专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

WO2006086554A2 METHODS AND SYSTEMS FOR INCREMENTAL CRYPTO PROCESSING OF FRAGMENTED PACKETS 审中-公开
标题翻译：用于缓冲包装加工的方法和系统
公开(公告)号：WO2006086554A2
公开(公告)日：2006-08-17
申请号：PCT/US2006/004583
申请日：2006-02-08
申请人： SINETT CORPORATION , CHOUDHURY, Abhijit, K. , SHUKLA, Himanshu , LEWIS, Adrian , AMBE, Shekhar , JAIN, Sudhanshu , KAYALACKAKOM, Mathew , MOHANAKUMARI, B.t.
发明人： CHOUDHURY, Abhijit, K. , SHUKLA, Himanshu , LEWIS, Adrian , AMBE, Shekhar , JAIN, Sudhanshu , KAYALACKAKOM, Mathew , MOHANAKUMARI, B.t.
IPC分类号： H04L9/32
CPC分类号： H04L9/0643 , H04L9/0637 , H04L9/3242 , H04L63/12
摘要： Methods and systems for providing confidentiality and/or integrity to fragmented packet transmissions, without reassembly of the fragments, across wired and wireless communications networks are disclosed. Encryption of a first fragmented packet can be performed by using an initial encryption state variable and keying material resulting in a first ciphertext fragment and a first encryption state variable. Then encryption of a second fragments packet can be performed by using the first encryption state variable and the keying material resulting in a second ciphertext fragment. Decryption of fragments can be performed in a similar manner as encryption. Computation of a message authentication code can be performed by computing a first hash state value for a first block size of bytes of a first packet fragment using an initial hash state value, and storing the first hash value and a first set of remainder bytes of the first packet fragment. The computation of the MAC continues by combining the first set of remainder bytes to a second packet fragment of the plurality of packet fragments resulting in a combined packet fragment. The MAC can then be identified using the second hash state value.
摘要翻译：公开了用于为分段分组传输提供机密性和/或完整性的方法和系统，而不需要在有线和无线通信网络上重新组合分段。可以通过使用初始加密状态变量和密钥材料来执行加密第一分段分组，从而产生第一密文片段和第一加密状态变量。然后可以通过使用第一加密状态变量和产生第二密文片段的密钥材料来执行第二分段分组的加密。碎片的解密可以以与加密类似的方式执行。可以通过使用初始散列状态值计算第一分组片段的第一块大小的字节的第一散列状态值并存储第一散列值和第一散列值的第一组剩余字节来执行消息认证码的计算第一个包片段。通过将第一组剩余字节组合到多个分组片段中的第二分组片段，导致MAC的计算，导致组合的分组片段。然后可以使用第二散列状态值来识别MAC。

2. 发明申请

WO2006116195A1 METHODS AND SYSTEMS FOR FRAGMENTATION AND REASSEMBLY FOR IP TUNNELS 审中-公开
标题翻译： IP隧道拆分和重组的方法与系统
公开(公告)号：WO2006116195A1
公开(公告)日：2006-11-02
申请号：PCT/US2006/015261
申请日：2006-04-20
申请人： SINETT CORPORATION , CHOUDHURY, Abhijit, K. , AMBE, Shekhar , LIN, Victor , SHUKLA, Himanshu , JAIN, Sudhanshu , MANRAL, Vishwas
发明人： CHOUDHURY, Abhijit, K. , AMBE, Shekhar , LIN, Victor , SHUKLA, Himanshu , JAIN, Sudhanshu , MANRAL, Vishwas
IPC分类号： H04L29/06 , H04L12/46
CPC分类号： H04L69/16 , H04L12/4633 , H04L49/90 , H04L49/9094 , H04L63/0428 , H04L69/166 , H04L69/168 , H04L2212/00
摘要： A novel flow-through architecture for fragmentation and reassembly of tunnel packets in network devices is presented. The fragmentation and reassembly of tunneled packets are handled in the hardware pipeline to achieve line-rate processing of the traffic flow without the need for additional store and forward operations typically provided by a host processor or a co-processor. In addition, the hardware pipeline may perform fragmentation and reassembly of packets using encrypted tunnels by performing segment-by-segment crypto. A network device implementing fragment reassembly can include an ingress hardware pipeline that reassembles fragmented packets between a media access control (MAC) of the device and an output packet memory of the device, where the incoming fragmented packets can be encrypted and/or tunneled. A network device implementing packet fragmentation can include an egress hardware pipeline that fragments packets between an input packet memory of the device and the MAC, where the outgoing fragments can be encrypted and/or tunneled.
摘要翻译：提出了一种用于网络设备中隧道数据包的分段和重新组合的新型流通架构。隧道化分组的分段和重新组合在硬件流水线中被处理以实现业务流的线速处理，而不需要通常由主处理器或协处理器提供的附加存储和转发操作。此外，硬件流水线可以通过执行逐段加密来执行使用加密隧道的分组的分段和重组。实现片段重组的网络设备可以包括入口硬件流水线，其重新组装设备的媒体访问控制（MAC）与设备的输出分组存储器之间的分段分组，其中输入的分段分组可以被加密和/或隧道传送。实现分组分片的网络设备可以包括在设备的输入分组存储器与MAC之间分段分组的出口硬件流水线，其中输出分段可以被加密和/或隧道化。

3. 发明申请

WO2006086554A3 METHODS AND SYSTEMS FOR INCREMENTAL CRYPTO PROCESSING OF FRAGMENTED PACKETS 审中-公开
标题翻译：用于缓冲包装加工的方法和系统
公开(公告)号：WO2006086554A3
公开(公告)日：2007-03-01
申请号：PCT/US2006004583
申请日：2006-02-08
申请人： SINETT CORP , CHOUDHURY ABHIJIT K , SHUKLA HIMANSHU , LEWIS ADRIAN , AMBE SHEKHAR , JAIN SUDHANSHU , KAYALACKAKOM MATHEW , MOHANAKUMARI B T
发明人： CHOUDHURY ABHIJIT K , SHUKLA HIMANSHU , LEWIS ADRIAN , AMBE SHEKHAR , JAIN SUDHANSHU , KAYALACKAKOM MATHEW , MOHANAKUMARI B T
IPC分类号： H04L9/32
CPC分类号： H04L9/0643 , H04L9/0637 , H04L9/3242 , H04L63/12
摘要： Methods and systems for providing confidentiality and/or integrity to fragmented packet transmissions, without reassembly of the fragments, across wired and wireless communications networks are disclosed. Encryption of a first fragmented packet can be performed by using an initial encryption state variable and keying material resulting in a first ciphertext fragment and a first encryption state variable. Then encryption of a second fragments packet can be performed by using the first encryption state variable and the keying material resulting in a second ciphertext fragment. Decryption of fragments can be performed in a similar manner as encryption. Computation of a message authentication code can be performed by computing a first hash state value for a first block size of bytes of a first packet fragment using an initial hash state value, and storing the first hash value and a first set of remainder bytes of the first packet fragment. The computation of the MAC continues by combining the first set of remainder bytes to a second packet fragment of the plurality of packet fragments resulting in a combined packet fragment. The MAC can then be identified using the second hash state value.
摘要翻译：公开了用于为分段分组传输提供机密性和/或完整性的方法和系统，而不需要在有线和无线通信网络上重新组合分段。可以通过使用初始加密状态变量和密钥材料来执行加密第一分段分组，从而产生第一密文片段和第一加密状态变量。然后可以通过使用第一加密状态变量和产生第二密文片段的密钥材料来执行第二分段分组的加密。碎片的解密可以以与加密类似的方式执行。可以通过使用初始散列状态值计算第一分组片段的第一块大小的字节的第一散列状态值并存储第一散列值和第一散列值的第一组剩余字节来执行消息认证码的计算第一个包片段。通过将第一组剩余字节组合到多个分组片段中的第二分组片段，导致MAC的计算，导致组合的分组片段。然后可以使用第二散列状态值来识别MAC。

4. 发明申请

WO2007018852A1 QUEUING AND SCHEDULING ARCHITECTURE USING BOTH INTERNAL AND EXTERNAL PACKET MEMORY FOR NETWORK APPLIANCES 审中-公开
标题翻译：使用网络设备的两个内部和外部分组存储器进行排队和调度架构
公开(公告)号：WO2007018852A1
公开(公告)日：2007-02-15
申请号：PCT/US2006/026306
申请日：2006-07-06
申请人： SINETT CORPORATION , CHOUDHURY, Abhijit, K. , AMBE, Shekhar , SHUKLA, Himanshu , MANSHARAMANI, Deepak , LIN, Victor
发明人： CHOUDHURY, Abhijit, K. , AMBE, Shekhar , SHUKLA, Himanshu , MANSHARAMANI, Deepak , LIN, Victor
IPC分类号： H04L12/56
CPC分类号： H04L49/90
摘要： Enhanced memory management schemes are presented to extend the flexibility of using either internal or external packet memory within the same network device. In the proposed schemes, the user can choose either static or dynamic schemes, both or which are capable of using both internal and external memory, depending on the deployment scenario and applications. This gives the user flexible choices when building unified wired and wireless networks that are either low-cost or feature-rich, or a combination of both. A method for buffering packets in a network device, and a network device including processing logic capable of performing the method are presented. The method includes initializing a plurality of output queues, determining to which of the plurality of output queues a packet arriving at the network device is destined, storing the packet in one or more buffers, where the one or more buffers is selected from a packet memory group including an internal packet memory and an external packet memory, and enqueuing the one or more buffers to the destined output queue.
摘要翻译：提出了增强的内存管理方案，以扩展在同一网络设备内使用内部或外部分组存储器的灵活性。在所提出的方案中，用户可以选择静态方案或动态方案，或者根据部署方案和应用程序，可以同时使用内部和外部内存。这样可以在构建低成本或功能丰富的统一有线和无线网络或两者的组合时灵活选择。提出了一种用于在网络设备中缓存分组的方法，以及包括能够执行该方法的处理逻辑的网络设备。该方法包括初始化多个输出队列，确定到达网络设备的分组到达的多个输出队列中的哪一个是目的地，将分组存储在一个或多个缓冲器中，其中从分组存储器中选择一个或多个缓冲器组包括内部分组存储器和外部分组存储器，并且将一个或多个缓冲器排队到目的地输出队列。

5. 发明申请

WO2006086553A3 QUEUING AND SCHEDULING ARCHITECTURE FOR A UNIFIED ACCESS DEVICE SUPPORTING WIRED AND WIRELESS CLIENTS 审中-公开
公开(公告)号：WO2006086553A3
公开(公告)日：2006-08-17
申请号：PCT/US2006/004582
申请日：2006-02-08
申请人： SINETT CORPORATION , SESHAN, Ganesh , CHOUDHURY, Abhijit, K. , AMBE, Shekhar , JAIN, Sudhanshu , KAYALACKAKOM, Mathew
发明人： SESHAN, Ganesh , CHOUDHURY, Abhijit, K. , AMBE, Shekhar , JAIN, Sudhanshu , KAYALACKAKOM, Mathew
IPC分类号： H04L12/56
摘要： Systems and methods applicable to a unified wired/wireless network device are proposed to address quality of service issues and roaming support for wired and wireless clients in a unified wired/wireless network. The proposed solution can include a hierarchical scheduler and shaper mechanism that is able to flexibly support different quality of service disciplines, i.e., strict-priority, guaranteed bandwidth, deficit-round-robin, etc., to allow different levels of maximum and minimum bandwidth allocation to each user or group of users. The solution can also include a dynamic queue assignment mechanism that allows queues to be moved from one queue-group and/or port to another queue-group and/or port, without losing packets, when a wireless client roams between access points within the unified network.

6. 发明申请

WO2006086553A2 QUEUING AND SCHEDULING ARCHITECTURE FOR A UNIFIED ACCESS DEVICE SUPPORTING WIRED AND WIRELESS CLIENTS 审中-公开
标题翻译：支持有线和无线客户的统一接入设备队列和调度架构
公开(公告)号：WO2006086553A2
公开(公告)日：2006-08-17
申请号：PCT/US2006004582
申请日：2006-02-08
申请人： SINETT CORP , SESHAN GANESH , CHOUDHURY ABHIJIT K , AMBE SHEKHAR , JAIN SUDHANSHU , KAYALACKAKOM MATHEW
发明人： SESHAN GANESH , CHOUDHURY ABHIJIT K , AMBE SHEKHAR , JAIN SUDHANSHU , KAYALACKAKOM MATHEW
IPC分类号： H04L12/56
CPC分类号： H04L49/90 , H04L47/50 , H04L47/527 , H04L47/58 , H04L47/60 , H04L47/6225 , H04L49/103 , H04L49/201 , H04L49/205 , H04L49/254 , H04L49/3018 , H04L49/901 , H04L49/9021 , H04L49/9047 , H04W28/12
摘要： Systems and methods applicable to a unified wired/wireless network device are proposed to address quality of service issues and roaming support for wired and wireless clients in a unified wired/wireless network. The proposed solution can include a hierarchical scheduler and shaper mechanism that is able to flexibly support different quality of service disciplines, i.e., strict-priority, guaranteed bandwidth, deficit-round-robin, etc., to allow different levels of maximum and minimum bandwidth allocation to each user or group of users. The solution can also include a dynamic queue assignment mechanism that allows queues to be moved from one queue-group and/or port to another queue-group and/or port, without losing packets, when a wireless client roams between access points within the unified network.
摘要翻译：提出了适用于统一有线/无线网络设备的系统和方法，以解决有线和无线网络中的有线和无线客户端的服务质量问题和漫游支持。所提出的解决方案可以包括分级调度器和整形机制，其能够灵活地支持不同质量的服务规程，即严格优先级，保证带宽，不足轮询等等，以允许不同级别的最大和最小带宽分配给每个用户或一组用户。该解决方案还可以包括动态队列分配机制，当无线客户端在统一内的接入点之间漫游时，允许将队列从一个队列组和/或端口移动到另一个队列组和/或端口网络。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式