专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 再颁专利

USRE44701E1 System and method for an adaptive TCP SYN cookie with time validation 有权
标题翻译：具有时间验证的自适应TCP SYN cookie的系统和方法
公开(公告)号：USRE44701E1
公开(公告)日：2014-01-14
申请号：US13413191
申请日：2012-03-06
申请人： Lee Chen , Ronald Wai Lun Szeto , Shih-Tsung Hwang
发明人： Lee Chen , Ronald Wai Lun Szeto , Shih-Tsung Hwang
IPC分类号： G01R31/08 , H04L12/56
CPC分类号： H04L47/10 , H04L63/1458
摘要： Provided is a method and system for TCP SYN cookie validation. The method includes receiving a session SYN packet by a TCP session setup module of a host server, generating a transition cookie including a time value representing the actual time, sending a session SYN/ACK packet, including the transition cookie, in response to the received session SYN packet, receiving a session ACK packet, and determining whether a candidate transition cookie in the received session ACK packet comprises a time value representing a time within a predetermined time interval from the time the session ACK packet is received.
摘要翻译：提供了一种用于TCP SYN cookie验证的方法和系统。所述方法包括：通过主机服务器的TCP会话建立模块接收会话SYN分组，生成包含表示实际时间的时间值的转换cookie，响应于接收到的发送包括转换cookie的会话SYN / ACK分组会话SYN分组，接收会话ACK分组，以及确定接收到的会话ACK分组中的候选转移cookie是否包括表示从接收到会话ACK分组的时间起的预定时间间隔内的时间的时间值。

2. 发明授权

US07675854B2 System and method for an adaptive TCP SYN cookie with time validation 有权
标题翻译：具有时间验证的自适应TCP SYN cookie的系统和方法
公开(公告)号：US07675854B2
公开(公告)日：2010-03-09
申请号：US11358245
申请日：2006-02-21
申请人： Lee Chen , Ronald Wai Lun Szeto , Shih-Tsung Hwang
发明人： Lee Chen , Ronald Wai Lun Szeto , Shih-Tsung Hwang
IPC分类号： G01R31/08
CPC分类号： H04L47/10 , H04L63/1458
摘要： Provided is a method and system for TCP SYN cookie validation. The method includes receiving a session SYN packet by a TCP session setup module of a host server, generating a transition cookie including a time value representing the actual time, sending a session SYN/ACK packet, including the transition cookie, in response to the received session SYN packet, receiving a session ACK packet, and determining whether a candidate transition cookie in the received session ACK packet comprises a time value representing a time within a predetermined time interval from the time the session ACK packet is received.
摘要翻译：提供了一种用于TCP SYN cookie验证的方法和系统。所述方法包括：通过主机服务器的TCP会话建立模块接收会话SYN分组，生成包含表示实际时间的时间值的转换cookie，响应于接收到的发送包括转换cookie的会话SYN / ACK分组会话SYN分组，接收会话ACK分组，以及确定接收到的会话ACK分组中的候选转移cookie是否包括表示从接收到会话ACK分组的时间起的预定时间间隔内的时间的时间值。

3. 发明申请

US20070283429A1 Sequence number based TCP session proxy 审中-公开
标题翻译：基于序列号的TCP会话代理
公开(公告)号：US20070283429A1
公开(公告)日：2007-12-06
申请号：US11442774
申请日：2006-05-30
申请人： Lee Chen , Ronald Wai Lun Szeto , Shih-Tsung Hwang
发明人： Lee Chen , Ronald Wai Lun Szeto , Shih-Tsung Hwang
IPC分类号： G06F15/16
CPC分类号： H04L63/0254 , H04L63/1458
摘要： In a computer communication network including a firewall which protects a secured host against attack from outside computers, the host communicating with an outside computer, through the firewall, via data packets which include byte sequence numbers. In a communication between the host and computer in which one of them acts as a source and the other as a destination for the communication, a sequence number offset is derived by the firewall which characterizes the byte sequence number received from the source and the byte sequence number the firewall will provide to the destination for that communication. In a communication received from the source, the firewall adds the offset to byte sequence numbers in a packet passing between the source and destination, in order to determine the byte sequence numbers it will provide to the destination. Thus, proper sequence numbers can be provided to both locations, without the firewall having to restructure packets. This speeds communication between the source and destination and substantially reduces the commitment of processing and storage resources.
摘要翻译：在包括保护安全主机免受外部计算机攻击的防火墙的计算机通信网络中，主机通过防火墙通过包括字节序列号的数据分组与外部计算机进行通信。在主机和计算机之间的通信中，其中一个作为源，另一个作为通信的目的地，由防火墙导出序列号偏移，其表征从源接收的字节序列号和字节序列防火墙将提供给该通信的目的地的号码。在从源接收的通信中，防火墙将偏移量添加到源和目的地之间的数据包中的字节序列号，以确定其将提供给目标的字节序列号。因此，可以向两个位置提供适当的序列号，而防火墙不必重新组织数据包。这加快了源和目的地之间的通信，并大大减少了处理和存储资源的承诺。

4. 发明授权

US08464333B1 System and method for distributed multi-processing security gateway 有权
标题翻译：分布式多处理安全网关的系统和方法
公开(公告)号：US08464333B1
公开(公告)日：2013-06-11
申请号：US13347027
申请日：2012-01-10
申请人： Lee Chen , Ronald Wai Lun Szeto
发明人： Lee Chen , Ronald Wai Lun Szeto
IPC分类号： G06F21/00
CPC分类号： H04L63/20 , H04L29/12433 , H04L29/12481 , H04L61/2539 , H04L61/2557 , H04L63/0209 , H04L63/0218 , H04L63/0227 , H04L63/0281 , H04L65/1069
摘要： A system and method for a distributed multi-processing security gateway establishes a host side session, selects a proxy network address for a server, uses the proxy network address to establish a server side session, receives a data packet, assigns a central processing unit core from a plurality of central processing unit cores in a multi-core processor of the security gateway to process the data packet, processes the data packet according to security policies, and sends the processed data packet. The proxy network address is selected such that a same central processing unit core is assigned to process data packets from the server side session and the host side session. By assigning central processing unit cores in this manner, higher capable security gateways are provided.
摘要翻译：用于分布式多处理安全网关的系统和方法建立主机侧会话，为服务器选择代理网络地址，使用代理网络地址建立服务器端会话，接收数据包，分配中央处理单元核心从安全网关的多核处理器中的多个中央处理单元核心处理数据分组，根据安全策略处理数据分组，并发送处理后的数据分组。代理网络地址被选择为使得相同的中央处理单元核心被分配以处理来自服务器端会话和主机侧会话的数据分组。通过以这种方式分配中央处理单元核心，提供了更高能力的安全网关。

5. 发明申请

US20080040789A1 System and method for distributed multi-processing security gateway 有权
标题翻译：分布式多处理安全网关的系统和方法
公开(公告)号：US20080040789A1
公开(公告)日：2008-02-14
申请号：US11501607
申请日：2006-08-08
申请人： Lee Chen , Ronald Wai Lun Szeto
发明人： Lee Chen , Ronald Wai Lun Szeto
IPC分类号： G06F15/16
CPC分类号： H04L63/0236 , H04L63/0227 , H04L63/0281 , H04L63/20 , H04L67/28
摘要： A system and method for a distributed multi-processing security gateway establishes a host side session, selects a proxy network address for a server based on network information, and using the proxy network address to establish a server side session. The proxy network address is selected such that a same processing element is assigned to process data packets from the server side session and the host side session. The network information includes a security gateway network address and a host network address. By assigning processing elements in this manner, higher capable security gateways are provided.
摘要翻译：用于分布式多处理安全网关的系统和方法建立主机侧会话，基于网络信息为服务器选择代理网络地址，并使用代理网络地址建立服务器端会话。选择代理网络地址，使得分配相同的处理元件来处理来自服务器端会话和主机侧会话的数据分组。网络信息包括安全网关网络地址和主机网络地址。通过以这种方式分配处理元件，提供了更高能力的安全网关。

6. 发明申请

US20090049537A1 System and Method for Distributed Multi-Processing Security Gateway 有权
标题翻译：分布式多处理安全网关的系统和方法
公开(公告)号：US20090049537A1
公开(公告)日：2009-02-19
申请号：US11947755
申请日：2007-11-29
申请人： Lee Chen , Ronald Wai Lun Szeto
发明人： Lee Chen , Ronald Wai Lun Szeto
IPC分类号： G06F21/00
CPC分类号： H04L63/20 , H04L29/12433 , H04L29/12481 , H04L61/2539 , H04L61/2557 , H04L63/0209 , H04L63/0218 , H04L63/0227 , H04L63/0281 , H04L65/1069
摘要： A system and method for a distributed multi-processing security gateway establishes a host side session, selects a proxy network address for a server, uses the proxy network address to establish a server side session, receives a data packet, assigns a central processing unit core from a plurality of central processing unit cores in a multi-core processor of the security gateway to process the data packet, processes the data packet according to security policies, and sends the processed data packet. The proxy network address is selected such that a same central processing unit core is assigned to process data packets from the server side session and the host side session. By assigning central processing unit cores in this manner, higher capable security gateways are provided.
摘要翻译：用于分布式多处理安全网关的系统和方法建立主机侧会话，为服务器选择代理网络地址，使用代理网络地址建立服务器端会话，接收数据包，分配中央处理单元核心从安全网关的多核处理器中的多个中央处理单元核心处理数据分组，根据安全策略处理数据分组，并发送处理后的数据分组。代理网络地址被选择为使得相同的中央处理单元核心被分配以处理来自服务器端会话和主机侧会话的数据分组。通过以这种方式分配中央处理单元核心，提供了更高能力的安全网关。

7. 发明授权

US09032502B1 System and method for distributed multi-processing security gateway 有权
标题翻译：分布式多处理安全网关的系统和方法
公开(公告)号：US09032502B1
公开(公告)日：2015-05-12
申请号：US14044673
申请日：2013-10-02
申请人： Lee Chen , Ronald Wai Lun Szeto
发明人： Lee Chen , Ronald Wai Lun Szeto
IPC分类号： G06F21/00 , H04L29/08 , H04L29/06
CPC分类号： H04L63/0236 , H04L63/0227 , H04L63/0281 , H04L63/20 , H04L67/28
摘要： A system and method for a distributed multi-processing security gateway establishes a host side session, selects a proxy network address for a server based on network information, and using the proxy network address to establish a server side session. The proxy network address is selected such that a same processing element is assigned to process data packets from the server side session and the host side session. The network information includes a security gateway network address and a host network address. By assigning processing elements in this manner, higher capable security gateways are provided.
摘要翻译：用于分布式多处理安全网关的系统和方法建立主机侧会话，基于网络信息为服务器选择代理网络地址，并使用代理网络地址建立服务器端会话。选择代理网络地址，使得分配相同的处理元件来处理来自服务器端会话和主机侧会话的数据分组。网络信息包括安全网关网络地址和主机网络地址。通过以这种方式分配处理元件，提供了更高能力的安全网关。

8. 发明授权

US08387128B1 System and method for distributed multi-processing security gateway 有权
公开(公告)号：US08387128B1
公开(公告)日：2013-02-26
申请号：US13284869
申请日：2011-10-29
申请人： Lee Chen , Ronald Wai Lun Szeto
发明人： Lee Chen , Ronald Wai Lun Szeto
IPC分类号： G06F21/00
CPC分类号： H04L63/20 , H04L29/12433 , H04L29/12481 , H04L61/2539 , H04L61/2557 , H04L63/0209 , H04L63/0218 , H04L63/0227 , H04L63/0281 , H04L65/1069
摘要： A system and method for a distributed multi-processing security gateway establishes a host side session, selects a proxy network address for a server, uses the proxy network address to establish a server side session, receives a data packet, assigns a central processing unit core from a plurality of central processing unit cores in a multi-core processor of the security gateway to process the data packet, processes the data packet according to security policies, and sends the processed data packet. The proxy network address is selected such that a same central processing unit core is assigned to process data packets from the server side session and the host side session. By assigning central processing unit cores in this manner, higher capable security gateways are provided.

9. 发明授权

US08332925B2 System and method for distributed multi-processing security gateway 有权
标题翻译：分布式多处理安全网关的系统和方法
公开(公告)号：US08332925B2
公开(公告)日：2012-12-11
申请号：US11501607
申请日：2006-08-08
申请人： Lee Chen , Ronald Wai Lun Szeto
发明人： Lee Chen , Ronald Wai Lun Szeto
IPC分类号： G06F21/00
CPC分类号： H04L63/0236 , H04L63/0227 , H04L63/0281 , H04L63/20 , H04L67/28
摘要： A system and method for a distributed multi-processing security gateway establishes a host side session, selects a proxy network address for a server based on network information, and using the proxy network address to establish a server side session. The proxy network address is selected such that a same processing element is assigned to process data packets from the server side session and the host side session. The network information includes a security gateway network address and a host network address. By assigning processing elements in this manner, higher capable security gateways are provided.
摘要翻译：用于分布式多处理安全网关的系统和方法建立主机侧会话，基于网络信息为服务器选择代理网络地址，并使用代理网络地址建立服务器端会话。选择代理网络地址，使得分配相同的处理元件来处理来自服务器端会话和主机侧会话的数据分组。网络信息包括安全网关网络地址和主机网络地址。通过以这种方式分配处理元件，提供了更高能力的安全网关。

10. 发明授权

US08079077B2 System and method for distributed multi-processing security gateway 有权
标题翻译：分布式多处理安全网关的系统和方法
公开(公告)号：US08079077B2
公开(公告)日：2011-12-13
申请号：US11947755
申请日：2007-11-29
申请人： Lee Chen , Ronald Wai Lun Szeto
发明人： Lee Chen , Ronald Wai Lun Szeto
IPC分类号： G06F9/00 , G06F7/04 , G06F15/16 , H04L29/06 , H04F11/30
CPC分类号： H04L63/20 , H04L29/12433 , H04L29/12481 , H04L61/2539 , H04L61/2557 , H04L63/0209 , H04L63/0218 , H04L63/0227 , H04L63/0281 , H04L65/1069
摘要： A system and method for a distributed multi-processing security gateway establishes a host side session, selects a proxy network address for a server, uses the proxy network address to establish a server side session, receives a data packet, assigns a central processing unit core from a plurality of central processing unit cores in a multi-core processor of the security gateway to process the data packet, processes the data packet according to security policies, and sends the processed data packet. The proxy network address is selected such that a same central processing unit core is assigned to process data packets from the server side session and the host side session. By assigning central processing unit cores in this manner, higher capable security gateways are provided.
摘要翻译：用于分布式多处理安全网关的系统和方法建立主机侧会话，为服务器选择代理网络地址，使用代理网络地址建立服务器端会话，接收数据包，分配中央处理单元核心从安全网关的多核处理器中的多个中央处理单元核心处理数据分组，根据安全策略处理数据分组，并发送处理后的数据分组。代理网络地址被选择为使得相同的中央处理单元核心被分配以处理来自服务器端会话和主机侧会话的数据分组。通过以这种方式分配中央处理单元核心，提供了更高能力的安全网关。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式