专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20170302673A1 SYSTEM AND METHOD FOR PROVIDING AN INTEGRATED FIREWALL FOR SECURE NETWORK COMMUNICATION IN A MULTI-TENANT ENVIRONMENT 审中-公开
公开(公告)号：US20170302673A1
公开(公告)日：2017-10-19
申请号：US15635418
申请日：2017-06-28
申请人： Oracle International Corporation
发明人： Vadim Makhervaks , Richard Mousseau , Bjørn Dag Johnsen , Sumanta Chatterjee , Avneesh Pant , Jean De Lavarene , Kant C. Patel , Bhaskar Mathur , Feroz Alam Khan , Sudeep Vatsanath Reguna
IPC分类号： H04L29/06
CPC分类号： H04L63/101 , H04L63/0236 , H04L63/0254 , H04L63/1458 , H04L63/20
摘要： An integrated firewall provides security in a multi-tenant environment having a connection-based switched fabric directly connecting database servers which provide a plurality of database services with application servers hosting database service consumers each having a different database service consumer identity. The firewall functionality integrated into each database server provides access control by discarding communication packets which do not include a database service consumer identity and using the database service consumer identity in combination with an access control list to control access from the database service consumers to the database services. The access control includes address resolution access control, connection establishment access control, and data exchange access control based on said access control list. The integrated firewall enables direct connection of database servers and application servers via an InfiniBand network providing without requiring a separate intermediary firewall appliance or security node.

2. 发明授权

US08838535B2 Providing services across systems that manage distributed replicas 有权
标题翻译：在管理分布式副本的系统之间提供服务
公开(公告)号：US08838535B2
公开(公告)日：2014-09-16
申请号：US13645819
申请日：2012-10-05
申请人： Oracle International Corporation
发明人： Wei-Ming Hu , Lakshminaray Chidambaran , Mark Dilman , Feroz A. Khan , Bhaskar Mathur , Kevin S. Neel , Leonid Novak , Kant C. Patel , Saravanakumar Ramasubramanian , Michael J. Stewart , Hubert Sun
IPC分类号： G06F17/30
CPC分类号： G06F17/30595 , H04L41/02 , H04L67/1002
摘要： Techniques are provided to allow users to define a global service that is offered across multiple replicated databases. Database clients connect to and use a global service just as they do with regular services on a single database today. Upon receiving a connection request, a collection of components, referred to collectively as the Global Data Service framework (GDS framework), automatically chooses the best database server instances to which to connect a client. Once those connections have been established, the clients determine which database server instance, of those database server instances to which they are connected, to send requests to based, at least in part, on advisory messages sent to the clients by the GDS framework.
摘要翻译：提供技术以允许用户定义跨多个复制数据库提供的全局服务。数据库客户端连接到并使用全局服务，就像现在一个数据库上的常规服务一样。一旦接收到连接请求，将统称为全局数据服务框架（GDS框架）的组件集合自动选择连接客户端的最佳数据库服务器实例。一旦建立了这些连接，客户端将确定哪些数据库服务器实例（与其连接的数据库服务器实例）发送请求至少部分地基于由GDS框架发送给客户端的咨询消息。

3. 发明授权

US11122019B2 Systems and methods for client collaborated migration of live TLS connection 有权
公开(公告)号：US11122019B2
公开(公告)日：2021-09-14
申请号：US16570364
申请日：2019-09-13
申请人： Oracle International Corporation
发明人： Abhishek Dadhich , Kant C. Patel , Feroz Alam Khan , Bhaskar Mathur , Srinivas Pamu
IPC分类号： H04L29/06 , H04L29/08
摘要： Described is an improved approach to ensure high availability for established sessions (e.g., application layer sessions) over network connections that negotiates and renegotiates encryption keys (e.g., TLS/SSL) at clean boundaries to ensure in-transit data are properly handled during migration of an application (e.g., a reverse proxy server instance). Connected TCP sessions may be handed off to another application (e.g., from existing proxy server to new/upgraded proxy server) and after establishing a new TLS session with a new encryption key, data transfer may be resumed between a client and a server using the new/upgraded application in a client-server architecture.

4. 发明授权

US09621964B2 Aborting data stream using a location value 有权
公开(公告)号：US09621964B2
公开(公告)日：2017-04-11
申请号：US13632139
申请日：2012-09-30
申请人： Oracle International Corporation
发明人： Bhaskar Mathur , Feroz Alam Khan , Kant C. Patel
IPC分类号： G06F15/16 , H04N21/845 , H04N21/44 , H04N21/6332 , H04L1/00
CPC分类号： H04N21/8455 , H04N21/44008 , H04N21/6332
摘要： Techniques and systems that allow receiving a data stream and a location value. The location value, in one embodiment, is indicative of a location in the data stream at which the data stream has been aborted. This value may be determined by a sending entity and sent to a receiving entity. In various embodiments, the receiving entity may compute the remaining amount of data to be received in the data stream, and then receive that amount of data. In some embodiments, a checkpoint value may be used in conjunction with the location value to indicate an abort location for a data stream. A checkpoint value may correspond to an amount of data between successive checkpoints in the data stream. In some embodiments, upon aborting a data stream, a receiving entity receives data until a next checkpoint in the data stream.

5. 发明申请

US20140095665A1 ABORTING DATA STREAM USING A LOCATION VALUE 有权
标题翻译：使用位置值排列数据流
公开(公告)号：US20140095665A1
公开(公告)日：2014-04-03
申请号：US13632139
申请日：2012-09-30
申请人： ORACLE INTERNATIONAL CORPORATION
发明人： Bhaskar Mathur , Feroz Alam Khan , Kant C. Patel
IPC分类号： G06F15/16
CPC分类号： H04N21/8455 , H04N21/44008 , H04N21/6332
摘要： Techniques and systems that allow receiving a data stream and a location value. The location value, in one embodiment, is indicative of a location in the data stream at which the data stream has been aborted. This value may be determined by a sending entity and sent to a receiving entity. In various embodiments, the receiving entity may compute the remaining amount of data to be received in the data stream, and then receive that amount of data. In some embodiments, a checkpoint value may be used in conjunction with the location value to indicate an abort location for a data stream. A checkpoint value may correspond to an amount of data between successive checkpoints in the data stream. In some embodiments, upon aborting a data stream, a receiving entity receives data until a next checkpoint in the data stream.
摘要翻译：允许接收数据流和位置值的技术和系统。在一个实施例中，位置值指示数据流已被中止的数据流中的位置。该值可以由发送实体确定并发送给接收实体。在各种实施例中，接收实体可以计算要在数据流中接收的数据的剩余量，然后接收该数据量。在一些实施例中，检查点值可以与位置值结合使用以指示数据流的中止位置。检查点值可以对应于数据流中连续检查点之间的数据量。在一些实施例中，在中止数据流时，接收实体接收数据直到数据流中的下一个检查点。

6. 发明授权

US09825960B2 System and method providing automatic pushdown hierarchical filters 有权
公开(公告)号：US09825960B2
公开(公告)日：2017-11-21
申请号：US14724874
申请日：2015-05-29
申请人： ORACLE INTERNATIONAL CORPORATION
发明人： Feroz Alam Khan , Bhaskar Mathur , Kant C. Patel
IPC分类号： H04L29/06
CPC分类号： H04L63/102 , H04L63/0263 , H04L63/16 , H04L63/20
摘要： Systems, methods, and other embodiments are disclosed that are configured to generate a hierarchy of access rules in a protocol stack. Access rules corresponding to a first layer in a protocol stack are analyzed. The access rules determine, at the first layer, whether network sources are permitted access to a computing device. Dependent access rules are generated based at least in part on a combination of the access rules from the first layer. The dependent access rules are pushed down to a second layer in the protocol stack by implementing the dependent access rules at the second layer to determine, at the second layer, whether the network sources are permitted access to the computing device.

7. 发明申请

US20190102216A1 Automatically Limiting Repeated Checking On Completion Of A Command Without Relinquishing A Processor 审中-公开
公开(公告)号：US20190102216A1
公开(公告)日：2019-04-04
申请号：US16052473
申请日：2018-08-01
申请人： Oracle International Corporation
发明人： Bhaskar Mathur , Feroz Alam Khan , Kant C. Patel
IPC分类号： G06F9/48
摘要： A process or thread is implemented to issue a command which executes without use of a processor that issues the command, retain control of the processor to check whether the issued command has completed, and when the issued command has not completed repeat the checking without relinquishing the processor, until a limiting condition is satisfied. The limiting condition may be determined specifically for a current execution of the command, based on one or more factors, such as durations of executions of the command after start of the process or thread and/or an indicator of delay in a current execution of the command. When the limiting condition is satisfied, the processor is relinquished by the process or thread issuing a sleep command, after setting an interrupt. After the command completes, the limiting condition is determined anew based on the duration of the current execution, for use in a next execution.

8. 发明授权

US09888010B2 System and method for providing an integrated firewall for secure network communication in a multi-tenant environment 有权
公开(公告)号：US09888010B2
公开(公告)日：2018-02-06
申请号：US15635418
申请日：2017-06-28
申请人： Oracle International Corporation
发明人： Vadim Makhervaks , Richard Mousseau , Bjørn Dag Johnsen , Sumanta Chatterjee , Avneesh Pant , Jean De Lavarene , Kant C. Patel , Bhaskar Mathur , Feroz Alam Khan , Sudeep Vatsanath Reguna
IPC分类号： H04L29/06
CPC分类号： H04L63/101 , H04L63/0236 , H04L63/0254 , H04L63/1458 , H04L63/20
摘要： An integrated firewall provides security in a multi-tenant environment having a connection-based switched fabric directly connecting database servers which provide a plurality of database services with application servers hosting database service consumers each having a different database service consumer identity. The firewall functionality integrated into each database server provides access control by discarding communication packets which do not include a database service consumer identity and using the database service consumer identity in combination with an access control list to control access from the database service consumers to the database services. The access control includes address resolution access control, connection establishment access control, and data exchange access control based on said access control list. The integrated firewall enables direct connection of database servers and application servers via an InfiniBand network providing without requiring a separate intermediary firewall appliance or security node.

9. 发明授权

US09723008B2 System and method for providing an integrated firewall for secure network communication in a multi-tenant environment 有权
公开(公告)号：US09723008B2
公开(公告)日：2017-08-01
申请号：US14848109
申请日：2015-09-08
申请人： Oracle International Corporation
发明人： Vadim Makhervaks , Richard Mousseau , Bjørn Dag Johnsen , Sumanta Chatterjee , Avneesh Pant , Jean De Lavarene , Kant C. Patel , Bhaskar Mathur , Feroz Alam Khan , Sudeep Vatsanath Reguna
IPC分类号： H04L29/06
CPC分类号： H04L63/101 , H04L63/0236 , H04L63/0254 , H04L63/1458 , H04L63/20
摘要： An integrated firewall provides security in a multi-tenant environment having a connection-based switched fabric directly connecting database servers which provide a plurality of database services with application servers hosting database service consumers each having a different database service consumer identity. The firewall functionality integrated into each database server provides access control by discarding communication packets which do not include a database service consumer identity and using the database service consumer identity in combination with an access control list to control access from the database service consumers to the database services. The access control includes address resolution access control, connection establishment access control, and data exchange access control based on said access control list. The integrated firewall enables direct connection of database servers and application servers via an InfiniBand network providing without requiring a separate intermediary firewall appliance or security node.

10. 发明申请

US20160072816A1 SYSTEM AND METHOD FOR PROVIDING AN INTEGRATED FIREWALL FOR SECURE NETWORK COMMUNICATION IN A MULTI-TENANT ENVIRONMENT 有权
标题翻译：用于在多个环境中提供安全网络通信的集成防火墙的系统和方法
公开(公告)号：US20160072816A1
公开(公告)日：2016-03-10
申请号：US14848109
申请日：2015-09-08
申请人： Oracle International Corporation
发明人： Vadim Makhervaks , Richard Mousseau , Bjørn Dag Johnsen , Sumanta Chatterjee , Avneesh Pant , Jean De Lavarene , Kant C. Patel , Bhaskar Mathur , Feroz Alam Khan , Sudeep Vatsanath Reguna
IPC分类号： H04L29/06
CPC分类号： H04L63/101 , H04L63/0236 , H04L63/0254 , H04L63/1458 , H04L63/20
摘要： An integrated firewall provides security in a multi-tenant environment having a connection-based switched fabric directly connecting database servers which provide a plurality of database services with application servers hosting database service consumers each having a different database service consumer identity. The firewall functionality integrated into each database server provides access control by discarding communication packets which do not include a database service consumer identity and using the database service consumer identity in combination with an access control list to control access from the database service consumers to the database services. The access control includes address resolution access control, connection establishment access control, and data exchange access control based on said access control list. The integrated firewall enables direct connection of database servers and application servers via an InfiniBand network providing without requiring a separate intermediary firewall appliance or security node.
摘要翻译：集成防火墙在多承租人环境中提供安全性，其具有直接连接数据库服务器的基于连接的交换结构，所述数据库服务器向承载具有不同数据库服务消费者身份的数据库服务消费者的应用服务器提供多个数据库服务。集成到每个数据库服务器中的防火墙功能通过丢弃不包括数据库服务消费者身份的通信数据包并使用数据库服务消费者身份与访问控制列表组合来控制从数据库服务使用者到数据库服务的访问来提供访问控制。访问控制包括基于所述访问控制列表的地址解析访问控制，连接建立访问控制和数据交换访问控制。集成防火墙可以通过InfiniBand网络直接连接数据库服务器和应用程序服务器，而无需单独的中间防火墙设备或安全节点。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式