专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US07031316B2 Content processor 失效
公开(公告)号：US07031316B2
公开(公告)日：2006-04-18
申请号：US10108609
申请日：2002-03-28
申请人： Robert Daniel Maher, III , Aswinkumar Vishanji Rana , Milton Andre Lie , Kevin William Brandon , Mark Warden Hervin , Corey Alan Garrow
发明人： Robert Daniel Maher, III , Aswinkumar Vishanji Rana , Milton Andre Lie , Kevin William Brandon , Mark Warden Hervin , Corey Alan Garrow
IPC分类号： H04L12/56
CPC分类号： H04L47/10 , H04L29/06 , H04L47/2441 , H04L47/34 , H04L63/1416 , H04L63/145 , H04L69/22
摘要： A content processor is described that is able to scan the contents of entire data packets including header and payload information. The content processor includes a queue engine operable to reorder out of order data packets and reassemble fragmented data packets. The queue engine sends the reordered and reassembled data packets to the context engine, which schedules the packets to be scanned. The packets are scanned by the content scanning engine using one or more string memories and one or more leaf string memories. The string memories are used by the content scanning engine to determine if there is a potential match between the data packet being scanned and any of the strings contained in database of known strings. If a potential match is identified, whether or not there is an exact match is determined using the leaf string memories and the leaf string compare engine. The scanning of the data packet results in a conclusion being generated by the content scanning engine. The conclusion can be an intermediate conclusion, can be an instruction to be executed by the content processor, can instruct the context engine to forward the information to a host processor for further analysis, or can be the final conclusion sent with the data packet with routing and quality of service treatment. Other uses for the conclusion are programmable in the content processor.

2. 发明授权

US06654373B1 Content aware network apparatus 有权
标题翻译：内容感知网络设备
公开(公告)号：US06654373B1
公开(公告)日：2003-11-25
申请号：US09591728
申请日：2000-06-12
申请人： Robert Daniel Maher, III , Victor A. Bennett , Aswinkumar Vishanji Rana , Milton Andre Lie , Kevin William Brandon , Mark Warden Hervin , Corey Alan Garrow
发明人： Robert Daniel Maher, III , Victor A. Bennett , Aswinkumar Vishanji Rana , Milton Andre Lie , Kevin William Brandon , Mark Warden Hervin , Corey Alan Garrow
IPC分类号： H04L1256
CPC分类号： H04L47/2441 , H04L47/2433 , H04L63/0245 , H04L69/18
摘要： A content aware network device is described that is able to scan the contents of entire data packets including header and payload information. The network device includes a physical interface for converting analog network signal into bit streams and vise versa. The bit stream from the physical interface is sent to a traffic flow scanning processor that may be, but is not necessarily, divided into a header processor and a payload analyzer. The header processor scans the header information from each data packet, which is used to determine routing information and session identification. The payload analyzer scans the data packet's payload and matches the payload against a database of known strings. The payload analyzer is able to scan across packet boundaries and to scan for strings of variable and arbitrary length. Once the payload has been scanned the network device can operate on the data packet based on the results of the payload analyzer. The scanned data packets and the associated conclusions are then passed to a quality of service processor which modifies the data packets if necessary and performs traffic management and traffic shaping on the flow of data packets based on contents of the data packets.
摘要翻译：描述了能够扫描包括报头和有效载荷信息的整个数据分组的内容的内容感知网络设备。网络设备包括用于将模拟网络信号转换为比特流的物理接口，反之亦然。来自物理接口的比特流被发送到业务流扫描处理器，该处理器可能但并不一定被划分为头处理器和有效载荷分析器。头处理器从每个数据分组扫描头信息，用于确定路由信息和会话标识。有效载荷分析器扫描数据包的有效载荷，并将该有效载荷与已知字符串的数据库进行匹配。有效载荷分析器能够跨数据包边界扫描并扫描可变和任意长度的字符串。一旦有效载荷被扫描，网络设备可以基于有效载荷分析器的结果对数据分组进行操作。然后将扫描的数据分组和相关联的结论传递给服务质量处理器，如果需要则修改数据分组，并根据数据分组的内容对数据分组流进行流量管理和流量整形。

3. 发明授权

US06381242B1 Content processor 有权
标题翻译：内容处理器
公开(公告)号：US06381242B1
公开(公告)日：2002-04-30
申请号：US09649986
申请日：2000-08-29
申请人： Robert Daniel Maher, III , Aswinkumar Vishanji Rana , Milton Andre Lie , Kevin William Brandon , Mark Warden Hervin , Corey Alan Garrow
发明人： Robert Daniel Maher, III , Aswinkumar Vishanji Rana , Milton Andre Lie , Kevin William Brandon , Mark Warden Hervin , Corey Alan Garrow
IPC分类号： H04L1256
CPC分类号： H04L47/10 , H04L29/06 , H04L47/2441 , H04L47/34 , H04L63/1416 , H04L63/145 , H04L69/22
摘要： A content processor is described that is able to scan the contents of entire data packets including header and payload information. The content processor includes a queue engine operable to reorder out of order data packets and reassemble fragmented data packets. The queue engine sends the reordered and reassembled data packets to the context engine, which schedules the packets to be scanned. The packets are scanned by the content scanning engine using one or more string memories and one or more leaf string memories. The string memories are used by the content scanning engine to determine if there is a potential match between the data packet being scanned and any of the strings contained in database of known strings. If a potential match is identified, whether or not there is an exact match is determined using the leaf string memories and the leaf string compare engine. The scanning of the data packet results in a conclusion being generated by the content scanning engine. The conclusion can be an intermediate conclusion, can be an instruction to be executed by the content processor, can instruct the context engine to forward the information to a host processor for further analysis, or can be the final conclusion sent with the data packet with routing and quality of service treatment. Other uses for the conclusion are programmable in the content processor.
摘要翻译：描述了能够扫描包括报头和有效载荷信息的整个数据分组的内容的内容处理器。内容处理器包括可用于重新排序次序数据分组并重新组装分段数据分组的队列引擎。队列引擎将重新排序和重组的数据包发送到上下文引擎，上下文引擎调度要扫描的数据包。内容扫描引擎使用一个或多个串存储器和一个或多个叶片串存储器来扫描数据包。内容扫描引擎使用字符串存储器来确定正被扫描的数据分组与已知字符串的数据库中包含的任何字符串之间是否存在潜在的匹配。如果识别出潜在的匹配，则使用叶片串存储器和叶子串比较引擎确定是否存在精确匹配。数据包的扫描导致内容扫描引擎产生的结论。结论可以是中间结论，可以是内容处理器执行的指令，可以指示上下文引擎将信息转发到主处理器进行进一步分析，或者可以是与路由的数据分组一起发送的最终结论和服务质量处理。结论的其他用途可在内容处理器中编程。

4. 发明授权

US07002974B1 Learning state machine for use in internet protocol networks 失效
标题翻译：学习状态机用于互联网协议网络
公开(公告)号：US07002974B1
公开(公告)日：2006-02-21
申请号：US09885249
申请日：2001-03-28
申请人： James Robert Deerman , Aswinkumar Vishanji Rana , Milton Andre Lie , Travis Ernest Strother, Jr. , Mark Warden Hervin , John Raymond Carman , Larry Gene Maxwell , Robert Daniel Maher, III
发明人： James Robert Deerman , Aswinkumar Vishanji Rana , Milton Andre Lie , Travis Ernest Strother, Jr. , Mark Warden Hervin , John Raymond Carman , Larry Gene Maxwell , Robert Daniel Maher, III
IPC分类号： H04L12/28 , H04L12/54
CPC分类号： H04L43/026 , H04L41/06 , H04L41/0893 , H04L41/16 , H04L41/22 , H04L47/10 , H04L47/2408 , H04L47/2441 , H04L47/2458 , H04L47/32 , H04L47/50 , H04L47/6215 , H04L49/90 , H04L49/9036
摘要： A network processing system is described that is able to scan the entire contents of data packets passing through it, and to associate related data packets into discrete sessions, or flows. This ability allows the network processing system to learn characteristics of flows and events contained within those flows. Further, the network processing system can remember characteristics and events that have already been learned for use in processing future data packets. And finally, the network processing system can apply treatments to individual data packets and flows based on the characteristics and events learned, as well as previous state that has been maintained for that flow. To accomplish this, the network processing system includes processing engines, referred to as learning state machines, that scan the entire contents of data packets, use specific information in the data packets to associate the data packet with a particular session, or flow, identify characteristics of the data packet and associated flow, as well as events contained within the flow, store a state for the flow that contains the characteristics and events already learned, and determine a treatment for the data packet based on its contents and flow state.
摘要翻译：描述了能够扫描通过它的数据分组的全部内容并将相关数据分组关联成离散会话或流的网络处理系统。该能力允许网络处理系统学习这些流中包含的流和特征。此外，网络处理系统可以记住已经被学习用于处理未来数据分组的特性和事件。最后，网络处理系统可以根据学习的特征和事件，以及为该流程维护的先前状态，将处理应用于各个数据包和流。为了实现这一点，网络处理系统包括称为学习状态机的处理引擎，其扫描数据分组的整个内容，使用数据分组中的特定信息将数据分组与特定会话或流相关联，识别特征数据包和相关联的流以及包含在流中的事件存储包含已经学习的特征和事件的流的状态，并且基于其内容和流程状态确定数据分组的处理。

5. 发明授权

US06957258B2 Policy gateway 失效
标题翻译：策略网关
公开(公告)号：US06957258B2
公开(公告)日：2005-10-18
申请号：US09832670
申请日：2001-04-11
申请人： Robert Daniel Maher, III , Aswinkumar Vishanji Rana , Milton Andre Lie , Travis Ernest Strother, Jr. , Mark Warden Hervin , James Robert Deerman , John Raymond Carman , Larry Gene Maxwell
发明人： Robert Daniel Maher, III , Aswinkumar Vishanji Rana , Milton Andre Lie , Travis Ernest Strother, Jr. , Mark Warden Hervin , James Robert Deerman , John Raymond Carman , Larry Gene Maxwell
IPC分类号： H04L12/24 , H04L12/56 , G06F15/173
CPC分类号： H04L47/10 , H04L41/0856 , H04L41/0893 , H04L45/302 , H04L45/306 , H04L47/20 , H04L47/22 , H04L47/2408 , H04L47/2441 , H04L47/2458 , H04L47/32
摘要： A network processing system is described that functions as a policy gateway in order to enforce programmable network policies designed to provide quality of service in and across networks. The programmable network policies are converted into an image load file using a management interface at a remote server, and sent to the network processing system where the image is loaded into a processing engine. The network processing system includes line interfaces to take the data from the network and to send processed data back onto the network. Unidirectional processing engines take the data from the line interfaces, and associate each data packet with an identifier, which identifies the flow of which the data packet is a part. The flows are then compared to the database of programmable network policies and the processing engine determines a treatment based on the results of the comparison. A quality of service processor in the processing engine then uses the treatment to modify and direct the data packets in a manner consistent with the network policies.
摘要翻译：描述了用作策略网关的网络处理系统，以便实施旨在提供网络内部和跨网络的服务质量的可编程网络策略。可编程网络策略使用远程服务器上的管理接口转换为图像加载文件，并发送到图像加载到处理引擎中的网络处理系统。网络处理系统包括从网络接收数据并将处理后的数据发送回网络的线路接口。单向处理引擎从线路接口获取数据，并将每个数据分组与标识符相关联，标识数据分组是其一部分的流程。然后将流量与可编程网络策略的数据库进行比较，并且处理引擎基于比较的结果来确定治疗。处理引擎中的服务质量处理器则以与网络策略一致的方式使用该处理来修改和引导数据分组。

6. 发明授权

US07782902B2 Apparatus and method for mapping overlapping internet protocol addresses in layer two tunneling protocols 有权
标题翻译：用于在第二层隧道协议中映射重叠的互联网协议地址的装置和方法
公开(公告)号：US07782902B2
公开(公告)日：2010-08-24
申请号：US10890888
申请日：2004-07-14
申请人： James Robert Deerman , Milton Andre Lie , Aswinkumar Vishanji Rana , Robert Daniel Maher, III
发明人： James Robert Deerman , Milton Andre Lie , Aswinkumar Vishanji Rana , Robert Daniel Maher, III
IPC分类号： H04J3/16 , H04J3/22 , G06F15/173
CPC分类号： H04L61/2514 , H04L29/12009 , H04L29/12367
摘要： A method and system are described for resolving problems created by implementing multiple networks using private IP addresses and layer two tunneling protocols is described. A network processing system is operable to map flows from private IP addresses and ports on layer two tunneling protocol networks to public IP addresses and ports using the private IP addresses and ports and identifiers for the layer two tunneling protocol network. The network processing system uses its own public IP addresses and ports to anchor the traffic from the private network and performs the required mapping to pass traffic between the public and private networks.
摘要翻译：描述了解决通过使用专用IP地址实现多个网络而创建的问题的方法和系统，并且描述了第二层隧道协议。网络处理系统可操作以使用专用IP地址和第二层隧道协议网络的标识符将来自第二层隧道协议网络上的私有IP地址和端口的流映射到公共IP地址和端口。网络处理系统使用其自己的公共IP地址和端口来锚定来自专用网络的流量，并执行所需的映射以在公共和专用网络之间传递流量。

7. 发明授权

US07406709B2 Apparatus and method for allowing peer-to-peer network traffic across enterprise firewalls 有权
标题翻译：允许跨企业防火墙进行对等网络流量的设备和方法
公开(公告)号：US07406709B2
公开(公告)日：2008-07-29
申请号：US10657813
申请日：2003-09-08
申请人： Robert Daniel Maher, III , Aswinkumar Vishanji Rana , Milton Andre Lie , James Robert Deerman
发明人： Robert Daniel Maher, III , Aswinkumar Vishanji Rana , Milton Andre Lie , James Robert Deerman
IPC分类号： G06F21/00 , G06F15/16 , H04L9/00 , H04K1/00
CPC分类号： H04L63/029 , H04L29/12471 , H04L29/1249 , H04L61/2553 , H04L61/2589 , H04L67/104
摘要： A system and method for allowing bidirectional network traffic to pass through a network address translation (“NAT”)/firewall device thereby allowing bidirectional traffic to flow between the private side of the NAT/firewall device and the public side of the NAT/firewall device while maintaining security between the public side and the private side is described. A network processing system on the public side of the NAT/firewall device anchors network traffic to and from the private side of the NAT/firewall device. A traversal client resides on the private side of the NAT/firewall device and has a secure connection with the network processing system. The traversal client is operable to pass signaling packets bound for a terminal on the private side of the NAT/firewall from the network processing system. The traversal client is also operable to send test packets through the NAT/firewall to create the allocations in the NAT/firewall to allow the bidirectional traffic to pass from the public side to the private side.
摘要翻译：一种用于允许双向网络流量通过网络地址转换（“NAT”）/防火墙设备的系统和方法，从而允许双向流量在NAT /防火墙设备的私有侧与NAT /防火墙设备的公共侧之间流动同时维护公共和私人之间的安全。 NAT /防火墙设备公网侧的网络处理系统将NAT /防火墙设备私网侧的网络流量定位。遍历客户端位于NAT /防火墙设备的私有端，并与网络处理系统建立安全连接。遍历客户端可操作地从网络处理系统传递绑定在NAT /防火墙的私有端上的终端的信令分组。遍历客户端还可以通过NAT /防火墙发送测试包，以在NAT /防火墙中创建分配，以允许双向流量从公共端传递到私有端。

8. 发明授权

US08090845B2 Apparatus and method for firewall traversal 有权
标题翻译：防火墙穿越的装置和方法
公开(公告)号：US08090845B2
公开(公告)日：2012-01-03
申请号：US10967470
申请日：2004-10-18
申请人： Robert Daniel Maher, III , Aswinkumar Vishanji Rana , Milton Andre Lie , James Robert Deerman
发明人： Robert Daniel Maher, III , Aswinkumar Vishanji Rana , Milton Andre Lie , James Robert Deerman
IPC分类号： G06F15/16
CPC分类号： H04L63/029 , H04L29/06027 , H04L65/1006
摘要： An apparatus and method for traversing a network address translation/firewall device to maintain a registration between first and second devices separated by the firewall device are provided. In one example, the method includes intercepting a registration message from the first device to the second device. A determination is made based on a first timeout period defined by the second device as to whether it is time to renew the first device's registration. If it is time to renew the first device's registration, the registration message is forwarded to the second device. A response message that includes the first timeout period is intercepted, and the first timeout period is replaced with a second timeout period based on a binding lifetime of the firewall device before forwarding the response message to the first device.
摘要翻译：提供了一种用于遍历网络地址转换/防火墙设备以维护由防火墙设备分离的第一和第二设备之间的注册的装置和方法。在一个示例中，该方法包括从第一设备截取注册消息到第二设备。基于由第二设备定义的关于是否需要续订第一设备的注册的第一超时时段进行确定。如果是更新第一个设备的注册的时间，则注册消息被转发到第二个设备。拦截包含第一超时期间的响应消息，并且在将响应消息转发给第一设备之前，基于防火墙设备的绑定寿命，第一超时时段被替换为第二超时时段。

9. 发明授权

US07760737B2 Method for reordering and reassembling data packets in a network 有权
标题翻译：在网络中重新排序和重新组合数据包的方法
公开(公告)号：US07760737B2
公开(公告)日：2010-07-20
申请号：US09792267
申请日：2001-02-23
申请人： Aswinkumar Vishanji Rana , Corey Alan Garrow
发明人： Aswinkumar Vishanji Rana , Corey Alan Garrow
IPC分类号： H04L12/56
CPC分类号： H04L69/16 , H04L47/10 , H04L47/2441 , H04L47/28 , H04L47/32 , H04L47/34 , H04L49/90 , H04L49/9094 , H04L69/164 , H04L69/166
摘要： A method is described that is operable to reorder and reassemble data packets from network traffic into unfragmented and in-order traffic flows for applications such as deep packet classification and quality of service determination. A queue engine stores incoming data packets in a packet memory that is controlled by a link list controller. A packet assembler extracts information from each data packet, particularly fields from the header information, and uses that information among other things, to determine if the data packet is fragmented or out of order, and to associate the data packet with a session id. If the packet is determined to be out of order, the queue engine includes a reordering unit, which is able to modify links with the link list controller to reorder data packets. A fragment reassembly unit is also included which is capable of taking fragments and reassembling them into complete unfragmented data packets. The reordered and reassembled data packets are then sent to an output where further operations such as deep packet classification can take place.
摘要翻译：描述了可用于将数据分组从网络业务重新排序并将其重新组合的方法，用于诸如深度分组分类和服务质量确定的应用的未分片和按顺序业务流。队列引擎将进入的数据包存储在由链路列表控制器控制的分组存储器中。分组汇编器从每个数据分组中提取信息，特别是来自报头信息的字段，并且使用该信息等来确定数据分组是否被分段或失序，并将数据分组与会话ID相关联。如果分组被确定为无序，则队列引擎包括重新排序单元，其能够修改与链路列表控制器的链路以重新排序数据分组。还包括片段重组单元，其能够分片并将其重新组装成完整的未分片的数据分组。然后将重新排序并重组的数据分组发送到输出，其中可以进行诸如深度分组分类的其他操作。

10. 发明授权

US06781992B1 Queue engine for reassembling and reordering data packets in a network 有权
标题翻译：用于在网络中重新组织和重新排序数据包的队列引擎
公开(公告)号：US06781992B1
公开(公告)日：2004-08-24
申请号：US09792209
申请日：2001-02-23
申请人： Aswinkumar Vishanji Rana , Corey Alan Garrow
发明人： Aswinkumar Vishanji Rana , Corey Alan Garrow
IPC分类号： H04L1256
CPC分类号： H04L69/16 , H04L47/10 , H04L47/2441 , H04L47/28 , H04L47/32 , H04L47/34 , H04L49/90 , H04L49/9094 , H04L69/164 , H04L69/166 , H04L69/22
摘要： A queue engine is described that is operable to reorder and reassemble data packets from network traffic into unfragmented and in order traffic flows for applications such as deep packet classification and quality of service determination. The queue engine stores incoming data packets in a packet memory that is controlled by a link list controller. A packet assembler extracts information from each data packet, particularly fields from the header information, and uses that information among other things, to determine if the data packet is fragmented or out of order, and to associate the data packet with a session id. If the packet is determined to be out of order, the queue engine includes a reordering unit which is able to modify links with the link list controller to reorder data packets. A fragment reassembly unit is also included which is capable of taking fragments and reassembling them into complete unfragmented data packets. The reordered and reassembled data packets are then sent to an output where further operations such as deep packet classification can take place.
摘要翻译：描述了一种队列引擎，其可操作以将数据分组从网络流量重新排序并重组，从而将数据分组从网络流量重新排列成用于诸如深度分组分类和服务质量确定的应用的未分片和顺序业务流。队列引擎将进入的数据包存储在由链路列表控制器控制的分组存储器中。分组汇编器从每个数据分组提取信息，特别是来自报头信息的字段，并且使用该信息等来确定数据分组是否是分段的或不正常的，并且将数据分组与会话ID相关联。如果分组被确定为无序，则队列引擎包括重新排序单元，其能够修改与链路列表控制器的链路以重新排序数据分组。还包括片段重组单元，其能够分片并将其重新组装成完整的未分片的数据分组。然后将重新排序并重组的数据分组发送到输出，其中可以进行诸如深度分组分类的其他操作。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式