公开(公告)号：US6134217A

公开(公告)日：2000-10-17

申请号：US632680

申请日：1996-04-16

申请人： Dimitrios Stiliadis ,  Anujan Varma

发明人： Dimitrios Stiliadis ,  Anujan Varma

IPC分类号： H04L12/56 ,  H04Q11/04

CPC分类号： H04Q11/0478 ,  H04L49/3081 ,  H04L2012/5649 ,  H04L2012/5651 ,  H04L2012/5679 ,  H04L2012/5681

摘要： A traffic scheduling system and method are disclosed for providing quality-of-service (QoS) guarantees in a packet-switched communication network where multiple traffic sessions share an outgoing communication link of a network switch in such a way that a certain minimum rate is reserved for each session sharing the link. The method can be applied to both general communication networks supporting variable packet sizes and Asynchronous Transfer Mode (ATM) networks with a fixed packet (cell) size. A packet arriving for transmission on an outgoing link of the switch is assigned a timestamp and placed in a priority queue in the order of increasing timestamps so that the packet with the smallest timestamp is placed at the head of the queue. The timestamp is computed based on a system potential maintained by the system, that tracks the progress of work in the system. The system potential is maintained at zero when no packets are queued at the outgoing link, and increases progressively as packets are transmitted. In addition to the timestamps, a starting potential is also calculated on arrival of each packet, and the starting potentials of queued packets are maintained in a separate priority queue, in the order of increasing starting potentials so that the smallest starting potential value appears at the head of the queue. This smallest starting potential is used to recalibrate the system potential at the end of transmission of each packet, by setting the system potential to the smallest starting potential.

摘要翻译： 公开了一种用于在分组交换通信网络中提供服务质量（QoS）保证的业务调度系统和方法，其中多个业务会话共享网络交换机的输出通信链路，使得某个最小速率被保留 为每个会话共享链接。 该方法可以应用于支持可变分组大小的通用通信网络和具有固定分组（小区）大小的异步传输模式（ATM）网络。 分配到交换机的出站链路上传输的分组被分配时间戳，并以增加时间戳的顺序放置在优先级队列中，使得具有最小时间戳的分组被放置在队列的头部。 时间戳是基于系统维护的系统潜力来计算的，跟踪系统中的工作进度。 当没有分组在出站链路排队时，系统电位保持为零，并随着数据包的传输而逐渐增加。 除了时间戳之外，还在每个分组的到达时计算起始电位，并且排队分组的起始电位按照增加启动电位的顺序被保持在单独的优先级队列中，使得最小起始电位值出现在 队长。 这个最小的起始电位用于通过将系统电位设置为最小的起始电位来重新校准每个数据包传输结束时的系统电位。

公开(公告)号：US5859835A

公开(公告)日：1999-01-12

申请号：US634904

申请日：1996-04-15

申请人： Anujan Varma ,  Dimitrios Stiliadis

发明人： Anujan Varma ,  Dimitrios Stiliadis

IPC分类号： H04L12/56 ,  H04Q11/04 ,  H04J3/14

CPC分类号： H04L49/3081 ,  H04Q11/0478 ,  H04L2012/5649 ,  H04L2012/5651 ,  H04L2012/5679 ,  H04L2012/5681

摘要： A traffic scheduling system and method for packet-switched communications networks where multiple sessions share an outgoing communications link. Prior to transmission on the outgoing link, packets are assigned a time-stamp and placed into a priority queue in order of ascending time-stamps so that the packet with the smallest time-stamp is placed at the head of the queue. The time-stamp assigned to a particular packet is calculated as the estimated time at which the last bit of the packet is transmitted in an ideal system, using a global variable called the system potential which tracks the progress of work in the scheduling system. The system potential is recalibrated periodically to avoid any long-term unfairness in service offered to the sessions sharing the outgoing link.

摘要翻译： 一种用于分组交换通信网络的业务调度系统和方法，其中多个会话共享出站通信链路。 在传出链路之前传输数据包的时间戳并按照升序排列顺序排列在优先级队列中，这样最小时间戳的数据包就被置于队列的头部。 分配给特定分组的时间戳被计算为在理想系统中使用称为系统电位的全局变量在跟踪调度系统中的工作进度的分组的最后一位的估计时间。 定期重新校准系统潜力，以避免向共享传出链接的会话提供的服务长期不公平。

公开(公告)号：US09141420B2

公开(公告)日：2015-09-22

申请号：US12939627

申请日：2010-11-04

申请人： Yuh-Jye Chang ,  Adiseshu Hari ,  Pramod Koppol ,  Antony Martin ,  Thanos Stathopoulos ,  Dimitrios Stiliadis

发明人： Yuh-Jye Chang ,  Adiseshu Hari ,  Pramod Koppol ,  Antony Martin ,  Thanos Stathopoulos ,  Dimitrios Stiliadis

IPC分类号： G06F9/455

CPC分类号： G06F9/45558 ,  G06F2009/4557

摘要： Provided is a method and devices for overload control in a cloud computing environment. The method includes receiving a first message from a network element associated with the cloud computing environment. The first message includes information associated with a target virtual machine and a list of sessions from the one or more sessions to move from the serving virtual machine to the target virtual machine. Associating one or more client addresses with an address associated with the target virtual machine based on the list of sessions. And, treating the target virtual machine as the serving virtual machine if processing sessions associated with the list of sessions.

摘要翻译： 提供了一种云计算环境中过载控制的方法和装置。 该方法包括从与云计算环境相关联的网络元件接收第一消息。 第一消息包括与目标虚拟机相关联的信息以及来自一个或多个会话的从服务虚拟机移动到目标虚拟机的会话列表。 基于会话列表，将一个或多个客户端地址与与目标虚拟机相关联的地址相关联。 并且，如果处理与会话列表相关联的会话，则将目标虚拟机视为服务虚拟机。

公开(公告)号：US08493856B2

公开(公告)日：2013-07-23

申请号：US12642380

申请日：2009-12-18

申请人： Andrea Francini ,  Dimitrios Stiliadis

发明人： Andrea Francini ,  Dimitrios Stiliadis

IPC分类号： G08C15/00 ,  G08C17/00 ,  H04J3/22

CPC分类号： H04L47/28 ,  H04L47/2425 ,  H04L47/564

摘要： A system and method of rate adaptation is disclosed for energy efficiency. The system and method of rate adaptation for energy efficiency provides for parsing a heterogeneous network into rate-adaptation domains that are fully isolated with respect to the control of their operating states. The system and method is particularly useful for creating the conditions for the incremental introduction of rate-adaptive devices in existing networks; combining the best properties of sleep-state exploitation and rate scaling techniques by defining a class of state-setting policies for rate adaptation schemes that enforce tight deterministic bounds on the extra delay that the schemes may cause to network traffic at every node where they are deployed.

摘要翻译： 公开了一种能量效率的系统和速率适应方法。 用于能量效率的速率适配的系统和方法提供了将异构网络解析为相对于其操作状态的控制而被完全隔离的速率适配域。 该系统和方法对于创建用于在现有网络中增量引入速率自适应设备的条件特别有用; 结合睡眠状态利用的最佳属性和速率缩放技术，通过定义一类用于速率适配方案的状态设置策略，这些策略强制执行紧密的确定性边界，以使得方案可能导致其部署在其每个节点处的网络流量的额外延迟 。

公开(公告)号：US08286002B2

公开(公告)日：2012-10-09

申请号：US11293843

申请日：2005-12-02

申请人： Sanjay D. Kamat ,  Pramod V. N. Koppol ,  Vijay Pochampalli Kumar ,  Dimitrios Stiliadis

发明人： Sanjay D. Kamat ,  Pramod V. N. Koppol ,  Vijay Pochampalli Kumar ,  Dimitrios Stiliadis

IPC分类号： G06F11/30 ,  G06F12/14

CPC分类号： H04L63/0281 ,  H04L12/2856 ,  H04L63/0272 ,  H04L63/164 ,  H04W12/02 ,  H04W12/06 ,  H04W76/10

摘要： The invention includes a method and apparatus for providing secure remote access to enterprise networks. An apparatus includes a network interface module adapted for maintaining a secure network connection with a network device independent of a power state of a host computer associated with the apparatus a storage module for storing information associated with the secure connection, and a processor coupled to the network interface and the memory where the processor is adapted for automatically initiating the secure connection without user interaction.

摘要翻译： 本发明包括用于向企业网络提供安全远程访问的方法和装置。 一种装置包括网络接口模块，适于维持与网络设备的安全网络连接，独立于与该设备相关联的主计算机的电源状态，存储模块用于存储与该安全连接相关联的信息;以及处理器，耦合到该网络 接口和存储器，其中处理器适于在没有用户交互的情况下自动启动安全连接。

公开(公告)号：US07649882B2

公开(公告)日：2010-01-19

申请号：US10402589

申请日：2003-03-28

申请人： Dimitrios Stiliadis

发明人： Dimitrios Stiliadis

IPC分类号： H04L12/56 ,  H04J3/24

CPC分类号： H04L12/1881 ,  H04L12/5601 ,  H04L49/104 ,  H04L49/201 ,  H04L49/90 ,  H04L49/901 ,  H04L2012/5642

摘要： A communications switch or router employs a replication server to perform batch processing of multicast connections. The replication server performs three distinct forms of processing using staging queues: packet arrival processing, packet replication processing, and per-interface transmission processing. Packet arrival processing queues arriving packets in session queues, adds new multicast sessions to a replication set, and assigns a counter equivalent to the fan-out of the multicast session. Packet replication processing assigns a descriptor to packets of each session in the replication set, and copies the descriptor to each per-interface queue. Per-interface transmission processing examines each descriptor in the per-interface queue, copies the corresponding packets for transmission by the interface, adjusts the counter as each packet is copied, and clears the packet in the switch based on the adjusted counter.

摘要翻译： 通信交换机或路由器使用复制服务器来执行组播连接的批处理。 复制服务器使用分段队列执行三种不同形式的处理：分组到达处理，分组复制处理和每接口传输处理。 分组到达处理将到达的分组队列到会话队列中，将新的多播会话添加到复制集合，并且向多播会话的扇出分配等于的计数器。 分组复制处理为复制集中的每个会话的分组分配描述符，并将描述符复制到每个接口队列。 每接口传输处理检查每接口队列中的每个描述符，复制相应的数据包以进行传输，在每个数据包被复制时调整计数器，并根据调整后的计数器清除交换机中的数据包。

公开(公告)号：US07359384B2

公开(公告)日：2008-04-15

申请号：US10348385

申请日：2003-01-21

申请人： Muralidharan S. Kodialam ,  Tirunell V. Lakshman ,  Dimitrios Stiliadis

发明人： Muralidharan S. Kodialam ,  Tirunell V. Lakshman ,  Dimitrios Stiliadis

IPC分类号： H04L12/56

CPC分类号： H04L47/521 ,  H04L47/28 ,  H04L47/50 ,  H04L47/56 ,  H04L49/254

摘要： A switch schedules guaranteed-bandwidth, low-jitter-traffic characterized by a guaranteed rate table (GRT) method. A rate matrix generated from collected provisioning information is decomposed into schedule tables by a low jitter (LJ) decomposition method. The LJ decomposition method imposes a set of constraints for the schedule tables: schedule tables are partial permutation matrices, weighted sum of the partial permutation matrices is greater than or equal to the weighted sum of the rate matrix, and each entry in the rate matrix belongs to one element of the LJ decomposition schedule matrices. An integer LJ decomposition programming problem is employed to generate the schedule tables that are scheduled for each time slot of the period of the switch. Schedule tables are selected in turn based upon selecting eligible tables having the earliest finishing time. If necessary, the rate matrix is updated prior to decomposition for a subsequent period.

摘要翻译： 交换机调度保证带宽，低抖动流量，其特征在于保证速率表（GRT）方法。 从收集的配置信息生成的速率矩阵通过低抖动（LJ）分解方法分解为调度表。 LJ分解方法对调度表施加一组约束：调度表是部分置换矩阵，部分置换矩阵的加权和大于或等于速率矩阵的加权和，并且速率矩阵中的每个条目都属于 到LJ分解调度矩阵的一个元素。 采用整数LJ分解编程问题来生成为交换周期的每个时隙调度的调度表。 根据选择具有最早完成时间的合格表，依次选择计划表。 如果需要，速率矩阵在分解之前在随后的时间段内被更新。

公开(公告)号：US08479290B2

公开(公告)日：2013-07-02

申请号：US12816439

申请日：2010-06-16

申请人： Harish Viswanathan ,  Dimitrios Stiliadis

发明人： Harish Viswanathan ,  Dimitrios Stiliadis

IPC分类号： G06F11/00

CPC分类号： H04W12/12 ,  G06F21/554 ,  H04L63/102 ,  H04L63/145

摘要： A method of remotely treating malicious mobile terminals connected to a mobile communications network. In one embodiment, when a malicious mobile terminal is detected by the intrusion-detection services of the network, the network changes the subscriber profile associated with the mobile terminal to operate the latter in a quarantine mode. The packet-switched subsystem of the network then links the quarantined mobile terminal to a remediation manager. The remediation manager remotely treats the mobile terminal, e.g., to repair or reinstall any corrupted software, terminate any active malicious processes, delete or quarantine any malware, and restore the operating system, configuration, and/or memory of the mobile terminal to a clean operational state. After the treatment, the network reverts the subscriber profile back to the initial state and removes the mobile terminal from the quarantine.

摘要翻译： 一种远程处理连接到移动通信网络的恶意移动终端的方法。 在一个实施例中，当由网络的入侵检测服务检测到恶意移动终端时，网络改变与移动终端相关联的用户简档，以使其以隔离模式操作。 然后，网络的分组交换子系统将隔离的移动终端链接到修复管理器。 修复经理远程处理移动终端，例如修复或重新安装任何损坏的软件，终止任何主动恶意进程，删除或隔离任何恶意软件，并将移动终端的操作系统，配置和/或内存恢复到干净 运行状态 治疗后，网络将用户简档恢复到初始状态，并将移动终端从隔离区移除。

公开(公告)号：US20120117563A1

公开(公告)日：2012-05-10

申请号：US12939627

申请日：2010-11-04

申请人： Yuh-Jye Chang ,  Adiseshu Hari ,  Pramod Koppol ,  Antony Martin ,  Thanos Stathopoulos ,  Dimitrios Stiliadis

发明人： Yuh-Jye Chang ,  Adiseshu Hari ,  Pramod Koppol ,  Antony Martin ,  Thanos Stathopoulos ,  Dimitrios Stiliadis

IPC分类号： G06F9/455 ,  G06F15/16

CPC分类号： G06F9/45558 ,  G06F2009/4557

摘要： Provided is a method and devices for overload control in a cloud computing environment. The method includes receiving a first message from a network element associated with the cloud computing environment. The first message includes information associated with a target virtual machine and a list of sessions from the one or more sessions to move from the serving virtual machine to the target virtual machine. Associating one or more client addresses with an address associated with the target virtual machine based on the list of sessions. And, treating the target virtual machine as the serving virtual machine if processing sessions associated with the list of sessions.

摘要翻译： 提供了一种云计算环境中过载控制的方法和装置。 该方法包括从与云计算环境相关联的网络元件接收第一消息。 第一消息包括与目标虚拟机相关联的信息和来自一个或多个会话的从服务虚拟机移动到目标虚拟机的会话列表。 基于会话列表，将一个或多个客户端地址与与目标虚拟机相关联的地址相关联。 并且，如果处理与会话列表相关联的会话，则将目标虚拟机视为服务虚拟机。

公开(公告)号：US20110314542A1

公开(公告)日：2011-12-22

申请号：US12816439

申请日：2010-06-16

申请人： Harish Viswanathan ,  Dimitrios Stiliadis

发明人： Harish Viswanathan ,  Dimitrios Stiliadis

IPC分类号： G06F21/00

CPC分类号： H04W12/12 ,  G06F21/554 ,  H04L63/102 ,  H04L63/145

摘要： A method of remotely treating malicious mobile terminals connected to a mobile communications network. In one embodiment, when a malicious mobile terminal is detected by the intrusion-detection services of the network, the network changes the subscriber profile associated with the mobile terminal to operate the latter in a quarantine mode. The packet-switched subsystem of the network then links the quarantined mobile terminal to a remediation manager. The remediation manager remotely treats the mobile terminal, e.g., to repair or reinstall any corrupted software, terminate any active malicious processes, delete or quarantine any malware, and restore the operating system, configuration, and/or memory of the mobile terminal to a clean operational state. After the treatment, the network reverts the subscriber profile back to the initial state and removes the mobile terminal from the quarantine.

摘要翻译： 一种远程处理连接到移动通信网络的恶意移动终端的方法。 在一个实施例中，当由网络的入侵检测服务检测到恶意移动终端时，网络改变与移动终端相关联的用户简档，以使其以隔离模式操作。 然后，网络的分组交换子系统将隔离的移动终端链接到修复管理器。 修复经理远程处理移动终端，例如，修复或重新安装任何损坏的软件，终止任何主动恶意进程，删除或隔离任何恶意软件，并将移动终端的操作系统，配置和/或内存恢复到干净 运行状态 治疗后，网络将用户简档恢复到初始状态，并将移动终端从隔离区移除。