专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US07587587B2 Data path security processing 有权
标题翻译：数据路径安全处理
公开(公告)号：US07587587B2
公开(公告)日：2009-09-08
申请号：US10727430
申请日：2003-12-04
申请人： Mark L. Buer , Scott S. McDaniel , Uri Elzur , Joseph J. Tardo , Kan Fan
发明人： Mark L. Buer , Scott S. McDaniel , Uri Elzur , Joseph J. Tardo , Kan Fan
IPC分类号： H04L29/08 , H04L9/00
CPC分类号： H04L63/0485 , H04L63/0428 , H04L63/0823 , H04L63/0853 , H04L63/164 , H04L69/22
摘要： Methods and associated systems provide secured data transmission over a data network. A security device provides security processing in the data path of a packet network. The device may include at least one network interface to send packets to and receive packets from a data network and at least one cryptographic engine for performing encryption, decryption and/or authentication operations. The device may be configured as an in-line security processor that processes packets that pass through the device as the packets are routed to/from the data network.
摘要翻译：方法和相关系统通过数据网络提供安全的数据传输。安全设备在分组网络的数据路径中提供安全处理。该设备可以包括至少一个网络接口，用于向数据网络发送分组并从数据网络接收分组，并且至少一个密码引擎用于执行加密，解密和/或认证操作。该设备可以被配置为一个在线安全处理器，其处理在数据包被路由到/从数据网络时通过设备的分组。

2. 发明授权

US09015467B2 Tagging mechanism for data path security processing 有权
标题翻译：数据路径安全处理的标记机制
公开(公告)号：US09015467B2
公开(公告)日：2015-04-21
申请号：US10728192
申请日：2003-12-04
申请人： Mark L. Buer , Scott S. McDaniel
发明人： Mark L. Buer , Scott S. McDaniel
IPC分类号： H04L29/06 , H04L29/12
CPC分类号： H04L63/0485 , H04L29/06 , H04L29/12009 , H04L29/12839 , H04L61/6022 , H04L63/0853 , H04L63/123 , H04L69/16 , H04L69/161 , H04L69/22
摘要： Methods and associated systems are disclosed for providing secured data transmission over a data network. Data to be encrypted and encryption information may be sent to a security processor via a packet network so that the security processor may extract the encryption information and use it to encrypt the data. The encryption information may include flow information, security association and/or other cryptographic information, and/or one or more addresses associated with such information. The encryption information may consist of a tag in a header that is appended to packets to be encrypted before the packets are sent to the security processor. The packet and tag header may be encapsulated into an Ethernet packet and routed via an Ethernet connection to the security processor.
摘要翻译：公开了用于通过数据网络提供安全数据传输的方法和相关系统。要加密的数据和加密信息可以经由分组网络发送到安全处理器，使得安全处理器可以提取加密信息并使用它来加密数据。加密信息可以包括流信息，安全关联和/或其他加密信息，和/或与这些信息相关联的一个或多个地址。加密信息可以包括在分组被发送到安全处理器之前附加到要加密的分组的报头中的标签。分组和标签报头可以被封装成以太网分组，并且经由以太网连接路由到安全处理器。

3. 发明申请

US20090319775A1 Data Path Security Processing 有权
标题翻译：数据路径安全处理
公开(公告)号：US20090319775A1
公开(公告)日：2009-12-24
申请号：US12551381
申请日：2009-08-31
申请人： Mark L. Buer , Scott S. McDaniel , Uri Elzur , Joseph J. Tardo , Kan Fan
发明人： Mark L. Buer , Scott S. McDaniel , Uri Elzur , Joseph J. Tardo , Kan Fan
IPC分类号： H04L29/08 , H04L9/00
CPC分类号： H04L63/0485 , H04L63/0428 , H04L63/0823 , H04L63/0853 , H04L63/164 , H04L69/22
摘要： Methods and associated systems provide secured data transmission over a data network. A security device provides security processing in the data path of a packet network. The device may include at least one network interface to send packets to and receive packets from a data network and at least one cryptographic engine for performing encryption, decryption and/or authentication operations. The device may be configured as an in-line security processor that processes packets that pass through the device as the packets are routed to/from the data network.
摘要翻译：方法和相关系统通过数据网络提供安全的数据传输。安全设备在分组网络的数据路径中提供安全处理。该设备可以包括至少一个网络接口，用于向数据网络发送分组并从数据网络接收分组，并且至少一个密码引擎用于执行加密，解密和/或认证操作。该设备可以被配置为一个在线安全处理器，其处理在数据包被路由到/从数据网络时通过设备的分组。

4. 发明申请

US20110314171A1 SYSTEM AND METHOD FOR PROVIDING POOLING OR DYNAMIC ALLOCATION OF CONNECTION CONTEXT DATA 审中-公开
标题翻译：用于提供连接上下文数据的迭代或动态分配的系统和方法
公开(公告)号：US20110314171A1
公开(公告)日：2011-12-22
申请号：US12967342
申请日：2010-12-14
申请人： Uri El Zur , Steven B. Lindsay , Kan Frankie Fan , Scott S. McDaniel
发明人： Uri El Zur , Steven B. Lindsay , Kan Frankie Fan , Scott S. McDaniel
IPC分类号： G06F15/16
CPC分类号： H04L69/32
摘要： A method for processing of packetized data is disclosed and includes allocating a plurality of partitions of a single context memory for handling data for a corresponding plurality of network protocol connections. Data for at least one of the plurality of network protocol connections may be processed utilizing a corresponding at least one of the plurality of partitions of the single context memory. The at least one of the plurality of partitions of the single context memory may be de-allocated, when the corresponding at least one of the plurality of network protocol connections is terminated. The data for the at least one of the plurality of network protocol connections may be received. The data may be associated with a single network protocol or with a plurality of network protocols. The data for the at least one of the plurality of network protocol connections includes context data.
摘要翻译：公开了一种用于处理分组化数据的方法，包括分配用于处理相应多个网络协议连接的数据的单个上下文存储器的多个分区。可以利用单个上下文存储器的多个分区中的对应的至少一个来处理多个网络协议连接中的至少一个的数据。当多个网络协议连接中的对应的至少一个网络协议连接终止时，单个上下文存储器的多个分区中的至少一个可被解除分配。可以接收用于多个网络协议连接中的至少一个的数据。数据可以与单个网络协议或多个网络协议相关联。多个网络协议连接中的至少一个的数据包括上下文数据。

5. 发明授权

US08055895B2 Data path security processing 有权
标题翻译：数据路径安全处理
公开(公告)号：US08055895B2
公开(公告)日：2011-11-08
申请号：US12551381
申请日：2009-08-31
申请人： Mark Buer , Scott S. McDaniel , Uri Elzur , Joseph J. Tardo , Kan Fan
发明人： Mark Buer , Scott S. McDaniel , Uri Elzur , Joseph J. Tardo , Kan Fan
IPC分类号： H04L29/08 , H04L9/00
CPC分类号： H04L63/0485 , H04L63/0428 , H04L63/0823 , H04L63/0853 , H04L63/164 , H04L69/22
摘要： Methods and associated systems provide secured data transmission over a data network. A security device provides security processing in the data path of a packet network. The device may include at least one network interface to send packets to and receive packets from a data network and at least one cryptographic engine for performing encryption, decryption and/or authentication operations. The device may be configured as an in-line security processor that processes packets that pass through the device as the packets are routed to/from the data network.
摘要翻译：方法和相关系统通过数据网络提供安全的数据传输。安全设备在分组网络的数据路径中提供安全处理。该设备可以包括至少一个网络接口，用于向数据网络发送分组并从数据网络接收分组，并且至少一个密码引擎用于执行加密，解密和/或认证操作。该设备可以被配置为一个在线安全处理器，其处理在数据包被路由到/从数据网络时通过设备的分组。

6. 发明授权

US07934021B2 System and method for network interfacing 有权
标题翻译：网络接口的系统和方法
公开(公告)号：US07934021B2
公开(公告)日：2011-04-26
申请号：US12480637
申请日：2009-06-08
申请人： Uri Elzur , Frankie Fan , Steven B. Lindsay , Scott S. McDaniel
发明人： Uri Elzur , Frankie Fan , Steven B. Lindsay , Scott S. McDaniel
IPC分类号： G06F15/16
CPC分类号： H04L67/1097
摘要： Systems and methods for network interfacing may include a communication data center with a first tier, a second tier and a third tier. The first tier may include a first server with a first single integrated convergent network controller chip. The second server may include a second server with a second single integrated convergent network controller chip. The third tier may include a third server with a third single integrated convergent network controller chip. The second server may be coupled to the first server via a single fabric with a single connector. The third server may be coupled to the second server via the single fabric with the single connector. The respective first, second and third server, each processes a plurality of different traffic types concurrently via the respective first, second and third single integrated convergent network chip over the single fabric that is coupled to the single connector.
摘要翻译：用于网络接口的系统和方法可以包括具有第一层，第二层和第三层的通信数据中心。第一层可以包括具有第一单一集成收敛网络控制器芯片的第一服务器。第二服务器可以包括具有第二单一集成收敛网络控制器芯片的第二服务器。第三层可以包括具有第三单一集成收敛网络控制器芯片的第三服务器。第二服务器可以经由具有单个连接器的单个结构耦合到第一服务器。第三服务器可以通过具有单个连接器的单个结构耦合到第二服务器。相应的第一，第二和第三服务器各自通过耦合到单个连接器的单个结构上的相应的第一，第二和第三单个集成收敛网络芯片同时处理多个不同的业务类型。

7. 发明授权

US07849208B2 System and method for TCP offload 有权
标题翻译： TCP卸载的系统和方法
公开(公告)号：US07849208B2
公开(公告)日：2010-12-07
申请号：US12032953
申请日：2008-02-18
申请人： Uri Elzur , Frankie Fan , Steven B. Lindsay , Scott S. McDaniel
发明人： Uri Elzur , Frankie Fan , Steven B. Lindsay , Scott S. McDaniel
IPC分类号： H04L12/56 , G06F15/16
CPC分类号： H04L29/06 , H04L47/193 , H04L47/2441 , H04L47/34 , H04L49/90 , H04L49/9063 , H04L49/9073 , H04L49/9094 , H04L69/10 , H04L69/12 , H04L69/16 , H04L69/161 , H04L69/162 , H04L69/163 , H04L69/166
摘要： A system for processing packets is disclosed and may including a network interface card (NIC). The NIC may include a TCP enabled Ethernet controller (TEEC). The TEEC may include an internal elastic buffer. The TEEC may process received incoming TCP packets once and may temporarily buffer at least a portion of the incoming TCP packets in the internal elastic buffer. The processing may occur without reassembly or retransmission. The internal elastic buffer may include a receive internal elastic buffer and a transmit internal elastic buffer. The receive internal elastic buffer may temporarily buffer at least a portion of the received incoming TCP packets. The transmit internal elastic buffer may temporarily buffer at least a portion of TCP packets to be transmitted. The TEEC may place at least a portion of the received incoming TCP packets data into at least a portion of a host memory.
摘要翻译：公开了一种用于处理分组的系统，并且可以包括网络接口卡（NIC）。 NIC可以包括TCP启用的以太网控制器（TEEC）。 TEEC可以包括内部弹性缓冲器。 TEEC可以处理接收到的TCP分组一次，并且可以临时缓冲内部弹性缓冲器中的传入TCP分组的至少一部分。该处理可以在没有重新组装或重传的情况下进行。内部弹性缓冲器可以包括接收内部弹性缓冲器和传输内部弹性缓冲器。接收内部弹性缓冲器可以临时缓冲所接收的进入TCP分组的至少一部分。发送内部弹性缓冲器可以临时缓冲要发送的TCP分组的至少一部分。 TEEC可以将接收到的进入的TCP分组数据的至少一部分置于主机存储器的至少一部分中。

8. 发明授权

US08417834B2 Unified infrastructure over ethernet 有权
标题翻译：统一基础设施以太网
公开(公告)号：US08417834B2
公开(公告)日：2013-04-09
申请号：US11007063
申请日：2004-12-08
申请人： Uri El Zur , Kan Frankie Fan , Scott S. McDaniel , Murali Rajagopal
发明人： Uri El Zur , Kan Frankie Fan , Scott S. McDaniel , Murali Rajagopal
IPC分类号： G06F15/16
CPC分类号： H04L45/66 , H04L29/06 , H04L67/1097 , H04L69/08 , H04L69/329
摘要： Systems and methods that provide a unified infrastructure over Ethernet are provided. In one embodiment, a method of communicating between an Ethernet-based system and a non-Ethernet-based network may include, for example, one or more of the following: generating an Ethernet frame that comprises a proxy payload, a proxy association header and an Ethernet header, the Ethernet header relating to a control proxy element; sending the Ethernet frame over an Ethernet-based network to the control proxy element; generating a non-Ethernet frame that comprises the proxy payload and a proxy header; and sending the non-Ethernet frame over a non-Ethernet-based network.
摘要翻译：提供了通过以太网提供统一基础架构的系统和方法。在一个实施例中，在基于以太网的系统和非基于以太网的网络之间通信的方法可以包括例如以下中的一个或多个：生成包括代理有效载荷的以太网帧，代理关联头和以太网报头，与控制代理元件相关的以太网报头; 将以太网帧通过基于以太网的网络发送到控制代理元件; 生成包括代理有效载荷和代理报头的非以太网帧; 并通过非基于以太网的网络发送非以太网帧。

9. 发明授权

US08230090B2 System and method for TCP offloading and uploading 有权
标题翻译： TCP卸载和上传的系统和方法
公开(公告)号：US08230090B2
公开(公告)日：2012-07-24
申请号：US10298817
申请日：2002-11-18
申请人： Kan Frankie Fan , Scott S. McDaniel
发明人： Kan Frankie Fan , Scott S. McDaniel
IPC分类号： G06F13/00
CPC分类号： H04L69/16 , H04L69/12 , H04L69/161 , H04L69/163
摘要： Systems and methods that provide transmission control protocol (TCP) offloading and uploading are provided. In one example, a multiple stack system may include a software stack and a hardware stack. The software stack may be adapted to process a first set of TCP packet streams. The hardware stack may be adapted to process a second set of TCP packet streams and may be coupled to the software stack. The software stack may be adapted to offload one or more TCP connections to the hardware stack. The hardware stack may be adapted to upload one or more TCP connections to the software stack. The software stack and the hardware stack may process one or more TCP connections concurrently.
摘要翻译：提供了提供传输控制协议（TCP）卸载和上传的系统和方法。在一个示例中，多栈系统可以包括软件堆栈和硬件堆栈。软件堆栈可以适于处理第一组TCP分组流。硬件堆栈可以适于处理第二组TCP分组流，并且可以耦合到软件堆栈。软件堆栈可以适于将一个或多个TCP连接卸载到硬件堆栈。硬件堆栈可以适于将一个或多个TCP连接上传到软件堆栈。软件堆栈和硬件堆栈可以同时处理一个或多个TCP连接。

10. 发明申请

US20110246662A1 SYSTEM AND METHOD FOR TCP OFFLOAD 有权
标题翻译： TCP卸载的系统和方法
公开(公告)号：US20110246662A1
公开(公告)日：2011-10-06
申请号：US13115274
申请日：2011-05-25
申请人： Uri Elzur , Frankie Fan , Steven B. Lindsay , Scott S. McDaniel
发明人： Uri Elzur , Frankie Fan , Steven B. Lindsay , Scott S. McDaniel
IPC分类号： G06F15/16 , H04L12/56
CPC分类号： H04L29/06 , H04L47/193 , H04L47/2441 , H04L47/34 , H04L49/90 , H04L49/9063 , H04L49/9073 , H04L49/9094 , H04L69/10 , H04L69/12 , H04L69/16 , H04L69/161 , H04L69/162 , H04L69/163 , H04L69/166
摘要： Aspects of the invention may comprise receiving an incoming TCP packet at a TEEC and processing at least a portion of the incoming packet once by the TEEC without having to do any reassembly and/or retransmission by the TEEC. At least a portion of the incoming TCP packet may be buffered in at least one internal elastic buffer of the TEEC. The internal elastic buffer may comprise a receive internal elastic buffer and/or a transmit internal elastic buffer. Accordingly, at least a portion of the incoming TCP packet may be buffered in the receive internal elastic buffer. At least a portion of the processed incoming packet may be placed in a portion of a host memory for processing by a host processor or CPU. Furthermore, at least a portion of the processed incoming TCP packet may be DMA transferred to a portion of the host memory.
摘要翻译：本发明的方面可以包括在TEEC处接收进入的TCP分组，并且由TEEC处理进入分组的至少一部分一次，而不必由TEEC进行任何重新组合和/或重传。进入的TCP分组的至少一部分可以缓冲在TEEC的至少一个内部弹性缓冲器中。内部弹性缓冲器可以包括接收内部弹性缓冲器和/或发送内部弹性缓冲器。因此，进入的TCP分组的至少一部分可以缓冲在接收内部弹性缓冲器中。处理的输入分组的至少一部分可以被放置在主机存储器的一部分中，以供主机处理器或CPU处理。此外，处理的输入TCP分组的至少一部分可以被DMA传送到主机存储器的一部分。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式