专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

WO2016119600A1 DEVICES, SYSTEMS AND METHODS FOR DEBUGGING NETWORK CONNECTIVITY 审中-公开
标题翻译：用于调试网络连接的设备，系统和方法
公开(公告)号：WO2016119600A1
公开(公告)日：2016-08-04
申请号：PCT/CN2016/070984
申请日：2016-01-15
申请人： HUAWEI TECHNOLOGIES CO., LTD.
发明人： CHU, Xingjun , YU, Yinfeng Henry , YIN, Guoli , WU, Yapeng , WAN, Tao , ASHWOOD-SMITH, Peter , AL-ZOUBI, Khaldoon
IPC分类号： H04L12/26
CPC分类号： G06F11/263 , H04L41/0866 , H04L41/0869 , H04L41/142 , H04L41/5012 , H04L43/106
摘要： The devices, systems, and methods test network connectivity, where the physical network is used to provide one or more service chains connecting service appliances, including firewalls, intrusion detection systems, load balancers, network address translators, web servers, and so on. A service chain may involve multiple routing paths. The devices, systems, and methods test network connectivity test network connectivity by injecting customized echo request packets on each routing path and collecting customized echo reply packets in response. The customized echo reply packets are processed and aggregated to isolate network connectivity problems.
摘要翻译：设备，系统和方法测试网络连接，其中物理网络用于提供连接服务设备的一个或多个服务链，包括防火墙，入侵检测系统，负载平衡器，网络地址转换器，Web服务器等。服务链可能涉及多个路由路径。设备，系统和方法通过在每个路由路径上注入定制的回显请求报文来测试网络连通性，并收集定制的回应应答报文。定制的回应应答报文被处理和聚合，以隔离网络连接问题。

2. 发明申请

WO2022041798A1 METHODS, SYSTEMS, AND MEDIA FOR NETWORK MODEL CHECKING USING ENTROPY BASED BDD COMPRESSION 审中-公开
公开(公告)号：WO2022041798A1
公开(公告)日：2022-03-03
申请号：PCT/CN2021/088526
申请日：2021-04-20
申请人： HUAWEI TECHNOLOGIES CO., LTD.
发明人： SOBHANI, Ashkan , CHU, Xingjun , EL AZZAB, Mohammed , HAMADI, Salaheddine
IPC分类号： G06F11/36
摘要： Methods, systems and media for network model checking using entropy based binary decision diagram (BDD) compression are described. Two related compression techniques are described: bit level reduction to reduce the number of bits required for each network field according to its nature, and field level reduction to reduce the size of the BDD tree by finding a near-optimum ordering of the fields in the BDD space. These two techniques, separately or together, may alleviate the state explosion problem the limits application of BDD based model checking. The two techniques complement each other synergistically, particularly in the domain of computer network checking and verification.

3. 发明申请

WO2019076045A1 INTER-VRF ROUTING USING NORMAL NETWORK OPERATION MODEL 审中-公开
公开(公告)号：WO2019076045A1
公开(公告)日：2019-04-25
申请号：PCT/CN2018/087642
申请日：2018-05-21
申请人： HUAWEI TECHNOLOGIES CO., LTD.
发明人： CHU, Xingjun , YIN, Guoli
IPC分类号： H04L12/26
CPC分类号： H04L45/74 , H04L45/586
摘要： A method of routing a packet from a source associated with a first VRF function instantiated on a device to a destination associated with a second VRF function instantiated on the device. The method comprises creating a logical link between a first logical interface on the first VRF function and a second logical interface on the second VRF function. The packet is routed from the source along the first VRF function to the first logical interface. The packet is transferred from the first logical interface to the second logical interface along the logical link. The packet is transferred from the second logical interface along the second VRF function to the destination. The first VRF function can be the same as the second VRF function.

4. 发明申请

WO2016180257A1 FIREWALL AUTHENTICATION OF CONTROLLER-GENERATED INTERNET CONTROL MESSAGE PROTOCOL (ICMP) ECHO REQUESTS 审中-公开
标题翻译：控制器生成的互联网控制消息协议（ICMP）ECHO要求的防火墙认证
公开(公告)号：WO2016180257A1
公开(公告)日：2016-11-17
申请号：PCT/CN2016/080902
申请日：2016-05-03
申请人： HUAWEI TECHNOLOGIES CO., LTD.
发明人： YU, Yinfeng , AKHAVAIN MOHAMMADI, Mehdi Arashmid , WAN, Tao , YIN, Guoli , CHU, Xingjun , AL-ZOUBI, Khaldoon , WU, Yapeng
IPC分类号： H04L29/06
CPC分类号： H04L63/083 , H04L41/28 , H04L43/50 , H04L63/0227 , H04L63/0236 , H04L63/029 , H04L63/08
摘要： A method implemented by a network firewall, comprising obtaining a first authentication token for a network test, receiving a test request message for performing the network test on a network element (NE) connected to the network firewall, authenticating the test request message by determining whether the test request message includes a second authentication token that matches the first authentication token, and granting the network test on the NE when the second authentication token matches the first authentication token.
摘要翻译：一种由网络防火墙实现的方法，包括获得用于网络测试的第一认证令牌，在连接到网络防火墙的网元（NE）上接收用于执行网络测试的测试请求消息，通过确定是否确定测试请求消息测试请求消息包括与第一认证令牌匹配的第二认证令牌，并且当第二认证令牌与第一认证令牌匹配时，授予网络上的网络测试。

5. 发明申请

WO2016131402A1 MEDIA ACCESS CONTROL ADDRESS RESOLUTION USING INTERNET PROTOCOL ADDRESSES 审中-公开
标题翻译：使用互联网协议地址的媒体访问控制地址解析
公开(公告)号：WO2016131402A1
公开(公告)日：2016-08-25
申请号：PCT/CN2016/073698
申请日：2016-02-05
申请人： HUAWEI TECHNOLOGIES CO., LTD.
发明人： WAN, Tao , WU, Yapeng , CHU, Xingjun , ASHWOOD-SMITH, Peter , YIN, Guoli
IPC分类号： H04L12/743 , H04L29/12
CPC分类号： H04L45/74 , H04L45/66 , H04L61/103 , H04L61/2015 , H04L61/6022
摘要： An address resolution method, comprising obtaining an Internet Protocol (IP) address for a destination network node, computing a Media Access Control (MAC) address for the destination network node using a mapping function and the IP address for the destination network node, and sending data traffic using the MAC address computed for the destination network node.
摘要翻译：一种地址解析方法，包括获取目的网络节点的因特网协议（IP）地址，使用映射功能和目的网络节点的IP地址计算目的地网络节点的媒体访问控制（MAC）地址，以及发送使用为目的网络节点计算的MAC地址的数据流量。

6. 发明申请

WO2016119747A1 SYSTEM AND METHOD FOR COMMUNICATING IN AN SSL VPN 审中-公开
标题翻译：用于在SSL VPN中通信的系统和方法
公开(公告)号：WO2016119747A1
公开(公告)日：2016-08-04
申请号：PCT/CN2016/072791
申请日：2016-01-29
申请人： HUAWEI TECHNOLOGIES CO., LTD.
发明人： WAN, Tao , CHU, Xingjun , WU, Yapeng , YIN, Guoli
IPC分类号： H04L12/773 , H04L12/46 , H04L29/06 , H04L29/12
CPC分类号： H04L61/2007 , H04L61/2521 , H04L61/2592
摘要： A virtual Internet Protocol (IP) address is assigned to a client device having a client IP address associated therewith. The virtual IP address is then mapped to the client IP address and to an identifier of a Secure Socket Layer (SSL) Virtual Private Network (VPN) tunnel. An incoming packet received through the SSL VPN tunnel and destined to a server device has the client IP address as its source address, which is in turn rewritten with the virtual IP address mapped to the client IP address, resulting in a modified incoming packet that is sent to the server device. An outgoing packet received from the server device for transmission to the client device has the virtual IP address as its destination address, which is in turn rewritten with the client IP address mapped to the virtual IP address, resulting in a modified outgoing packet that is forwarded into the tunnel.
摘要翻译：将虚拟因特网协议（IP）地址分配给具有与其相关联的客户端IP地址的客户端设备。然后将虚拟IP地址映射到客户端IP地址和安全套接层（SSL）虚拟专用网（VPN）隧道的标识符。通过SSL VPN隧道接收并发往服务器设备的传入数据包，其客户端IP地址作为其源地址，然后将其映射到客户端IP地址的虚拟IP地址重写，导致修改的传入数据包为发送到服务器设备。从服务器装置接收到的用于传送到客户端设备的输出数据包，具有虚拟IP地址作为其目的地址，然后将该映射到虚拟IP地址的客户端IP地址重写，导致转发的修改后的出站包进入隧道。

7. 发明申请

WO2016131401A1 SERVICE CHAINING USING SOURCE ROUTING 审中-公开
标题翻译：使用源路由的服务链
公开(公告)号：WO2016131401A1
公开(公告)日：2016-08-25
申请号：PCT/CN2016/073696
申请日：2016-02-05
申请人： HUAWEI TECHNOLOGIES CO., LTD.
发明人： WAN, Tao , ASHWOOD-SMITH, Peter , AKHAVAIN MOHAMMADI, Mehdi Arashmid , WU, Yapeng , CHU, Xingjun , YIN, Guoli
IPC分类号： H04L29/08 , H04L12/721
CPC分类号： H04L45/34 , H04L45/306
摘要： A service chaining method comprising receiving a source routed data packet, wherein the source routed data packet comprises a destination address and identifies a plurality of next-hops along a service chain path, identifying a next-hop for the source routed data packet using the plurality of next-hops, determining whether the next-hop is source routing capable, setting the destination address of the source routed data packet in accordance with the determination, wherein the destination address is set to the next-hop when the next-hop is source routing capable, and wherein the destination address is set to a next downstream network node that is source routing capable when the next-hop is not source routing capable, and forwarding the source routed data packet to the next-hop.
摘要翻译：一种服务链接方法，包括接收源路由数据分组，其中所述源路由数据分组包括目的地地址，并且沿着服务链路径标识多个下一跳，使用所述多个标识标识所述源路由数据分组的下一跳确定下一跳是否能够进行源路由功能，根据确定设置源路由数据包的目的地址，其中当下一跳为源时，将目的地址设置为下一跳路由能力，并且其中目的地址被设置为当下一跳不是源路由能力时能够进行源路由功能的下一个下游网络节点，并且将源路由数据分组转发到下一跳。

8. 发明申请

WO2016119590A1 NETWORK VIRTUALIZATION FOR NETWORK INFRASTRUCTURE 审中-公开
标题翻译：网络基础设施网络虚拟化
公开(公告)号：WO2016119590A1
公开(公告)日：2016-08-04
申请号：PCT/CN2016/070671
申请日：2016-01-12
申请人： HUAWEI TECHNOLOGIES CO., LTD.
发明人： CHU, Xingjun , YIN, Guoli , WU, Yapeng , WAN, Tao , ASHWOOD-SMITH, Peter , YU, Yinfeng , AL-ZOUBI, Khaldoon
IPC分类号： H04L12/28
CPC分类号： H04L41/12 , H04L41/5054
摘要： A service description may be used in network virtualization in order to specify requirements of an application. In order to provide network virtualization for generic networking components, including legacy networking components, the service description is mapped to a logical network implementation and then subsequently mapped to a physical implementation.
摘要翻译：可以在网络虚拟化中使用服务描述，以便指定应用的要求。为了为通用网络组件（包括传统网络组件）提供网络虚拟化，将服务描述映射到逻辑网络实现，然后映射到物理实现。

9. 发明申请

WO2015169244A1 SYSTEM AND METHOD FOR LOOP SUPPRESSION IN TRANSIT NETWORKS 审中-公开
标题翻译：用于在网络中进行环路抑制的系统和方法
公开(公告)号：WO2015169244A1
公开(公告)日：2015-11-12
申请号：PCT/CN2015/078493
申请日：2015-05-07
申请人： HUAWEI TECHNOLOGIES CO., LTD.
发明人： CHU, Xingjun , ASHWOOD-SMITH, Peter , WU, Yapeng , YIN, Guoli
IPC分类号： H04L12/28
CPC分类号： H04L45/50 , H04L12/4633 , H04L45/122 , H04L45/18 , H04L45/20 , H04L49/354
摘要： An embodiment method of loop suppression in a layer-two transit network with multiprotocol label switching (MPLS) encapsulation includes receiving a packet at a provider edge (PE) router for the layer-two transit network. The packet is stored in a non-transitory memory on the PE router. The packet is stored according to a packet data structure having an MPLS label field and a layer-two header. A time-to-live (TTL) attribute is then determined for the packet. The TTL attribute is written to the non-transitory memory in the MPLS label field. The packet is then routed according to information in the layer-two header.
摘要翻译：具有多协议标签交换（MPLS）封装的二层转接网络中的环路抑制的实施方式包括：在用于二层转接网络的提供商边缘（PE）路由器处接收分组。该数据包存储在PE路由器上的非暂存内存中。分组根据具有MPLS标签字段和二层报头的分组数据结构来存储。然后为分组确定生存时间（TTL）属性。 TTL属性被写入MPLS标签字段中的非暂存存储器。然后根据第二层头部中的信息路由该分组。

10. 发明申请

WO2015127851A1 SYSTEM AND METHOD FOR CREATING SERVICE CHAINS AND VIRTUAL NETWORKS IN THE CLOUD 审中-公开
标题翻译：在云中创建服务链和虚拟网络的系统和方法
公开(公告)号：WO2015127851A1
公开(公告)日：2015-09-03
申请号：PCT/CN2015/072420
申请日：2015-02-06
申请人： HUAWEI TECHNOLOGIES CO., LTD.
发明人： WAN, Tao , YIN, Guoli , WU, Yapeng , ASHWOOD-SMITH, Peter , CHU, Xingjun
IPC分类号： H04L12/915
CPC分类号： H04L41/145 , H04L41/12 , H04L41/22
摘要： Embodiments are provided herein for creating virtual networks with service chains, such as n-tier networks, in the cloud. In an embodiment, a network diagram for a virtual network is received from a user via a graphical user interface. The network diagram comprises elements that represent virtual or physical network components. The network components include switches, routers, firewalls, links, service appliances, virtual machines, servers, or other network components. Upon successfully validating the network diagram, via a validation step, the network diagram is compiled into application programming interface (API) calls ready for execution. The executed APIs are used to establish the virtual network on a physical network infrastructure. The virtual network comprises virtual network components corresponding to the elements or the network diagram.
摘要翻译：本文提供的实施例用于在云中创建具有诸如n层网络的服务链的虚拟网络。在一个实施例中，经由图形用户界面从用户接收虚拟网络的网络图。网络图包括表示虚拟或物理网络组件的元素。网络组件包括交换机，路由器，防火墙，链路，服务设备，虚拟机，服务器或其他网络组件。在成功验证网络图后，通过验证步骤将网络图编译成应用程序编程接口（API）调用准备执行。执行的API用于在物理网络基础架构上建立虚拟网络。虚拟网络包括对应于元素或网络图的虚拟网络组件。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式