专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US5848233A Method and apparatus for dynamic packet filter assignment 失效
标题翻译：用于动态分组过滤器分配的方法和装置
公开(公告)号：US5848233A
公开(公告)日：1998-12-08
申请号：US762402
申请日：1996-12-09
申请人： Sanjay R. Radia , Swee Boon Lim , Panagiotis Tsirigotis , Thomas K. Wong , Robert J. Goedman , Michael W. Patrick
发明人： Sanjay R. Radia , Swee Boon Lim , Panagiotis Tsirigotis , Thomas K. Wong , Robert J. Goedman , Michael W. Patrick
IPC分类号： G06F13/00 , H04L29/06 , H04L29/14 , G06F11/00
CPC分类号： H04L63/0227 , H04L63/102
摘要： The present invention includes a method and apparatus for filtering IP packets based on events within a computer network. More specifically, the present invention includes a services management system, or SMS. The SMS manages network connections between a series of client systems and a router. An access network control server (ANCS) manages the configuration of the router. The SMS monitors activities or events that occur within the network. In response to these events, the SMS dynamically downloads filtering profiles to the ANCS. The ANCS then uses the downloaded filtering profiles to reconfigure the router. The router then uses the filtering rules to selectively discard or forward IP packets received from the client systems.
摘要翻译：本发明包括一种基于计算机网络内的事件来过滤IP分组的方法和装置。更具体地，本发明包括服务管理系统或SMS。 SMS管理一系列客户端系统和路由器之间的网络连接。接入网络控制服务器（ANCS）管理路由器的配置。 SMS监视网络中发生的活动或事件。响应这些事件，SMS动态地将过滤配置文件下载到ANCS。然后，ANCS使用下载的过滤配置文件重新配置路由器。然后，路由器使用过滤规则来选择性地丢弃或转发从客户端系统接收的IP分组。

2. 发明授权

US5835727A Method and apparatus for controlling access to services within a computer network 失效
标题翻译：用于控制对计算机网络内的服务的访问的方法和装置
公开(公告)号：US5835727A
公开(公告)日：1998-11-10
申请号：US762393
申请日：1996-12-09
申请人： Thomas K. Wong , Sanjay R. Radia , Swee Boon Lim , Panagiotis Tsirigotis , Robert J. Goedman
发明人： Thomas K. Wong , Sanjay R. Radia , Swee Boon Lim , Panagiotis Tsirigotis , Robert J. Goedman
IPC分类号： G06F13/00 , H04L29/06 , H04L12/46 , H04L12/26
CPC分类号： H04L63/0263 , H04L63/102
摘要： A method and apparatus for controlling access to services within a computer network is provided. More specifically, the present invention includes a services management system, or SMS. The SMS manages network connections between a series of client systems and a router. An access network control server (ANCS) manages the configuration of the router. For each network user, the SMS maintains a profile of filtering rules. When the user accesses the network, the SMS downloads the user's filtering profiles to the ANCS. The ANCS then uses the downloaded filtering profiles to reconfigure the router. The router then uses the filtering rules to selectively forward IP packets originating from the user's host system and directed at the network services.
摘要翻译：提供了一种用于控制对计算机网络内的服务的访问的方法和装置。更具体地，本发明包括服务管理系统或SMS。 SMS管理一系列客户端系统和路由器之间的网络连接。接入网络控制服务器（ANCS）管理路由器的配置。对于每个网络用户，SMS维护过滤规则的配置文件。当用户访问网络时，SMS将用户的过滤配置文件下载到ANCS。然后，ANCS使用下载的过滤配置文件重新配置路由器。然后，路由器使用过滤规则来选择性地转发来自用户的主机系统并指向网络服务的IP分组。

3. 发明授权

US6073178A Method and apparatus for assignment of IP addresses 失效
标题翻译：分配IP地址的方法和装置
公开(公告)号：US6073178A
公开(公告)日：2000-06-06
申请号：US762709
申请日：1996-12-09
申请人： Thomas K. Wong , Swee B. Lim , Sanjay R. Radia , Panagiotis Tsirigotis , Robert J. Goedman , Michael W. Patrick
发明人： Thomas K. Wong , Swee B. Lim , Sanjay R. Radia , Panagiotis Tsirigotis , Robert J. Goedman , Michael W. Patrick
IPC分类号： H04L29/06 , H04L29/12 , G06F13/00
CPC分类号： H04L29/12216 , H04L61/2015 , H04L63/0227 , H04L63/1466
摘要： A preferred embodiment of the present invention includes a method and apparatus for allocating and using IP addresses in a network of client systems. More specifically, the present invention includes a router which monitors the assignments of IP addresses by a DHCP server. As each IP address is assigned, the router associates the assigned IP address with an trusted identifier which identifies the client system. Subsequently, if the router received a packet directed at the assigned IP address, the router forwards the packet to the client system having an trusted identifier associated with the destination address of the IP packet. Additionally, if the router receives a packet from a client system, it uses the trusted identifier of the client system to find IP addresses associated with the client system. If the source address of the IP packet is not included in the IP addresses associated with the client system, the packet is discarded.
摘要翻译：本发明的优选实施例包括用于在客户端系统的网络中分配和使用IP地址的方法和装置。更具体地，本发明包括监视DHCP服务器的IP地址分配的路由器。当分配每个IP地址时，路由器将分配的IP地址与识别客户端系统的可信标识符相关联。接下来，如果路由器接收到指向分配的IP地址的分组，则路由器将分组转发到具有与IP分组的目的地地址相关联的信任标识符的客户端系统。另外，如果路由器从客户端系统接收到数据包，则使用客户端系统的可信标识来查找与客户端系统相关联的IP地址。如果IP数据包的源地址不包括在与客户端系统相关的IP地址中，则丢弃该数据包。

4. 发明授权

US5922049A Method for using DHCP and marking to override learned IP addesseses in a network 失效
标题翻译：使用DHCP和标记来覆盖网络中学习的IP地址的方法
公开(公告)号：US5922049A
公开(公告)日：1999-07-13
申请号：US762933
申请日：1996-12-09
申请人： Sanjay R. Radia , Thomas K. Wong , Swee B. Lim , Panagiotis Tsirigotis , Robert J. Goedman , Michael W. Patrick
发明人： Sanjay R. Radia , Thomas K. Wong , Swee B. Lim , Panagiotis Tsirigotis , Robert J. Goedman , Michael W. Patrick
IPC分类号： H04L12/56 , H04L29/06 , H04L29/12 , G06F13/00
CPC分类号： H04L61/2015 , H04L29/06 , H04L29/12216 , H04L29/12264 , H04L29/12301 , H04L45/00 , H04L61/2046 , H04L61/2076
摘要： A preferred embodiment of the present invention includes a method and apparatus for routing an IP packets in a network of client systems. The router forwards IP packets between the client systems and the server systems. More specifically, the router can be pre-configured to include one or more "routes." Each route is a mapping between an IP address and a client system. The router may also learn route from other routers and by analysis of IP packets. Preferably, the routes known by the router are included in a route table. The router also monitors DHCP assignment of IP addresses to client systems within the network. When the DHCP assignment of an IP address is detected, the router creates a new route that associates the newly assigned IP address and the corresponding client system. The new route is marked so that it may only be overwritten by a subsequent DHCP assignment. The router then updates the route table to include the new route and purges the route table of learned routes that have been invalidated by the new route. In this way, the present invention allows dynamically assigned IP addresses to override learned routes.
摘要翻译：本发明的优选实施例包括用于在客户端系统的网络中路由IP分组的方法和装置。路由器在客户端系统和服务器系统之间转发IP数据包。更具体地，路由器可以被预配置为包括一个或多个“路由”。每个路由是IP地址和客户端系统之间的映射。路由器还可以从其他路由器学习路由，并通过分析IP数据包。优选地，路由器已知的路由被包括在路由表中。路由器还监控IP地址到网络中的客户端系统的DHCP分配。当检测到IP地址的DHCP分配时，路由器创建新路由，将新分配的IP地址与相应的客户端系统相关联。新路由被标记为只能被后续的DHCP分配覆盖。然后路由器更新路由表以包括新路由，并清除已经被新路由无效的学习路由的路由表。以这种方式，本发明允许动态分配的IP地址来覆盖学习的路由。

5. 发明授权

US5884024A Secure DHCP server 失效
标题翻译：安全DHCP服务器
公开(公告)号：US5884024A
公开(公告)日：1999-03-16
申请号：US763068
申请日：1996-12-09
申请人： Swee B. Lim , Sanjay R. Radia , Thomas K. Wong , Panagiotis Tsirigotis , Robert J. Goedman
发明人： Swee B. Lim , Sanjay R. Radia , Thomas K. Wong , Panagiotis Tsirigotis , Robert J. Goedman
IPC分类号： H04L29/06 , H04L29/12 , G06F11/00
CPC分类号： H04L29/12216 , H04L29/12273 , H04L61/2015 , H04L61/2053 , H04L63/126
摘要： A preferred embodiment of the present invention includes a method and apparatus for allocating and using IP addresses in a network of client systems. More specifically, the present invention includes a DHCP server that leases IP addresses to the client systems. The DHCP server works in combination with a secure DHCP relay agent and a secure IP relay agent. Broadcast DHCPREQUEST messages are forwarded to the DHCP server by the secure DHCP relay agent. Before forwarding, the secure DHCP relay agent embeds in each DHCPREQUEST message. The trusted identifier is an unforgeable object specifically associated with the client system sending the DHCPREQUEST message. When the DHCP server receives a DHCPREQUEST message, the DHCP server extracts the trusted identifier. The trusted identifier is then used by the DHCP server to prevent client systems from accessing the IP address leases of other client systems. The DHCP server also counts the number of IP addresses leases assigned to each trusted identifier. In this way, each client system is prevented from leasing more than a predetermined number of IP addresses. Unicast DHCPREQUEST messages received by the DHCP server include a source address that corresponds to the client system sending the unicast DHCPREQUEST message. The validity of the source address is ensured by the secure IP relay agent. The DHCP server uses the source address to prevent client systems from accessing the IP address leases of other client systems.
摘要翻译：本发明的优选实施例包括用于在客户端系统的网络中分配和使用IP地址的方法和装置。更具体地，本发明包括向客户端系统租用IP地址的DHCP服务器。 DHCP服务器与安全的DHCP中继代理和安全的IP中继协同工作。广播DHCPREQUEST消息由安全的DHCP中继转发给DHCP服务器。转发前，安全DHCP中继代理嵌入到每个DHCPREQUEST消息中。可信标识符是与发送DHCPREQUEST消息的客户端系统特别相关联的不可伪造对象。当DHCP服务器收到DHCPREQUEST消息时，DHCP服务器提取可信标识符。受信标识符然后由DHCP服务器使用，以防止客户端系统访问其他客户端系统的IP地址租约。 DHCP服务器还计算分配给每个受信任标识符的IP地址租约数量。以这种方式，防止每个客户端系统超过预定数量的IP地址租用。 DHCP服务器接收到的单播DHCPREQUEST消息包括与发送单播DHCPREQUEST消息的客户端系统对应的源地址。源地址的有效性由安全IP中继代理确保。 DHCP服务器使用源地址来阻止客户端系统访问其他客户端系统的IP地址租约。

6. 发明授权

US07269608B2 Apparatus and methods for caching objects using main memory and persistent memory 有权
标题翻译：用于使用主存储器和持久存储器缓存对象的装置和方法
公开(公告)号：US07269608B2
公开(公告)日：2007-09-11
申请号：US10137443
申请日：2002-05-03
申请人： Thomas K. Wong , Panagiotis Tsirigotis , Sanjay R. Radia , Rajeev Chawla , Omid Ahmadian
发明人： Thomas K. Wong , Panagiotis Tsirigotis , Sanjay R. Radia , Rajeev Chawla , Omid Ahmadian
IPC分类号： G06F17/30
CPC分类号： G06F11/1435 , G06F12/123 , Y10S707/99942 , Y10S707/99952
摘要： An object cache stores objects in a cyclic buffer to provide highly efficient creation of cache entries. The cache efficiently manages storage of a large number of small objects because the cache does not write objects into a file system as individual files, rather the cache utilizes cyclical buffers in which to store objects as they are added to the cache. Because of the use of a cyclic buffer, the high-overhead process of purging cache entries never needs to be performed. Cache entries are automatically purged as they are overwritten when the cyclic buffer becomes full and the input pointer wraps around from the end of a cyclic buffer to the beginning of a cyclic buffer. Additionally, in the event of a system crash or disk subsystem malfunction, inspect and repair time is independent of the size of the cache, as opposed to conventional file systems in which the time is proportional to the size of the file system.
摘要翻译：对象缓存将对象存储在循环缓冲区中以提供高效创建缓存条目。高速缓存有效地管理大量小对象的存储，因为高速缓存不将对象作为单个文件写入文件系统，而是缓存使用循环缓冲区来存储被添加到高速缓存中的对象。由于使用循环缓冲区，因此不需要执行清除高速缓存条目的高开销过程。当循环缓冲器变满并且输入指针从循环缓冲器结束循环到循环缓冲器的开始时，缓存条目被自动清除，因为它们被重写。另外，在系统崩溃或磁盘子系统发生故障的情况下，检查和修复时间与缓存的大小无关，与传统的文件系统相比，文件系统的时间与文件系统的大小成正比。

7. 发明授权

US07123613B1 Apparatus and method for providing a transparent proxy server 有权
标题翻译：用于提供透明代理服务器的装置和方法
公开(公告)号：US07123613B1
公开(公告)日：2006-10-17
申请号：US09545571
申请日：2000-04-07
申请人： Rajeev Chawla , Thomas K. Wong , Panagiotis Tsirigotis , Omid Ahmadian , Sanjay R. Radia , Ashvin Kamaraju
发明人： Rajeev Chawla , Thomas K. Wong , Panagiotis Tsirigotis , Omid Ahmadian , Sanjay R. Radia , Ashvin Kamaraju
IPC分类号： H04L12/56
CPC分类号： H04L67/2814 , H04L69/16 , H04L69/163 , H04L69/22
摘要： A transparent proxy server is implemented by directing particular client packets to a proxy server that handles communications between the client and an origin server. When a client sends a packet to an origin server, a router transparently redirects the packet to the proxy server by storing the proxy server address in the destination field and the origin server address in the record route options field. The proxy server sends connection setup requests to the origin server and forwards acknowledgement packets to the client. For other requests, the proxy server determines whether the requested information is stored in the proxy server cache. If so, the information is retrieved from the cache; if not, the information is retrieved from the origin server. All acknowledgement and information packets are sent to the client with the origin server address in the source field, making it appear that the origin server sent the packets.
摘要翻译：通过将特定客户端数据包引导到处理客户端和源服务器之间的通信的代理服务器来实现透明代理服务器。当客户端向原始服务器发送数据包时，路由器通过将代理服务器地址存储在目标字段中，并将记录路由选项字段中的原始服务器地址存储在透明地将数据包重定向到代理服务器。代理服务器向原始服务器发送连接建立请求，并向客户端转发确认数据包。对于其他请求，代理服务器确定请求的信息是否存储在代理服务器缓存中。如果是这样，则从缓存中检索信息; 如果不是，则从源服务器检索信息。所有确认和信息数据包都将发送到源字段中的源服务器地址的客户端，从而看起来源服务器发送数据包。

8. 发明授权

US06807615B1 Apparatus and method for providing a cyclic buffer using logical blocks 有权
标题翻译：使用逻辑块提供循环缓冲器的装置和方法
公开(公告)号：US06807615B1
公开(公告)日：2004-10-19
申请号：US09288023
申请日：1999-04-08
申请人： Thomas K. Wong , Panagiotis Tsirigotis , Rajeev Chawla , Omid Ahmadian , Sanjay R. Radia
发明人： Thomas K. Wong , Panagiotis Tsirigotis , Rajeev Chawla , Omid Ahmadian , Sanjay R. Radia
IPC分类号： G06F1300
CPC分类号： G06F5/10
摘要： An apparatus and method for creating and maintaining a cyclic or circular buffer are implemented using logical blocks corresponding to the physical blocks of the buffer. The logical blocks are mapped to the physical blocks of the cyclic buffer, and are used to create an index table for the buffer. Each entry in the index table corresponds to one or more blocks in the buffer, and has a logical block number respectively associated with a buffer block. When information from the buffer is accessed, the index table is consulted to determine if the requested information is stored in the buffer. If the information is stored in the buffer, the logical block number corresponding to the information is retrieved from the entry and translated into a corresponding physical block number. Using logical block numbers allows simple determination of whether the buffer block is valid, and how new or fresh the buffer block is without requiring a generation or cycle number.
摘要翻译：用于创建和维护循环或循环缓冲器的装置和方法使用与缓冲器的物理块相对应的逻辑块来实现。逻辑块映射到循环缓冲区的物理块，并用于为缓冲区创建一个索引表。索引表中的每个条目对应于缓冲器中的一个或多个块，并且具有分别与缓冲器块相关联的逻辑块号。当访问来自缓冲器的信息时，查询索引表以确定所请求的信息是否存储在缓冲器中。如果信息存储在缓冲器中，则从该条目检索与该信息相对应的逻辑块号，并将其转换为对应的物理块号。使用逻辑块号允许简单确定缓冲区块是否有效，以及缓冲块的新增或新建，而不需要生成或循环次数。

9. 发明授权

US06754800B2 Methods and apparatus for implementing host-based object storage schemes 有权
标题翻译：用于实现基于主机的对象存储方案的方法和装置
公开(公告)号：US06754800B2
公开(公告)日：2004-06-22
申请号：US09987249
申请日：2001-11-14
申请人： Thomas K. Wong , Panagiotis Tsirigotis , Sanjay R. Radia , Rajeev Chawla
发明人： Thomas K. Wong , Panagiotis Tsirigotis , Sanjay R. Radia , Rajeev Chawla
IPC分类号： G06E1200
CPC分类号： G06F12/0864 , G06F3/0656 , G06F3/0667 , G06F3/067
摘要： Systems and methods are disclosed in which a computer system having main memory and persistent memory is caused to perform a method for caching related objects. The computer system receives a plurality of objects from an origin server and computes a hash value based on source information about an object. Then the computer system stores the object based on the hash value with other related objects. Additionally, a computer system consistent with the present invention may retrieve related objects from the cache by performing a batch read of related objects.
摘要翻译：公开了具有主存储器和持久存储器的计算机系统执行用于缓存相关对象的方法的系统和方法。计算机系统从原始服务器接收多个对象，并基于关于对象的源信息来计算哈希值。然后，计算机系统基于哈希值与其他相关对象存储对象。此外，与本发明一致的计算机系统可以通过执行相关对象的批量读取来从高速缓存检索相关对象。

10. 发明授权

US6044224A Mechanism for dynamically associating a service dependent representation with objects at run time 失效
标题翻译：在运行时将服务依赖表示与对象动态关联的机制
公开(公告)号：US6044224A
公开(公告)日：2000-03-28
申请号：US670682
申请日：1996-06-26
申请人： Sanjay R. Radia , Swee Boon Lim , Peter B. Kessler
发明人： Sanjay R. Radia , Swee Boon Lim , Peter B. Kessler
IPC分类号： G06F9/44 , G06F9/46 , G06F15/00
CPC分类号： G06F9/465
摘要： A data structure for dynamically associating a service dependent representation with a servant object at run time is used in a distributed object computing system that incorporates subcontracts. Subcontracts supply different functionalities to objects. The data structure exists before run time, and is used at run time to perform the dynamic association. An arrangement also exists at run time. The structure comprises a service representation class representing a single subcontract, a servant base class associated with servant objects created at run time, and a linking mechanism to form a run time link between the server rep class and a servant object at run time. The server rep class provides functionality unique to a subcontract. At run time, servant objects are instantiated from the servant base class or a more derived class. The servant object uses the functionality provided by a subcontract by way of the linking mechanism. An arrangement exists at run time for dynamically linking a servant object to a subcontract. Included are a servant object, a server rep object, and a pointer from the servant object to the server rep object. Methods and apparatus allow a servant object itself to initiate calls to deactivate itself, to determine remaining references to itself, to revoke itself, and to get an object reference for itself. A method creates a servant object that includes the above data structures and ability to call these functions.
摘要翻译：在运行时将服务依赖表示与服务对象动态关联的数据结构用于包含分包合同的分布式对象计算系统中。分包合同向对象提供不同的功能。数据结构存在于运行时间之前，并在运行时用于执行动态关联。运行时也存在一个安排。该结构包括表示单个分包合同的服务表示类，与在运行时创建的servant对象关联的servant基类，以及在运行时在服务器rep类和servant对象之间形成运行时链接的链接机制。服务器代表类提供独立于分包合同的功能。在运行时，servant对象从servant基类或更多派生类实例化。服务对象通过链接机制使用分包合作提供的功能。在运行时存在一个动态链接服务对象到分包合同的安排。包括一个servant对象，一个服务器rep对象和一个从servant对象到服务器rep对象的指针。方法和设备允许servant对象本身启动调用以停用自身，确定对其自身的剩余引用，撤销自身以及为其自身获取对象引用。一种方法创建一个包含上述数据结构和调用这些功能的能力的servant对象。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式