会员体验
专利管家(专利管理)
工作空间(专利管理)
风险监控(情报监控)
数据分析(专利分析)
侵权分析(诉讼无效)
联系我们
交流群
官方交流:
QQ群: 891211   
微信请扫码    >>>
现在联系顾问~
热词
    • 2. 发明授权
    • Secure ISN generation
    • 安全的ISN生成
    • US07503068B2
    • 2009-03-10
    • US10779950
    • 2004-02-13
    • Sanjay KaniyarArt ShelestNk SrinivasScott K. Holden
    • Sanjay KaniyarArt ShelestNk SrinivasScott K. Holden
    • H04L9/00
    • H04L47/34H04L63/1458
    • An initial sequence number generator is provided that prevents the local server from being attacked while maintaining reliable data transfer. A random intermediate value is created that is unique to each connection identifier and is combined with a random value created from a global counter to generate the initial sequence number. The counter capable of monotonically increasing by both a fixed and variable amount for ensuring that the same connection identifier does not have data collisions from competing sequence numbers within a predetermined period of time, and also to ensures randomness of the initial sequence number on a per connection basis for preventing attacks on the local server.
    • 提供了初始序列号生成器,其防止本地服务器在保持可靠的数据传输的同时受到攻击。 创建对每个连接标识符唯一的随机中间值,并与从全局计数器创建的随机值组合以生成初始序列号。 该计数器能够通过固定和可变量单调增加,以确保相同的连接标识符在预定时间段内没有来自竞争序列号的数据冲突,并且还确保每个连接上的初始序列号的随机性 防止对本地服务器的攻击的基础。
    • 3. 发明授权
    • Method and system for controlling the rate of acknowledgment of communication packets
    • 控制通信包确认速率的方法和系统
    • US06745360B1
    • 2004-06-01
    • US09548712
    • 2000-04-13
    • Nk SrinivasArt Shelest
    • Nk SrinivasArt Shelest
    • H04L116
    • H04L1/1671H04L1/1685H04L29/06H04L69/16H04L69/163
    • A method and system for controlling the rate of acknowledgment of communication packets is provided in which a sender determines whether or not an acknowledgment is required from a receiver, and if an acknowledgment is required, transmits a packet that is marked to indicate that an acknowledgment is required. There are many different ways in which a packet may be marked, including generating the packet so that it is shorter than a standard length, inserting an optional field, or inserting a value into the packet header. When TCP is being used for communication, the TCP segments may be marked by clearing the ACK bit of the TCP header. Two or more computers that are engaged in or about to engage in packet-based communication may also inform one another of their respective abilities to send and receive marked packets by transmitting capability packets to one another.
    • 提供了一种用于控制通信分组的确认速率的方法和系统,其中发送方确定是否需要来自接收方的确认,并且如果需要确认,则发送标记为指示确认为 需要。 可以有许多不同的方式来标记分组,包括生成分组,使得它比标准长度短,插入可选字段,或者在分组报头中插入一个值。 当TCP用于通信时,可以通过清除TCP报头的ACK位来标记TCP段。 从事或即将进行基于分组的通信的两台或多台计算机也可以通过彼此发送和接收标记的分组的能力彼此通知彼此的能力分组。
    • 4. 发明申请
    • Secure ISN generation
    • 安全的ISN生成
    • US20050198509A1
    • 2005-09-08
    • US10779950
    • 2004-02-13
    • Sanjay KaniyarArt ShelestNk SrinivasScott Holden
    • Sanjay KaniyarArt ShelestNk SrinivasScott Holden
    • H04L9/00
    • H04L47/34H04L63/1458
    • An initial sequence number generator is provided that prevents the local server from being attacked while maintaining reliable data transfer. A random intermediate value is created that is unique to each connection identifier and is combined with a random value created from a global counter to generate the initial sequence number. The counter capable of monotonically increasing by both a fixed and variable amount for ensuring that the same connection identifier does not have data collisions from competing sequence numbers within a predetermined period of time, and also to ensures randomness of the initial sequence number on a per connection basis for preventing attacks on the local server.
    • 提供了初始序列号生成器,其防止本地服务器在保持可靠的数据传输的同时受到攻击。 创建对每个连接标识符唯一的随机中间值,并与从全局计数器创建的随机值组合以生成初始序列号。 该计数器能够通过固定和可变量单调增加,以确保相同的连接标识符在预定时间段内没有来自竞争序列号的数据冲突,并且还确保每个连接上的初始序列号的随机性 防止对本地服务器的攻击的基础。
    • 7. 发明授权
    • System and method of enhancing web server throughput in single and multiple processor systems
    • 在单处理器和多处理器系统中增强Web服务器吞吐量的系统和方法
    • US07398292B2
    • 2008-07-08
    • US11005995
    • 2004-12-07
    • Venkataraman RamanathanNk SrinivasVadim EydelmanAbolade Gbadegesin
    • Venkataraman RamanathanNk SrinivasVadim EydelmanAbolade Gbadegesin
    • G06F15/16
    • H04L67/02
    • A system and method are presented that enhance the performance of single and multiple-processor servers by taking advantage of the half-duplex nature of many HTTP requests. Upon receipt of an HTTP Get resource request, a single send and disconnect IRP is generated. The semantics of the send and disconnect IRP completion recognizes the half-duplex nature of the transaction by indicating a graceful close of the TCP/IP connection. This send and disconnect IRP is also completed without a queuing stage (queuelessly) on the processor that serviced the client request. To further enhance performance, the server FIN message to the client is included in the last data frame transmitted to the server. The invention also contemplates transmission of a single HTTP get and disconnect request by a client to allow acknowledgementless disconnection of the TCP/IP connection once a requested resource has been sent.
    • 提出了一种通过利用许多HTTP请求的半双工特性来提高单处理器和多处理器服务器性能的系统和方法。 收到HTTP Get资源请求后,将生成单个发送和断开IRP。 发送和断开IRP完成的语义通过指示TCP / IP连接的正常关闭来识别事务的半双工性质。 这个发送和断开的IRP也在处理器上没有排队阶段(无间歇地)完成,为客户端请求提供服务。 为了进一步提高性能,向客户端发送的服务器FIN消息包含在发送到服务器的最后一个数据帧中。 本发明还考虑了一旦客户端发送单个HTTP获取和断开请求,一旦所请求的资源被发送,允许TCP / IP连接的无条件断开。
    • 10. 发明授权
    • Method and computer program product for reducing intra-system data
copying during network packet processing
    • 用于在网络数据包处理期间减少系统内数据复制的方法和计算机程序产品
    • US6081846A
    • 2000-06-27
    • US852888
    • 1997-05-08
    • Jameel HyderKyle BrandonNk SrinivasRod Gamache
    • Jameel HyderKyle BrandonNk SrinivasRod Gamache
    • H04L12/56G06F13/00G06F13/38
    • H04L49/90
    • A method and computer program product that overcomes the problem of intrasystem copying of data from one data structure to another while processing incoming packets of network data coming into the system off a communications network in an environment having an integrating component in between the network card device driver and the transport protocol driver that assigns system memory for packets to the respective drivers. The integrating component temporarily transfers ownership of the original data structure from the network card device driver to the transport protocol driver based on indication from the network card device driver, independent determination that the network card device driver can afford to temporarily release ownership, and determination of the transport protocol driver's ability to take ownership. The transport protocol driver will indicate receipt of ownership of the data structure and later explicitly release it. The transport protocol driver may then operate on the data structure after the initial invocation session has ended when it initially received ownership until it is released at a later time to thus prevent copying of the data and thereby increase system efficiency. Temporary transfer of ownership according to the present invention is especially important when the network card device driver fills data structure with network data during interrupt processing that causes a scenario where the transport protocol driver is not able to fully process the network data in the initial invocation session without copying the data.
    • 一种方法和计算机程序产品,其克服了将数据从一个数据结构复制到另一个数据结构的问题,同时在具有网络卡设备驱动程序之间的集成组件的环境中处理从通信网络进入系统的进入的数据包 以及将分组的系统存储器分配给相应驱动器的传输协议驱动器。 集成组件基于来自网卡设备驱动程序的指示将原始数据结构的所有权从网卡设备驱动程序暂时转移到传输协议驱动器,独立确定网卡设备驱动程序能够暂时释放所有权,并且确定 运输协议驱动程序拥有所有权的能力。 传输协议驱动程序将指示接收数据结构的所有权,然后明确释放它。 传输协议驱动程序然后可以在初始调用会话结束之后在数据结构上操作,当它最初接收到所有权时,直到它在稍后的时间被释放,从而防止数据的拷贝,从而提高系统效率。 当网卡设备驱动程序在中断处理期间填充具有网络数据的数据结构时,根据本发明的所有权临时转移特别重要,这导致传输协议驱动程序在初始调用会话中无法完全处理网络数据的场景 而不复制数据。