST段被接受，只有认证信息有效时才关闭TCP连接。认证信息可以包括复位类型值，以及两个端点的初始序列号，或TCP头部的副本以及由执行认证的端点节点先前发送的选项值。因此，攻击是挫败的，因为攻击者无法知道或合理地猜测所需的身份验证信息。

5. 发明授权

US07650635B2 Method and apparatus for preventing network attacks by authenticating internet control message protocol packets 有权
标题翻译：通过认证互联网控制消息协议包来防止网络攻击的方法和装置
公开(公告)号：US07650635B2
公开(公告)日：2010-01-19
申请号：US10820980
申请日：2004-04-07
申请人： Amol Khare , Mitesh Dalal , Anantha Ramaiah , Sharad Ahlawat
发明人： Amol Khare , Mitesh Dalal , Anantha Ramaiah , Sharad Ahlawat
IPC分类号： G06F9/00 , G06F15/16 , G06F17/00 , G06F12/00 , G06F12/14 , G06F13/00 , G06F12/16 , G11C11/00 , G08B23/00 , G06F15/173
CPC分类号： H04L63/12 , H04L63/1458 , H04L63/1466
摘要： A method of preventing an attack on a network, the method comprising the computer-implemented steps of receiving an ICMP packet that includes a copy of a header associated with a connection in a connection-oriented transport protocol; obtaining a packet sequence value from the header; determining if the packet sequence value is valid; and updating a parameter value associated with the transport protocol connection only if the packet sequence value is determined to be valid. Use of the disclosed method enables authenticating ICMP packets so that responsive measures of a network element, such as adjusting an MTU value, are performed only when the ICMP packet is determined to be authentic.
摘要翻译：一种防止对网络的攻击的方法，所述方法包括计算机实现的步骤，用于接收包括与面向连接的传输协议中的连接相关联的报头的副本的ICMP分组; 从头部获取分组序列值; 确定分组序列值是否有效; 以及仅当所述分组序列值被确定为有效时，才更新与所述传输协议连接相关联的参数值。使用所公开的方法使得能够认证ICMP分组，使得仅当确定ICMP分组是可信的时候才执行诸如调整MTU值的网元的响应度量。

6. 发明申请

US20050229244A1 Method and apparatus for preventing network attacks by authenticating internet control message protocol packets 有权
标题翻译：通过认证互联网控制消息协议包来防止网络攻击的方法和装置
公开(公告)号：US20050229244A1
公开(公告)日：2005-10-13
申请号：US10820980
申请日：2004-04-07
申请人： Amol Khare , Mitesh Dalal , Anantha Ramaiah , Sharad Ahlawat
发明人： Amol Khare , Mitesh Dalal , Anantha Ramaiah , Sharad Ahlawat
IPC分类号： G06F11/30 , G06F12/14 , H04L9/00 , H04L9/32 , H04L29/06
CPC分类号： H04L63/12 , H04L63/1458 , H04L63/1466
摘要： A method of preventing an attack on a network, the method comprising the computer-implemented steps of receiving an ICMP packet that includes a copy of a header associated with a connection in a connection-oriented transport protocol; obtaining a packet sequence value from the header; determining if the packet sequence value is valid; and updating a parameter value associated with the transport protocol connection only if the packet sequence value is determined to be valid. Use of the disclosed method enables authenticating ICMP packets so that responsive measures of a network element, such as adjusting an MTU value, are performed only when the ICMP packet is determined to be authentic.
摘要翻译：一种防止对网络的攻击的方法，所述方法包括计算机实现的步骤，用于接收包括与面向连接的传输协议中的连接相关联的报头的副本的ICMP分组; 从头部获取分组序列值; 确定分组序列值是否有效; 以及仅当所述分组序列值被确定为有效时，才更新与所述传输协议连接相关联的参数值。使用所公开的方法使得能够认证ICMP分组，使得仅当确定ICMP分组是可信的时候才执行诸如调整MTU值的网元的响应度量。

7. 发明申请

US20060159011A1 Detecting unavailable network connections 有权
标题翻译：检测不可用的网络连接
公开(公告)号：US20060159011A1
公开(公告)日：2006-07-20
申请号：US11036191
申请日：2005-01-14
申请人： Mitesh Dalal , Anantha Ramaiah , Ruchi Kapoor , Chandrashekhar Appanna
发明人： Mitesh Dalal , Anantha Ramaiah , Ruchi Kapoor , Chandrashekhar Appanna
IPC分类号： H04J3/14 , H04L12/56
CPC分类号： H04L67/1048 , H04J3/14 , H04L1/187 , H04L45/02 , H04L45/22 , H04L45/28 , H04L45/586 , H04L67/104 , H04L67/1095 , H04L67/14 , H04L69/14 , H04L69/16 , H04L69/40
摘要： A method for detecting unavailable network connections comprises, at a first data processing node that is hosting a transport protocol connection that uses a plurality of sequence values to identify messages sent to a peer node, wherein the first node is communicatively coupled to a second data processing node serving as a redundant backup, periodically sending a checkpoint sequence value to the second node; detecting that either the transport protocol connection or a process using the transport protocol connection is unavailable, without use of a timeout; and in response thereto, sending a notification to the peer node, wherein the notification includes the checkpoint sequence value. One embodiment provides for rapidly detecting and responding to failure of a TCP process without using long timeouts as conventionally provided in long-lived applications that run on top of TCP.
摘要翻译：一种用于检测不可用网络连接的方法包括：在承载使用多个序列值以识别发送到对等节点的消息的传输协议连接的第一数据处理节点处，其中所述第一节点通信地耦合到第二数据处理节点用作冗余备份，周期性地向第二节点发送检查点序列值; 检测传输协议连接或使用传输协议连接的进程不可用，而不使用超时; 并且响应于此，向所述对等节点发送通知，其中所述通知包括所述检查点序列值。一个实施例提供了快速检测和响应TCP过程的故障，而不需要在TCP上运行的长寿命应用程序中常规提供的长时间超时。

8. 发明申请

US20110093591A1 Detecting Unavailable Network Connections 有权
标题翻译：检测不可用的网络连接
公开(公告)号：US20110093591A1
公开(公告)日：2011-04-21
申请号：US12976923
申请日：2010-12-22
申请人： Mitesh Dalal , Anantha Ramaiah , Ruchi Kapoor , Chandrashekhar Appanna
发明人： Mitesh Dalal , Anantha Ramaiah , Ruchi Kapoor , Chandrashekhar Appanna
IPC分类号： G06F15/173
CPC分类号： H04L67/1048 , H04J3/14 , H04L1/187 , H04L45/02 , H04L45/22 , H04L45/28 , H04L45/586 , H04L67/104 , H04L67/1095 , H04L67/14 , H04L69/14 , H04L69/16 , H04L69/40
摘要： A method for detecting unavailable network connections comprises, at a first data processing node that is hosting a transport protocol connection that uses a plurality of sequence values to identify messages sent to a peer node, wherein the first node is communicatively coupled to a second data processing node serving as a redundant backup, periodically sending a checkpoint sequence value to the second node; detecting that either the transport protocol connection or a process using the transport protocol connection is unavailable, without use of a timeout; and in response thereto, sending a notification to the peer node, wherein the notification includes the checkpoint sequence value. One embodiment provides for rapidly detecting and responding to failure of a TCP process without using long timeouts as conventionally provided in long-lived applications that run on top of TCP.
摘要翻译：一种用于检测不可用网络连接的方法包括：在承载使用多个序列值以识别发送到对等节点的消息的传输协议连接的第一数据处理节点处，其中所述第一节点通信地耦合到第二数据处理节点用作冗余备份，周期性地向第二节点发送检查点序列值; 检测传输协议连接或使用传输协议连接的进程不可用，而不使用超时; 并且响应于此，向所述对等节点发送通知，其中所述通知包括所述检查点序列值。一个实施例提供了快速检测和响应TCP过程的故障，而不需要在TCP上运行的长寿命应用程序中常规提供的长时间超时。

9. 发明授权

US07930365B2 Method and apparatus to modify network identifiers at data servers 有权
标题翻译：在数据服务器上修改网络标识符的方法和装置
公开(公告)号：US07930365B2
公开(公告)日：2011-04-19
申请号：US11059754
申请日：2005-02-16
申请人： Vineet Ramesh Dixit , Mitesh Dalal , Amol Khare , Mahadev Somasundaram
发明人： Vineet Ramesh Dixit , Mitesh Dalal , Amol Khare , Mahadev Somasundaram
IPC分类号： G06F15/16
CPC分类号： H04L63/0272 , H04L63/0281 , H04L63/168 , H04L67/02
摘要： A method of modifying network identifiers at data servers is disclosed. A virtual private network (VPN) gateway server generates a Hypertext Transfer Protocol (HTTP) request. The HTTP request not only requests data from a data server that is within a VPN, but also instructs the data server to modify (“mangle”) URLs that are contained within the requested data so that the URLs refer to the VPN gateway server. The VPN gateway server sends the HTTP request toward the data server. As a result, the data server modifies the URLs so that the VPN gateway server does not need to. When such a modified URLs is selected in a web browser, the web browser generates an HTTP request that is directed to the VPN gateway server's URL, which, unlike the unmodified URLs, can be resolved by domain name servers that are outside of the VPN.
摘要翻译：公开了一种在数据服务器上修改网络标识符的方法。虚拟专用网（VPN）网关服务器生成超文本传输协议（HTTP）请求。 HTTP请求不仅请求来自VPN内的数据服务器的数据，而且还指示数据服务器修改（“处理”）所请求数据中包含的URL，以便URL引用到VPN网关服务器。 VPN网关服务器向数据服务器发送HTTP请求。因此，数据服务器修改URL，以便VPN网关服务器不需要。当在网络浏览器中选择这样的修改的URL时，网络浏览器生成针对VPN网关服务器的URL的HTTP请求，该请求与未修改的URL不同，可以由VPN外的域名服务器来解决。

10. 发明授权

US08174964B2 Detecting unavailable network connections 有权
标题翻译：检测不可用的网络连接
公开(公告)号：US08174964B2
公开(公告)日：2012-05-08
申请号：US12976923
申请日：2010-12-22
申请人： Mitesh Dalal , Anantha Ramaiah , Ruchi Kapoor , Chandrashekhar Appanna
发明人： Mitesh Dalal , Anantha Ramaiah , Ruchi Kapoor , Chandrashekhar Appanna
IPC分类号： H04L1/22
CPC分类号： H04L67/1048 , H04J3/14 , H04L1/187 , H04L45/02 , H04L45/22 , H04L45/28 , H04L45/586 , H04L67/104 , H04L67/1095 , H04L67/14 , H04L69/14 , H04L69/16 , H04L69/40
摘要： A method for detecting unavailable network connections comprises, at a first data processing node that is hosting a transport protocol connection that uses a plurality of sequence values to identify messages sent to a peer node, wherein the first node is communicatively coupled to a second data processing node serving as a redundant backup, periodically sending a checkpoint sequence value to the second node; detecting that either the transport protocol connection or a process using the transport protocol connection is unavailable, without use of a timeout; and in response thereto, sending a notification to the peer node, wherein the notification includes the checkpoint sequence value. One embodiment provides for rapidly detecting and responding to failure of a TCP process without using long timeouts as conventionally provided in long-lived applications that run on top of TCP.
摘要翻译：一种用于检测不可用网络连接的方法包括：在承载使用多个序列值以识别发送到对等节点的消息的传输协议连接的第一数据处理节点处，其中所述第一节点通信地耦合到第二数据处理节点用作冗余备份，周期性地向第二节点发送检查点序列值; 检测传输协议连接或使用传输协议连接的进程不可用，而不使用超时; 并且响应于此，向所述对等节点发送通知，其中所述通知包括所述检查点序列值。一个实施例提供了快速检测和响应TCP过程的故障，而不需要在TCP上运行的长寿命应用程序中常规提供的长时间超时。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式