专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20060190998A1 Determining firewall rules for reverse firewalls 审中-公开
标题翻译：确定反向防火墙的防火墙规则
公开(公告)号：US20060190998A1
公开(公告)日：2006-08-24
申请号：US11290976
申请日：2005-11-30
申请人： William Aiello , Charles Kalmanek , William Leighton , Patrick McDaniel , Subhabrata Sen , Oliver Spatscheck , Jacobus Van der Merwe
发明人： William Aiello , Charles Kalmanek , William Leighton , Patrick McDaniel , Subhabrata Sen , Oliver Spatscheck , Jacobus Van der Merwe
IPC分类号： G06F15/16
CPC分类号： H04W28/00 , H04L43/16 , H04L63/0236 , H04L63/0254 , H04L63/0263 , H04L63/029
摘要： A reverse firewall for removing undesirable traffic from a computing network, such as a virtual private network (VPN), is disclosed. The reverse firewall uses firewall rules that may be determined and maintained within the enterprise network to control communication sent between computers in the computing network. The reverse firewall rules may be used to identify the communications between computers in the network that are undesirable and/or intrusive. For example, a computer in a network that is infected with a worm or that is surreptitiously hosting a denial-of-service attack may be identified by the reverse firewall and quarantined. The reverse firewall may be implemented in hardware and/or software.
摘要翻译：公开了用于从诸如虚拟专用网（VPN）的计算网络去除不期望的业务的反向防火墙。反向防火墙使用可以在企业网络内确定和维护的防火墙规则来控制计算网络中计算机之间发送的通信。反向防火墙规则可用于识别网络中不希望的和/或侵入的计算机之间的通信。例如，网络中受感染蠕虫或暗中托管拒绝服务攻击的计算机可能由反向防火墙识别，并被隔离。反向防火墙可以在硬件和/或软件中实现。

2. 发明申请

US20070204338A1 Reverse Firewall with Self-Provisioning 有权
标题翻译：具有自供应的反向防火墙
公开(公告)号：US20070204338A1
公开(公告)日：2007-08-30
申请号：US11616325
申请日：2006-12-27
申请人： William Aiello , Charles Kalmanek , William Leighton , Patrick McDaniel , Subhabrata Sen , Oliver Spatscheck , Jacobus Van der Merwe
发明人： William Aiello , Charles Kalmanek , William Leighton , Patrick McDaniel , Subhabrata Sen , Oliver Spatscheck , Jacobus Van der Merwe
IPC分类号： G06F15/16
CPC分类号： H04W28/00 , H04L43/16 , H04L63/0236 , H04L63/0254 , H04L63/0263 , H04L63/029
摘要： An application provisioning device may be used to manage a profile of a host and provide data corresponding to a selected application for installation at a host. A reverse firewall may use the profile of the host to determine whether to allow or block particular network communication from an application running on the host. An indication of a selected application may be received at the application provisioning device. Configuration information may also be received at the application provisioning device. The application provisioning server may request an update to the profile of a host and transmit such a request. The profile may be updated to reflect the configuration information and/or information of the selected application. Data corresponding to the selected application may be updated and transmitted to a host computer, where it may be installed. Therefore, the installed application running on the host may operate without being prematurely blocked by the reverse firewall.
摘要翻译：应用配置设备可以用于管理主机的配置文件，并且提供与所选择的应用相对应的数据以在主机上安装。反向防火墙可以使用主机的简档来确定是否允许或阻止来自在主机上运行的应用的特定网络通信。可以在应用供应设备处接收所选择的应用的指示。还可以在应用配置设备处接收配置信息。应用供应服务器可以请求对主机的配置文件的更新并传送这样的请求。可以更新配置文件以反映所选择的应用的配置信息和/或信息。与所选择的应用相对应的数据可以被更新并发送到可以安装在其上的主计算机。因此，主机上运行的已安装应用程序可能会运行，而不会被反向防火墙过早阻止。

3. 发明授权

US08453227B2 Reverse firewall with self-provisioning 有权
标题翻译：反向防火墙具有自供应
公开(公告)号：US08453227B2
公开(公告)日：2013-05-28
申请号：US11616325
申请日：2006-12-27
申请人： William A. Aiello , Charles Robert Kalmanek, Jr. , William J. Leighton, III , Patrick McDaniel , Subhabrata Sen , Oliver Spatscheck , Jacobus E. Van Der Merwe
发明人： William A. Aiello , Charles Robert Kalmanek, Jr. , William J. Leighton, III , Patrick McDaniel , Subhabrata Sen , Oliver Spatscheck , Jacobus E. Van Der Merwe
IPC分类号： H04L29/06
CPC分类号： H04W28/00 , H04L43/16 , H04L63/0236 , H04L63/0254 , H04L63/0263 , H04L63/029
摘要： An application provisioning device may be used to manage a profile of a host and provide data corresponding to a selected application for installation at a host. A reverse firewall may use the profile of the host to determine whether to allow or block particular network communication from an application running on the host. An indication of a selected application may be received at the application provisioning device. Configuration information may also be received at the application provisioning device. The application provisioning server may request an update to the profile of a host and transmit such a request. The profile may be updated to reflect the configuration information and/or information of the selected application. Data corresponding to the selected application may be updated and transmitted to a host computer, where it may be installed. Therefore, the installed application running on the host may operate without being prematurely blocked by the reverse firewall.
摘要翻译：应用配置设备可以用于管理主机的配置文件，并且提供与所选择的应用相对应的数据以在主机上安装。反向防火墙可以使用主机的简档来确定是否允许或阻止来自在主机上运行的应用的特定网络通信。可以在应用供应设备处接收所选择的应用的指示。还可以在应用配置设备处接收配置信息。应用供应服务器可以请求对主机的配置文件的更新并传送这样的请求。可以更新配置文件以反映所选择的应用的配置信息和/或信息。与所选择的应用相对应的数据可以被更新并发送到可以安装在其上的主计算机。因此，主机上运行的已安装应用程序可能会运行，而不会被反向防火墙过早阻止。

4. 发明授权

US07975044B1 Automated disambiguation of fixed-serverport-based applications from ephemeral applications 有权
标题翻译：从临时应用程序自动消除基于固定服务器端口的应用程序
公开(公告)号：US07975044B1
公开(公告)日：2011-07-05
申请号：US11317256
申请日：2005-12-27
申请人： Oliver Spatscheck , Subhabrata Sen , Jacobus E. Van der Merwe , Patrick McDaniel
发明人： Oliver Spatscheck , Subhabrata Sen , Jacobus E. Van der Merwe , Patrick McDaniel
IPC分类号： G06F15/173
CPC分类号： G06F9/54 , H04L43/00 , H04L43/026 , H04L69/326
摘要： Provided are methods for partitioning communication data in a network and disambiguating fixed or non-ephemeral communication data from ephemeral communication data and services. In one example, kmeans data clustering is used to partition or cluster server ports based on a location of the server ports in a 2-dimensional space. The location of the server ports may be based on a number of connections per server port and the number of servers using that port.
摘要翻译：提供了用于分割网络中的通信数据并且从短暂通信数据和服务中消除固定或非短暂通信数据的方法。在一个示例中，kmeans数据集群用于基于二维空间中的服务器端口的位置对服务器端口进行分区或集群。服务器端口的位置可以基于每个服务器端口的多个连接以及使用该端口的服务器数量。

5. 发明授权

US08744367B2 Tail optimization protocol for cellular radio resource allocation 失效
标题翻译：用于蜂窝无线资源分配的尾优化协议
公开(公告)号：US08744367B2
公开(公告)日：2014-06-03
申请号：US12872604
申请日：2010-08-31
申请人： Alexandre Gerber , Zhuoqing Mao , Feng Qian , Subhabrata Sen , Oliver Spatscheck , Zhaoguang Wang
发明人： Alexandre Gerber , Zhuoqing Mao , Feng Qian , Subhabrata Sen , Oliver Spatscheck , Zhaoguang Wang
IPC分类号： H04B17/00
CPC分类号： H04W24/02 , H04L43/16 , H04L69/28 , H04W4/185 , H04W40/005 , H04W52/0209 , H04W72/048 , H04W76/38 , H04W88/02 , Y02D70/1224 , Y02D70/1226 , Y02D70/1242 , Y02D70/1244 , Y02D70/1246 , Y02D70/1262 , Y02D70/1264 , Y02D70/142 , Y02D70/144 , Y02D70/146
摘要： Systems and methods for increasing the power and resource efficiency of a mobile network device are presented herein. More particularly, described herein is a novel Tail Optimization Protocol (TOP) and/or other mechanisms, systems and methods for enabling cooperation between a mobile device and an associated radio access network to eliminate idle periods (e.g., tails) when possible. Various systems and methods described herein can leverage the ability of applications and/or their associated connections to accurately predict a long tail time, from which a mobile device can notify an associated cellular network on such an imminent tail in order to allow the cellular network to immediately release tail resources. Various other aspects provided herein realize TOP via fast dormancy and/or other similar notification mechanisms, which enable a handset or other device to notify a cellular network for immediate resource release.
摘要翻译：本文介绍了用于增加移动网络设备的功率和资源效率的系统和方法。更具体地说，这里描述了一种新颖的尾部优化协议（TOP）和/或用于在可能的情况下使得移动设备和相关联的无线电接入网络之间的协作能够消除空闲周期（例如，尾部）的其他机制，系统和方法。本文描述的各种系统和方法可以利用应用和/或其相关连接的能力来精确地预测长尾时间，移动设备可以从该尾部时间通知相关联的蜂窝网络，以便允许蜂窝网络立即释放尾部资源。本文提供的各种其它方面通过快速休眠和/或其他类似的通知机制实现TOP，其使得手机或其他设备能够通知蜂窝网络以立即释放资源。

6. 发明授权

US08671183B2 System for internet scale visualization and detection of performance events 失效
标题翻译：用于互联网规模可视化和性能事件检测的系统
公开(公告)号：US08671183B2
公开(公告)日：2014-03-11
申请号：US12967869
申请日：2010-12-14
申请人： Shobha Venkataraman , Jeffrey Pang , Subhabrata Sen , Oliver Spatscheck
发明人： Shobha Venkataraman , Jeffrey Pang , Subhabrata Sen , Oliver Spatscheck
IPC分类号： H04L12/26
CPC分类号： H04L43/045 , H04L43/0852
摘要： A system for visualization of performance measurements is disclosed. The system may include an electronic data processor configured to receive a stream of the performance measurements and select a maximum number of leaf nodes of a plurality of nodes for use in an adaptive decision tree. Additionally, the electronic processor may be configured to determine a depth of each branch in the adaptive decision tree needed to differentiate performance among internet protocol addresses in an internet protocol prefix of each node. Each of the plurality of nodes may be annotated with a predicted latency category and the processor may be configured to generate the adaptive decision tree based on the maximum number of leaf nodes selected, the depth of each branch determined, the predicted latency category, and on the stream of performance measurements associated with the network. Moreover, the processor may display the adaptive decision tree.
摘要翻译：公开了用于可视化性能测量的系统。该系统可以包括电子数据处理器，其被配置为接收性能测量的流并且选择用于自适应决策树中的多个节点的最大数量的叶节点。此外，电子处理器可以被配置为确定在每个节点的因特网协议前缀中的互联网协议地址之间区分性能所需的自适应决策树中的每个分支的深度。可以利用预测的等待时间类别对多个节点中的每一个进行注释，并且处理器可以被配置为基于所选择的叶节点的最大数目，所确定的每个分支的深度，预测的等待时间类别和开启来生成自适应决策树与网络相关的性能测量流。此外，处理器可以显示自适应决策树。

7. 发明授权

US08527627B2 Intelligent mobility application profiling with respect to identified communication bursts 有权
标题翻译：关于识别的通信突发的智能移动应用程序分析
公开(公告)号：US08527627B2
公开(公告)日：2013-09-03
申请号：US12967627
申请日：2010-12-14
申请人： Alexandre Gerber , Zhuoqing Morley Mao , Feng Qian , Subhabrata Sen , Oliver Spatscheck , Zhaoguang Wang
发明人： Alexandre Gerber , Zhuoqing Morley Mao , Feng Qian , Subhabrata Sen , Oliver Spatscheck , Zhaoguang Wang
IPC分类号： G06F15/173
CPC分类号： H04W4/001 , H04L43/0876 , H04W4/50 , H04W8/22 , H04W24/08 , H04W52/0229 , H04W52/0232 , H04W76/27 , Y02D30/40 , Y02D70/1224 , Y02D70/1226 , Y02D70/1242 , Y02D70/1244 , Y02D70/1246 , Y02D70/1262 , Y02D70/1264 , Y02D70/142 , Y02D70/144 , Y02D70/146 , Y02D70/164
摘要： Systems and methods for analyzing mobile device applications within a wireless data network are presented herein. More particularly, described herein is a novel Intelligent Mobility Application Profiling Tool (iMAP) and/or other mechanisms, systems and methods for profiling and benchmarking applications associated with mobile devices in a wireless data network. Various systems and methods described herein expose cross-layer interaction associated with a network device in order to profile an application on the network device with respect to energy efficiency, performance, and functionality. As described herein, radio resource control (RRC) analysis can be performed to infer RRC states associated with a given application, identify tail time, etc. Further, analyzers are employed for various layers, including transmission control protocol (TCP) and/or hypertext transfer protocol (HTTP), as well as to analyze communication bursts associated with a given application. Analysis results are subsequently utilized to deliver application profiling results to a user.
摘要翻译：本文给出了用于分析无线数据网络内的移动设备应用的系统和方法。更具体地，这里描述了一种新颖的智能移动应用程序分析工具（iMAP）和/或用于对与无线数据网络中的移动设备相关联的应用进行分析和基准测试的其他机制，系统和方法。本文描述的各种系统和方法公开了与网络设备相关联的跨层交互，以便在能量效率，性能和功能方面对网络设备上的应用进行简档。如本文所述，可以执行无线电资源控制（RRC）分析以推断与给定应用相关联的RRC状态，识别尾部时间等。此外，分析器被用于各种层，包括传输控制协议（TCP）和/或超文本传输协议（HTTP），以及分析与给定应用相关联的通信突发。随后利用分析结果将应用程序分析结果提供给用户。

8. 发明申请

US20120307678A1 Inferring TCP Initial Congestion Window 有权
标题翻译：推迟TCP初始拥塞窗口
公开(公告)号：US20120307678A1
公开(公告)日：2012-12-06
申请号：US13588645
申请日：2012-08-17
申请人： Alexandre Gerber , Zhuoqing Mao , Feng Qian , Subhabrata Sen , Oliver Spatscheck , Walter Willinger
发明人： Alexandre Gerber , Zhuoqing Mao , Feng Qian , Subhabrata Sen , Oliver Spatscheck , Walter Willinger
IPC分类号： H04L12/26
CPC分类号： H04L47/365 , H04L47/193 , H04L47/27 , H04L47/28
摘要： A packet trace is received. Inter-arrival times between the multiple packets in the packet trace are determined. An inter-arrival time in the inter-arrival times that is greater than a threshold is identified. An order number of the inter-arrival time is identified. A determination is made as to whether a size of each of at least a portion of the multiple packets is equal to a maximum segment size. When a determination is made that the size of each of at least a portion of the multiple packets is equal to the maximum segment size, a size of the ICW as a product of the order number and the maximum segment size is returned.
摘要翻译：收到数据包跟踪。确定分组跟踪中的多个分组之间的到达之间的时间。确定到达时间之间的到达时间大于阈值。识别到达时间的订单号。确定多个分组的至少一部分中的每一个的大小是否等于最大分段大小。当确定多个分组的至少一部分中的每一个的大小等于最大分段大小时，返回作为订单号和最大分段大小的乘积的ICW的大小。

9. 发明申请

US20120122405A1 METHOD AND APPARATUS FOR PROVIDING A DYNAMIC INACTIVITY TIMER IN A WIRELESS COMMUNICATIONS NETWORK 有权
标题翻译：在无线通信网络中提供动态灭活定时器的方法和装置
公开(公告)号：US20120122405A1
公开(公告)日：2012-05-17
申请号：US12946265
申请日：2010-11-15
申请人： ALEXANDRE GERBER , Zhuoqing Mao , Feng Qian , Subhabrata Sen , Oliver Spatscheck , Zhaoguang Wang
发明人： ALEXANDRE GERBER , Zhuoqing Mao , Feng Qian , Subhabrata Sen , Oliver Spatscheck , Zhaoguang Wang
IPC分类号： H04B17/00
CPC分类号： H04W56/00 , H04W52/0232 , Y02D70/1224 , Y02D70/1242 , Y02D70/1262
摘要： A method, a computer readable medium and an apparatus for providing a dynamic inactivity timer are disclosed. For example, the method monitors a timer for a time threshold associated with a burst of a plurality of bursts of packets, and determines if the timer for the time threshold associated with the burst has expired. The method predicts an inter-burst time for the burst, if the timer for the time threshold associated with the burst has expired and sets the dynamic inactivity timer in accordance with the inter-burst time for the burst.
摘要翻译：公开了一种提供动态不活动定时器的方法，计算机可读介质和装置。例如，该方法监视与多个分组突发相关联的时间阈值的定时器，并且确定与突发相关联的时间阈值的定时器是否已经到期。如果与突发相关联的时间阈值的定时器已经到期并且根据突发的突发间隔时间设置动态不活动定时器，则该方法预测突发的突发间时间。

10. 发明申请

US20120058773A1 METHOD AND APPARATUS FOR PERFORMING A DEMOTION IN A CELLULAR COMMUNICATIONS NETWORK 有权
标题翻译：在细胞通信网络中执行演示的方法和装置
公开(公告)号：US20120058773A1
公开(公告)日：2012-03-08
申请号：US12874458
申请日：2010-09-02
申请人： Alexandre Gerber , Zhuoqing Mao , Feng Qian , Subhabrata Sen , Oliver Spatscheck , Zhaoguang Wang
发明人： Alexandre Gerber , Zhuoqing Mao , Feng Qian , Subhabrata Sen , Oliver Spatscheck , Zhaoguang Wang
IPC分类号： H04W72/00
CPC分类号： H04W76/27
摘要： A method, computer readable medium and apparatus for performing a demotion in a cellular communications network are disclosed. For example, the method receives a packet indicating that a batching transfer is completed, determines if a background packet was received after receiving the packet indicating that the batching transfer is completed and demotes a state of a state machine implemented by a radio network controller to a lower state if the background packet was not received.
摘要翻译：公开了一种用于在蜂窝通信网络中执行降级的方法，计算机可读介质和装置。例如，该方法接收到指示批量传送完成的分组，确定在接收到指示批量传送完成的分组后是否接收到后台分组，并将由无线电网络控制器实现的状态机的状态降级为如果未接收到后台数据包，则状态较低。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式