会员体验
专利管家(专利管理)
工作空间(专利管理)
风险监控(情报监控)
数据分析(专利分析)
侵权分析(诉讼无效)
联系我们
交流群
官方交流:
QQ群: 891211   
微信请扫码    >>>
现在联系顾问~
热词
    • 1. 发明申请
    • DISTRIBUTING OVERLAY NETWORK INGRESS INFORMATION
    • 分发覆盖网络信息
    • US20140137267A1
    • 2014-05-15
    • US14161236
    • 2014-01-22
    • Google Inc.
    • Thomas Christoph KeitelEdward Thomas Lingham Hardie
    • H04L29/06
    • H04L63/10H04L61/1511H04L63/0272H04L63/029H04L63/08
    • Aspects of the present disclosure relate to providing secure access to resources of a private network. For example, a client device may transmit a request identifying the protected resource to an authentication server. The authentication server queries a network address lookup table to identify a network address of the protected resource based on the identifying information of the request. If the network address denotes a network location that is not generally accessible, the authentication server generates a resource record that identifies a bastion host, a port, and a connection method for accessing the protected resource. The resource record and the network address may then be transmitted to the client device. In response, the client device may use the information in the resource record to establish a tunnel connection with the bastion host, and the client device uses the tunnel connection to access the protected resource via the bastion host.
    • 本公开的方面涉及提供对私有网络的资源的安全访问。 例如,客户端设备可以向认证服务器发送标识受保护资源的请求。 认证服务器基于请求的识别信息查询网络地址查找表以识别受保护资源的网络地址。 如果网络地址表示通常不可访问的网络位置,则认证服务器生成识别堡垒主机,端口和用于访问受保护资源的连接方法的资源记录。 然后可以将资源记录和网络地址发送到客户端设备。 作为响应,客户端设备可以使用资源记录中的信息来建立与堡垒主机的隧道连接,并且客户端设备使用隧道连接通过堡垒主机访问受保护的资源。
    • 3. 发明授权
    • Distributing overlay network ingress information
    • 分发覆盖网络入口信息
    • US09225721B2
    • 2015-12-29
    • US14161236
    • 2014-01-22
    • Google Inc.
    • Thomas Christoph KeitelEdward Thomas Lingham Hardie
    • H04L9/00H04L29/06G06F11/00G06F15/173H04L29/12
    • H04L63/10H04L61/1511H04L63/0272H04L63/029H04L63/08
    • Aspects of the present disclosure relate to providing secure access to resources of a private network. For example, a client device may transmit a request identifying the protected resource to an authentication server. The authentication server queries a network address lookup table to identify a network address of the protected resource based on the identifying information of the request. If the network address denotes a network location that is not generally accessible, the authentication server generates a resource record that identifies a bastion host, a port, and a connection method for accessing the protected resource. The resource record and the network address may then be transmitted to the client device. In response, the client device may use the information in the resource record to establish a tunnel connection with the bastion host, and the client device uses the tunnel connection to access the protected resource via the bastion host.
    • 本公开的方面涉及提供对私有网络的资源的安全访问。 例如,客户端设备可以向认证服务器发送标识受保护资源的请求。 认证服务器基于请求的识别信息查询网络地址查找表以识别受保护资源的网络地址。 如果网络地址表示通常不可访问的网络位置,则认证服务器生成识别堡垒主机,端口和用于访问受保护资源的连接方法的资源记录。 然后可以将资源记录和网络地址发送到客户端设备。 作为响应,客户端设备可以使用资源记录中的信息来建立与堡垒主机的隧道连接,并且客户端设备使用隧道连接通过堡垒主机访问受保护的资源。
    • 4. 发明授权
    • Method for improving link selection at the borders of SDN and traditional networks
    • 改善SDN和传统网络边界链路选择的方法
    • US09548930B1
    • 2017-01-17
    • US14290455
    • 2014-05-29
    • Google Inc.
    • Edward Thomas Lingham Hardie
    • H04L12/26H04L12/801
    • H04L47/18H04L12/64H04L45/02H04L45/04H04L45/42H04L47/11H04L47/50
    • Methods and systems wherein a first network device in a first network maintains attribute information for one or more routes to one or more network devices external to the first network. The first network device is configured to identify that a first route to the second network device external to the first network has a particular network traffic management capability, and to update the attribute information to indicate that the first route to the second network device has the network traffic management capability. The first network device is configured to select the first route for a new network packet flow from the first network to the second network device, based on the recorded information, and route the new network packet flow to an external network in the first route. In some implementations, the first network is a software-defined network.
    • 其中第一网络中的第一网络设备将一个或多个路由的属性信息维护到第一网络外部的一个或多个网络设备的方法和系统。 第一网络设备被配置为识别到第一网络外部的第二网络设备的第一路由具有特定网络流量管理能力,并且更新属性信息以指示到第二网络设备的第一路由具有网络 交通管理能力。 第一网络设备被配置为基于所记录的信息来选择从第一网络到第二网络设备的新网络分组流的第一路由,并且将新的网络分组流路由到第一路由中的外部网络。 在一些实现中,第一网络是软件定义的网络。
    • 5. 发明授权
    • Network device
    • 网络设备
    • US09553801B2
    • 2017-01-24
    • US13626719
    • 2012-09-25
    • Google Inc.
    • Edward Thomas Lingham Hardie
    • H04L12/773H04L12/28H04L12/751H04L12/24
    • H04L45/60H04L12/28H04L41/04H04L45/02
    • A network device may comprise storage media configured to store traffic, instructions for a lookup engine, a map manager, a traffic forwarder, and a map. The map may comprise rules associating IPv4 and IPv6 addresses. The traffic forwarder may be configured to forward outbound traffic to the second device. The lookup engine may comprise instructions to cause the processor to check the map to determine whether the map comprises a rule associating the second address of the second device and the first address of the first device. If so, the instructions may cause the processor to forward the inbound traffic from the second device to the first device. If the map does not comprise this rule, the instructions may cause the processor to send a query to a second network device asking whether the second network device comprises a rule associating the first and second address.
    • 网络设备可以包括被配置为存储流量的存储介质,用于查找引擎的指令,地图管理器,流量转发器和地图。 地图可以包括关联IPv4和IPv6地址的规则。 流量转发器可以被配置为将出站流量转发到第二设备。 查找引擎可以包括使处理器检查地图以确定地图是否包括将第二设备的第二地址与第一设备的第一地址相关联的规则的指令。 如果是这样,则指令可能导致处理器将入站流量从第二设备转发到第一设备。 如果地图不包括该规则,则该指令可能导致处理器向第二网络设备发送查询,询问第二网络设备是否包括关联第一和第二地址的规则。
    • 6. 发明授权
    • Embedding network measurements within multiplexing session layers
    • 在多路复用会话层中嵌入网络测量
    • US09288128B1
    • 2016-03-15
    • US13838094
    • 2013-03-15
    • Google Inc.
    • Gonzalo PalaciosEdward Thomas Lingham Hardie
    • G06F15/173H04L12/26H04L29/06
    • H04L43/0888H04L43/0841H04L43/0858H04L43/087H04L65/601H04L69/14H04L69/18H04L69/28H04L69/326H04L69/329
    • Exemplary embodiments provide techniques for measuring network latency attributable to the transit of packets through the network. This may be accomplished by developing a common sense of time with the server that allows packet inter-arrival times to be accurately measured. In establishing the common time between the client and the server, it may be necessary to overcome network topology manipulations and/or packet pacing manipulations performed by an intermediate device. Accordingly, an end-to-end multiplexing protocol may be employed which allows a protected connection to be established from the client directly to the server, bypassing the manipulations. Using the multiplexing protocol, a timing flow may be established for carrying timing traffic. After trading timing traffic with the server for a period of time, the client may establish a common or shared sense of time with the server which may be used to measure the latency in the network.
    • 示例性实施例提供了用于测量归因于通过网络的分组的传送的网络延迟的技术。 这可以通过与允许准确测量分组到达时间的服务器开发常见的时间感来实现。 在建立客户端和服务器之间的公共时间时,可能需要克服由中间设备执行的网络拓扑操作和/或分组起搏操作。 因此,可以采用端到端复用协议,其允许绕过操作从客户机直接建立受保护的连接到服务器。 使用复用协议,可以建立定时流来传送定时业务。 在与服务器交换定时流量一段时间后,客户端可以与可能用于测量网络中的等待时间的服务器建立共同或共享的时间感。