专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US09154327B1 User-configured on-demand virtual layer-2 network for infrastructure-as-a-service (IaaS) on a hybrid cloud network 有权
标题翻译：用户配置的按需虚拟二层网络，用于混合云网络上的基础设施即服务（IaaS）
公开(公告)号：US09154327B1
公开(公告)日：2015-10-06
申请号：US13117986
申请日：2011-05-27
申请人： Christopher C. Marino , Juergen Brendel , Patrick Amor , Pritesh Kothari
发明人： Christopher C. Marino , Juergen Brendel , Patrick Amor , Pritesh Kothari
IPC分类号： G06Q30/04 , H04L12/46 , H04L12/741 , H04L29/06
CPC分类号： H04L41/0813 , G06Q30/04 , H04L12/4641 , H04L45/586 , H04L45/64 , H04L45/66 , H04L45/74 , H04L49/70 , H04L63/0485 , H04L67/12 , H04L69/22 , H04L69/321
摘要： A virtual network is overlaid upon physical networks. The virtual network is a layer-2 network that appears to expand an organization's LAN using virtual MAC addresses. A VN device driver shim intercepts LAN packets and their virtual MAC and IP addresses and encapsulates them with physical packets that can be routed over the Internet. As new nodes are created, a VN switch table is expanded so that all nodes on the virtual network can reach the new node. A copy of the VN switch table is stored on each node by a virtual network management daemon on the node. A VN configuration controller in a central server updates the VN switch tables. Organizations can expand their virtual network as nodes are created at remote cloud computing providers without action by the staff at the cloud computing provider. Hybrid cloud virtual networks include on-premises physical and virtual-machine nodes, and off-premises guest nodes and instances.
摘要翻译：虚拟网络覆盖在物理网络上。虚拟网络是一个第二层网络，似乎可以使用虚拟MAC地址扩展组织的LAN。 VN设备驱动程序垫片拦截LAN数据包及其虚拟MAC和IP地址，并使用可通过Internet路由的物理数据包进行封装。当创建新节点时，将展开VN交换机表，以使虚拟网络上的所有节点都能到达新节点。 VN交换机表的副本由节点上的虚拟网络管理守护程序存储在每个节点上。中央服务器中的VN配置控制器更新VN交换机表。组织可以扩展其虚拟网络，因为节点是在远程云计算提供商创建的，而不受云计算提供商的工作人员的操作。混合云虚拟网络包括本地物理和虚拟机节点，以及本地外访客节点和实例。

2. 发明授权

US08660129B1 Fully distributed routing over a user-configured on-demand virtual network for infrastructure-as-a-service (IaaS) on hybrid cloud networks 有权
标题翻译：通过用户配置的按需虚拟网络在混合云网络上进行基础设施即服务（IaaS）的全面分布式路由
公开(公告)号：US08660129B1
公开(公告)日：2014-02-25
申请号：US13365245
申请日：2012-02-02
申请人： Juergen Brendel , Christopher C. Marino , Patrick Amor , Pritesh Kothari
发明人： Juergen Brendel , Christopher C. Marino , Patrick Amor , Pritesh Kothari
IPC分类号： H04L12/28 , H04L12/56
CPC分类号： H04L45/22 , H04L12/4641 , H04L45/54 , H04L45/586 , H04L49/70
摘要： A layer-3 virtual router connects two or more virtual networks. Virtual networks are overlaid upon physical networks. Each virtual network (VN) is a layer-2 network that appears to expand an organization's LAN using virtual MAC addresses. The network stack forms a virtual-network packet with a virtual gateway MAC address of the virtual router to reach a remote virtual network. A VN device driver shim intercepts packets and their virtual MAC and IP addresses and encapsulates them with physical packets sent over the Internet. A VN switch table is expanded to include entries for nodes on the remote virtual network so that all nodes on both virtual networks are accessible. A copy of the VN switch table is stored on each node by a virtual network management daemon on the node. A Time-To-Live field in the virtual-network packet is decremented for each virtual hop and a checksum recalculated.
摘要翻译：三层虚拟路由器连接两个或多个虚拟网络。虚拟网络覆盖在物理网络上。每个虚拟网络（VN）是第二层网络，似乎可以使用虚拟MAC地址扩展组织的LAN。网络堆栈形成具有虚拟路由器的虚拟网关MAC地址的虚拟网络分组，以到达远程虚拟网络。 VN设备驱动器垫片拦截数据包及其虚拟MAC和IP地址，并通过Internet发送的物理数据包进行封装。 VN交换机表扩展为包括远程虚拟网络上的节点的条目，以便两个虚拟网络上的所有节点都可访问。 VN交换机表的副本由节点上的虚拟网络管理守护程序存储在每个节点上。虚拟网络分组中的“实时生存”字段对于每个虚拟跳点递减，并重新计算校验和。

3. 发明授权

US5774660A World-wide-web server with delayed resource-binding for resource-based load balancing on a distributed resource multi-node network 失效
标题翻译：在分布式资源多节点网络上具有延迟资源绑定功能的资源负载平衡的全球网络服务器
公开(公告)号：US5774660A
公开(公告)日：1998-06-30
申请号：US691006
申请日：1996-08-05
申请人： Juergen Brendel , Charles J. Kring , Zaide Liu , Christopher C. Marino
发明人： Juergen Brendel , Charles J. Kring , Zaide Liu , Christopher C. Marino
IPC分类号： H04L29/06 , H04L29/08 , H04L29/12 , H04L29/14 , G06F13/00 , G06F17/30
CPC分类号： H04L29/06 , H04L29/12009 , H04L29/1233 , H04L29/12594 , H04L61/25 , H04L61/301 , H04L67/1014 , H04L67/1038 , H04L67/1095 , H04L69/161 , H04L69/163 , H04L69/40 , G06F2209/462 , H04L2029/06054 , H04L67/1002 , H04L67/1034 , H04L67/42 , H04L69/16 , H04L69/329
摘要： A multi-node server transmits world-wide-web pages to network-based browser clients. A load balancer receives all requests from clients because they use a virtual address for the entire site. The load balancer makes a connection with the client and waits for the URL from the client. The URL specifies the requested resource. The load balancer waits to perform load balancing until after the location of the requested resource is known. The connection and URL request are passed from the load balancer to a second node having the requested resource. The load balancer re-plays the initial connection packet sequence to the second node, but modifies the address to that for the second node. The network software is modified to generate the physical network address of the second node, but then changes the destination address back to the virtual address. The second node transmits the requested resource directly to the client, with the virtual address as its source. Since all requests are first received by the load balancer which determines the physical location of the requested resource, nodes may contain different resources. The entire contents of the web site is not mirrored onto all nodes. Network bottlenecks are avoided since the nodes transmit the large files back to the client directly, bypassing the load balancer. Client browsers can cache the virtual address, even though different nodes with different physical addresses service requests.
摘要翻译：多节点服务器将世界范围的网页传输到基于网络的浏览器客户端。负载平衡器从客户端接收所有请求，因为它们为整个站点使用虚拟地址。负载平衡器与客户端建立连接，并等待客户端的URL。 URL指定请求的资源。负载平衡器等待执行负载平衡，直到所请求资源的位置被知道为止。连接和URL请求从负载均衡器传递到具有所请求资源的第二节点。负载平衡器将初始连接包序列重新播放到第二个节点，但是将地址修改为第二个节点的地址。修改网络软件以生成第二个节点的物理网络地址，然后将目标地址更改回虚拟地址。第二节点将请求的资源直接发送到客户端，虚拟地址作为其源。由于所有请求首先由确定所请求资源的物理位置的负载均衡器接收，所以节点可以包含不同的资源。网站的所有内容都不会镜像到所有节点上。网络瓶颈是避免的，因为节点通过负载均衡器直接将大型文件传送回客户端。客户端浏览器可以缓存虚拟地址，即使具有不同物理地址服务请求的不同节点也是如此。

4. 发明授权

US07861075B2 Atomic session-start operation combining clear-text and encrypted sessions to provide ID visibility to middleware such as load-balancers 有权
标题翻译：原子会话启动操作组合明文和加密会话，为中间件（如负载平衡器）提供ID可见性
公开(公告)号：US07861075B2
公开(公告)日：2010-12-28
申请号：US10900840
申请日：2004-07-27
申请人： Juergen Brendel
发明人： Juergen Brendel
IPC分类号： H04L29/06 , H04L29/00
CPC分类号： H04L67/1027 , H04L63/04 , H04L63/0428 , H04L63/104 , H04L63/166 , H04L63/20 , H04L67/1002 , H04L67/1012 , H04L67/14 , H04L69/16 , H04L69/163 , H04L69/22
摘要： A load-balancer assigns incoming requests to servers at a server farm. An atomic operation assigns both un-encrypted clear-text requests and encrypted requests from a client to the same server at the server farm. An encrypted session is started early by the atomic operation, before encryption is required. The atomic operation is initiated by a special, automatically loaded component on a web page. This component is referenced by code requiring that an encrypted session be used to retrieve the component. Keys and certificates are exchanged between a server and the client to establish the encrypted session. The server generates a secure-sockets-layer (SSL) session ID for the encrypted session. The server also generates a server-assignment cookie that identifies the server at the server farm. The server-assignment cookie is encrypted and sent to the client along with the SSL session ID. The Client decrypts the server-assignment cookie and stores it along with the SSL session ID. The load-balancer stores the SSL session ID along with a server assignment that identifies the server that generated the SSL session ID. When other encrypted requests are generated by the client to the server farm, they include the SSL session ID. The load-balancer uses the SSL session ID to send the requests to the assigned server. When the client sends a non-encrypted clear-text request to the server farm, it includes the decrypted server-assignment cookie. The load balancer parses the clear-text request to find the server-assignment cookie. The load-balancer then sends the request to the assigned server.
摘要翻译：负载平衡器将传入请求分配给服务器场中的服务器。原子操作将来自客户端的未加密的明文请求和加密请求分配给服务器场上的同一服务器。在加密需要之前，原子操作将提前加密加密会话。原子操作由网页上的一个特殊的，自动加载的组件启动。该组件由代码引用，需要使用加密会话来检索组件。密钥和证书在服务器和客户端之间交换以建立加密的会话。服务器为加密会话生成安全套接字层（SSL）会话ID。服务器还生成一个服务器分配cookie，用于标识服务器场上的服务器。服务器分配cookie被加密并与SSL会话ID一起发送到客户端。客户端解密服务器分配cookie并将其与SSL会话ID一起存储。负载均衡器存储SSL会话ID以及标识生成SSL会话ID的服务器的服务器分配。当其他加密请求由客户端生成到服务器场时，它们包括SSL会话ID。负载均衡器使用SSL会话ID将请求发送到分配的服务器。当客户端向服务器场发送未加密的明文请求时，它包括解密的服务器分配cookie。负载平衡器解析明文请求以找到服务器分配cookie。然后，负载平衡器将请求发送到分配的服务器。

5. 发明申请

US20050125195A1 Method, apparatus and sofware for network traffic management 审中-公开
标题翻译：网络流量管理的方法，设备和软件
公开(公告)号：US20050125195A1
公开(公告)日：2005-06-09
申请号：US10499766
申请日：2002-12-23
申请人： Juergen Brendel
发明人： Juergen Brendel
IPC分类号： H04L12/24 , H04L12/26 , H04L29/06 , G21C17/00 , G06F11/30
CPC分类号： H04L63/1408 , H04L43/00 , H04L43/026 , H04L43/106 , H04L43/16 , H04L63/1425 , H04L63/1458
摘要： A network traffic evaluation device is provided that may be used to warn of or prevent trafficabnormalities such as denial of service attacks. The device includes a data interface to receive one or both of network traffic and data indicative of characteristics f network traffic. The network traffic and/or data received by the data interface is processed for predeterminedcharacteristics that indicate that the network traffic contains a subset of attack traffic. Upon detection of the predetermined characteristics information defining a superset is provided. The superset is a portion of the network traffic that contains the subset and defines network traffic that may be redirected and/or blocked by a network device.
摘要翻译：提供了可用于警告或防止诸如拒绝服务攻击之类的业务异常的网络流量评估装置。该设备包括用于接收网络业务中的一个或两个以及表示网络流量特性的数据的数据接口。处理由数据接口接收的网络流量和/或数据用于指示网络流量包含攻击流量的子集的预定特征。当检测到预定特征时，提供定义超集的信息。超集是包含子集的网络流量的一部分，并且定义可被网络设备重定向和/或阻止的网络流量。

6. 发明授权

US07272654B1 Virtualizing network-attached-storage (NAS) with a compact table that stores lossy hashes of file names and parent handles rather than full names 有权
标题翻译：虚拟化网络连接存储（NAS）与一个紧凑的表，存储文件名和父句柄而不是全名的有损数据散列
公开(公告)号：US07272654B1
公开(公告)日：2007-09-18
申请号：US10708457
申请日：2004-03-04
申请人： Juergen Brendel
发明人： Juergen Brendel
IPC分类号： G06F15/13 , G06F17/00 , G06F17/60
CPC分类号： G06F17/30197 , G06F17/30091
摘要： Multiple Network Attached Storage (NAS) appliances are pooled together by a virtual NAS translator, forming one common name space visible to clients. Clients send messages to the virtual NAS translator with a file name and a virtual handle of the parent directory that are concatenated to a full file-path name and compressed by a cryptographic hash function to generate a hashed-name key. The hashed-name key is matched to a storage key in a table. The full file-path name is not stored, reducing the table size. A unique entry number is returned to the client as the virtual file handle that is also stored in another table with one or more native file handles, allowing virtual handles to be translated to native handles that the NAS appliance servers use to retrieve files. File movement among NAS servers alters native file handles but not virtual handles, hiding NAS details from clients.
摘要翻译：多个网络连接存储（NAS）设备由虚拟NAS转换器汇集在一起，形成客户可见的一个通用名称空间。客户端将消息发送到虚拟NAS转换器，文件名和父目录的虚拟句柄连接到完整文件路径名称，并通过加密散列函数压缩以生成散列名称键。散列名称键与表中的存储键匹配。没有存储完整的文件路径名，减少了表的大小。将唯一的条目号作为虚拟文件句柄返回给客户端，该文件句柄也存储在具有一个或多个本地文件句柄的另一个表中，允许将虚拟句柄转换为NAS设备服务器用于检索文件的本机句柄。 NAS服务器之间的文件移动会改变本地文件句柄，而不是虚拟句柄，从客户端隐藏NAS详细信息。

7. 发明申请

US20050010754A1 Atomic session-start operation combining clear-text and encrypted sessions to provide ID visibility to middleware such as load-balancers 有权
标题翻译：原子会话启动操作组合明文和加密会话，为中间件（如负载平衡器）提供ID可见性
公开(公告)号：US20050010754A1
公开(公告)日：2005-01-13
申请号：US10900840
申请日：2004-07-27
申请人： Juergen Brendel
发明人： Juergen Brendel
IPC分类号： H04L29/06 , H04L29/08 , H04L9/00
CPC分类号： H04L67/1027 , H04L63/04 , H04L63/0428 , H04L63/104 , H04L63/166 , H04L63/20 , H04L67/1002 , H04L67/1012 , H04L67/14 , H04L69/16 , H04L69/163 , H04L69/22
摘要： A load-balancer assigns incoming requests to servers at a server farm. An atomic operation assigns both un-encrypted clear-text requests and encrypted requests from a client to the same server at the server farm. An encrypted session is started early by the atomic operation, before encryption is required. The atomic operation is initiated by a special, automatically loaded component on a web page. This component is referenced by code requiring that an encrypted session be used to retrieve the component. Keys and certificates are exchanged between a server and the client to establish the encrypted session. The server generates a secure-sockets-layer (SSL) session ID for the encrypted session. The server also generates a server-assignment cookie that identifies the server at the server farm. The server-assignment cookie is encrypted and sent to the client along with the SSL session ID. The Client decrypts the server-assignment cookie and stores it along with the SSL session ID. The load-balancer stores the SSL session ID along with a server assignment that identifies the server that generated the SSL session ID. When other encrypted requests are generated by the client to the server farm, they include the SSL session ID. The load-balancer uses the SSL session ID to send the requests to the assigned server. When the client sends a non-encrypted clear-text request to the server farm, it includes the decrypted server-assignment cookie. The load balancer parses the clear-text request to find the server-assignment cookie. The load-balancer then sends the request to the assigned server.
摘要翻译：负载平衡器将传入请求分配给服务器场中的服务器。原子操作将来自客户端的未加密的明文请求和加密请求分配给服务器场上的同一服务器。在加密需要之前，原子操作将提前加密加密会话。原子操作由网页上的一个特殊的，自动加载的组件启动。该组件由代码引用，需要使用加密会话来检索组件。密钥和证书在服务器和客户端之间交换以建立加密的会话。服务器为加密会话生成安全套接字层（SSL）会话ID。服务器还生成一个服务器分配cookie，用于标识服务器场上的服务器。服务器分配cookie被加密并与SSL会话ID一起发送到客户端。客户端解密服务器分配cookie并将其与SSL会话ID一起存储。负载均衡器存储SSL会话ID以及标识生成SSL会话ID的服务器的服务器分配。当其他加密请求由客户端生成到服务器场时，它们包括SSL会话ID。负载均衡器使用SSL会话ID将请求发送到分配的服务器。当客户端向服务器场发送未加密的明文请求时，它包括解密的服务器分配cookie。负载平衡器解析明文请求以找到服务器分配cookie。然后，负载平衡器将请求发送到分配的服务器。

8. 发明授权

US06182139B2 Client-side resource-based load-balancing with delayed-resource-binding using TCP state migration to WWW server farm 失效
标题翻译：使用TCP状态迁移到WWW服务器场的客户端资源负载平衡与延迟资源绑定
公开(公告)号：US06182139B2
公开(公告)日：2001-01-30
申请号：US09103336
申请日：1998-06-23
申请人： Juergen Brendel
发明人： Juergen Brendel
IPC分类号： G06F1338
CPC分类号： H04L29/06 , G06F2209/462 , H04L29/12009 , H04L29/1233 , H04L29/12594 , H04L61/25 , H04L61/301 , H04L67/1002 , H04L67/1014 , H04L67/1034 , H04L67/1038 , H04L67/1095 , H04L67/42 , H04L69/16 , H04L69/161 , H04L69/163 , H04L69/329 , H04L69/40 , H04L2029/06054
摘要： A client-side dispatcher resides on a client machine below high-level client applications and TCP/IP layers. The client-side dispatcher performs TCP state migration to relocate the client-server TCP connection to a new server by storing packets locally and later altering them before transmission. The client-side dispatcher operates in several modes. In an error-recovery mode, when a server fails, error packets from the server are intercepted by the client-side dispatcher. Stored connection packet's destination addresses are changed to an address of a relocated server. The altered packets then establish a connection with the relocated server. Source addresses of packets from the server are changed to that of the original server that crashed so that the client application is not aware of the error. In a delayed URL-based dispatch mode, the client-side dispatcher intercepts connection packets before they are sent over the network. Reply packets are faked by the client-side dispatcher to appear to be from a server and then sent to up to the client TCP/IP layers. The client's TCP then sends URL packet identifying the resource requested. The client-side dispatcher decodes the URL and picks a server and sends the packet to the server. Reply packets from the server are intercepted, and data packets altered to have the source address of the faked server. Multicast of the initial packet to multiple servers is used for empirical load-balancing by the client. The first server to respond is chosen while the others are reset. Thus the client-side dispatcher picks the fastest of several servers.
摘要翻译：客户端调度器位于高级客户端应用程序和TCP / IP层之下的客户机上。客户端调度程序通过在本地存储数据包，然后在传输之前进行更改，执行TCP状态迁移，将客户端 - 服务器TCP连接重新定位到新服务器。客户端调度员在多种模式下运行。在错误恢复模式下，当服务器发生故障时，客户端调度程序会拦截来自服务器的错误数据包。存储的连接数据包的目标地址更改为重定位服务器的地址。所修改的数据包然后与重新定位的服务器建立连接。来自服务器的数据包的源地址将更改为崩溃的原始服务器的源地址，以便客户机应用程序不知道错误。在基于延迟的基于URL的调度模式下，客户端调度员在通过网络发送之前拦截连接数据包。客户端调度员的回复数据包是由服务器发出的，然后发送到客户端的TCP / IP层。客户端的TCP然后发送标识所请求的资源的URL包。客户端调度程序解码URL并选择一个服务器，并将数据包发送到服务器。截取来自服务器的回复数据包，数据包被更改为具有假服务器的源地址。初始包到多个服务器的组播用于客户端的经验负载均衡。选择第一个要响应的服务器，而其他服务器被重置。因此，客户端调度员选择了最快的几个服务器。

9. 发明授权

US08447762B2 Storing lossy hashes of file names and parent handles rather than full names using a compact table for network-attached-storage (NAS) 有权
标题翻译：使用网络连接存储（NAS）的紧凑型表存储文件名和父级句柄的有损数据散列，而不是全名。
公开(公告)号：US08447762B2
公开(公告)日：2013-05-21
申请号：US11838628
申请日：2007-08-14
申请人： Juergen Brendel
发明人： Juergen Brendel
IPC分类号： G06F17/30
CPC分类号： G06F17/30197 , G06F17/30091
摘要： Multiple Network Attached Storage (NAS) appliances are pooled together by a virtual NAS translator, forming one common name space visible to clients. Clients send messages to the virtual NAS translator with a file name and a virtual handle of the parent directory that are concatenated to a full file-path name and compressed by a cryptographic hash function to generate a hashed-name key. The hashed-name key is matched to a storage key in a table. The full file-path name is not stored, reducing the table size. A unique entry number is returned to the client as the virtual file handle that is also stored in another table with one or more native file handles, allowing virtual handles to be translated to native handles that the NAS appliance servers use to retrieve files. File movement among NAS servers alters native file handles but not virtual handles, hiding NAS details from clients.
摘要翻译：多个网络连接存储（NAS）设备由虚拟NAS转换器汇集在一起，形成客户可见的一个通用名称空间。客户端将消息发送到虚拟NAS转换器，文件名和父目录的虚拟句柄连接到完整文件路径名称，并通过加密散列函数压缩以生成散列名称键。散列名称键与表中的存储键匹配。没有存储完整的文件路径名，减少了表的大小。将唯一的条目号作为虚拟文件句柄返回给客户端，该文件句柄也存储在具有一个或多个本地文件句柄的另一个表中，允许将虚拟句柄转换为NAS设备服务器用于检索文件的本机句柄。 NAS服务器之间的文件移动会改变本地文件句柄，而不是虚拟句柄，从客户端隐藏NAS详细信息。

10. 发明授权

US08219576B2 Storing lossy hashes of file names and parent handles rather than full names using a compact table for network-attached-storage (NAS) 有权
标题翻译：使用网络连接存储（NAS）的紧凑型表存储文件名和父级句柄的有损数据散列，而不是全名。
公开(公告)号：US08219576B2
公开(公告)日：2012-07-10
申请号：US12833527
申请日：2010-07-09
申请人： Juergen Brendel
发明人： Juergen Brendel
IPC分类号： G06F17/30
CPC分类号： G06F17/30197 , G06F17/30091
摘要： Multiple Network Attached Storage (NAS) appliances are pooled together by a virtual NAS translator, forming one common name space visible to clients. Clients send messages to the virtual NAS translator with a file name and a virtual handle of the parent directory that are concatenated to a full file-path name and compressed by a cryptographic hash function to generate a hashed-name key. The hashed-name key is matched to a storage key in a table. The full file-path name is not stored, reducing the table size. A unique entry number is returned to the client as the virtual file handle that is also stored in another table with one or more native file handles, allowing virtual handles to be translated to native handles that the NAS appliance servers use to retrieve files. File movement among NAS servers alters native file handles but not virtual handles, hiding NAS details from clients.
摘要翻译：多个网络连接存储（NAS）设备由虚拟NAS转换器汇集在一起，形成客户可见的一个通用名称空间。客户端将消息发送到虚拟NAS转换器，文件名和父目录的虚拟句柄连接到完整文件路径名称，并通过加密散列函数压缩以生成散列名称键。散列名称键与表中的存储键匹配。没有存储完整的文件路径名，减少了表的大小。将唯一的条目号作为虚拟文件句柄返回给客户端，该文件句柄也存储在具有一个或多个本地文件句柄的另一个表中，允许将虚拟句柄转换为NAS设备服务器用于检索文件的本机句柄。 NAS服务器之间的文件移动会改变本地文件句柄，而不是虚拟句柄，从客户端隐藏NAS详细信息。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式