专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US07587587B2 Data path security processing 有权
标题翻译：数据路径安全处理
公开(公告)号：US07587587B2
公开(公告)日：2009-09-08
申请号：US10727430
申请日：2003-12-04
申请人： Mark L. Buer , Scott S. McDaniel , Uri Elzur , Joseph J. Tardo , Kan Fan
发明人： Mark L. Buer , Scott S. McDaniel , Uri Elzur , Joseph J. Tardo , Kan Fan
IPC分类号： H04L29/08 , H04L9/00
CPC分类号： H04L63/0485 , H04L63/0428 , H04L63/0823 , H04L63/0853 , H04L63/164 , H04L69/22
摘要： Methods and associated systems provide secured data transmission over a data network. A security device provides security processing in the data path of a packet network. The device may include at least one network interface to send packets to and receive packets from a data network and at least one cryptographic engine for performing encryption, decryption and/or authentication operations. The device may be configured as an in-line security processor that processes packets that pass through the device as the packets are routed to/from the data network.
摘要翻译：方法和相关系统通过数据网络提供安全的数据传输。安全设备在分组网络的数据路径中提供安全处理。该设备可以包括至少一个网络接口，用于向数据网络发送分组并从数据网络接收分组，并且至少一个密码引擎用于执行加密，解密和/或认证操作。该设备可以被配置为一个在线安全处理器，其处理在数据包被路由到/从数据网络时通过设备的分组。

2. 发明申请

US20090319775A1 Data Path Security Processing 有权
标题翻译：数据路径安全处理
公开(公告)号：US20090319775A1
公开(公告)日：2009-12-24
申请号：US12551381
申请日：2009-08-31
申请人： Mark L. Buer , Scott S. McDaniel , Uri Elzur , Joseph J. Tardo , Kan Fan
发明人： Mark L. Buer , Scott S. McDaniel , Uri Elzur , Joseph J. Tardo , Kan Fan
IPC分类号： H04L29/08 , H04L9/00
CPC分类号： H04L63/0485 , H04L63/0428 , H04L63/0823 , H04L63/0853 , H04L63/164 , H04L69/22
摘要： Methods and associated systems provide secured data transmission over a data network. A security device provides security processing in the data path of a packet network. The device may include at least one network interface to send packets to and receive packets from a data network and at least one cryptographic engine for performing encryption, decryption and/or authentication operations. The device may be configured as an in-line security processor that processes packets that pass through the device as the packets are routed to/from the data network.
摘要翻译：方法和相关系统通过数据网络提供安全的数据传输。安全设备在分组网络的数据路径中提供安全处理。该设备可以包括至少一个网络接口，用于向数据网络发送分组并从数据网络接收分组，并且至少一个密码引擎用于执行加密，解密和/或认证操作。该设备可以被配置为一个在线安全处理器，其处理在数据包被路由到/从数据网络时通过设备的分组。

3. 发明授权

US08055895B2 Data path security processing 有权
标题翻译：数据路径安全处理
公开(公告)号：US08055895B2
公开(公告)日：2011-11-08
申请号：US12551381
申请日：2009-08-31
申请人： Mark Buer , Scott S. McDaniel , Uri Elzur , Joseph J. Tardo , Kan Fan
发明人： Mark Buer , Scott S. McDaniel , Uri Elzur , Joseph J. Tardo , Kan Fan
IPC分类号： H04L29/08 , H04L9/00
CPC分类号： H04L63/0485 , H04L63/0428 , H04L63/0823 , H04L63/0853 , H04L63/164 , H04L69/22
摘要： Methods and associated systems provide secured data transmission over a data network. A security device provides security processing in the data path of a packet network. The device may include at least one network interface to send packets to and receive packets from a data network and at least one cryptographic engine for performing encryption, decryption and/or authentication operations. The device may be configured as an in-line security processor that processes packets that pass through the device as the packets are routed to/from the data network.
摘要翻译：方法和相关系统通过数据网络提供安全的数据传输。安全设备在分组网络的数据路径中提供安全处理。该设备可以包括至少一个网络接口，用于向数据网络发送分组并从数据网络接收分组，并且至少一个密码引擎用于执行加密，解密和/或认证操作。该设备可以被配置为一个在线安全处理器，其处理在数据包被路由到/从数据网络时通过设备的分组。

4. 发明申请

US20050135415A1 System and method for supporting TCP out-of-order receive data using generic buffer 有权
标题翻译：使用通用缓冲区支持TCP无序接收数据的系统和方法
公开(公告)号：US20050135415A1
公开(公告)日：2005-06-23
申请号：US11013494
申请日：2004-12-15
申请人： Kan Fan , Scott McDaniel
发明人： Kan Fan , Scott McDaniel
IPC分类号： H04L12/28 , H04L29/06 , H04L12/56
CPC分类号： H04L69/16 , H04L69/12 , H04L69/161 , H04L69/163
摘要： A method and system for handling received out-of-order network data using generic buffers for non-posting TCP applications is disclosed. When incoming out-of-order data is received and there is no application buffer posted, a TCP data placement may notify a TCP reassembler to terminate a current generic buffer, allocate a new current generic buffer, and DMA the incoming data into the new current generic buffer. The TCP data placement may notify the TCP reassembler the starting TCP sequence number and the length of the new current generic buffer. Moreover, the TCP data placement may add entries into a TCP out-of-order table when the incoming data creates a new disjoint area. The TCP data placement may adjust an existing disjoint area to reflect any updates. When a TCP application allocates or posts a buffer, then the TCP reassembler may copy data from a linked list of generic buffers into posted buffers.
摘要翻译：公开了使用用于非发布TCP应用的通用缓冲器来处理接收的无序网络数据的方法和系统。当接收到无序数据并且没有发布应用缓冲器时，TCP数据放置可以通知TCP重新组合器来终止当前通用缓冲器，分配新的当前通用缓冲器，并将输入数据DMA传入新的当前通用缓冲区。 TCP数据放置可以通知TCP重组器启动TCP序列号和新的当前通用缓冲区的长度。此外，当传入数据创建新的不相交区域时，TCP数据放置可以将条目添加到TCP无序表中。 TCP数据放置可以调整现有的不相交区域以反映任何更新。当TCP应用程序分配或发布缓冲区时，TCP重新组合程序可能会将数据从链接的通用缓冲区列表复制到已发布的缓冲区中。

5. 发明申请

US20050120141A1 Unified infrastructure over ethernet 有权
标题翻译：统一基础设施以太网
公开(公告)号：US20050120141A1
公开(公告)日：2005-06-02
申请号：US11007063
申请日：2004-12-08
申请人： Uri Zur , Kan Fan , Scott McDaniel , Murali Rajagopal
发明人： Uri Zur , Kan Fan , Scott McDaniel , Murali Rajagopal
IPC分类号： G06F13/38 , G06F15/16 , H04L12/46 , H04L12/66 , H04L29/06 , H04L29/08
CPC分类号： H04L45/66 , H04L29/06 , H04L67/1097 , H04L69/08 , H04L69/329
摘要： Systems and methods that provide a unified infrastructure over Ethernet are provided. In one embodiment, a method of communicating between an Ethernet-based system and a non-Ethernet-based network may include, for example, one or more of the following: generating an Ethernet frame that comprises a proxy payload, a proxy association header and an Ethernet header, the Ethernet header relating to a control proxy element; sending the Ethernet frame over an Ethernet-based network to the control proxy element; generating a non-Ethernet frame that comprises the proxy payload and a proxy header; and sending the non-Ethernet frame over a non-Ethernet-based network.
摘要翻译：提供了通过以太网提供统一基础架构的系统和方法。在一个实施例中，在基于以太网的系统和非基于以太网的网络之间通信的方法可以包括例如以下中的一个或多个：生成包括代理有效载荷的以太网帧，代理关联头和以太网报头，与控制代理元件相关的以太网报头; 将以太网帧通过基于以太网的网络发送到控制代理元件; 生成包括代理有效载荷和代理报头的非以太网帧; 并通过非基于以太网的网络发送非以太网帧。

6. 发明申请

US20070233886A1 Method and system for a one bit TCP offload 审中-公开
标题翻译：用于一比特TCP卸载的方法和系统
公开(公告)号：US20070233886A1
公开(公告)日：2007-10-04
申请号：US11434972
申请日：2006-05-16
申请人： Kan Fan
发明人： Kan Fan
IPC分类号： G06F15/16
CPC分类号： H04L69/16 , H04L29/12056 , H04L61/1505 , H04L69/12 , H04L69/161 , H04L69/321
摘要： Certain aspects of a method and system for a one bit TCP offload may comprise initiating offload processing of TCP data based on assertion of at least one bit without receiving TCP connection state information from a host. The asserted at least one bit of data may comprise at least one of: a synchronous (SYN) control bit and an acknowledgement (ACK) bit a received packet of data. A TCP passive connection lookup table (PCLT) may be checked utilizing at least one of: a source IP address, a destination IP address, a source TCP port, and a destination TCP port to determine whether the received packet of data comprising said asserted SYN control bit and said asserted ACK bit matches an entry in the PCLT.
摘要翻译：用于一比特TCP卸载的方法和系统的某些方面可以包括：基于至少一个比特的断言来启动TCP数据的卸载处理，而不从主机接收TCP连接状态信息。被断言的至少一个数据位可以包括以下至少一个：同步（SYN）控制位和确认（ACK）位接收到的数据分组。可以使用源IP地址，目的地IP地址，源TCP端口和目的地TCP端口中的至少一个来检查TCP被动连接查找表（PCLT），以确定所接收的包括所述断言的SYN的数据包控制位和所述被断言的ACK位与PCLT中的条目匹配。

7. 发明申请

US20050281280A1 Method and system for supporting hardware acceleration for iSCSI read and write operations and iSCSI chimney 有权
标题翻译：用于支持iSCSI读写操作和iSCSI烟囱硬件加速的方法和系统
公开(公告)号：US20050281280A1
公开(公告)日：2005-12-22
申请号：US11155966
申请日：2005-06-17
申请人： Uri Zur , Kan Fan , Scott McDaniel
发明人： Uri Zur , Kan Fan , Scott McDaniel
IPC分类号： H04J3/16 , H04J3/22 , H04L12/28 , H04L12/56 , H04L29/06
CPC分类号： H04L67/1097 , H04L69/16 , H04L69/32
摘要： Certain aspects of a method and system for supporting hardware acceleration for iSCSI read and write operations via a TCP offload engine may comprise pre-registering at least one buffer with hardware. An iSCSI command may be received from an initiator. An initiator test tag value, a data sequence value and/or a buffer offset value of an iSCSI buffer may be compared with the pre-registered buffer. Data may be fetched from the pre-registered buffer based on comparing the initiator test tag value, the data sequence value and/or the buffer offset value of the iSCSI buffer with the pre-registered buffer. The fetched data may be zero copied from the pre-registered buffer to the initiator.
摘要翻译：通过TCP卸载引擎支持用于iSCSI读写操作的硬件加速的方法和系统的某些方面可以包括用硬件预先注册至少一个缓冲器。可以从启动器接收iSCSI命令。可以将iSCSI缓冲器的发起者测试标签值，数据序列值和/或缓冲器偏移值与预先注册的缓冲器进行比较。可以基于将iSCSI缓冲器的启动器测试标签值，数据序列值和/或缓冲器偏移值与预先注册的缓冲器进行比较，从预先注册的缓冲器中取出数据。所获取的数据可以从预先注册的缓冲区零拷贝到发起者。

8. 发明申请

US20050281261A1 Method and system for supporting write operations for iSCSI and iSCSI chimney 审中-公开
标题翻译：支持iSCSI和iSCSI烟囱写操作的方法和系统
公开(公告)号：US20050281261A1
公开(公告)日：2005-12-22
申请号：US11156182
申请日：2005-06-17
申请人： Uri Zur , Kan Fan , Scott McDaniel
发明人： Uri Zur , Kan Fan , Scott McDaniel
IPC分类号： H04L12/28 , H04L12/46 , H04L29/06
CPC分类号： H04L69/16 , H04L12/4633 , H04L69/165 , H04L69/168 , H04L69/169
摘要： Certain embodiments of the invention may be found in a method and system for performing SCSI write operations via a TCP offload engine. Aspects of the method may comprise receiving an iSCSI write command from an initiator. At least one buffer may be allocated for handling data associated with the received iSCSI write command from the initiator. A request to transmit (R2T) signal may be received that may be transmitted by the initiator. The data may be zero copied from the allocated at least one buffer to the initiator.
摘要翻译：可以在用于经由TCP卸载引擎执行SCSI写入操作的方法和系统中找到本发明的某些实施例。该方法的方面可以包括从启动器接收iSCSI写入命令。可以分配至少一个缓冲器来处理来自发起者的与所接收的iSCSI写入命令相关联的数据。可以接收可由发起者发送的发送请求（R2T）信号。可以将数据从分配的至少一个缓冲器零拷贝到发起者。

9. 发明申请

US20050135395A1 Method and system for pre-pending layer 2 (L2) frame descriptors 审中-公开
标题翻译：预备第2层（L2）帧描述符的方法和系统
公开(公告)号：US20050135395A1
公开(公告)日：2005-06-23
申请号：US11009258
申请日：2004-12-09
申请人： Kan Fan , Scott McDaniel
发明人： Kan Fan , Scott McDaniel
IPC分类号： H04L12/56 , H04L29/08 , H04L12/28
CPC分类号： H04L49/9026 , H04L49/90 , H04L49/901 , H04L69/324
摘要： Method and system for arranging and processing packetized network information are provided herein. A single receive buffer may be allocated in a host memory for storing packet data and control data associated with a packet and a single DMA operation may be generated for transferring the packet data and the control data into the single allocated receive buffer. A plurality of the single receive buffers may be arranged so that they are located contiguously in the host memory. The packet data and the control data for the packet may be written in the single receive buffer via the single DMA operation. At least one pad byte may be inserted in the single receive buffer for byte alignment. The pad may separate the control data from the packet data in the single receive buffer. The control data may comprise packet length data, status data, and/or checksum data.
摘要翻译：本文提供了用于布置和处理分组网络信息的方法和系统。可以在主机存储器中分配单个接收缓冲器，用于存储分组数据和与分组相关联的控制数据，并且可以生成用于将分组数据和控制数据传送到单个分配的接收缓冲器中的单个DMA操作。多个单个接收缓冲器可以被布置成使得它们被连接地位于主机存储器中。分组数据和分组的控制数据可以经由单个DMA操作被写入单个接收缓冲器。在单个接收缓冲器中可以插入至少一个焊盘字节用于字节对齐。垫可以将控制数据与单个接收缓冲器中的分组数据分离。控制数据可以包括分组长度数据，状态数据和/或校验和数据。

10. 发明申请

US20060007926A1 System and method for providing pooling or dynamic allocation of connection context data 审中-公开
标题翻译：提供连接上下文数据的池或动态分配的系统和方法
公开(公告)号：US20060007926A1
公开(公告)日：2006-01-12
申请号：US11018611
申请日：2004-12-20
申请人： Uri Zur , Steven Lindsay , Kan Fan , Scott McDaniel
发明人： Uri Zur , Steven Lindsay , Kan Fan , Scott McDaniel
IPC分类号： H04L12/56
CPC分类号： H04L12/66
摘要： Aspects for providing pooling or dynamic allocation of connection context data may comprise receiving data associated with a first network protocol via a first network interface and receiving data associated with a second network protocol via a second network interface. The first and the second network interfaces are adapted to aggregate the received data. A single context memory may be shared and utilized for processing data associated with the first network protocol and data associated with the second network protocol. The first network interface may be coupled to a first connection and the second network interface may be coupled to a second connector. At least a portion of the received data associated with the first and/or second network protocols may be offloaded for processing using the single context memory. The received data associated with the first and/or second network protocols may comprise traffic different data and/or control data.
摘要翻译：用于提供连接上下文数据的汇集或动态分配的方面可以包括经由第一网络接口接收与第一网络协议相关联的数据，以及经由第二网络接口接收与第二网络协议相关联的数据。第一和第二网络接口适于聚合所接收的数据。单个上下文存储器可以被共享并用于处理与第一网络协议相关联的数据和与第二网络协议相关联的数据。第一网络接口可以耦合到第一连接，并且第二网络接口可以耦合到第二连接器。可以卸载与第一和/或第二网络协议相关联的接收数据的至少一部分，以便使用单个上下文存储器进行处理。与第一和/或第二网络协议相关联的所接收的数据可以包括流量不同的数据和/或控制数据。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式