Split termination of secure communication sessions with mutual certificate-based authentication
    3.
    发明授权
    Split termination of secure communication sessions with mutual certificate-based authentication 有权
    通过基于证书的身份验证分离终止安全通信会话

    公开(公告)号:US08707043B2

    公开(公告)日:2014-04-22

    申请号:US12396904

    申请日:2009-03-03

    CPC classification number: H04L9/3273 H04L9/3263 H04L2209/56

    Abstract: A method and apparatus are provided for split-terminating a secure client-server communication connection when the client and server perform mutual authentication by exchanging certificates, such as within a Lotus Notes environment. When the client submits a certificate to the server, an intermediary device intercepts the certificate and submits to the server a substitute client certificate generated by that intermediary. A certificate authority's private key is previously installed on the intermediary to enable it to generate public keys, private keys and digital certificates. With the private key corresponding to the substitute certificate, the intermediary extracts a temporary key from a subsequent server message. The intermediary uses the temporary key to read a session key issued later by the server. Thereafter, the intermediary shares the session key with another intermediary, and together they use the session keys to access and optimize (e.g., accelerate) messages sent by the client and the server.

    Abstract translation: 提供了一种方法和装置,用于当客户端和服务器通过交换证书(例如在Lotus Notes环境中)执行相互认证来分离终止安全客户端 - 服务器通信连接。 当客户端向服务器提交证书时,中间设备将截取该证书,并向该服务器提交该中间人产生的替代客户端证书。 证书颁发机构的私钥先前安装在中介上,使其能够生成公钥,私钥和数字证书。 使用对应于替代证书的私钥,中介从后续服务器消息中提取临时密钥。 中间人使用临时密钥来读取稍后由服务器发出的会话密钥。 此后,中间人与另一个中间人共享会话密钥,并且它们一起使用会话密钥来访问和优化(例如,加速)由客户端和服务器发送的消息。

    Routing validation
    4.
    发明授权
    Routing validation 有权
    路由验证

    公开(公告)号:US08699493B2

    公开(公告)日:2014-04-15

    申请号:US13412604

    申请日:2012-03-05

    Abstract: A simulator simulates routing system protocols to build routing tables corresponding to a modeled network, and a comparator compares the routing tables in the actual network to these simulator-created routing tables. Because the modeled system represents a fault-free version of the actual system, and assuming that the modeled routing system protocols are representative of the algorithms used in the actual routers, these simulator-produced routing tables can represent steady-state routing tables that should be present in the routers of the actual network at steady state. By querying each router in the actual network for its routing table and comparing each routing table to the corresponding simulator-produced routing table, any differences from the steady state can be identified.

    Abstract translation: 模拟器模拟路由系统协议以构建与建模网络相对应的路由表,并且比较器将实际网络中的路由表与这些模拟器创建的路由表进行比较。 因为建模的系统代表了实际系统的无故障版本,并且假设建模的路由系统协议代表了实际路由器中使用的算法,这些模拟器生成的路由表可以表示应该是稳态路由表 存在于稳定状态下实际网络的路由器。 通过查询实际网络中的每个路由器的路由表,并将每个路由表与相应的模拟器生成的路由表进行比较,可以识别与稳态的任何差异。

    Establishing network connections between transparent network devices
    5.
    发明授权
    Establishing network connections between transparent network devices 有权
    建立透明网络设备之间的网络连接

    公开(公告)号:US08688844B1

    公开(公告)日:2014-04-01

    申请号:US13460392

    申请日:2012-04-30

    Abstract: Transparent network devices intercept messages from non-transparent network devices that establish a connection. Transparent network devices modify these messages to establish an inner connection with each other. The transparent network devices mimic at least some of the outer connection messages to establish their inner connection. The mimicked messages and any optional reset messages are intercepted by the transparent network devices to prevent them from reaching the outer connections. Transparent network devices modify network traffic, using error detection data, fragmentation data, or timestamps, so that inner connection network traffic inadvertently received by outer connection devices is rejected or ignored by the outer connection network devices. Transparent network devices may use different sequence windows for inner and outer connection network traffic. To prevent overlapping sequence windows, transparent network devices monitor the locations of the inner and outer connection sequence windows and may rapidly advance the inner connection sequence window as needed.

    Abstract translation: 透明网络设备拦截来自建立连接的不透明网络设备的消息。 透明网络设备修改这些消息以建立彼此的内部连接。 透明网络设备模拟至少一些外部连接消息以建立其内部连接。 模拟消息和任何可选的重置消息被透明网络设备拦截,以防止它们到达外部连接。 透明网络设备修改网络流量,使用错误检测数据,碎片数据或时间戳,使外部连接设备无意中接收的内部连接网络流量被外部连接网络设备拒绝或忽略。 透明网络设备可以对内部和外部连接网络流量使用不同的序列窗口。 为了防止重叠序列窗口,透明网络设备监视内部和外部连接序列窗口的位置,并可根据需要快速推进内部连接顺序窗口。

    Method for identifying peptides using tandem mass spectra by dynamically determining the number of peptide reconstructions required
    6.
    发明授权
    Method for identifying peptides using tandem mass spectra by dynamically determining the number of peptide reconstructions required 有权
    通过动态确定所需的肽重组数来使用串联质谱鉴定肽的方法

    公开(公告)号:US08639447B2

    公开(公告)日:2014-01-28

    申请号:US12602481

    申请日:2008-06-02

    Abstract: A method for identifying peptides using tandem mass spectrometry takes the spectrum for a peptide to be analyzed and uses a scoring function to score a match between the spectrum and each candidate peptide in a peptide database. The scoring function has a value corresponding to a number of fragment peaks in the spectrum that match fragment peaks in a spectrum of the candidate peptide. Using the match scores, a generating function of the spectrum is computed to determine the number of peptide reconstructions at each value of the scoring function. The generating function is then used to determine the number of candidate peptides for each match score and the probability of a peptide having a given match score to the spectrum. A spectral probability can be determined by calculating the total probability of all peptides with scores equal to or larger than the given match score.

    Abstract translation: 使用串联质谱法鉴定肽的方法取得待分析肽的光谱,并使用评分函数对肽数据库中的光谱和每个候选肽之间的匹配进行评分。 评分函数具有对应于与候选肽的谱中的片段峰匹配的谱中的片段峰数的值。 使用匹配分数,计算光谱的生成函数,以确定在评分函数的每个值处的肽重构的数量。 然后使用生成函数来确定每个匹配得分的候选肽的数目和具有给定匹配得分的肽对于该光谱的概率。 可以通过计算具有等于或大于给定匹配分数的分数的所有肽的总概率来确定光谱概率。

    ENSURING WRITE OPERATION CONSISTENCY USING MULTIPLE STORAGE DEVICES
    7.
    发明申请
    ENSURING WRITE OPERATION CONSISTENCY USING MULTIPLE STORAGE DEVICES 有权
    使用多个存储设备确保写入操作一致

    公开(公告)号:US20130297855A1

    公开(公告)日:2013-11-07

    申请号:US13464714

    申请日:2012-05-04

    Abstract: Relatively small capacity solid-state storage devices (SSD) are combined with larger capacity magnetic disk storage devices for storing storage block write data to ensure data consistency. Write operations are stored in a sequential write buffer in an SSD to guarantee the storage of write data and then copied from the sequential write buffer to the destination address in a magnetic disk storage device. The sequential write buffer store write data in locations corresponding to the order of receipt of write operations. Write data from the sequential write buffer is transferred to the magnetic disk storage device in the same order and a checkpoint index is frequently updated to indicate the completion of some transfers. During system initialization, the most recent value of the checkpoint index is retrieved and used as a starting location for transferring write data from the sequential write buffer to the magnetic disk storage device.

    Abstract translation: 相对较小容量的固态存储设备(SSD)与更大容量的磁盘存储设备相结合,用于存储存储块写数据,以确保数据一致性。 写入操作存储在SSD中的顺序写入缓冲器中,以保证写入数据的存储,然后从顺序写入缓冲器复制到磁盘存储设备中的目标地址。 顺序写入缓冲器将写入数据写入对应于写入操作的接收顺序的位置。 从顺序写入缓冲器写入的数据以相同的顺序被传送到磁盘存储设备,并且检查点索引被频繁更新以指示某些传输的完成。 在系统初始化期间,检索点索引的最新值被检索并用作将写入数据从顺序写入缓冲器传送到磁盘存储设备的起始位置。

    ENSURING WRITE OPERATION CONSISTENCY USING RAID STORAGE DEVICES
    8.
    发明申请
    ENSURING WRITE OPERATION CONSISTENCY USING RAID STORAGE DEVICES 审中-公开
    使用RAID存储设备确保写入操作一致

    公开(公告)号:US20130297854A1

    公开(公告)日:2013-11-07

    申请号:US13464713

    申请日:2012-05-04

    CPC classification number: G06F11/1441 G06F11/1471 G06F2201/82

    Abstract: Solid-state storage devices (SSD) are combined with larger capacity magnetic disk-based RAID arrays for storing write data to ensure data consistency across multiple RAID disks. Write operations are stored in a sequential write buffer in at least one SSD to guarantee their storage and then copied from the sequential write buffer to the destination address in RAID array. The sequential write buffer stores write data in locations corresponding to the order of receipt of write operations. Write data from the sequential write buffer is transferred to the RAID array in the same order and a checkpoint index is frequently updated to indicate the completion of some transfers. During system initialization, a copy of the sequential write buffer and its associated checkpoint index are retrieved and used as a starting location for transferring write data from the sequential write buffer to the magnetic disk storage devices in the RAID array.

    Abstract translation: 固态存储设备(SSD)与更大容量的基于磁盘的RAID阵列相结合,用于存储写入数据,以确保多个RAID磁盘之间的数据一致性。 写入操作存储在至少一个SSD中的顺序写入缓冲器中,以保证其存储,然后从顺序写缓冲区复制到RAID阵列中的目标地址。 顺序写入缓冲器将写入数据存储在与写入操作的接收顺序相对应的位置。 将顺序写入缓冲区中的写入数据以相同的顺序传输到RAID阵列,并且检查点索引经常更新以指示某些传输的完成。 在系统初始化期间,检索顺序写入缓冲器及其关联的检查点索引的副本,并将其用作将写入数据从顺序写入缓冲区传送到RAID阵列中的磁盘存储设备的起始位置。

    Congestion management over lossy network connections
    9.
    发明授权
    Congestion management over lossy network connections 有权
    有损网络连接拥塞管理

    公开(公告)号:US08462624B2

    公开(公告)日:2013-06-11

    申请号:US11494025

    申请日:2006-07-26

    Abstract: A network stack includes a packet loss analyzer that distinguishes between packet losses due to congestion and due to lossyness of network connections. The loss analyzer observes the packet loss patterns for comparison with a packet loss model. The packet loss model may be based on a Forward Error Correction (FEC) system. The loss analyzer determines if lost packets could have been recovered by a receiving network device, if FEC had been used. If the lost packets could have been corrected by FEC, the loss analyzer assumes that no network congestion exists and that the packet loss comes from the lossy aspects of the network, such as radio interference for wireless networks. If the loss analyzer determines that some of the lost packet could not have been recovered by the receiving network device, the loss analyzer assumes that network congestion causes these packet losses and reduces the data rate.

    Abstract translation: 网络堆栈包括分组丢失分析器,其区分由于拥塞引起的分组丢失以及由于网络连接的有损性。 损耗分析仪观察丢包模式,以便与丢包模型进行比较。 分组丢失模型可以基于前向纠错(FEC)系统。 如果使用了FEC,丢失分析器将确定丢失的数据包是否已被接收网络设备恢复。 如果丢失的分组可能被FEC纠正,则丢失分析器假设没有网络拥塞,并且分组丢失来自网络的有损方面,例如无线网络的无线电干扰。 如果丢失分析器确定某些丢失的分组不能被接收网络设备恢复,则丢失分析器假设网络拥塞导致这些分组丢失并降低数据速率。

    Wireless network roaming timer method and apparatus
    10.
    发明授权
    Wireless network roaming timer method and apparatus 有权
    无线网络漫游计时器的方法和装置

    公开(公告)号:US08457628B2

    公开(公告)日:2013-06-04

    申请号:US13461660

    申请日:2012-05-01

    CPC classification number: H04W8/02 H04W36/30

    Abstract: A mobile station in a wireless network includes a roaming timer. The roaming timer is set based on various criteria, and when the roaming timer expires, an attempt to roam is performed.

    Abstract translation: 无线网络中的移动台包括漫游定时器。 基于各种标准设置漫游定时器,并且当漫游定时器到期时,执行漫游尝试。

Patent Agency Ranking