专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20070113290A1 Method of detecting and preventing illicit use of certain network protocols without degrading legitimate use thereof 审中-公开
标题翻译：检测和防止非法使用某些网络协议而不降低其合法使用的方法
公开(公告)号：US20070113290A1
公开(公告)日：2007-05-17
申请号：US10581120
申请日：2004-11-08
申请人： Olivier Charles , Laurent Butti , Franck Veysset
发明人： Olivier Charles , Laurent Butti , Franck Veysset
IPC分类号： H04L9/32
CPC分类号： H04L63/1441 , H04L63/1408
摘要： A method of preventing illegitimate use of a network protocol consisting of a stream of data packets, wherein the method comprises steps of calculating a delay that is an increasing function of the bit rate of a stream coming from a machine, and forwarding packets of the stream after said delay.
摘要翻译：一种防止非法使用由数据分组流组成的网络协议的方法，其中所述方法包括以下步骤：计算作为来自机器的流的比特率的递增函数的延迟，以及转发所述流的分组之后延迟。

2. 发明授权

US07869451B2 Method for operating a local computer network connected to a remote private network by an IPsec tunnel, software module and IPsec gateway 有权
标题翻译：通过IPsec隧道，软件模块和IPsec网关操作连接到远程专用网的本地计算机网络的方法
公开(公告)号：US07869451B2
公开(公告)日：2011-01-11
申请号：US11300107
申请日：2005-12-14
申请人： Olivier Charles , Laurent Butti , Franck Veysset
发明人： Olivier Charles , Laurent Butti , Franck Veysset
IPC分类号： H04L12/28 , H04L29/06
CPC分类号： H04L12/4641
摘要： The invention relates to a method in particular enabling the computer terminal (T_L) of a local network (RES_L), connected to a gateway (PASS_D) of a remote network (RES_D) by an IPsec tunnel in blocking mode, to launch a print job on a printer (E_L) belonging to the local network. To do this, the gateway (PASS_D) stores the correspondence between the public address (AD_1) of the local router (ROUT_L) providing the connection of the terminal to the Internet, and the private address (ad_3) assigned to the terminal (T_L) in the addressing plan of the remote network (RES_D) during the establishment of the tunnel, and sends the print flow to the local router (ROUT_L), which directs it to the local printer (E_L) by a port translation technique.
摘要翻译：本发明涉及一种方法，特别是通过阻塞模式下的IPsec隧道使本地网络（RES_L）的计算机终端（RES_L）连接到远程网络（RES_D）的网关（PASS_D））以启动打印作业在属于本地网络的打印机（E_L）上。为此，网关（PASS_D）存储提供终端连接到互联网的本地路由器（ROUT_L）的公共地址（AD_1）与分配给终端的专用地址（ad_3）（T_L）之间的对应关系，在建立隧道期间在远程网络（RES_D）的寻址计划中，并将打印流发送到本地路由器（ROUT_L），该路由器通过端口转换技术将其引导到本地打印机（E_L）。

3. 发明授权

US07730527B2 Procedure for controlling access to a source terminal network using a block mode tunnel and computer programs for its implementation 有权
标题翻译：使用块模式隧道控制对源终端网络的访问的过程以及用于其实现的计算机程序
公开(公告)号：US07730527B2
公开(公告)日：2010-06-01
申请号：US11139034
申请日：2005-05-27
申请人： Olivier Charles , Laurent Butti , Franck Veysset
发明人： Olivier Charles , Laurent Butti , Franck Veysset
IPC分类号： G06F9/00
CPC分类号： H04L63/0272 , H04L63/0227 , H04L63/08 , H04L63/0807 , H04L67/02 , H04W12/02 , H04W12/06 , H04W12/08 , H04W74/00 , H04W84/12
摘要： Disclosed is a method and system for controlling access of a source terminal to a network that includes, in particular, a firewall and an authentication portal that maintains the firewall during an access request originating from the source terminal and which permits access when periodically and subsequently provided with a valid authentication token. The source terminal can also communicate in tunnel mode with the destination terminal of the network via a block mode tunnel. Authentication tokens are periodically supplied on the OSI Layer 2 level so that the tokens continue to be provided during a block tunnel mode communication. A network operator can maintain access control using a captive portal paradigm even when a user chooses to use a block mode tunnel.
摘要翻译：公开了一种用于控制源终端到网络的访问的方法和系统，其特别地包括防火墙和认证门户，所述防火墙和认证门户在源端口发起的访问请求期间维护防火墙，并且当周期性地并随后提供访问权限时具有有效的身份验证令牌。源终端还可以以隧道模式通过块模式隧道与网络的目的地终端进行通信。在OSI第2层上周期性地提供认证令牌，以便在块隧道模式通信期间继续提供令牌。即使用户选择使用块模式隧道，网络运营商也可以使用强制门户范例来维护访问控制。

4. 发明申请

US20060171401A1 Method for operating a local computer network connected to a remote private network by an IPsec tunnel, software module and IPsec gateway 有权
标题翻译：通过IPsec隧道，软件模块和IPsec网关操作连接到远程专用网的本地计算机网络的方法
公开(公告)号：US20060171401A1
公开(公告)日：2006-08-03
申请号：US11300107
申请日：2005-12-14
申请人： Olivier Charles , Laurent Butti , Franck Veysset
发明人： Olivier Charles , Laurent Butti , Franck Veysset
IPC分类号： H04L12/56
CPC分类号： H04L12/4641
摘要： The invention relates to a method in particular enabling the computer terminal (T_L) of a local network (RES_L), connected to a gateway (PASS_D) of a remote network (RES_D) by an IPsec tunnel in blocking mode, to launch a print job on a printer (E_L) belonging to the local network. To do this, the gateway (PASS_D) stores the correspondence between the public address (AD_1) of the local router (ROUT_L) providing the connection of the terminal to the Internet, and the private address (ad_3) assigned to the terminal (T_L) in the addressing plan of the remote network (RES_D) during the establishment of the tunnel, and sends the print flow to the local router (ROUT_L), which directs it to the local printer (E_L) by a port translation technique.
摘要翻译：本发明涉及一种方法，特别是通过阻塞模式下的IPsec隧道使本地网络（RES_L）的计算机终端（RES_L）连接到远程网络（RES_D）的网关（PASS_D））以启动打印作业在属于本地网络的打印机（E_L）上。为此，网关（PASS_D）存储提供终端连接到互联网的本地路由器（ROUT_L）的公共地址（AD_1）与分配给终端的专用地址（ad_3）（T_L）之间的对应关系，在建立隧道期间在远程网络（RES_D）的寻址计划中，并将打印流发送到本地路由器（ROUT_L），该路由器通过端口转换技术将其引导到本地打印机（E_L）。

5. 发明申请

US20050273848A1 Procedure for controlling access to a source terminal network using a block mode tunnel and computer programs for its implementation 有权
标题翻译：使用块模式隧道控制对源终端网络的访问的过程以及用于其实现的计算机程序
公开(公告)号：US20050273848A1
公开(公告)日：2005-12-08
申请号：US11139034
申请日：2005-05-27
申请人： Olivier Charles , Laurent Butti , Franck Veysset
发明人： Olivier Charles , Laurent Butti , Franck Veysset
IPC分类号： G06F11/30 , G06F12/14 , H04L9/00 , H04L9/32 , H04L12/28 , H04L12/56 , H04L29/06
CPC分类号： H04L63/0272 , H04L63/0227 , H04L63/08 , H04L63/0807 , H04L67/02 , H04W12/02 , H04W12/06 , H04W12/08 , H04W74/00 , H04W84/12
摘要： The invention relates, in particular, to a procedure for controlling access of a source terminal (T_SOUR) to a network that includes, in particular, a firewall (PF) and an authentification portal; this portal places and maintains the firewall in an access authorisation status in response to a valid access request in basic mode originating from the source terminal when periodically and subsequently provided with a valid authentification token. The source terminal can also communicate in tunnel mode with the destination terminal of the network via a block tunnel (M_BLQ.) According to the invention, the periodic supply of the authentification token is performed by the transmission on the ISO model Level 2 layer (L2) so that the token continues to be provided during a block tunnel mode communication.
摘要翻译：本发明特别涉及用于控制源终端（T_SOUR）到包括特别是防火墙（PF）和认证门户的网络的接入的过程; 响应于来自源终端的基本模式的有效访问请求，当定期地并随后提供有效的认证令牌时，该门户将防火墙放置并维护防火墙的访问授权状态。源终端还可以通过块隧道（M_BLQ）与隧道目的地终端以隧道模式通信。根据本发明，认证令牌的周期性供应是通过ISO模型2层（L 2），使得令牌在块隧道模式通信期间继续被提供。

6. 发明申请

US20080250498A1 Method, Device a Program for Detecting an Unauthorised Connection to Access Points 审中-公开
标题翻译：方法，设备检测未经授权的连接到接入点的程序
公开(公告)号：US20080250498A1
公开(公告)日：2008-10-09
申请号：US11664131
申请日：2005-09-21
申请人： Laurent Butti , Roland Duffau , Franck Veysset
发明人： Laurent Butti , Roland Duffau , Franck Veysset
IPC分类号： H04L9/32 , G06F12/14
CPC分类号： H04W12/12 , H04L63/1408 , H04L63/1466 , H04W12/00502 , H04W24/00 , H04W88/08
摘要： This method of detecting address spoofing in a wireless network, comprising the steps of obtaining frames comprising an address of a device having sent the frame and a timestamp representative of the time of sending of the frame by said device; of analyzing the timestamps included in the frames having one and the same sending device address; and of detecting a spoofing of said address according to the analysis of said timestamps.
摘要翻译：一种在无线网络中检测地址欺骗的方法，包括以下步骤：获得包括发送帧的设备的地址的帧和表示所述设备发送帧的时间的时间戳; 分析包含在具有同一发送设备地址的帧中的时间戳; 以及根据所述时间戳的分析来检测所述地址的欺骗。

7. 发明授权

US08724506B2 Detecting double attachment between a wired network and at least one wireless network 失效
标题翻译：检测有线网络和至少一个无线网络之间的双连接
公开(公告)号：US08724506B2
公开(公告)日：2014-05-13
申请号：US11988559
申请日：2006-06-28
申请人： Laurent Butti , Eric Leclerq , Franck Veysset
发明人： Laurent Butti , Eric Leclerq , Franck Veysset
IPC分类号： H04L12/28
CPC分类号： H04L61/2015 , H04L63/1408
摘要： The invention concerns the detecting of a double attachment of an equipment communicating both with a wireless network and with a wired network, in particular when the connections with said networks are established by sending a connection configuration request comprising an identifier of the equipment, such as DHCP Host Name. The invention is characterized in that it consists: a) in detecting, at least on the wireless network, connection configuration requests emitted by the equipments (E10), b) analyzing the contents of the requests and extracting the equipment identifiers (E11), c) from one equipment identifier extracted at step b), determining whether said equipment has additionally sent a connection configuration request at least to the wired network with the same identifier (E13), and d) triggering an alarm if the result at step c) is positive (E16).
摘要翻译：本发明涉及检测与无线网络和有线网络通信的设备的双重附件，特别是当通过发送包括诸如DHCP的设备的标识符的连接配置请求来建立与所述网络的连接时主机名。本发明的特征在于：a）至少在无线网络上检测由设备（E10）发出的连接配置请求，b）分析请求的内容并提取设备标识符（E11），c ），确定所述设备是否至少向具有相同标识符（E13）的有线网络发送连接配置请求，以及d）如果步骤c）的结果是正（E16）。

8. 发明申请

US20080022402A1 Method of detecting that a unit is sending a large number of frames over a network 审中-公开
标题翻译：检测单元通过网络发送大量帧的方法
公开(公告)号：US20080022402A1
公开(公告)日：2008-01-24
申请号：US11879863
申请日：2007-07-18
申请人： Stanislas Francfort , Laurent Butti , Franck Veysset
发明人： Stanislas Francfort , Laurent Butti , Franck Veysset
IPC分类号： G06F9/48
CPC分类号： H04L63/1408 , H04L63/1458
摘要： A method of detecting that a unit communicating with a communications network is sending a large number of frames over that network, said method including a step of analyzing a distribution of the time shifts between frames sent over the network in order to determine if said distribution corresponds to a distribution with memory.
摘要翻译：一种检测与通信网络通信的单元的方法是通过该网络发送大量帧，所述方法包括分析通过网络发送的帧之间的时间偏移分布的步骤，以便确定所述分布是否对应于与记忆分配。

9. 发明申请

US20080141369A1 Method, Device and Program for Detecting Address Spoofing in a Wireless Network 审中-公开
标题翻译：用于检测无线网络中地址欺骗的方法，设备和程序
公开(公告)号：US20080141369A1
公开(公告)日：2008-06-12
申请号：US11883140
申请日：2006-01-24
申请人： Laurent Butti , Roland Duffau , Franck Veysset
发明人： Laurent Butti , Roland Duffau , Franck Veysset
IPC分类号： G06F11/00
CPC分类号： H04W12/12 , H04L63/1408 , H04L63/1466 , H04W8/26 , H04W24/00
摘要： A method is provided whereby management frames, transmitted over the wireless network and comprising each an address of a frame transmitter and a frame body containing a plurality of information fields are obtained. Some of the information fields contained in the frame body of several management frames obtained successively and having the same transmitter address are analyzed so as to trigger an alarm in case of detected variation in said information fields.
摘要翻译：提供了一种方法，其中获得通过无线网络发送并且包括帧发送器的地址和包含多个信息字段的帧体的管理帧。分析连续获得并具有相同发送器地址的几个管理帧的帧体中的一些信息字段，以便在所述信息字段中检测到变化的情况下触发报警。

10. 发明申请

US20090213752A1 Detecting Double Attachment Between a Wired Network and At Least One Wireless Network 失效
标题翻译：检测有线网络与至少一个无线网络之间的双重连接
公开(公告)号：US20090213752A1
公开(公告)日：2009-08-27
申请号：US11988559
申请日：2006-06-28
申请人： Laurent Butti , Eric Leclerq , Franck Veysset
发明人： Laurent Butti , Eric Leclerq , Franck Veysset
IPC分类号： H04L12/28
CPC分类号： H04L61/2015 , H04L63/1408
摘要： The invention concerns the detecting of a double attachment of an equipment communicating both with a wireless network and with a wired network, in particular when the connections with said networks are established by sending a connection configuration request comprising an identifier of the equipment, such as DHCP Host Name. The invention is characterized in that it consists: a) in detecting, at least on the wireless network, connection configuration requests emitted by the equipments (E10), b) analyzing the contents of the requests and extracting the equipment identifiers (E11), c) from one equipment identifier extracted at step b), determining whether said equipment has additionally sent a connection configuration request at least to the wired network with the same identifier (E13), and d) triggering an alarm if the result at step c) is positive (E16).
摘要翻译：本发明涉及检测与无线网络和有线网络通信的设备的双重附件，特别是当通过发送包括诸如DHCP的设备的标识符的连接配置请求来建立与所述网络的连接时主机名。本发明的特征在于：a）至少在无线网络上检测由设备（E10）发出的连接配置请求，b）分析请求的内容并提取设备标识符（E11），c ），确定所述设备是否至少向具有相同标识符（E13）的有线网络发送连接配置请求，以及d）如果步骤c）的结果是正（E16）。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式