专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

11. 发明申请

US20080028457A1 Remote configuration of software component using proxy 有权
标题翻译：使用代理远程配置软件组件
公开(公告)号：US20080028457A1
公开(公告)日：2008-01-31
申请号：US11495412
申请日：2006-07-28
申请人： Gerardo Diaz-Cuellar , Eran Yariv , David Abzarian
发明人： Gerardo Diaz-Cuellar , Eran Yariv , David Abzarian
IPC分类号： G06F15/16
CPC分类号： H04L63/1441 , H04L63/08
摘要： A proxy service receives requests from a remote caller to configure a main service. The proxy service authenticates the caller and validates the request. The proxy service then passes the request along to the main service if the caller can be authenticated and if the request can be validated. The proxy service runs at a non-privileged level, but when the proxy service passes the request to the main service, the proxy service impersonates the caller so that the request to the main service is made at the original caller's level of privilege. The main service can block all inbound network traffic, since network requests to configure the main service are received by the proxy, which is a local object from the perspective of the main service. Additionally, the proxy can block inbound traffic other than a certain class of requests (e.g., Remote Procedure Calls).
摘要翻译：代理服务从远程主叫方接收请求以配置主服务。代理服务认证呼叫者并验证请求。代理服务然后将请求传递到主服务，如果呼叫者可以被认证，并且请求可以被验证。代理服务以非特权级别运行，但是当代理服务将请求传递给主服务时，代理服务模拟主叫方，使得对主服务的请求是在原始呼叫者的权限级别进行的。主服务可以阻止所有入站网络流量，因为从主服务的角度看，代理服务器接收到配置主服务的网络请求，这是一个本地对象。此外，代理可以阻止除特定类别的请求之外的入站流量（例如，远程过程调用）。

12. 发明授权

US08812028B2 Wireless identifiers for proximity applications 有权
标题翻译：邻近应用的无线标识符
公开(公告)号：US08812028B2
公开(公告)日：2014-08-19
申请号：US13049900
申请日：2011-03-17
申请人： Eran Yariv , Keren Master , Daniel Sitton , Roy Varshavsky , Yoram Yaacovi
发明人： Eran Yariv , Keren Master , Daniel Sitton , Roy Varshavsky , Yoram Yaacovi
IPC分类号： H04W24/00
CPC分类号： H04W4/08 , H04L67/306 , H04W4/06 , H04W4/21
摘要： A proximity matching system may use broadcast wireless identifiers transmitted by users' devices to match users with other nearby users. The identifiers may be collected by a plurality of agents, then the identifiers may be matched with pre-defined profiles to generate physically proximate users by a remote service. The group of proximate users may be provided to various applications and consumed with summarized properties or individual properties, depending on the approved privacy settings as selected by the users. In some embodiments, the broadcast wireless identifiers may be personal area network identifiers, local area network identifiers, cellular network identifiers, or other broadcast identifier. In some embodiments, the agents may not establish a peer to peer or other connection with the broadcasting device. The agents may be fixed or mobile agents, and the proximity of users may be generated through links between nearby agents in a meshed fashion.
摘要翻译：接近匹配系统可以使用用户设备发送的广播无线标识符来与其他附近用户匹配用户。标识符可以由多个代理收集，然后标识符可以与预定义的简档相匹配，以通过远程服务生成物理上最接近的用户。根据由用户选择的认可的隐私设置，可以将近似用户组提供给各种应用并且消耗具有汇总的属性或单独的属性。在一些实施例中，广播无线标识符可以是个人区域网络标识符，局域网标识符，蜂窝网络标识符或其他广播标识符。在一些实施例中，代理可能不建立与广播设备的对等或其他连接。代理可以是固定的或移动代理，并且可以通过以网格方式的附近代理之间的链接来生成用户的接近度。

13. 发明授权

US08725894B2 Transparent auto-discovery of network devices logically located between a client and server 有权
标题翻译：网络设备的透明自动发现逻辑上位于客户端和服务器之间
公开(公告)号：US08725894B2
公开(公告)日：2014-05-13
申请号：US13615844
申请日：2012-09-14
申请人： Murari Sridharan , Deepak Bansal , Eran Yariv , Ronen Barenboim , Maxim Stepin , Alexander Malvsh
发明人： Murari Sridharan , Deepak Bansal , Eran Yariv , Ronen Barenboim , Maxim Stepin , Alexander Malvsh
IPC分类号： G06F15/16
CPC分类号： H04L69/16 , H04L69/163
摘要： Discovery of intermediate network devices is performed using a technique that piggybacks upon the existing standard TCP (Transport Control Protocol) “SACK” (Selective Acknowledgment) option in a SYN/ACK packet so that discovery information may be shared between pair-wise-deployed peer intermediate devices when a TCP/IP connection (Transport Control Protocol/Internet Protocol) is first established between network endpoints using a conventional three-way handshake. Use of the SACK option is combined with another technique which comprises modifying the original 16-bit value of the TCP receive window size to a special arbitrary value to mark a SYN packet as being generated by a first peer device. The marked SYN when received by the second peer device triggers that device's discovery information to be piggybacked in the SACK option of the SYN/ACK packet. The first device then piggybacks its discovery information in the SACK option of the ACK packet which completes the three-way handshake.
摘要翻译：使用搭载SYN / ACK分组中的现有标准TCP（传输控制协议）“SACK”（选择性确认）选项的技术来执行中间网络设备的发现，使得发现信息可以在成对部署的对等体之间共享当使用传统的三次握手在网络端点之间首先建立TCP / IP连接（传输控制协议/互联网协议）时的中间设备。使用SACK选项与另一种技术相结合，其中包括将TCP接收窗口大小的原始16位值修改为特殊任意值，以将SYN分组标记为由第一对等设备生成。标记的SYN在第二个对等设备接收时触发该设备的发现信息被捎带在SYN / ACK数据包的SACK选项中。然后，第一个设备在ACK包的SACK选项中搭载其发现信息，完成三次握手。

14. 发明授权

US08341723B2 Filtering kernel-mode network communications 有权
标题翻译：过滤内核模式网络通信
公开(公告)号：US08341723B2
公开(公告)日：2012-12-25
申请号：US11823861
申请日：2007-06-28
申请人： David Abzarian , Salahuddin Khan , Eran Yariv , Gerardo Diaz Cuellar
发明人： David Abzarian , Salahuddin Khan , Eran Yariv , Gerardo Diaz Cuellar
IPC分类号： H04L29/06
CPC分类号： H04L63/10 , G06F21/74 , H04L63/02 , H04L63/0227 , H04L63/0263 , H04L63/04 , H04L63/0428 , H04L63/20
摘要： Some embodiments of the invention are directed to techniques for determining whether a process on a computer system that is sending or receiving data, or is attempting to send or receive data, with another computer system is executing in kernel mode or user mode and providing an indicator of this determination to a security engine. In some embodiments, such an indication is provided to a security engine (e.g., a firewall) that implements a security policy based at least in part on whether the sending or receiving process is in kernel mode or user mode, and filter communications based on a process' operating mode. This enables a security engine to maintain security policies of greater specificity and thus improve security of a computer system.
摘要翻译：本发明的一些实施例涉及用于确定计算机系统上正在发送或接收数据或正试图与另一计算机系统发送或接收数据的过程在内核模式或用户模式下执行的技术，并提供指示符对安全引擎的这种决定。在一些实施例中，这样的指示被提供给至少部分地基于发送或接收进程是处于内核模式还是用户模式来实现安全策略的安全引擎（例如，防火墙），以及基于过程“操作模式。这使安全引擎能够保持更高特异性的安全策略，从而提高计算机系统的安全性。

15. 发明申请

US20120310527A1 ASYMMETRIC DYNAMIC GEO-FENCING 有权
标题翻译：不对称动态地球动力学
公开(公告)号：US20120310527A1
公开(公告)日：2012-12-06
申请号：US13118495
申请日：2011-05-30
申请人： Eran Yariv , Vadim V.K. Kuper , Brian C. Beckman
发明人： Eran Yariv , Vadim V.K. Kuper , Brian C. Beckman
IPC分类号： G01C21/00 , G08B1/08
CPC分类号： G01C21/3679 , H04W4/021
摘要： Architecture that enables location based notifications (e.g., geo-fences) using standard polygons the capture of complex regions. As applied to geo-fencing, it extends geo-fencing beyond the mere representation of the virtual perimeter (fenced) area. More specifically, the architecture takes into consideration geographical and demographical features, such as the layout of the roads and streets, the types of available of transportation (e.g., car, bus, walk, biking, etc.), the traffic conditions, and the dynamic properties of a point of interest (POI) such as opening hours, total wait time, etc. More specifically, the architecture enables the dynamic modification of polygon geo-fence based on POI properties, dynamic modification of polygon geo-fence based on road/street layout, dynamic modification of polygon geo-fence based on means of transportation, dynamic modification of polygon geo-fence based on traffic conditions, dynamic modification of polygon geo-fence based on user's state, and dynamic recalculation of regions and directions tailored to user interests.
摘要翻译：使用标准多边形捕获复杂区域的基于位置的通知（例如，地理围栏）的架构。应用于地理围栏，它将地理围栏扩展到仅仅是虚拟边界（围栏）区域的表征之外。更具体地说，该体系结构考虑了地理和人口特征，例如道路和街道的布局，运输的可用类型（例如，汽车，公共汽车，步行，骑车等），交通状况和兴趣点（POI）的动态属性，如开放时间，总等待时间等。更具体地说，该架构使得能够基于POI属性对多边形地理围栏进行动态修改，基于道路的多边形地理围栏的动态修改 /街道布局，基于交通工具的多边形地理围栏的动态修改，基于交通条件的多边形地理围栏的动态修改，基于用户状态的多边形地理围栏的动态修改，以及根据用户状态的区域和方向的动态重新计算用户兴趣

16. 发明申请

US20090157866A1 TRANSPARENT AUTO-DISCOVERY OF NETWORK DEVICES LOGICALLY LOCATED BETWEEN A CLIENT AND SERVER 有权
标题翻译：网络设备的透明自动发现位于客户端和服务器之间
公开(公告)号：US20090157866A1
公开(公告)日：2009-06-18
申请号：US11958374
申请日：2007-12-17
申请人： Murari Sridharan , Deepak Bansal , Eran Yariv , Ronen Barenboim , Maxim Stepin , Alexander Malysh
发明人： Murari Sridharan , Deepak Bansal , Eran Yariv , Ronen Barenboim , Maxim Stepin , Alexander Malysh
IPC分类号： G06F15/16
CPC分类号： H04L69/16 , H04L69/163
摘要： Discovery of intermediate network devices is performed using a technique that piggybacks upon the existing standard TCP (Transport Control Protocol) “SACK” (Selective Acknowledgment) option in a SYN/ACK packet so that discovery information may be shared between pair-wise-deployed peer intermediate devices when a TCP/IP connection (Transport Control Protocol/Internet Protocol) is first established between network endpoints using a conventional three-way handshake. Use of the SACK option is combined with another technique which comprises modifying the original 16-bit value of the TCP receive window size to a special arbitrary value to mark a SYN packet as being generated by a first peer device. The marked SYN when received by the second peer device triggers that device's discovery information to be piggybacked in the SACK option of the SYN/ACK packet. The first device then piggybacks its discovery information in the SACK option of the ACK packet which completes the three-way handshake.
摘要翻译：使用搭载SYN / ACK分组中的现有标准TCP（传输控制协议）“SACK”（选择性确认）选项的技术来执行中间网络设备的发现，使得发现信息可以在成对部署的对等体之间共享当使用传统的三次握手在网络端点之间首先建立TCP / IP连接（传输控制协议/互联网协议）时的中间设备。使用SACK选项与另一种技术相结合，其中包括将TCP接收窗口大小的原始16位值修改为特殊任意值，以将SYN分组标记为由第一对等设备生成。标记的SYN在第二个对等设备接收时触发该设备的发现信息被捎带在SYN / ACK数据包的SACK选项中。然后，第一个设备在ACK包的SACK选项中搭载其发现信息，完成三次握手。

17. 发明申请

US20070136783A1 Communications traffic segregation for security purposes 有权
标题翻译：为安全起见，通信业务隔离
公开(公告)号：US20070136783A1
公开(公告)日：2007-06-14
申请号：US11297717
申请日：2005-12-08
申请人： Art Shelest , Eran Yariv , David Abzarian
发明人： Art Shelest , Eran Yariv , David Abzarian
IPC分类号： H04L9/00
CPC分类号： H04L63/1408 , H04L63/1441
摘要： Technology for applying a communications traffic security policy in which a distinct communications traffic flow is segregated based upon a security value; whereby the communications traffic security policy include one or both of a detection and an enforcement policy. The detection policy may include determining whether the segregated communications traffic flow involves malware; and, the enforcement policy may include a malware policy.
摘要翻译：基于安全值分配不同通信业务流的通信业务安全策略的应用技术; 由此通信交通安全策略包括检测和执行策略中的一个或两个。检测策略可以包括确定分离的通信业务流是否涉及恶意软件; 并且执法政策可能包括恶意软件策略。

18. 发明申请

US20070016945A1 Automatically generating rules for connection security 有权
标题翻译：自动生成连接安全性规则
公开(公告)号：US20070016945A1
公开(公告)日：2007-01-18
申请号：US11183317
申请日：2005-07-15
申请人： Charles Bassett , Eran Yariv , Ian Carbaugh , Lokesh Koppolu , Maksim Noy , Sarah Wahlert , Pradeep Bahl
发明人： Charles Bassett , Eran Yariv , Ian Carbaugh , Lokesh Koppolu , Maksim Noy , Sarah Wahlert , Pradeep Bahl
IPC分类号： G06F15/16
CPC分类号： H04L63/0263 , H04L63/20
摘要： A method and system for creating security policies for firewall and connection policies in an integrated manner is provided. The security system provides a user interface through which a user can define a security rule that specifies both a firewall policy and a connection policy. After the security rule is specified, the security system automatically generates a firewall rule and a connection rule to implement the security rule. The security system provides the firewall rule to a firewall engine that is responsible for enforcing the firewall rules and provides the connection rule to an IPsec engine that is responsible for enforcing the connection rules.
摘要翻译：提供了以综合方式为防火墙和连接策略创建安全策略的方法和系统。安全系统提供用户界面，用户可以通过该界面定义指定防火墙策略和连接策略的安全规则。指定安全规则后，安全系统自动生成防火墙规则和连接规则，实现安全规则。安全系统向防火墙引擎提供防火墙规则，该引擎负责执行防火墙规则，并向负责执行连接规则的IPsec引擎提供连接规则。

19. 发明授权

US06400811B1 System and method for off-line notifying a network user 失效
标题翻译：用于离线通知网络用户的系统和方法
公开(公告)号：US06400811B1
公开(公告)日：2002-06-04
申请号：US09587510
申请日：2000-06-05
申请人： Eran Yariv
发明人： Eran Yariv
IPC分类号： H04M1100
CPC分类号： H04L51/24 , H04Q2213/13093 , H04Q2213/13199 , H04Q2213/13213 , H04Q2213/1327 , H04Q2213/13298 , H04Q2213/13389
摘要： A system and a method for indicating to the subscriber of a network, which subscriber is not continually connected to the network host facility, of the existence of a reason for initiating such a connection. A computer device is connected to the host facility and adapted for generating an indication signal addressed to the subscriber. A system modem is interconnected between a telephone communication link and the computer device so as to be responsive to the indication signal for generating an outgoing call and transmitting thereof to a subscriber modem associated with the subscriber. A counter means is associated with at least one of the modems and responsive to the outgoing call for disabling one of the modems after a predetermined period of time
摘要翻译：用于向用户指示哪个用户不连续地连接到网络主机设施的用户指示发起这种连接的原因的存在的系统和方法。计算机设备连接到主机设施并且适于产生寻址到订户的指示信号。系统调制解调器在电话通信链路和计算机设备之间互连，以响应于用于产生呼出呼叫的指示信号并将其发送到与用户相关联的用户调制解调器。计数器装置与至少一个调制解调器相关联，并响应于在预定时间段之后禁用调制解调器之一的呼出呼叫

20. 发明授权

US09442181B2 Prediction for power conservation in a mobile device 有权
标题翻译：移动设备节能预测
公开(公告)号：US09442181B2
公开(公告)日：2016-09-13
申请号：US13551613
申请日：2012-07-18
申请人： Fadi Haik , Adi Ben-Dayan , Or Kaplan , Gilad Oren , Eran Yariv
发明人： Fadi Haik , Adi Ben-Dayan , Or Kaplan , Gilad Oren , Eran Yariv
IPC分类号： H04W24/00 , H04M1/00 , G01S5/02 , H04W52/02 , H04W4/02 , G01S5/00 , G01C21/20 , H04W4/20 , H04W64/00
CPC分类号： H04W52/0258 , G01C21/20 , G01S5/0018 , G01S5/0257 , G01S5/0278 , G01S5/0294 , H04W4/02 , H04W4/029 , H04W4/046 , H04W4/21 , H04W48/04 , H04W52/02 , H04W52/0251 , H04W52/0254 , H04W64/00 , Y02B70/30 , Y02D70/00 , Y02D70/142 , Y02D70/144 , Y02D70/146 , Y02D70/164 , Y02D70/166
摘要： Architecture that facilitates power conservation in mobile devices such as cell phones using prediction. The architecture is an algorithmic-based solution that transforms infrequently-captured geolocation data of an entity into a continuous probable location approximation. Given the location history and additional data about the recent location of the mobile device, the current location of the device can be estimated with some probability. Additionally, given the location history and additional data about the recent location of the device, the probability of the device actually being at a given point on a map is computed.
摘要翻译：支持使用预测的移动设备（如手机）实现节能的体系结构。该架构是一种基于算法的解决方案，将实体的不经常捕获的地理位置数据转换为连续可能的位置近似。给定位置历史和关于移动设备的最近位置的附加数据，可以以某种概率估计设备的当前位置。此外，考虑到位置历史和关于设备的最近位置的附加数据，计算设备实际在地图上给定点的概率。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式