专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20100332617A1 SYSTEMS AND METHODS FOR PROVIDING A VIRTUAL APPLIANCE IN AN APPLICATION DELIVERY FABRIC 有权
标题翻译：用于在应用交付织物中提供虚拟装置的系统和方法
公开(公告)号：US20100332617A1
公开(公告)日：2010-12-30
申请号：US12771580
申请日：2010-04-30
申请人： Thomas Goodwin , Rajiv Mirani , Abhishek Chauhan , Frank Suchomel , Deepak Goel
发明人： Thomas Goodwin , Rajiv Mirani , Abhishek Chauhan , Frank Suchomel , Deepak Goel
IPC分类号： G06F15/16
CPC分类号： G06F9/455 , G06F8/60
摘要： The present disclosure is directed to systems and method for providing a virtual appliance. One or more application delivery controller appliances intermediary to a plurality of clients and a plurality of servers perform a plurality of application delivery control functions on network traffic communicated between the plurality of clients and the plurality of servers. A virtual application delivery controller is deployed on a device intermediary to the plurality of clients and the plurality of servers. The virtual application delivery controller executing on the device performs one or more of the plurality of application delivery control functions on network traffic communicated between the plurality of clients and the plurality of servers.
摘要翻译：本公开涉及用于提供虚拟设备的系统和方法。多个客户机和多个服务器中介的一个或多个应用交付控制器设备对在多个客户端和多个服务器之间传送的网络流量执行多个应用传递控制功能。虚拟应用传送控制器被部署在多个客户机和多个服务器的中间设备上。在该设备上执行的虚拟应用传送控制器对多个客户端与多个服务器之间传送的网络流量执行多个应用传递控制功能中的一个或多个。

2. 发明授权

US08868724B2 Systems and methods for providing a virtual appliance in an application delivery fabric 有权
标题翻译：在应用交付架构中提供虚拟设备的系统和方法
公开(公告)号：US08868724B2
公开(公告)日：2014-10-21
申请号：US12771580
申请日：2010-04-30
申请人： Thomas Goodwin , Rajiv Mirani , Abhishek Chauhan , Frank Suchomel , Deepak Goel
发明人： Thomas Goodwin , Rajiv Mirani , Abhishek Chauhan , Frank Suchomel , Deepak Goel
IPC分类号： G06F15/173 , G06F9/455 , G06F9/445
CPC分类号： G06F9/455 , G06F8/60
摘要： The present disclosure is directed to systems and method for providing a virtual appliance. One or more application delivery controller appliances intermediary to a plurality of clients and a plurality of servers perform a plurality of application delivery control functions on network traffic communicated between the plurality of clients and the plurality of servers. A virtual application delivery controller is deployed on a device intermediary to the plurality of clients and the plurality of servers. The virtual application delivery controller executing on the device performs one or more of the plurality of application delivery control functions on network traffic communicated between the plurality of clients and the plurality of servers.
摘要翻译：本公开涉及用于提供虚拟设备的系统和方法。多个客户机和多个服务器中介的一个或多个应用交付控制器设备对在多个客户端和多个服务器之间传送的网络流量执行多个应用传递控制功能。虚拟应用传送控制器被部署在多个客户机和多个服务器的中间设备上。在该设备上执行的虚拟应用传送控制器对多个客户端与多个服务器之间传送的网络流量执行多个应用传递控制功能中的一个或多个。

3. 发明授权

US08695084B2 Inferencing data types of message components 有权
标题翻译：推断消息组件的数据类型
公开(公告)号：US08695084B2
公开(公告)日：2014-04-08
申请号：US13212068
申请日：2011-08-17
申请人： Abhishek Chauhan , Rajiv Mirani , Prince Kohli , Namit Sikka
发明人： Abhishek Chauhan , Rajiv Mirani , Prince Kohli , Namit Sikka
IPC分类号： H04L29/06
CPC分类号： H04L63/0263 , H04L63/0236
摘要： A method of a device for filtering messages routing across a network includes extracting, by a filter configured on the device, a plurality of message components from messages received via a network. The plurality of message components is identified as having at least a field name in common, including a first field name. A learning engine configured on the device creates a list of data types for values of the first field name. The list includes one or more data types of a value of the first field name identified for each of the plurality of message components. The learning engine determines a most restrictive data type from the list of data types for the values of the first field name of the plurality of message components.
摘要翻译：用于过滤通过网络的消息路由的设备的方法包括通过经由网络接收的消息从设备上配置的过滤器提取多个消息组件。多个消息组件被识别为具有至少一个共同的字段名称，包括第一字段名称。在设备上配置的学习引擎为第一个字段名称的值创建数据类型的列表。列表包括为多个消息组件中的每一个标识的第一字段名称的值的一个或多个数据类型。学习引擎从多个消息组件的第一字段名称的值的数据类型列表中确定最严格的数据类型。

4. 发明授权

US08695083B2 Rule generalization for web application entry point modeling 有权
标题翻译： Web应用程序入口点建模的规则泛化
公开(公告)号：US08695083B2
公开(公告)日：2014-04-08
申请号：US12827415
申请日：2010-06-30
申请人： Abhishek Chauhan , Rajiv Mirani , Prince Kohli , Priya Nanduri
发明人： Abhishek Chauhan , Rajiv Mirani , Prince Kohli , Priya Nanduri
IPC分类号： H04L29/06
CPC分类号： H04L63/0263 , H04L63/0236 , H04L63/1425
摘要： A security gateway receives messages, such as URL requests, rejected by a message filter based on a set of rules. The security gateway maintains frequencies with which the messages were rejected by the rules. The security gateway finds rejected messages having a high frequency of occurrence. Since messages having a high frequency of occurrences are more likely to represent legitimate requests rather than malicious attacks, the security gateway generates exception rules, which would allow similar messages to pass through the gateway.
摘要翻译：安全网关接收基于一组规则的消息过滤器拒绝的消息，例如URL请求。安全网关维护消息被规则拒绝的频率。安全网关发现具有高频率发生的被拒绝消息。由于具有高频率发生的消息更有可能代表合法请求而不是恶意攻击，因此安全网关将生成异常规则，这将允许类似的消息通过网关。

5. 发明授权

US09111003B2 Scalable derivative services 有权
标题翻译：可扩展衍生服务
公开(公告)号：US09111003B2
公开(公告)日：2015-08-18
申请号：US12846663
申请日：2010-07-29
申请人： Sheng Liang , Oliver Chang , Hong Zhang , Abhishek Chauhan , Rajiv Mirani
发明人： Sheng Liang , Oliver Chang , Hong Zhang , Abhishek Chauhan , Rajiv Mirani
IPC分类号： G06F17/00 , G06F17/30 , G06F17/22 , G06F17/25
CPC分类号： G06F17/3089 , G06F17/2288 , G06F17/25 , G06F17/30902
摘要： An efficient method for parsing HTML pages identifies pages containing a mix of static and dynamic content. The pages are parsed to form abstract syntax trees (ASTs), which are then cached along with the pages. When a later version of a page is retrieved, it is compared against the cached version, and only those portions of the AST that contain different content are reparsed.
摘要翻译：用于解析HTML页面的有效方法标识包含静态和动态内容混合的页面。这些页面被解析为形成抽象语法树（AST），然后与页面一起缓存。当检索到更高版本的页面时，将其与缓存版本进行比较，并且仅重新包含不同内容的AST的那些部分。

6. 发明授权

US09071526B2 Systems and methods for platform rate limiting 有权
标题翻译：平台速率限制的系统和方法
公开(公告)号：US09071526B2
公开(公告)日：2015-06-30
申请号：US12818882
申请日：2010-06-18
申请人： Roman Avdanin , Henk Bots , Ramanjaneyulu Y. Talla , Abhishek Chauhan , Rajiv Mirani
发明人： Roman Avdanin , Henk Bots , Ramanjaneyulu Y. Talla , Abhishek Chauhan , Rajiv Mirani
IPC分类号： H04L29/06 , H04L12/801 , H04L12/26 , H04L12/813 , H04L12/819 , H04L12/851 , H04L12/823
CPC分类号： H04L47/10 , H04L43/0894 , H04L47/20 , H04L47/215 , H04L47/2425 , H04L47/32 , H04L63/0272 , H04L63/102
摘要： The present disclosure presents systems and methods for controlling network traffic traversing an intermediary device based on a license or a permit granted for the intermediary device. The systems and methods control a rate of a traffic of a device in accordance with a rate limit identified by a rate limiting license. A rate limiting manager of an intermediary device that processes network traffic between a plurality of clients and a plurality of servers, may identify presence of a rate limiting license that further identifies a performance level. The rate limiting manager may establish a rate limit based on the performance level of the rate limiting license. A throttler of the intermediary may control a rate of receiving network packets in accordance with the rate limit.
摘要翻译：本公开提供了用于基于许可证或为中间设备授予的许可来控制遍历中间设备的网络流量的系统和方法。系统和方法根据由速率限制许可证标识的速率限制来控制设备的业务速率。处理多个客户端和多个服务器之间的网络流量的中间设备的速率限制管理器可以标识进一步识别性能级别的速率限制许可证的存在。速率限制管理器可以基于速率限制许可证的性能级别建立速率限制。中介人的节流器可以根据速率限制来控制接收网络分组的速率。

7. 发明授权

US08490148B2 Systems and methods for managing application security profiles 有权
公开(公告)号：US08490148B2
公开(公告)日：2013-07-16
申请号：US11685177
申请日：2007-03-12
申请人： Namit Sikka , Anoop Reddy , Rajiv Mirani , Abhishek Chauhan
发明人： Namit Sikka , Anoop Reddy , Rajiv Mirani , Abhishek Chauhan
IPC分类号： G06F17/00
CPC分类号： H04L63/20 , H04L63/102
摘要： Systems and methods for configuring and evaluating policies that direct processing of one or more data streams are described. A configuration interface is described for allowing users to specify object oriented policies. These object oriented policies may allow any data structures to be applied with respect to a payload of a received packet stream, including any portions of HTTP traffic. A configuration interface may also allow the user to control the order in which policies and policy groups are executed, in addition to specifying actions to be taken if one or more policies are undefined. Systems and methods for processing the policies may allow efficient processing of object-oriented policies by applying potentially complex data structures to unstructured data streams. A device may also interpret and process a number of flow control commands and policy group invocation statements to determine an order of execution among a number of policies and policy groups. These policy configurations and processing may allow configuration and processing of complex network behaviors relating to load balancing, VPNs, SSL offloading, content switching, application security, acceleration, and caching.

8. 发明授权

US08458783B2 Using application gateways to protect unauthorized transmission of confidential data via web applications 有权
标题翻译：使用应用网关通过Web应用保护未经授权的机密数据传输
公开(公告)号：US08458783B2
公开(公告)日：2013-06-04
申请号：US12351199
申请日：2009-01-09
申请人： Robert V. Walters , Abhishek Chauhan , Rajiv Mirani , Prince Kohli
发明人： Robert V. Walters , Abhishek Chauhan , Rajiv Mirani , Prince Kohli
IPC分类号： G06F9/00
CPC分类号： H04L63/0245 , H04L63/0263 , H04L63/168
摘要： A security gateway receives messages transmitted between a server and a client device on a network and parses the messages into a plurality of data objects, such as strings and name-value pairs. The data objects may represent user personal identification information, such as user name, social security number, credit card number, patient code, driver's license number, and other personal identification information. The security gateway uses rules to recognize data objects and validate the data objects to determine whether the recognized data objects are appropriately included within the context. The security gateway may also perform an action on the data objects. Data objects that are not appropriately included in the context may be transformed, suppressed or disallowed.
摘要翻译：安全网关接收网络上的服务器和客户端设备之间传输的消息，并将消息解析成多个数据对象，如字符串和名称 - 值对。数据对象可以表示用户个人识别信息，例如用户名，社会安全号码，信用卡号，病人码，驾驶执照号码和其他个人识别信息。安全网关使用规则来识别数据对象并验证数据对象，以确定识别的数据对象是否被适当地包含在上下文中。安全网关还可以对数据对象执行动作。未被适当地包括在上下文中的数据对象可能被转换，抑制或不允许。

9. 发明申请

US20110154471A1 SYSTEMS AND METHODS FOR PROCESSING APPLICATION FIREWALL SESSION INFORMATION ON OWNER CORE IN MULTIPLE CORE SYSTEM 有权
标题翻译：用于处理多核心系统中所有者核心的应用程序防火墙会话信息的系统和方法
公开(公告)号：US20110154471A1
公开(公告)日：2011-06-23
申请号：US12645845
申请日：2009-12-23
申请人： Craig Anderson , Anoop Reddy , Rajiv Mirani , Abhishek Chauhan
发明人： Craig Anderson , Anoop Reddy , Rajiv Mirani , Abhishek Chauhan
IPC分类号： G06F17/00 , G06F9/00
CPC分类号： G06F9/54 , G06F21/41 , H04L63/0236 , H04L63/0272
摘要： The present invention is directed towards systems and methods for sharing session data among cores in a multi-core system. A first application firewall module executes on a core of a multi-core intermediary device which establishes a user session. The first application firewall module stores application firewall session data to memory accessible by the first core. A second application firewall module executes on a second core of the multi-core intermediary device. The second application firewall module receives a request from the user via the established user session. The request includes a session identifier identifying that the user session was established by the first core. The second application firewall module determines to perform one or more security checks on the request and communicates a portion of the request the first core. The second application firewall module receives and processes the security check results and instructions from the first core.
摘要翻译：本发明涉及用于在多核系统中的核之间共享会话数据的系统和方法。第一应用防火墙模块在建立用户会话的多核中间设备的核心上执行。第一个应用程序防火墙模块将应用程序防火墙会话数据存储到第一个内核可访问的存储器中。第二应用防火墙模块在多核中间设备的第二核上执行。第二应用防火墙模块经由建立的用户会话从用户接收请求。该请求包括标识用户会话由第一核建立的会话标识符。第二应用防火墙模块确定对请求执行一个或多个安全检查，并将请求的一部分传送给第一核。第二个应用程序防火墙模块接收并处理来自第一个核心的安全检查结果和指令。

10. 发明授权

US08438626B2 Systems and methods for processing application firewall session information on owner core in multiple core system 有权
标题翻译：用于处理多核心系统中所有者核心应用程序防火墙会话信息的系统和方法
公开(公告)号：US08438626B2
公开(公告)日：2013-05-07
申请号：US12645845
申请日：2009-12-23
申请人： Craig Anderson , Anoop Reddy , Rajiv Mirani , Abhishek Chauhan
发明人： Craig Anderson , Anoop Reddy , Rajiv Mirani , Abhishek Chauhan
IPC分类号： G06F9/00
CPC分类号： G06F9/54 , G06F21/41 , H04L63/0236 , H04L63/0272
摘要： The present invention is directed towards systems and methods for sharing session data among cores in a multi-core system. A first application firewall module executes on a core of a multi-core intermediary device which establishes a user session. The first application firewall module stores application firewall session data to memory accessible by the first core. A second application firewall module executes on a second core of the multi-core intermediary device. The second application firewall module receives a request from the user via the established user session. The request includes a session identifier identifying that the user session was established by the first core. The second application firewall module determines to perform one or more security checks on the request and communicates a portion of the request the first core. The second application firewall module receives and processes the security check results and instructions from the first core.
摘要翻译：本发明涉及用于在多核系统中的核之间共享会话数据的系统和方法。第一应用防火墙模块在建立用户会话的多核中间设备的核心上执行。第一个应用防火墙模块将应用程序防火墙会话数据存储到第一个内核可访问的存储器中第二应用防火墙模块在多核中间设备的第二核上执行。第二应用防火墙模块经由建立的用户会话从用户接收请求。该请求包括标识用户会话由第一核建立的会话标识符。第二应用防火墙模块确定对请求执行一个或多个安全检查，并将请求的一部分传送给第一核。第二个应用程序防火墙模块接收并处理来自第一个核心的安全检查结果和指令。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式