专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

WO2006116195A1 METHODS AND SYSTEMS FOR FRAGMENTATION AND REASSEMBLY FOR IP TUNNELS 审中-公开
标题翻译： IP隧道拆分和重组的方法与系统
公开(公告)号：WO2006116195A1
公开(公告)日：2006-11-02
申请号：PCT/US2006/015261
申请日：2006-04-20
申请人： SINETT CORPORATION , CHOUDHURY, Abhijit, K. , AMBE, Shekhar , LIN, Victor , SHUKLA, Himanshu , JAIN, Sudhanshu , MANRAL, Vishwas
发明人： CHOUDHURY, Abhijit, K. , AMBE, Shekhar , LIN, Victor , SHUKLA, Himanshu , JAIN, Sudhanshu , MANRAL, Vishwas
IPC分类号： H04L29/06 , H04L12/46
CPC分类号： H04L69/16 , H04L12/4633 , H04L49/90 , H04L49/9094 , H04L63/0428 , H04L69/166 , H04L69/168 , H04L2212/00
摘要： A novel flow-through architecture for fragmentation and reassembly of tunnel packets in network devices is presented. The fragmentation and reassembly of tunneled packets are handled in the hardware pipeline to achieve line-rate processing of the traffic flow without the need for additional store and forward operations typically provided by a host processor or a co-processor. In addition, the hardware pipeline may perform fragmentation and reassembly of packets using encrypted tunnels by performing segment-by-segment crypto. A network device implementing fragment reassembly can include an ingress hardware pipeline that reassembles fragmented packets between a media access control (MAC) of the device and an output packet memory of the device, where the incoming fragmented packets can be encrypted and/or tunneled. A network device implementing packet fragmentation can include an egress hardware pipeline that fragments packets between an input packet memory of the device and the MAC, where the outgoing fragments can be encrypted and/or tunneled.
摘要翻译：提出了一种用于网络设备中隧道数据包的分段和重新组合的新型流通架构。隧道化分组的分段和重新组合在硬件流水线中被处理以实现业务流的线速处理，而不需要通常由主处理器或协处理器提供的附加存储和转发操作。此外，硬件流水线可以通过执行逐段加密来执行使用加密隧道的分组的分段和重组。实现片段重组的网络设备可以包括入口硬件流水线，其重新组装设备的媒体访问控制（MAC）与设备的输出分组存储器之间的分段分组，其中输入的分段分组可以被加密和/或隧道传送。实现分组分片的网络设备可以包括在设备的输入分组存储器与MAC之间分段分组的出口硬件流水线，其中输出分段可以被加密和/或隧道化。

2. 发明申请

WO2005008998A1 INITIALIZATION VECTOR GENERATION ALGORITHM AND HARDWARE ARCHITECTURE 审中-公开
标题翻译：初始化矢量生成算法和硬件架构
公开(公告)号：WO2005008998A1
公开(公告)日：2005-01-27
申请号：PCT/US2004/021504
申请日：2004-07-01
申请人： SINETT CORPORATION , KAYALACKAKOM, Mathew , CHOUDHURY, Abhijit, Kumar , CHIN, Ken, Chung, Kuang , AMBE, Shekhar
发明人： KAYALACKAKOM, Mathew , CHOUDHURY, Abhijit, Kumar , CHIN, Ken, Chung, Kuang , AMBE, Shekhar
IPC分类号： H04L29/06
CPC分类号： H04W12/12 , H04L49/30 , H04L63/0428 , H04L63/162 , H04L69/12 , H04W84/12
摘要： An apparatus provides an integrated single chip solution to solve a multitude of WLAN problems, and especially Switching/Bridging, and Security. In accordance with another aspect of the invention, the apparatus is able to terminate secured tunneled 802.11i, IPSec and L2TP with IPSec traffic. In accordance with a further aspect of the invention, the apparatus is also able to handle computation-intensive security-based algorithms including per packet Initialization Vector generation without significant reduction in traffic throughput. The architecture is such that it not only resolves the problems pertinent to WLAN it is also scalable and useful for building a number of useful networking products that fulfill enterprise security and all possible combinations of wired and wireless networking needs.
摘要翻译：一种设备提供集成的单芯片解决方案来解决大量的WLAN问题，特别是开关/桥接和安全。根据本发明的另一方面，该装置能够以IPSec流量终止安全的隧道化802.11i，IPSec和L2TP。根据本发明的另一方面，该装置还能够处理包括每个分组初始化向量生成的基于计算密集型的基于安全的算法，而不显着降低业务吞吐量。架构是这样的，它不仅解决了与WLAN有关的问题，它还可以扩展并且有助于构建一些实现企业安全性和有线和无线网络需求的所有可能组合的有用的网络产品。

3. 发明申请

WO2005008996A1 METHOD OF SUPPORTING MOBILITY AND SESSION PERSISTENCE ACROSS SUBNETS IN WIRED AND WIRELESS LANS 审中-公开
标题翻译：在有线和无线局域网中支持移动性和会话持续性的方法
公开(公告)号：WO2005008996A1
公开(公告)日：2005-01-27
申请号：PCT/US2004/021376
申请日：2004-07-01
申请人： SINETT CORPORATION , CHOUDHURY, Abhijit, Kumar , KAYALACKAKOM, Matthew , AMBE, Shekhar , CHIN, Ken, Chung, Kuang
发明人： CHOUDHURY, Abhijit, Kumar , KAYALACKAKOM, Matthew , AMBE, Shekhar , CHIN, Ken, Chung, Kuang
IPC分类号： H04L29/06
CPC分类号： H04W88/18 , H04L29/12009 , H04L29/12415 , H04L29/12481 , H04L61/2532 , H04L61/2557 , H04W8/04 , H04W48/16 , H04W60/04 , H04W80/04
摘要： An apparatus provides a hardware-based solution to enable roaming with session persistence within or between subnets. In accordance with a further aspect of the invention, one approach described herein is based on NAT/NAPT, while another uses aspects of Mobile IP. The architecture involved in both hardware approaches is such that it is scalable for implementation in a variety networking products that fulfill enterprise security and all possible combinations of wired and wireless networking needs, such as access points, access point concentrators, wireless-ready wiring closet or edge switches, and wireless co-processors.
摘要翻译：一种设备提供基于硬件的解决方案，以便在子网内或子网之间进行会话持久性的漫游。根据本发明的另一方面，本文描述的一种方法基于NAT / NAPT，而另一种方法使用移动IP的方面。涉及两种硬件方法的架构是这样的，它可以在满足企业安全性和有线和无线网络需求的所有可能组合的各种网络产品中实现，如接入点，接入点集中器，无线就绪配线柜或边缘交换机和无线协处理器。

4. 发明申请

WO2006086553A2 QUEUING AND SCHEDULING ARCHITECTURE FOR A UNIFIED ACCESS DEVICE SUPPORTING WIRED AND WIRELESS CLIENTS 审中-公开
标题翻译：支持有线和无线客户的统一接入设备队列和调度架构
公开(公告)号：WO2006086553A2
公开(公告)日：2006-08-17
申请号：PCT/US2006004582
申请日：2006-02-08
申请人： SINETT CORP , SESHAN GANESH , CHOUDHURY ABHIJIT K , AMBE SHEKHAR , JAIN SUDHANSHU , KAYALACKAKOM MATHEW
发明人： SESHAN GANESH , CHOUDHURY ABHIJIT K , AMBE SHEKHAR , JAIN SUDHANSHU , KAYALACKAKOM MATHEW
IPC分类号： H04L12/56
CPC分类号： H04L49/90 , H04L47/50 , H04L47/527 , H04L47/58 , H04L47/60 , H04L47/6225 , H04L49/103 , H04L49/201 , H04L49/205 , H04L49/254 , H04L49/3018 , H04L49/901 , H04L49/9021 , H04L49/9047 , H04W28/12
摘要： Systems and methods applicable to a unified wired/wireless network device are proposed to address quality of service issues and roaming support for wired and wireless clients in a unified wired/wireless network. The proposed solution can include a hierarchical scheduler and shaper mechanism that is able to flexibly support different quality of service disciplines, i.e., strict-priority, guaranteed bandwidth, deficit-round-robin, etc., to allow different levels of maximum and minimum bandwidth allocation to each user or group of users. The solution can also include a dynamic queue assignment mechanism that allows queues to be moved from one queue-group and/or port to another queue-group and/or port, without losing packets, when a wireless client roams between access points within the unified network.
摘要翻译：提出了适用于统一有线/无线网络设备的系统和方法，以解决有线和无线网络中的有线和无线客户端的服务质量问题和漫游支持。所提出的解决方案可以包括分级调度器和整形机制，其能够灵活地支持不同质量的服务规程，即严格优先级，保证带宽，不足轮询等等，以允许不同级别的最大和最小带宽分配给每个用户或一组用户。该解决方案还可以包括动态队列分配机制，当无线客户端在统一内的接入点之间漫游时，允许将队列从一个队列组和/或端口移动到另一个队列组和/或端口网络。

5. 发明申请

WO2006086554A2 METHODS AND SYSTEMS FOR INCREMENTAL CRYPTO PROCESSING OF FRAGMENTED PACKETS 审中-公开
标题翻译：用于缓冲包装加工的方法和系统
公开(公告)号：WO2006086554A2
公开(公告)日：2006-08-17
申请号：PCT/US2006/004583
申请日：2006-02-08
申请人： SINETT CORPORATION , CHOUDHURY, Abhijit, K. , SHUKLA, Himanshu , LEWIS, Adrian , AMBE, Shekhar , JAIN, Sudhanshu , KAYALACKAKOM, Mathew , MOHANAKUMARI, B.t.
发明人： CHOUDHURY, Abhijit, K. , SHUKLA, Himanshu , LEWIS, Adrian , AMBE, Shekhar , JAIN, Sudhanshu , KAYALACKAKOM, Mathew , MOHANAKUMARI, B.t.
IPC分类号： H04L9/32
CPC分类号： H04L9/0643 , H04L9/0637 , H04L9/3242 , H04L63/12
摘要： Methods and systems for providing confidentiality and/or integrity to fragmented packet transmissions, without reassembly of the fragments, across wired and wireless communications networks are disclosed. Encryption of a first fragmented packet can be performed by using an initial encryption state variable and keying material resulting in a first ciphertext fragment and a first encryption state variable. Then encryption of a second fragments packet can be performed by using the first encryption state variable and the keying material resulting in a second ciphertext fragment. Decryption of fragments can be performed in a similar manner as encryption. Computation of a message authentication code can be performed by computing a first hash state value for a first block size of bytes of a first packet fragment using an initial hash state value, and storing the first hash value and a first set of remainder bytes of the first packet fragment. The computation of the MAC continues by combining the first set of remainder bytes to a second packet fragment of the plurality of packet fragments resulting in a combined packet fragment. The MAC can then be identified using the second hash state value.
摘要翻译：公开了用于为分段分组传输提供机密性和/或完整性的方法和系统，而不需要在有线和无线通信网络上重新组合分段。可以通过使用初始加密状态变量和密钥材料来执行加密第一分段分组，从而产生第一密文片段和第一加密状态变量。然后可以通过使用第一加密状态变量和产生第二密文片段的密钥材料来执行第二分段分组的加密。碎片的解密可以以与加密类似的方式执行。可以通过使用初始散列状态值计算第一分组片段的第一块大小的字节的第一散列状态值并存储第一散列值和第一散列值的第一组剩余字节来执行消息认证码的计算第一个包片段。通过将第一组剩余字节组合到多个分组片段中的第二分组片段，导致MAC的计算，导致组合的分组片段。然后可以使用第二散列状态值来识别MAC。

6. 发明申请

WO2005083982A1 UNIFIED ARCHITECTURE FOR WIRED AND WIRELESS NETWORKS 审中-公开
标题翻译：有线和无线网络的统一架构
公开(公告)号：WO2005083982A1
公开(公告)日：2005-09-09
申请号：PCT/US2005/006025
申请日：2005-02-23
申请人： SINETT CORPORATION , AMBE, Shekhar , CHOUDHURY, Abhijit Kumar , JAIN, Sudhanshu , KAYALACKAKOM, Mathew
发明人： AMBE, Shekhar , CHOUDHURY, Abhijit Kumar , JAIN, Sudhanshu , KAYALACKAKOM, Mathew
IPC分类号： H04L29/06
CPC分类号： H04L63/101 , H04L63/164 , H04W12/08
摘要： A method and apparatus that makes it possible to have a single unified network where the devices at the edge are able to handle both wired and wireless traffic. Separate devices are not required to handle wired and wireless traffic. Instead the whole enterprise network comprises devices that are agnostic to the nature of the traffic and have all the features required by both wired and wireless traffic.
摘要翻译：一种使得可能具有单个统一网络的方法和装置，其中边缘处的设备能够处理有线和无线业务。不需要单独的设备来处理有线和无线流量。相反，整个企业网络包括与流量性质无关的设备，并具有有线和无线流量所需的所有功能。

7. 发明申请

WO2005008980A1 UNIFIED WIRED AND WIRELESS SWITCH ARCHITECTURE 审中-公开
标题翻译：统一有线和无线交换架构
公开(公告)号：WO2005008980A1
公开(公告)日：2005-01-27
申请号：PCT/US2004/021374
申请日：2004-07-01
申请人： SINETT CORPORATION , CHIN, Ken, Chung, Kuang , CHOUDHURY, Abhijit, Kumar , KAYALACKAKOM, Mathew , AMBE, Shekhar
发明人： CHIN, Ken, Chung, Kuang , CHOUDHURY, Abhijit, Kumar , KAYALACKAKOM, Mathew , AMBE, Shekhar
IPC分类号： H04L12/56
CPC分类号： H04L49/351 , H04L12/66 , H04L49/201 , H04L49/254 , H04L49/354
摘要： An apparatus provides an integrated single chip solution to solve Switching/Bridging, Security, Access Control, Bandwidth Management - Quality of Service issues, Roaming - Clean Hand off, Anticipatory Load Management, Location Tracking, Support for Revenue Generating Services - Fine grain QoS, Bandwidth Control, Billing and management. The architecture is such that it not only resolves the problems pertinent to WLAN it is also scalable and useful for building a number or useful networking products that fulfill enterprise security in all possible combinations of wired and wireless networking needs.
摘要翻译：一个设备提供集成的单芯片解决方案，以解决交换/桥接，安全，访问控制，带宽管理 - 服务质量问题，漫游 - 清除手机，预期负载管理，位置跟踪，支持收入生成服务 - 细粒度QoS，带宽控制，计费和管理。架构是这样的，它不仅解决了与WLAN有关的问题，它还可以扩展和有用，用于构建有线和无线网络需求的所有可能组合中满足企业安全性的数量或有用的网络产品。

8. 发明申请

WO0056011A2 METHOD FOR MANAGING CONGESTION IN A NETWORK SWITCH 审中-公开
标题翻译：在网络交换机中管理协议的方法
公开(公告)号：WO0056011A2
公开(公告)日：2000-09-21
申请号：PCT/US0006943
申请日：2000-03-17
申请人： BROADCOM CORP , KALKUNTE MOHAN , KADAMBI SHIRI , AMBE SHEKHAR
发明人： KALKUNTE MOHAN , KADAMBI SHIRI , AMBE SHEKHAR
IPC分类号： H04L12/18 , H04L12/42 , H04L12/46 , H04L12/54 , H04L12/707 , H04L12/709 , H04L12/741 , H04L12/747 , H04L12/801 , H04L12/803 , H04L12/833 , H04L12/851 , H04L12/861 , H04L12/863 , H04L12/879 , H04L12/931 , H04L12/935 , H04L29/06 , H04L29/08 , H04L12/00
CPC分类号： H04L47/2408 , H04L12/18 , H04L12/42 , H04L12/46 , H04L12/4625 , H04L12/4641 , H04L12/56 , H04L12/5601 , H04L12/5602 , H04L45/24 , H04L45/245 , H04L45/54 , H04L45/742 , H04L47/10 , H04L47/125 , H04L47/2441 , H04L47/2458 , H04L47/50 , H04L47/6215 , H04L47/6225 , H04L47/623 , H04L47/6255 , H04L49/205 , H04L49/30 , H04L49/3081 , H04L49/351 , H04L49/354 , H04L49/50 , H04L49/602 , H04L49/90 , H04L49/901 , H04L67/10 , H04L69/14 , H04L69/16 , H04L69/161
摘要： A method for managing congestion in a stack of network switches includes the steps of receiving an incoming packet on a first port of a network switch for transmission to a destination port and determining if the destination port of the packet is a monitored port. Thereafter, the method determines a queue status of the destination port, if the destination port is determined to be a monitored port, and preschedules transmission of the incoming packet to the destination port if the destination port is determined to be a monitored port.
摘要翻译：一种用于管理网络交换机堆叠中的拥塞的方法包括以下步骤：在网络交换机的第一端口上接收输入分组，以传输到目的端口，并确定分组的目的端口是否为被监控端口。此后，如果目的地端口被确定为被监视的端口，则该方法确定目的地端口的队列状态，并且如果目的地端口被确定为被监视的端口，则预先将传入的分组传输到目的地端口。

9. 发明申请

WO2006086554A3 METHODS AND SYSTEMS FOR INCREMENTAL CRYPTO PROCESSING OF FRAGMENTED PACKETS 审中-公开
标题翻译：用于缓冲包装加工的方法和系统
公开(公告)号：WO2006086554A3
公开(公告)日：2007-03-01
申请号：PCT/US2006004583
申请日：2006-02-08
申请人： SINETT CORP , CHOUDHURY ABHIJIT K , SHUKLA HIMANSHU , LEWIS ADRIAN , AMBE SHEKHAR , JAIN SUDHANSHU , KAYALACKAKOM MATHEW , MOHANAKUMARI B T
发明人： CHOUDHURY ABHIJIT K , SHUKLA HIMANSHU , LEWIS ADRIAN , AMBE SHEKHAR , JAIN SUDHANSHU , KAYALACKAKOM MATHEW , MOHANAKUMARI B T
IPC分类号： H04L9/32
CPC分类号： H04L9/0643 , H04L9/0637 , H04L9/3242 , H04L63/12
摘要： Methods and systems for providing confidentiality and/or integrity to fragmented packet transmissions, without reassembly of the fragments, across wired and wireless communications networks are disclosed. Encryption of a first fragmented packet can be performed by using an initial encryption state variable and keying material resulting in a first ciphertext fragment and a first encryption state variable. Then encryption of a second fragments packet can be performed by using the first encryption state variable and the keying material resulting in a second ciphertext fragment. Decryption of fragments can be performed in a similar manner as encryption. Computation of a message authentication code can be performed by computing a first hash state value for a first block size of bytes of a first packet fragment using an initial hash state value, and storing the first hash value and a first set of remainder bytes of the first packet fragment. The computation of the MAC continues by combining the first set of remainder bytes to a second packet fragment of the plurality of packet fragments resulting in a combined packet fragment. The MAC can then be identified using the second hash state value.
摘要翻译：公开了用于为分段分组传输提供机密性和/或完整性的方法和系统，而不需要在有线和无线通信网络上重新组合分段。可以通过使用初始加密状态变量和密钥材料来执行加密第一分段分组，从而产生第一密文片段和第一加密状态变量。然后可以通过使用第一加密状态变量和产生第二密文片段的密钥材料来执行第二分段分组的加密。碎片的解密可以以与加密类似的方式执行。可以通过使用初始散列状态值计算第一分组片段的第一块大小的字节的第一散列状态值并存储第一散列值和第一散列值的第一组剩余字节来执行消息认证码的计算第一个包片段。通过将第一组剩余字节组合到多个分组片段中的第二分组片段，导致MAC的计算，导致组合的分组片段。然后可以使用第二散列状态值来识别MAC。

10. 发明申请

WO2005008981A1 APPARATUS FOR LAYER 3 SWITCHING AND NETWORK ADDRESS PORT TRANSLATION 审中-公开
标题翻译：用于层3交换和网络地址端口翻译的装置
公开(公告)号：WO2005008981A1
公开(公告)日：2005-01-27
申请号：PCT/US2004/021503
申请日：2004-07-01
申请人： SINETT CORPORATION , CHOUDHURY, Abhijit, Kumar , KAYALACKAKOM, Mathew , AMBE, Shekhar , CHIN, Ken, Chung, Kuang
发明人： CHOUDHURY, Abhijit, Kumar , KAYALACKAKOM, Mathew , AMBE, Shekhar , CHIN, Ken, Chung, Kuang
IPC分类号： H04L12/56
CPC分类号： H04L63/0428 , H04L49/351 , H04L49/602 , H04L63/08 , H04L63/10 , H04W88/08 , H04W88/12
摘要： An apparatus provides a hardware-based solution to enable support for L3 switching, network address port translation and application level gateways. The architecture involved in this hardware approach is such that it is scalable for implementation in a variety networking products that fulfill enterprise security and all possible combinations of wired and wireless networking needs, such as access points, access point concentrators, wireless-ready wiring closet or edge switches, and wireless co-processors.
摘要翻译：一种设备提供了基于硬件的解决方案，以支持L3交换，网络地址端口转换和应用级网关。涉及这种硬件方法的架构使得它可以在实现企业安全的各种网络产品以及有线和无线网络需求的所有可能组合（例如接入点，接入点集中器，无线就绪配线柜或者边缘交换机和无线协处理器。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式