专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US07990973B2 Hash functions for applications such as network address lookup 有权
标题翻译：用于诸如网络地址查找等应用程序的哈希功能
公开(公告)号：US07990973B2
公开(公告)日：2011-08-02
申请号：US12190684
申请日：2008-08-13
申请人： Fang Hao , Muralidharan S. Kodialam , Haoyu Song
发明人： Fang Hao , Muralidharan S. Kodialam , Haoyu Song
IPC分类号： H04L12/56
CPC分类号： H04L45/00 , H04L45/745 , H04L45/7453 , H04L45/7457
摘要： In one embodiment, IP lookup into a routing table having prefixes of different prefix lengths is performed by hashing a candidate prefix value to generate a plurality of hash values, where m seed hash values are generated by applying m seed hash functions and one or more additional hash values are generated by combining two or more of the seed hash values in different ways, e.g., using a bit-wise XOR function. The hash values are used to perform membership probes into a Bloom filter programmed with the prefixes corresponding to all of the different prefix lengths in the routing table without having to expand any of the prefixes programmed into the Bloom filter.
摘要翻译：在一个实施例中，通过对候选前缀值进行散列来生成多个散列值来执行对具有不同前缀长度的前缀的路由表的IP查找，其中通过应用m个种子散列函数和一个或多个附加值来生成m个种子散列值通过以不同的方式组合两个或多个种子散列值来产生散列值，例如使用逐位XOR函数。散列值用于对布隆过滤器执行成员资格探测，该过滤器使用与路由表中所有不同前缀长度相对应的前缀进行编程，而无需扩展编程到布隆过滤器中的任何前缀。

2. 发明申请

US20100040067A1 HASH FUNCTIONS FOR APPLICATIONS SUCH AS NETWORK ADDRESS LOOKUP 有权
标题翻译：应用程序的HASH功能，如网络地址查询
公开(公告)号：US20100040067A1
公开(公告)日：2010-02-18
申请号：US12190684
申请日：2008-08-13
申请人： Fang Hao , Muralidharan S. Kodialam , Haoyu Song
发明人： Fang Hao , Muralidharan S. Kodialam , Haoyu Song
IPC分类号： H04L12/56
CPC分类号： H04L45/00 , H04L45/745 , H04L45/7453 , H04L45/7457
摘要： In one embodiment, IP lookup into a routing table having prefixes of different prefix lengths is performed by hashing a candidate prefix value to generate a plurality of hash values, where m seed hash values are generated by applying m seed hash functions and one or more additional hash values are generated by combining two or more of the seed hash values in different ways, e.g., using a bit-wise XOR function. The hash values are used to perform membership probes into a Bloom filter programmed with the prefixes corresponding to all of the different prefix lengths in the routing table without having to expand any of the prefixes programmed into the Bloom filter.
摘要翻译：在一个实施例中，通过对候选前缀值进行散列来生成多个散列值来执行对具有不同前缀长度的前缀的路由表的IP查找，其中通过应用m个种子散列函数和一个或多个附加值来生成m个种子散列值通过以不同的方式组合两个或多个种子散列值来产生散列值，例如使用逐位XOR函数。散列值用于对布隆过滤器执行成员资格探测，该过滤器使用与路由表中所有不同前缀长度相对应的前缀进行编程，而无需扩展编入Bloom过滤器的任何前缀。

3. 发明申请

US20100040066A1 NETWORK ADDRESS LOOKUP BASED ON BLOOM FILTERS 有权
标题翻译：基于BLOOM过滤器的网络地址查找
公开(公告)号：US20100040066A1
公开(公告)日：2010-02-18
申请号：US12190633
申请日：2008-08-13
申请人： Fang Hao , Muralidharan S. Kodialam , Tirunell V. Lakshman , Haoyu Song
发明人： Fang Hao , Muralidharan S. Kodialam , Tirunell V. Lakshman , Haoyu Song
IPC分类号： H04L12/56
CPC分类号： H04L45/00 , H04L45/745 , H04L45/7457
摘要： In one embodiment, IP lookup into a routing table having prefixes of different prefix lengths is performed using a Bloom filter that was programmed with the prefixes corresponding to all of the different prefix lengths without having to expand any of the prefixes programmed into the Bloom filter. Membership probes are performed into the Bloom filter using candidate prefix values of a given network address. The Bloom filter can be implemented in a distributed manner using Bloom sub-filters, where each Bloom sub-filter is hashed based on a set of hash functions, where each different hash function in the set corresponds to a different prefix length in the routing table. Each Bloom sub-filter can in turn be implemented using a plurality of practically realizable multi-port memory devices controlled by a port scheduler. False-positive matches can be detected and next-hop information for true-positive matches retrieved using an off-chip, hash-based prefix table.
摘要翻译：在一个实施例中，使用具有与所有不同前缀长度相对应的前缀编程的布隆过滤器来执行具有不同前缀长度的前缀的路由表的IP查找，而不必将编程到布隆过滤器中的任何前缀扩展。使用给定网络地址的候选前缀值对Bloom过滤器进行成员资格探测。 Bloom过滤器可以使用Bloom子过滤器以Bloom子过滤器实现，其中每个Bloom子过滤器基于一组散列函数进行散列，其中集合中的每个不同的散列函数对应于路由表中的不同的前缀长度。可以使用由端口调度器控制的多个实际可实现的多端口存储器件来实现每个Bloom子滤波器。可以检测到假阳性匹配，并使用片外基于散列的前缀表检索真正匹配的下一跳信息。

4. 发明授权

US08018940B2 Network address lookup based on bloom filters 有权
标题翻译：基于布隆过滤器的网络地址查找
公开(公告)号：US08018940B2
公开(公告)日：2011-09-13
申请号：US12190633
申请日：2008-08-13
申请人： Fang Hao , Muralidharan S. Kodialam , Tirunell V. Lakshman , Haoyu Song
发明人： Fang Hao , Muralidharan S. Kodialam , Tirunell V. Lakshman , Haoyu Song
IPC分类号： H04L12/56
CPC分类号： H04L45/00 , H04L45/745 , H04L45/7457
摘要： In one embodiment, IP lookup into a routing table having prefixes of different prefix lengths is performed using a Bloom filter that was programmed with the prefixes corresponding to all of the different prefix lengths without having to expand any of the prefixes programmed into the Bloom filter. Membership probes are performed into the Bloom filter using candidate prefix values of a given network address. The Bloom filter can be implemented in a distributed manner using Bloom sub-filters, where each Bloom sub-filter is hashed based on a set of hash functions, where each different hash function in the set corresponds to a different prefix length in the routing table. Each Bloom sub-filter can in turn be implemented using a plurality of practically realizable multi-port memory devices controlled by a port scheduler. False-positive matches can be detected and next-hop information for true-positive matches retrieved using an off-chip, hash-based prefix table.
摘要翻译：在一个实施例中，使用具有与所有不同前缀长度相对应的前缀编程的布隆过滤器来执行具有不同前缀长度的前缀的路由表的IP查找，而不必将编程到布隆过滤器中的任何前缀扩展。使用给定网络地址的候选前缀值对Bloom过滤器进行成员资格探测。 Bloom过滤器可以使用Bloom子过滤器以Bloom子过滤器实现，其中每个Bloom子过滤器基于一组散列函数进行散列，其中集合中的每个不同的散列函数对应于路由表中的不同的前缀长度。可以使用由端口调度器控制的多个实际可实现的多端口存储器件来实现每个Bloom子滤波器。可以检测到假阳性匹配，并使用片外基于散列的前缀表检索真正匹配的下一跳信息。

5. 发明申请

US20130212710A1 Data Leakage Prevention for Cloud and Enterprise Networks 有权
标题翻译：数据泄漏预防云和企业网络
公开(公告)号：US20130212710A1
公开(公告)日：2013-08-15
申请号：US13369475
申请日：2012-02-09
申请人： Krishna P. Puttaswamy Naga , Fang Hao , Muralidharan S. Kodialam , T.V. Lakshman
发明人： Krishna P. Puttaswamy Naga , Fang Hao , Muralidharan S. Kodialam , T.V. Lakshman
IPC分类号： G06F21/20
CPC分类号： H04L63/0245 , H04L9/3247 , H04L63/123
摘要： Apparatuses, methods and articles of manufacture for performing data leakage prevention are provided. Data leakage prevention may be performed by determining a signature of a transmitted document, the transmitted document being in transit to a location beyond a network boundary. The signature of the transmitted document is compared with one or more signatures of documents authorized to be transmitted beyond the network boundary. The transmitted document is prevented from being transmitted beyond the network boundary if the signature of the document does not correspond to a signature of a document authorized to be transmitted beyond the network boundary.
摘要翻译：提供了用于执行防止数据泄漏的设备，方法和制造。可以通过确定所发送的文档的签名，所发送的文档正在转移到超出网络边界的位置来执行数据泄露防止。将所发送的文档的签名与授权发送超出网络边界的文档的一个或多个签名进行比较。如果文档的签名不对应于被授权在网络边界之外被发送的文档的签名，则防止传输的文档被超出网络边界的传输。

6. 发明授权

US08856960B2 Data leakage prevention for cloud and enterprise networks 有权
标题翻译：云和企业网络的数据泄漏预防
公开(公告)号：US08856960B2
公开(公告)日：2014-10-07
申请号：US13369475
申请日：2012-02-09
申请人： Krishna P. Puttaswamy Naga , Fang Hao , Muralidharan S. Kodialam , T.V. Lakshman
发明人： Krishna P. Puttaswamy Naga , Fang Hao , Muralidharan S. Kodialam , T.V. Lakshman
IPC分类号： G06F7/16 , H04L29/06
CPC分类号： H04L63/0245 , H04L9/3247 , H04L63/123
摘要： Apparatuses, methods and articles of manufacture for performing data leakage prevention are provided. Data leakage prevention may be performed by determining a signature of a transmitted document, the transmitted document being in transit to a location beyond a network boundary. The signature of the transmitted document is compared with one or more signatures of documents authorized to be transmitted beyond the network boundary. The transmitted document is prevented from being transmitted beyond the network boundary if the signature of the document does not correspond to a signature of a document authorized to be transmitted beyond the network boundary.
摘要翻译：提供了用于执行防止数据泄漏的设备，方法和制造。可以通过确定所发送的文档的签名，所发送的文档正在转移到超出网络边界的位置来执行数据泄露防止。将所发送的文档的签名与授权发送超出网络边界的文档的一个或多个签名进行比较。如果文档的签名不对应于被授权在网络边界之外被发送的文档的签名，则防止传输的文档被超出网络边界的传输。

7. 发明授权

US07460487B2 Accelerated per-flow traffic estimation 有权
标题翻译：加速每流量流量估计
公开(公告)号：US07460487B2
公开(公告)日：2008-12-02
申请号：US10947072
申请日：2004-09-22
申请人： Fang Hao , Muralidharan S. Kodialam , Tirunell V. Lakshman
发明人： Fang Hao , Muralidharan S. Kodialam , Tirunell V. Lakshman
IPC分类号： H04L12/26
CPC分类号： H04L41/14 , H04L43/024 , H04L43/026 , H04L63/145
摘要： A method of estimating per-flow traffic in a network of nodes interconnected by links splits the incoming traffic stream to a node into a number of parallel sub-streams by flow assignment using a hash function. Since each flow in the incoming traffic stream constitutes a larger fraction of the traffic in its sub-stream, the probability of obtaining two-runs increases. The number of two-runs per flow is then employed to generate an estimate of the traffic of the flow.
摘要翻译：通过链路互连的节点网络估计每流量流量的方法通过使用散列函数的流分配将输入业务流分解成多个并行子流。由于进入业务流中的每个流量构成其子流中流量的较大部分，所以获得两次运行的概率增加。然后使用每个流的两次运行的数量来生成流量的流量的估计。

8. 发明申请

US20110090911A1 METHOD AND APPARATUS FOR TRANSPARENT CLOUD COMPUTING WITH A VIRTUALIZED NETWORK INFRASTRUCTURE 有权
标题翻译：用虚拟网络基础设施进行透明云计算的方法与装置
公开(公告)号：US20110090911A1
公开(公告)日：2011-04-21
申请号：US12582939
申请日：2009-10-21
申请人： Fang Hao , T.V. Lakshman , Sarit Mukherjee , Haoyu Song
发明人： Fang Hao , T.V. Lakshman , Sarit Mukherjee , Haoyu Song
IPC分类号： H04L12/56
CPC分类号： H04L12/4641 , G06F9/45558 , G06F2009/45595 , H04L12/4633 , H04L49/70
摘要： A capability is provided for providing transparent cloud computing with a virtualized network infrastructure. A method for enabling use of a resource of a data center as an extension of a customer network includes receiving, at a forwarding element (FE), a packet intended for a virtual machine hosted at an edge domain of the data center, determining a VLAN ID of the VLAN for the customer network in the edge domain, updating the packet to include the VLAN ID of the VLAN for the customer network in the edge domain, and propagating the updated packet from the FE toward virtual machine. The edge domain supports a plurality of VLANs for a respective plurality of customer networks. The packet includes an identifier of the customer network and a MAC address of the virtual machine. The VLAN ID of the VLAN for the customer network in the edge domain is determined using the identifier of the customer network and the MAC address of the virtual machine. The FE may be associated with the edge domain at which the virtual machine is hosted, an edge domain of the data center that is different than the edge domain at which the virtual machine is hosted, or the customer network. Depending on the location of the FE at which the packet is received, additional processing may be provided as needed.
摘要翻译：提供了一种提供透明云计算与虚拟化网络基础架构的能力。用于使数据中心的资源能够用作客户网络的扩展的方法包括在转发元件（FE）处接收旨在用于驻留在数据中心的边缘域的虚拟机的分组，确定VLAN 边缘域中客户网络的VLAN ID，更新报文，包括边缘域中客户网络的VLAN的VLAN ID，并将更新的报文从FE传播到虚拟机。边缘域为相应的多个客户网络支持多个VLAN。该分组包括客户网络的标识符和虚拟机的MAC地址。边缘域中客户网络的VLAN的VLAN ID使用客户网络的标识符和虚拟机的MAC地址来确定。 FE可以与托管虚拟机的边缘域，数据中心的边缘域与虚拟机所在的边缘域或客户网络相关联。根据接收到分组的FE的位置，可以根据需要提供额外的处理。

9. 发明授权

US09210065B2 Providing cloud-based services using dynamic network virtualization 有权
标题翻译：使用动态网络虚拟化提供基于云的服务
公开(公告)号：US09210065B2
公开(公告)日：2015-12-08
申请号：US12489187
申请日：2009-06-22
申请人： Fang Hao , Tirunellai V. Lakshman , Sarit Mukherjee , Haoyu Song
发明人： Fang Hao , Tirunellai V. Lakshman , Sarit Mukherjee , Haoyu Song
IPC分类号： H04L12/28 , H04L12/701 , G06F9/455 , H04L12/751 , H04L29/08
CPC分类号： H04L45/02 , G06F9/45558 , G06F2009/4557 , G06F2009/45595 , H04L45/00 , H04L49/70 , H04L67/10
摘要： The invention is directed to providing cloud-based services using dynamic network virtualization. Embodiments of the invention provide a cloud-based service over a system that has a dynamic network virtualization architecture. The architecture includes a set of distributed forwarding elements with centralized control, and at least one virtual machine that is bound to one of the forwarding elements. These features enable the virtual machine to be migrated across a wide area network while maintaining its original IP address and service continuity.
摘要翻译：本发明旨在使用动态网络虚拟化来提供基于云的服务。本发明的实施例在具有动态网络虚拟化架构的系统上提供基于云的服务。该架构包括一组具有集中控制的分布式转发元件，以及绑定到其中一个转发元件的至少一个虚拟机。这些功能使虚拟机能够跨广域网迁移，同时保持其原始IP地址和服务连续性。

10. 发明申请

US20110137930A1 METHOD AND APPARATUS FOR GENERATING A SHAPE GRAPH FROM A BINARY TRIE 有权
标题翻译：用于从二进制生成形状图的方法和装置
公开(公告)号：US20110137930A1
公开(公告)日：2011-06-09
申请号：US12633845
申请日：2009-12-09
申请人： Fang Hao , Muralidharan Kodialam , T.V. Lakshman , Haoyu Song
发明人： Fang Hao , Muralidharan Kodialam , T.V. Lakshman , Haoyu Song
IPC分类号： G06F17/30
CPC分类号： G06F17/30958
摘要： A capability is provided for representing a set of data values using data structures, including converting a binary trie data structure representing the set of data values to a shape graph data structure representing the set of data values. The shape graph data structure is generated from the binary trie data structure based on the shapes of the sub-trees rooted at the nodes of the binary trie data structure. The shape graph includes vertices representing shapes of the sub-trees of the binary trie data structure. A shape graph data structure permits operations similar to the operations that may be performed on the binary trie data structure for performing lookups for data values from the set of data values, while at the same time reducing the structural redundancy of the binary trie data structure such that the shape graph data structure provides significant improvements in memory usage over the binary trie data structure.
摘要翻译：提供了一种用于使用数据结构表示一组数据值的能力，包括将表示该组数据值的二进制特里数据结构转换为表示数据值集合的形状图数据结构。形状图数据结构是从二进制trie数据结构生成的基于二叉树数据结构的节点的子树的形状。形状图包括表示二进制trie数据结构的子树形状的顶点。形状图数据结构允许类似于可以对二进制特里数据结构执行的操作的操作，以执行来自该组数据值的数据值的查找，同时减少二进制特里数据结构的结构冗余，形状图数据结构在二进制数据结构中提供了对存储器使用的显着改进。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式