专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20070214352A1 Role aware network security enforcement 有权
标题翻译：角色感知网络安全执法
公开(公告)号：US20070214352A1
公开(公告)日：2007-09-13
申请号：US11373727
申请日：2006-03-10
申请人： Sean Convery , David Oran , James Rivers , John Schnizlein , Ralph Droms , Mark Stapp
发明人： Sean Convery , David Oran , James Rivers , John Schnizlein , Ralph Droms , Mark Stapp
IPC分类号： H04L9/00
CPC分类号： H04L63/0263 , H04L29/12301 , H04L61/2076 , H04L63/0236 , H04L63/101 , H04L63/102 , H04L63/20 , H04W12/08
摘要： Generating a binding between a source address and one or more roles of a user accessing the network and distributing the binding to a filter node. The source address is currently assigned to the device. The binding may be generated by one or more nodes on an ingress path used during authentication of the user. The binding may be distributed to the filter node on demand or without any request from the filter node. Responsive to a determination that the user is associated with a new source address, a new binding is generated to associate a new source address with the one or more roles for the user. The new binding is distributed to the filter node. Another aspect is a method of enforcing a role based security policy at a filter node, using bindings of source addresses to roles.
摘要翻译：在源地址和访问网络的用户的一个或多个角色之间生成绑定，并将绑定分发到过滤器节点。源地址当前分配给设备。绑定可以由用户认证期间使用的入口路径上的一个或多个节点生成。绑定可以根据需要分配到过滤节点，也可以不经过过滤器节点的任何请求。响应于确定用户与新的源地址相关联，生成新的绑定以将新的源地址与用户的一个或多个角色相关联。新的绑定被分发到过滤器节点。另一方面是在过滤器节点上使用源地址绑定到角色来实施基于角色的安全策略的方法。

2. 发明授权

US08156325B2 Role aware network security enforcement 有权
标题翻译：角色感知网络安全执法
公开(公告)号：US08156325B2
公开(公告)日：2012-04-10
申请号：US12868696
申请日：2010-08-25
申请人： Sean Convery , David R. Oran , James Rivers , John Schnizlein , Ralph Droms , Mark Stapp
发明人： Sean Convery , David R. Oran , James Rivers , John Schnizlein , Ralph Droms , Mark Stapp
IPC分类号： H04L29/06
CPC分类号： H04L63/0263 , H04L29/12301 , H04L61/2076 , H04L63/0236 , H04L63/101 , H04L63/102 , H04L63/20 , H04W12/08
摘要： Generating a binding between a source address and one or more roles of a user accessing the network and distributing the binding to a filter node. The source address is currently assigned to the device. The binding may be generated by one or more nodes on an ingress path used during authentication of the user. The binding may be distributed to the filter node on demand or without any request from the filter node. Responsive to a determination that the user is associated with a new source address, a new binding is generated to associate a new source address with the one or more roles for the user. The new binding is distributed to the filter node. Another aspect is a method of enforcing a role based security policy at a filter node, using bindings of source addresses to roles.
摘要翻译：在源地址和访问网络的用户的一个或多个角色之间生成绑定，并将绑定分发到过滤器节点。源地址当前分配给设备。绑定可以由用户认证期间使用的入口路径上的一个或多个节点生成。绑定可以根据需要分配到过滤节点，也可以不经过过滤器节点的任何请求。响应于确定用户与新的源地址相关联，生成新的绑定以将新的源地址与用户的一个或多个角色相关联。新的绑定被分发到过滤器节点。另一方面是在过滤器节点上使用源地址绑定到角色来实施基于角色的安全策略的方法。

3. 发明申请

US20100322241A1 ROLE AWARE NETWORK SECURITY ENFORCEMENT 有权
标题翻译：角色网络安全执行
公开(公告)号：US20100322241A1
公开(公告)日：2010-12-23
申请号：US12868696
申请日：2010-08-25
申请人： Sean CONVERY , David R. Oran , James Rivers , John Schnizlein , Ralph Droms , Mark Stapp
发明人： Sean CONVERY , David R. Oran , James Rivers , John Schnizlein , Ralph Droms , Mark Stapp
IPC分类号： H04L12/56
CPC分类号： H04L63/0263 , H04L29/12301 , H04L61/2076 , H04L63/0236 , H04L63/101 , H04L63/102 , H04L63/20 , H04W12/08
摘要： Generating a binding between a source address and one or more roles of a user accessing the network and distributing the binding to a filter node. The source address is currently assigned to the device. The binding may be generated by one or more nodes on an ingress path used during authentication of the user. The binding may be distributed to the filter node on demand or without any request from the filter node. Responsive to a determination that the user is associated with a new source address, a new binding is generated to associate a new source address with the one or more roles for the user. The new binding is distributed to the filter node. Another aspect is a method of enforcing a role based security policy at a filter node, using bindings of source addresses to roles.
摘要翻译：在源地址和访问网络的用户的一个或多个角色之间生成绑定，并将绑定分发到过滤器节点。源地址当前分配给设备。绑定可以由用户认证期间使用的入口路径上的一个或多个节点生成。绑定可以根据需要分配到过滤节点，也可以不经过过滤器节点的任何请求。响应于确定用户与新的源地址相关联，生成新的绑定以将新的源地址与用户的一个或多个角色相关联。新的绑定被分发到过滤器节点。另一方面是在过滤器节点上使用源地址绑定到角色来实施基于角色的安全策略的方法。

4. 发明授权

US07814311B2 Role aware network security enforcement 有权
标题翻译：角色感知网络安全执法
公开(公告)号：US07814311B2
公开(公告)日：2010-10-12
申请号：US11373727
申请日：2006-03-10
申请人： Sean Convery , David R. Oran , James Rivers , John Schnizlein , Ralph Droms , Mark Stapp
发明人： Sean Convery , David R. Oran , James Rivers , John Schnizlein , Ralph Droms , Mark Stapp
IPC分类号： H04L29/06
CPC分类号： H04L63/0263 , H04L29/12301 , H04L61/2076 , H04L63/0236 , H04L63/101 , H04L63/102 , H04L63/20 , H04W12/08
摘要： Generating a binding between a source address and one or more roles of a user accessing the network and distributing the binding to a filter node. The source address is currently assigned to the device. The binding may be generated by one or more nodes on an ingress path used during authentication of the user. The binding may be distributed to the filter node on demand or without any request from the filter node. Responsive to a determination that the user is associated with a new source address, a new binding is generated to associate a new source address with the one or more roles for the user. The new binding is distributed to the filter node. Another aspect is a method of enforcing a role based security policy at a filter node, using bindings of source addresses to roles.
摘要翻译：在源地址和访问网络的用户的一个或多个角色之间生成绑定，并将绑定分发到过滤器节点。源地址当前分配给设备。绑定可以由用户认证期间使用的入口路径上的一个或多个节点生成。绑定可以根据需要分配到过滤节点，也可以不经过过滤器节点的任何请求。响应于确定用户与新的源地址相关联，生成新的绑定以将新的源地址与用户的一个或多个角色相关联。新的绑定被分发到过滤器节点。另一方面是在过滤器节点上使用源地址绑定到角色来实施基于角色的安全策略的方法。

5. 发明申请

US20100293257A1 ACTIVELY UPDATING CLIENTS WITH SELECTED DATA 有权
标题翻译：积极更新有选择数据的客户
公开(公告)号：US20100293257A1
公开(公告)日：2010-11-18
申请号：US12465113
申请日：2009-05-13
申请人： Kenneth Kinnear, JR. , Neil Russell , Mark Stapp , Bernard Volz
发明人： Kenneth Kinnear, JR. , Neil Russell , Mark Stapp , Bernard Volz
IPC分类号： G06F15/177
CPC分类号： H04L61/2015 , H04L29/12301 , H04L61/2076
摘要： In an embodiment, a data processing apparatus comprising one or more electronic digital processors; Dynamic Host Configuration Protocol (DHCP) server logic coupled to the one or more processors; an active leasequery channel response logic coupled to the DHCP server logic which when executed causes the one or more processors to perform receiving, from a particular DHCP client among a plurality of DHCP clients, an active leasequery initiation message requesting the DHCP server logic to actively send update messages about changes in network address leases that the DHCP server logic manages; wherein the active leasequery initiation message comprises a channel identifier value; determining whether the channel identifier value matches a client class that the DHCP server logic manages; in response to determining that the channel identifier value does match a client class identifier that the DHCP server logic manages, sending, to the particular DHCP client, one or more DHCP response messages describing any changes in network address leases that the DHCP server logic performs only for a subset of the DHCP clients that are in the matched client class.
摘要翻译：在一个实施例中，一种包括一个或多个电子数字处理器的数据处理装置; 耦合到所述一个或多个处理器的动态主机配置协议（DHCP）服务器逻辑; 耦合到DHCP服务器逻辑的活动租赁查询信道响应逻辑，当被执行时，一个或多个处理器执行从多个DHCP客户端中的特定DHCP客户端接收主动租赁查询发起消息，请求DHCP服务器逻辑主动发送更新有关DHCP服务器逻辑管理的网络地址租约更改的消息; 其中所述活动租赁查询发起消息包括信道标识符值; 确定信道标识符值是否与DHCP服务器逻辑管理的客户端类别匹配; 响应于确定信道标识符值与DHCP服务器逻辑管理的客户端类标识符相匹配，向特定DHCP客户端发送描述DHCP服务器逻辑仅执行的网络地址租约中的任何改变的一个或多个DHCP响应消息对于匹配的客户端类中的DHCP客户端的子集。

6. 发明授权

US08732281B2 Actively updating clients with selected data 有权
标题翻译：积极更新所选数据的客户端
公开(公告)号：US08732281B2
公开(公告)日：2014-05-20
申请号：US12465113
申请日：2009-05-13
申请人： Kenneth Kinnear, Jr. , Neil Russell , Mark Stapp , Bernard Volz
发明人： Kenneth Kinnear, Jr. , Neil Russell , Mark Stapp , Bernard Volz
IPC分类号： G06F15/177
CPC分类号： H04L61/2015 , H04L29/12301 , H04L61/2076
摘要： In an embodiment, a data processing apparatus comprising one or more electronic digital processors; Dynamic Host Configuration Protocol (DHCP) server logic coupled to the one or more processors; an active leasequery channel response logic coupled to the DHCP server logic which when executed causes the one or more processors to perform receiving, from a particular DHCP client among a plurality of DHCP clients, an active leasequery initiation message requesting the DHCP server logic to actively send update messages about changes in network address leases that the DHCP server logic manages; wherein the active leasequery initiation message comprises a channel identifier value; determining whether the channel identifier value matches a client class that the DHCP server logic manages; in response to determining that the channel identifier value does match a client class identifier that the DHCP server logic manages, sending, to the particular DHCP client, one or more DHCP response messages describing any changes in network address leases that the DHCP server logic performs only for a subset of the DHCP clients that are in the matched client class.
摘要翻译：在一个实施例中，一种包括一个或多个电子数字处理器的数据处理装置; 耦合到所述一个或多个处理器的动态主机配置协议（DHCP）服务器逻辑; 耦合到DHCP服务器逻辑的活动租赁查询信道响应逻辑，当被执行时，一个或多个处理器执行从多个DHCP客户端中的特定DHCP客户端接收主动租赁查询发起消息，请求DHCP服务器逻辑主动发送更新有关DHCP服务器逻辑管理的网络地址租约更改的消息; 其中所述活动租赁查询发起消息包括信道标识符值; 确定信道标识符值是否与DHCP服务器逻辑管理的客户端类别匹配; 响应于确定信道标识符值与DHCP服务器逻辑管理的客户端类标识符相匹配，向特定DHCP客户端发送描述DHCP服务器逻辑仅执行的网络地址租约中的任何改变的一个或多个DHCP响应消息对于匹配的客户端类中的DHCP客户端的子集。

7. 发明授权

US07640340B1 Techniques for dynamic host configuration using overlapping network addresses 有权
标题翻译：使用重叠网络地址进行动态主机配置的技术
公开(公告)号：US07640340B1
公开(公告)日：2009-12-29
申请号：US11501150
申请日：2006-08-07
申请人： Mark Stapp , Kenneth Kinnear, Jr. , Richard A. Johnson , Jayadev Kumarasamy
发明人： Mark Stapp , Kenneth Kinnear, Jr. , Richard A. Johnson , Jayadev Kumarasamy
IPC分类号： G06F15/173 , G06F15/16 , G06F15/177
CPC分类号： H04L63/0272 , H04L29/12273 , H04L29/1282 , H04L61/2015 , H04L61/2053 , H04L61/6013
摘要： Techniques for managing leased network addresses for multiple networks using overlapping address spaces include storing banks of addresses corresponding to the multiple networks. A request for a network address for a host on a first network is received from a relay agent on an intermediate device. The request includes a qualifier associated with the first network by the relay agent. A first bank of addresses is selected based on the qualifier. A first network address from the first bank is identified based at least in part on the request. A response for the host is sent to the relay agent. The response indicates the first network address and the qualifier. Thus a dynamic host configuration protocol (DHCP) server can provide the same network address for several hosts spread over different networks, such as different virtual private networks (VPNs).
摘要翻译：用于管理使用重叠地址空间的多个网络的租用网络地址的技术包括存储对应于多个网络的地址组。从中间设备上的中继代理接收对第一网络上的主机的网络地址的请求。请求包括由中继代理与第一网络相关联的限定符。根据限定词选择第一组地址。至少部分地基于请求来识别来自第一银行的第一网络地址。向主机发送响应给中继代理。响应表示第一个网络地址和限定符。因此，动态主机配置协议（DHCP）服务器可以为分散在不同网络（例如不同的虚拟专用网络（VPN））上的多个主机提供相同的网络地址。

8. 发明授权

US07302484B1 Techniques for selecting available subnets for delegation among dynamic host configuration servers 有权
标题翻译：在动态主机配置服务器之间选择用于委派的可用子网的技术
公开(公告)号：US07302484B1
公开(公告)日：2007-11-27
申请号：US10218555
申请日：2002-08-13
申请人： Mark Stapp , Kenneth Kinnear, Jr.
发明人： Mark Stapp , Kenneth Kinnear, Jr.
IPC分类号： G06F15/173 , G06F12/02
CPC分类号： H04L29/12273 , H04L29/12283 , H04L61/2053 , H04L61/2061
摘要： A method and apparatus for providing network addresses for hosts on a network includes generating and storing network configuration information in a subnet management process, where a subnet is a set of contiguous network addresses. The network configuration information indicates network addresses to be distributed among a plurality of network devices. Policy information is also generated and stored. The policy information indicates a policy set of one or more policy processes. Each policy process selects an available subnet from available network addresses. A request for a subnet is received from a subnet requesting process. A particular subnet is determined based on the network configuration information, the request, and the policy set. A response indicating the particular subnet is sent to the subnet requesting process. These techniques allow an administrator to choose a policy for selecting subnets that better utilizes network resources for a wide range of network architectures.
摘要翻译：用于为网络上的主机提供网络地址的方法和装置包括在子网管理过程中生成和存储网络配置信息，其中子网是一组连续的网络地址。网络配置信息指示要在多个网络设备之间分配的网络地址。还生成并存储策略信息。策略信息指示一个或多个策略进程的策略集。每个策略进程从可用的网络地址中选择可用的子网。从子网请求进程接收到子网的请求。基于网络配置信息，请求和策略集来确定特定子网。指示特定子网的响应被发送到子网请求进程。这些技术允许管理员选择一种策略来选择更好地利用网络资源进行广泛的网络架构的子网。

9. 发明申请

US20060161661A1 Techniques for automatically delegating address spaces among dynamic host configuration servers 有权
标题翻译：在动态主机配置服务器之间自动委托地址空间的技术
公开(公告)号：US20060161661A1
公开(公告)日：2006-07-20
申请号：US11375806
申请日：2006-03-14
申请人： Richard Johnson , Kenneth Kinnear , Mark Stapp , Jayadev Kumarasamy
发明人： Richard Johnson , Kenneth Kinnear , Mark Stapp , Jayadev Kumarasamy
IPC分类号： G06F15/177 , G06F15/173
CPC分类号： H04L29/12273 , H04L29/12283 , H04L61/2053 , H04L61/2061
摘要： Techniques for providing sets of network addresses for dynamically configuring hosts on a network include sending to a first server a first request for a first count of network addresses in a first set of network addresses. A first message indicating the first set of network addresses is received. A second message is received from a second server that requests a second count of network addresses for a second set of network addresses. The second set of network addresses is determined based at least in part on the first set of network addresses and the second count. In response to the second message, a first response indicating the second set is sent to the second server. The techniques allow an administrator to enter available subnets at any DHCP server. The DHCP servers using these techniques then automatically apportion subnets among each other based on the relative usage of the subnets.
摘要翻译：用于提供用于在网络上动态地配置主机的网络地址集合的技术包括：向第一服务器发送第一组网络地址中的第一网络地址计数的请求。接收到指示第一组网络地址的第一消息。从第二服务器接收到第二消息，其请求第二组网络地址的网络地址的第二计数。至少部分地基于第一组网络地址和第二计数来确定第二组网络地址。响应于第二消息，指示第二组的第一响应被发送到第二服务器。这些技术允许管理员在任何DHCP服务器上输入可用的子网。使用这些技术的DHCP服务器会根据子网的相对使用情况自动分配子网。

10. 发明授权

US07051089B1 Techniques for automatically delegating address spaces among dynamic host configuration servers 有权
公开(公告)号：US07051089B1
公开(公告)日：2006-05-23
申请号：US10001415
申请日：2001-10-24
申请人： Richard A. Johnson , Kenneth Kinnear, Jr. , Mark Stapp , Jayadev Kumarasamy
发明人： Richard A. Johnson , Kenneth Kinnear, Jr. , Mark Stapp , Jayadev Kumarasamy
IPC分类号： G06F15/177
CPC分类号： H04L29/12273 , H04L29/12283 , H04L61/2053 , H04L61/2061
摘要： Techniques for providing sets of network addresses for dynamically configuring hosts on a network include sending to a first server a first request for a first count of network addresses in a first set of network addresses. A first message indicating the first set of network addresses is received. A second message is received from a second server that requests a second count of network addresses for a second set of network addresses. The second set of network addresses is determined based at least in part on the first set of network addresses and the second count. In response to the second message, a first response indicating the second set is sent to the second server. The techniques allow an administrator to enter available subnets at any DHCP server. The DHCP servers using these techniques then automatically apportion subnets among each other based on the relative usage of the subnets.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式