专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

71. 发明授权

US10791099B2 Secure session capability using public-key cryptography without access to the private key 有权
公开(公告)号：US10791099B2
公开(公告)日：2020-09-29
申请号：US16159437
申请日：2018-10-12
申请人： CloudFlare, Inc.
发明人： Sébastien Andreas Henry Pahl , Matthieu Philippe François Tourne , Piotr Sikora , Ray Raymond Bejjani , Dane Orion Knecht , Matthew Browning Prince , John Graham-Cumming , Lee Hahn Holloway , Albertus Strasheim
IPC分类号： H04L29/06 , H04L9/08 , G06F21/33 , H04L9/32
摘要： A first server receives a set of cryptographic parameters from a second server. The set of cryptographic parameters is received from the second server as part of a secure session establishment between a client device and the second server. The first server accesses a private key that is not stored on the second server. The first server signs the set of cryptographic parameters using the private key. The first server transmits the signed set of cryptographic parameters to the second server. The first server receives, from the second server, a request to generate a premaster secret using a value generated by the second server that is included in the request and generates the premaster secret. The first server transmits the premaster secret to the second server for use in the secure session establishment between the client device and the second server.

72. 发明授权

US10608983B2 Registering for internet-based proxy services 有权
公开(公告)号：US10608983B2
公开(公告)日：2020-03-31
申请号：US15666412
申请日：2017-08-01
申请人： CLOUDFLARE, INC.
发明人： Matthew Browning Prince , Lee Hahn Holloway , Michelle Marie Zatlyn
IPC分类号： H04L29/12 , H04L29/08 , H04L29/06 , H04L29/14 , H04L12/24
摘要： A domain name is received from a customer. DNS is queried for multiple possible subdomains of the domain. For each subdomain that resolves, information about that subdomain's corresponding resource record is stored in a zone file that also includes a resource record for the domain name. The zone file is presented to the customer. A designation from the customer of which of the resource records are to point to an IP address of a proxy server is received. The resource records are modified according to the input of the customer and the zone file is propagated including the modified resource records.

73. 发明授权

US10574690B2 Identifying a denial-of-service attack in a cloud-based proxy service 有权
公开(公告)号：US10574690B2
公开(公告)日：2020-02-25
申请号：US15489421
申请日：2017-04-17
申请人： CloudFlare, Inc.
发明人： Lee Hahn Holloway , Srikanth N. Rao , Matthew Browning Prince , Matthieu Philippe François Tourne , Ian Gerald Pye , Ray Raymond Bejjani , Terry Paul Rodery, Jr.
IPC分类号： H04L29/06 , G06F21/55 , G06F21/57
摘要： A cloud-based proxy service identifies a denial-of-service (DoS) attack including determining that there is a potential DoS attack being directed to an IP address of the cloud-based proxy service; and responsive to determining that there are a plurality of domains that resolve to that IP address, identifying the one of the plurality of domains that is the target of the DoS attack. The domain that is under attack is identified by scattering the plurality of domains to resolve to different IP addresses, where a result of the scattering is that each of those domains resolves to a different IP address, and identifying one of those plurality of domains as the target of the DoS attack by determining that there is an abnormally high amount of traffic being directed to the IP address in which that domain resolves.

74. 发明申请

US20190303415A1 METHODS AND APPARATUSES FOR PROVIDING INTERNET-BASED PROXY SERVICES 审中-公开
公开(公告)号：US20190303415A1
公开(公告)日：2019-10-03
申请号：US16363835
申请日：2019-03-25
申请人： CLOUDFLARE, INC.
发明人： Lee Hahn Holloway , Matthew Browning Prince , Ian Gerald Pye , Matthieu Philippe François Tourne , Michelle Marie Zatlyn
IPC分类号： G06F16/958 , G06F16/95 , H04L29/08 , G06F21/00 , H04L12/911 , H04L29/06 , H04L12/58 , G06F17/22 , G06Q30/02 , G06Q10/10 , H04L29/12 , G06F15/16 , G06F21/55 , H04L29/14
摘要： A proxy server receives, from multiple visitors of multiple client devices, a plurality of requests for actions to be performed on identified network resources belonging to a plurality of origin servers. At least some of the origin servers belong to different domains and are owned by different entities. The proxy server and the origin servers are also owned by different entities. The proxy server analyzes each request it receives to determine whether that request poses a threat and whether the visitor belonging to the request poses a threat. The proxy server blocks those requests from visitors that pose a threat or in which the request itself poses a threat. The proxy server transmits the requests that are not a threat and is from a visitor that is not a threat to the appropriate origin server.

75. 发明授权

US10305871B2 Dynamically serving digital certificates based on secure session properties 有权
公开(公告)号：US10305871B2
公开(公告)日：2019-05-28
申请号：US14964491
申请日：2015-12-09
申请人： CLOUDFLARE, INC.
发明人： Nicholas Thomas Sullivan , Lee Hahn Holloway , Piotr Sikora , Ryan Lackey , John Graham-Cumming , Dane Orion Knecht , Patrick Donahue , Zi Lin
IPC分类号： H04L29/06 , G06F21/33
摘要： A server receives a request from a client to establish a secure session. The server analyzes the request to determine a set of one or more properties of the request. The server selects, based at least in part on the determined set of properties, one of multiple certificates for a hostname of the server, where each of the certificates is signed using a different signature and hash algorithm pair. The server returns the selected certificate to the client.

76. 发明授权

US10237365B2 Method and apparatus for automatically optimizing the loading of images in a cloud-based proxy service 有权
公开(公告)号：US10237365B2
公开(公告)日：2019-03-19
申请号：US14818277
申请日：2015-08-04
申请人： CLOUDFLARE, INC.
发明人： Christopher Stephen Joel , Lee Hahn Holloway , Dane Orion Knecht , Albertus Strasheim
IPC分类号： H04L29/08 , G06F17/24 , G06F17/22 , H04L29/06 , G06F17/30
摘要： A request for a web page is received at a proxy server. The request originates from a client network application of a client device. The requested web page includes multiple references to multiple images. The proxy server retrieves the requested web page. The proxy server modifies code of the retrieved web page such that the client network application will not, for each one of those images, initially request those images when parsing the page. The proxy server also adds code to the retrieved web page that, when executed by the client network application, causes at least two of the images to be requested with a single request. The proxy server transmits the modified web page to the client device.

77. 发明授权

US10129224B2 Secure session capability using public-key cryptography without access to the private key 有权
公开(公告)号：US10129224B2
公开(公告)日：2018-11-13
申请号：US15413187
申请日：2017-01-23
申请人： CloudFlare, Inc.
发明人： Sébastien Andreas Henry Pahl , Matthieu Phillippe François Tourne , Piotr Sikora , Ray Raymond Bejjani , Dane Orion Knecht , Matthew Browning Prince , John Graham-Cumming , Lee Hahn Holloway , Albertus Strasheim
IPC分类号： H04L29/06 , H04L9/08 , G06F21/33 , H04L9/32
摘要： A server establishes a secure session with a client device where a private key used in the handshake when establishing the secure session is stored in a different server. During the handshake procedure, the server receives a premaster secret that has been encrypted using a public key bound with a domain for which the client device is attempting to establish a secure session with. The server transmits the encrypted premaster secret to another server for decryption. The server receives the decrypted premaster secret and continues with the handshake procedure including generating a master secret from the decrypted premaster secret and generating one or more session keys that are used in the secure session for encrypting and decrypting communication between the client device and the server.

78. 发明授权

US10069787B2 Domain name system CNAME record management 有权
公开(公告)号：US10069787B2
公开(公告)日：2018-09-04
申请号：US14676631
申请日：2015-04-01
申请人： CLOUDFLARE, INC.
发明人： Lee Hahn Holloway , Ray Raymond Bejjani , Dane Orion Knecht , Matthew Browning Prince , John Graham-Cumming
IPC分类号： G06F15/173 , H04L29/12
摘要： A method and apparatus for managing CNAME records such that CNAME records at the root domain are supported while complying with the RFC specification (an IP address is returned for any Address query for the root record). The authoritative DNS infrastructure acts as a DNS resolver where if there is a CNAME at the root record, rather than returning that record directly, a recursive lookup is used to follow the CNAME chain until an A record is located. The address associated with the A record is then returned. This effectively “flattens” the CNAME chain. This complies with the requirements of the DNS specification and is invisible to any service that interacts with the DNS server.

79. 发明申请

US20180007085A1 Mitigating a Denial-of-Service Attack in a Cloud-Based Proxy Service 审中-公开
公开(公告)号：US20180007085A1
公开(公告)日：2018-01-04
申请号：US15603256
申请日：2017-05-23
申请人： CLOUDFLARE, INC.
发明人： Lee Hahn Holloway , Srikanth N. Rao , Matthew Browning Prince , Matthieu Philippe François Tourne , Ian Gerald Pye , Ray Raymond Bejjani , Terry Paul Rodery, JR.
IPC分类号： H04L29/06
CPC分类号： H04L63/1458 , G06F21/552 , G06F21/577 , H04L63/0281 , H04L63/1408 , H04L63/1416 , H04L63/1425 , H04L63/1433 , H04L63/1466 , H04L63/20
摘要： A proxy server in a cloud-based proxy service receives a message that indicates that a domain, whose traffic passes through the proxy server, may be under a denial-of-service (DoS) attack. The proxy server enables a rule for the domain that specifies that future requests for resources at that domain are subject to at least initially passing a set of one or more challenges. In response to receiving a request for a resource of that domain from a visitor, the proxy server presents the set of challenges that, if not passed, are an indication that that the visitor is part of the DoS attack. If the set of challenges are passed, the request may be processed. If the set of challenges are not passed, the request may be dropped.

80. 发明申请

US20170012967A1 Certificate Authority Framework 审中-公开
标题翻译：证书颁发机构框架
公开(公告)号：US20170012967A1
公开(公告)日：2017-01-12
申请号：US15206118
申请日：2016-07-08
申请人： CLOUDFLARE, INC.
发明人： Lee Hahn Holloway , Nicholas Thomas Sullivan
IPC分类号： H04L29/06
摘要： A server receives a single certificate signature request from a requestor and determines that the requestor is authorized for a certificate corresponding to the single certificate signature request. The server generates a first certificate corresponding to the single certificate signature request, wherein the first certificate has a first expiry value. The server transmits the generated first certificate to the requestor. Responsive to an amount of time elapsing, the server automatically generating a second certificate corresponding to the single certificate signature request, wherein the amount of time expiring is less than the first expiry value. The server transmits the generated second certificate to the requestor.
摘要翻译：服务器从请求者接收单个证书签名请求，并确定请求者被授权对应于单个证书签名请求的证书。服务器生成与单个证书签名请求对应的第一证书，其中第一证书具有第一到期值。服务器将生成的第一个证书发送给请求者。响应于经过一段时间，服务器自动生成对应于单个证书签名请求的第二证书，其中到达的时间量小于第一到期值。服务器将生成的第二证书发送给请求者。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式