专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20180241775A1 SYSTEMS AND METHODS FOR UTILIZING CLIENT SIDE AUTHENTICATION TO SELECT SERVICES AVAILABLE AT A GIVEN PORT NUMBER 审中-公开
公开(公告)号：US20180241775A1
公开(公告)日：2018-08-23
申请号：US15802104
申请日：2017-11-02
申请人： Akamai Technologies, Inc.
发明人： Simon E. Vera-Schockner
IPC分类号： H04L29/06 , H04L9/32
CPC分类号： H04L63/166 , H04L9/3263 , H04L63/0272 , H04L63/0428 , H04L63/0823 , H04L69/162 , H04L69/30 , H04L69/321
摘要： Typically, clients request a service from a computer hosting multiple services by specifying a destination port number associated with the desired service. In embodiments, the functionality of such a host computer is enhanced by having it condition client access to services available at a particular port number based on client authentication and/or authorization. A host computer can change the service(s) available at a given port number on a client by client basis, enabling access to service(s) for trusted clients unavailable to untrusted clients. Preferably, client trust is based on client authentication via a certificate and a valid, signed transport layer security (TLS) handshake (or similar mechanism in other protocol contexts). In some embodiments, an authorization step can be added following authentication. The systems and methods disclosed herein find wide uses in bundling services on ports, as well as protecting access to services from untrusted and/or malicious clients, among others.

2. 发明授权

US10021032B2 Service specific traffic handling 有权
公开(公告)号：US10021032B2
公开(公告)日：2018-07-10
申请号：US15137074
申请日：2016-04-25
申请人： Telefonaktiebolaget LM Ericsson (publ)
发明人： Ulf Mattsson , Victor Manuel Avila Gonzalez , Daniel Mcgillivray
IPC分类号： H04L12/28 , H04L12/859 , H04L12/857 , H04L12/24 , H04L12/947 , H04L12/741 , H04L12/725 , H04L12/715 , H04L29/08 , H04L29/06 , H04L29/12
CPC分类号： H04L47/2475 , H04L41/0893 , H04L45/306 , H04L45/64 , H04L45/745 , H04L47/2491 , H04L49/25 , H04L61/6063 , H04L67/125 , H04L67/14 , H04L67/2823 , H04L69/00 , H04L69/162 , H04L69/22 , H04L69/30
摘要： A device, such as a terminal device, for example, has an operating system (OS) and an application program that executes on the OS. When executing on the device, the application program configures the device to communicate packet data with a server device, and to handle service-specific traffic, and application-specific traffic, in accordance with a distributed port mapping policy.

3. 发明申请

US20180069755A1 METHOD AND SYSTEM FOR RESTARTING NETWORK SERVICE WITHOUT PACKET LOSS AND WITH ZERO DOWNTIME 审中-公开
公开(公告)号：US20180069755A1
公开(公告)日：2018-03-08
申请号：US15552216
申请日：2016-05-30
申请人： WANGSU SCIENCE & TECHNOLOGY CO.,LTD.
发明人： Xun CHEN
IPC分类号： H04L12/24 , H04L12/741 , G06F9/445
CPC分类号： H04L41/0813 , G06F9/44505 , H04L41/5041 , H04L41/5077 , H04L45/74 , H04L69/30
摘要： The present disclosure discloses a method and system for restarting the network service with zero downtime, comprising: a) listening, by an original process of the network service, on a first port; (b) configuring and initiating a transition process, wherein the configuring includes causing the transition process to listen on a second port different from the first port of the original process; (c) running a connection tracking module and, meanwhile adding an iptables rule to redirect a connection directed to the first port to the second port; (d) waiting until existing connections on the original process are processed completely, then exiting the original process; (e) initiating a new process on the first port according to a new configuring file; (f) reconfiguring the iptables rule to cancel port redirection; and (g) waiting until existing connections on the transition process are processed completely, then exiting the transition process.

4. 发明申请

US20180054500A1 ORCHESTRATING RESOURCES IN A MULTILAYER COMPUTING ENVIRONMENT BY SENDING AN ORCHESTRATION MESSAGE BETWEEN LAYERS 审中-公开
公开(公告)号：US20180054500A1
公开(公告)日：2018-02-22
申请号：US15800509
申请日：2017-11-01
申请人： International Business Machines Corporation
发明人： Thomas E. Chefalas , David M. Egle , Daniel L. Hiebert , Dennis D. Jurgensen , Arthur J. Meyer, III , David M. Schultz , Peter A. Singh
IPC分类号： H04L29/08 , G06F9/50
CPC分类号： H04L69/30 , G06F9/5038 , G06F9/5066 , G06F9/5072 , G06F9/547 , G06F2009/4557 , H04L67/10
摘要： Software that generates a message containing operations for multiple layers in a multi-layer environment, by performing the following operations: (i) receiving an operation to perform across a multilayer computing environment; (ii) generating a message for performing the operation across the multilayer computing environment, wherein the message includes a plurality of layer portions that include sub-operation(s) of the operation, wherein each layer portion corresponds to a respective layer in the multilayer computing environment; and (iii) orchestrating performance of the operation by sending the message between layers in the multilayer computing environment according to a sequence for performing sub-operation(s) indicated in the message, wherein when the message is located at a respective layer, the layer performs a respective set of sub-operation(s) according to the respectively corresponding layer portion for the layer in the message.

5. 发明授权

US09888098B2 Orchestrating resources in a multilayer computing environment by sending an orchestration message between layers 有权
公开(公告)号：US09888098B2
公开(公告)日：2018-02-06
申请号：US14739032
申请日：2015-06-15
申请人： International Business Machines Corporation
发明人： Thomas E. Chefalas , David M. Egle , Daniel L. Hiebert , Dennis D. Jurgensen , Arthur J. Meyer, III , David M. Schultz , Peter A. Singh
IPC分类号： G06F15/16 , H04L29/08 , G06F9/50 , G06F9/455
CPC分类号： H04L69/30 , G06F9/5072 , G06F2009/4557 , H04L67/10
摘要： Software that generates a message containing program instructions for multiple layers in a multi-layer environment, by performing the following operations: (i) receiving an operation to perform across a multilayer computing environment; (ii) generating a message for performing the operation across the multilayer computing environment, wherein the message includes a plurality of layer portions, wherein each layer portion corresponds to a respective layer in the multilayer computing environment and includes computer program instructions for performing a set of sub-operation(s) of the operation; and (iii) orchestrating, by one or more processors, performance of the operation by sending the message between layers in the multilayer computing environment, wherein when the message is located at a respective layer, the layer performs its respective set of sub-operation(s) according to the computer program instructions included in the layer's respectively corresponding layer portion of the message.

6. 发明授权

US09740523B2 Optimizing stream-mode content cache 有权
公开(公告)号：US09740523B2
公开(公告)日：2017-08-22
申请号：US14447349
申请日：2014-07-30
申请人： Dennis Vadura , Wei Kang Tsai
发明人： Dennis Vadura , Wei Kang Tsai
IPC分类号： G06F15/16 , G06F9/48 , H04L29/08 , H04L29/06
CPC分类号： G06F9/4881 , H04L67/02 , H04L67/2842 , H04L69/16 , H04L69/30 , H04L69/321
摘要： A hybrid modular appliance or electronic device allows a user to plug a number of snap-together component modules of different types into a base device, so that the resulting assembly performs a custom-designed functionality. With no attached component modules, the base device functions as a standalone consumer or office appliance. At least one component module has its functionality not supporting the functionality of the base device, thereby allowing the resulting assembly a hybrid device. Examples of the hybrid modular devices include a TV-Wi-Fi-router, and a TV-storage-DVR-Wi-Fi-router. A hybrid modular device can serve as a videoconference device, a music jukebox, or a home theater unit.

7. 发明授权

US09634948B2 Management of addresses in virtual machines 有权
公开(公告)号：US09634948B2
公开(公告)日：2017-04-25
申请号：US14074178
申请日：2013-11-07
申请人： International Business Machines Corporation
发明人： Deanna L. Q. Brown , Susan F. Crowell , Jason A. Nikolai , Andrew T. Thorstensen
IPC分类号： H04L12/823 , H04L12/721 , G06F9/455 , H04L12/931 , H04L29/12 , G06F15/173 , H04L29/06
CPC分类号： H04L47/323 , G06F9/455 , G06F9/45558 , G06F15/173 , G06F2009/45595 , H04L45/72 , H04L49/00 , H04L49/70 , H04L61/2015 , H04L61/2053 , H04L61/2061 , H04L63/0227 , H04L63/0236 , H04L63/0245 , H04L63/1466 , H04L69/30
摘要： Methods for managing an address on a switching device, managing an address on a network switch, and screening addresses in a cloud computing environment are provided. One embodiment is directed towards a computer-implemented method for managing an address on a switching device that is communicatively coupled to a plurality of virtual machines. The method includes accessing an address pool that includes an assigned address for each virtual machine from the plurality of virtual machines. The method includes determining, on the switching device, a used address for the virtual machine from the plurality of virtual machines. The method includes determining whether the used address is matching the assigned address for each virtual machine. The method also includes routing traffic from the virtual machine to a hypervisor in response to the used address matching the assigned address.

8. 发明申请

US20160337483A1 Method and Apparatus for Processing Data Packet Based on Parallel Protocol Stack Instances 审中-公开
标题翻译：基于并行协议堆栈实例处理数据包的方法和装置
公开(公告)号：US20160337483A1
公开(公告)日：2016-11-17
申请号：US15222753
申请日：2016-07-28
申请人： Huawei Technologies Co., Ltd.
发明人： Yongqiang Yang , Fen Dai , Liufei Wen
IPC分类号： H04L29/06 , H04L29/08
CPC分类号： H04L69/162 , H04L69/30
摘要： A method and an apparatus for processing a data packet based on parallel protocol stack instances, where lower-layer protocol processing is performed, using a first protocol stack instance. An associated second protocol stack instance is determined using a target socket after the target socket that is needed to perform upper-layer protocol processing on the data packet is determined, and the upper-layer protocol processing is performed, using the target socket and the second protocol stack instance. The second protocol stack instance that performs the upper-layer protocol processing is determined using the target socket, and hence, a technical problem that protocol processing cannot be performed on a data packet because a protocol stack instance specified by an application (APP) conflicts with a protocol stack instance specified by a network adapter is resolved.
摘要翻译：一种基于并行协议栈实例来处理数据分组的方法和装置，其中使用第一协议栈实例执行低层协议处理。在确定对数据包执行上层协议处理所需的目标套接字之后，使用目标套接字确定相关联的第二协议栈实例，并使用目标套接字执行上层协议处理协议栈实例。使用目标套接字来确定执行上层协议处理的第二协议栈实例，因此，由于应用（APP）指定的协议栈实例冲突而导致不能对数据分组进行协议处理的技术问题解决了由网络适配器指定的协议栈实例。

9. 发明授权

US09444747B2 Service specific traffic handling 有权
标题翻译：服务特定流量处理
公开(公告)号：US09444747B2
公开(公告)日：2016-09-13
申请号：US14237914
申请日：2014-02-06
申请人： Telefonaktiebolaget L M Ericsson (publ)
发明人： Ulf Mattsson , Victor Manuel Avila Gonzalez , Daniel Mcgillivray
IPC分类号： H04L12/28 , H04L12/859 , H04L12/857 , H04L12/24 , H04L12/947 , H04L12/741 , H04L29/06 , H04L29/12
CPC分类号： H04L47/2475 , H04L41/0893 , H04L45/306 , H04L45/64 , H04L45/745 , H04L47/2491 , H04L49/25 , H04L61/6063 , H04L67/125 , H04L67/14 , H04L67/2823 , H04L69/00 , H04L69/162 , H04L69/22 , H04L69/30
摘要： An application executing on a device communicates packet data with a server via an operating system (OS) on the device. The device receives information concerning a port mapping policy that specifies a plurality of applications. For each application, a predetermined assignable port space is defined within which an application specific port can be assigned. When the application is started, an OS specific port is assigned to the application. Additionally, an application specific port for the OS specific port is assigned in accordance with the port mapping policy. The device then translates data packets to be transmitted by the application, such that for a given OS specific source port, the device replaces the OS specific source port field of the packets to be transmitted with the assigned application specific port. The device then transmits the translated data packets with the assigned application specific source port.
摘要翻译：在设备上执行的应用通过设备上的操作系统（OS）与服务器通信分组数据。该设备接收关于指定多个应用的端口映射策略的信息。对于每个应用程序，定义可以分配应用程序特定端口的预定可分配端口空间。当应用程序启动时，操作系统专用端口被分配给应用程序。另外，根据端口映射策略分配用于OS特定端口的应用专用端口。然后，设备翻译要由应用程序发送的数据分组，使得对于给定的OS特定的源端口，设备用分配的应用特定端口替换要发送的分组的OS特定源端口字段。然后，设备将所转换的数据分组与所分配的应用专用源端口进行传输。

10. 发明授权

US09432487B2 System and method for network protocol offloading in virtual networks 有权
标题翻译：虚拟网络中网络协议卸载的系统和方法
公开(公告)号：US09432487B2
公开(公告)日：2016-08-30
申请号：US14451149
申请日：2014-08-04
申请人： Futurewei Technologies, Inc.
发明人： Yunsong Lu
IPC分类号： H04L12/26 , H04L12/28 , H04L29/06 , H04L12/931
CPC分类号： H04L69/30 , H04L12/4641 , H04L49/70 , H04L67/10 , H04L69/161
摘要： Disclosed herein are a system and method for network protocol offloading in virtual networks. An embodiment method of offloading a network protocol processing task for a message includes receiving, at a virtual switch, the message from a virtual source node destined for a virtual receiver node. The network protocol processing for the message is offloaded from the virtual source node and deferred when the virtual receiver node is safe for network protocol offloading. When the virtual receiver node is unsafe for network protocol offloading, the network protocol processing task is executed within the virtual switch. When the virtual receiver node is safe for network protocol offloading and a path between the virtual switch and the virtual receiver node includes a physical network interface, the network protocol processing task is executed using the physical network interface.
摘要翻译：这里公开了一种用于虚拟网络中的网络协议卸载的系统和方法。卸载用于消息的网络协议处理任务的实施例方法包括在虚拟交换机处从去往虚拟接收机节点的虚拟源节点接收消息。当虚拟接收机节点对于网络协议卸载是安全的时，消息的网络协议处理从虚拟源节点卸载并被延迟。当虚拟接收器节点对于网络协议卸载不安全时，网络协议处理任务在虚拟交换机内执行。当虚拟接收机节点对于网络协议卸载是安全的，并且虚拟交换机和虚拟接收机节点之间的路径包括物理网络接口时，使用物理网络接口来执行网络协议处理任务。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式