公开(公告)号：US07899047B2

公开(公告)日：2011-03-01

申请号：US11838161

申请日：2007-08-13

申请人： Luis F. Cabrera ,  Erik B. Christensen ,  Giovanni M. Della-Libera ,  Christopher G. Kaler ,  David E. Levin ,  Bradford H. Lovering ,  Steven E. Lucco ,  Stephen J. Millet ,  John P. Shewchuk ,  Robert S. Wahbe ,  David A. Wortendyke

发明人： Luis F. Cabrera ,  Erik B. Christensen ,  Giovanni M. Della-Libera ,  Christopher G. Kaler ,  David E. Levin ,  Bradford H. Lovering ,  Steven E. Lucco ,  Stephen J. Millet ,  John P. Shewchuk ,  Robert S. Wahbe ,  David A. Wortendyke

IPC分类号： H04L12/56

CPC分类号： H04L61/15 ,  H04L29/12047 ,  H04L67/327 ,  H04L69/32

摘要： Methods and systems for providing a virtual network are disclosed. At least one layer of abstraction is created between network service applications and conventional network protocols by inserting an adaptive dispatcher between applications and network transport services on each machine in a network. The message protocol in the virtual network is extensible, allowing application programs to create new headers within any message as needed. The adaptive dispatcher contains handlers that route and dispatch messages within the virtual network based on arbitrary content within each message, including any combination of headers and/or data content. Each device on the virtual network has a virtual address to which messages are directed, allowing devices to move within the network without reconfiguring routing tables. Handlers may be automatically created when an event meeting predefined criteria occurs, including the non-occurrence of a condition, making the virtual network self-healing and adaptive to reconfiguration.

摘要翻译： 公开了用于提供虚拟网络的方法和系统。 通过在网络中的每台机器上的应用程序和网络传输服务之间插入自适应调度器，在网络服务应用程序和常规网络协议之间创建至少一个抽象层。 虚拟网络中的消息协议是可扩展的，允许应用程序根据需要在任何消息内创建新头。 自适应调度器包含基于每个消息内的任意内容（包括报头和/或数据内容的任何组合）在虚拟网络内路由和调度消息的处理程序。 虚拟网络上的每个设备都具有指向消息的虚拟地址，允许设备在网络内移动而不重新配置路由表。 当满足预定义标准的事件发生时，可以自动创建处理程序，包括不发生条件，使虚拟网络自我修复并适应重新配置。

公开(公告)号：US07257817B2

公开(公告)日：2007-08-14

申请号：US09993656

申请日：2001-11-27

申请人： Luis F. Cabrera ,  Erik B. Christensen ,  Giovanni M. Della-Libera ,  Christopher G. Kaler ,  David E. Levin ,  Bradford H. Lovering ,  Steven E. Lucco ,  Stephen J. Millet ,  John P. Shewchuk ,  Robert S. Wahbe ,  David A. Wortendyke

发明人： Luis F. Cabrera ,  Erik B. Christensen ,  Giovanni M. Della-Libera ,  Christopher G. Kaler ,  David E. Levin ,  Bradford H. Lovering ,  Steven E. Lucco ,  Stephen J. Millet ,  John P. Shewchuk ,  Robert S. Wahbe ,  David A. Wortendyke

IPC分类号： G06F3/00

CPC分类号： H04L45/00 ,  H04L43/0811 ,  H04L45/306 ,  H04L45/308 ,  H04L45/34 ,  H04L45/56 ,  H04L45/566 ,  H04L67/02 ,  H04L67/327 ,  H04L69/08

摘要： Methods and systems for providing a virtual network are disclosed. At least one layer of abstraction is created between network service applications and conventional network protocols by inserting an adaptive dispatcher between applications and network transport services on each machine in a network. The message protocol in the virtual network is extensible, allowing application programs to create new headers within any message as needed. The adaptive dispatcher contains handlers that route and dispatch messages within the virtual network based on arbitrary content within each message, including any combination of headers and/or data content. Each device on the virtual network has a virtual address to which messages are directed, allowing devices to move within the network without reconfiguring routing tables. Handlers may be automatically created when an event meeting predefined criteria occurs, including the non-occurrence of a condition, making the virtual network self-healing and adaptive to reconfiguration.

摘要翻译： 公开了用于提供虚拟网络的方法和系统。 通过在网络中的每台机器上的应用程序和网络传输服务之间插入自适应调度器，在网络服务应用程序和常规网络协议之间创建至少一个抽象层。 虚拟网络中的消息协议是可扩展的，允许应用程序根据需要在任何消息内创建新头。 自适应调度器包含基于每个消息内的任意内容（包括报头和/或数据内容的任何组合）在虚拟网络内路由和调度消息的处理程序。 虚拟网络上的每个设备都具有指向消息的虚拟地址，允许设备在网络内移动而不重新配置路由表。 当满足预定义标准的事件发生时，可以自动创建处理程序，包括不发生条件，使虚拟网络自我修复并适应重新配置。

公开(公告)号：US20090046726A1

公开(公告)日：2009-02-19

申请号：US11838161

申请日：2007-08-13

申请人： Luis Felipe Cabrera ,  Erik B. Christensen ,  Giovanni M. Della-Libera ,  Christopher G. Kaler ,  David E. Levin ,  Bradford H. Lovering ,  Steven E. Lucco ,  Stephen J. Millet ,  John P. Shewchuk ,  Robert S. Wahbe ,  David A. Wortendyke

发明人： Luis Felipe Cabrera ,  Erik B. Christensen ,  Giovanni M. Della-Libera ,  Christopher G. Kaler ,  David E. Levin ,  Bradford H. Lovering ,  Steven E. Lucco ,  Stephen J. Millet ,  John P. Shewchuk ,  Robert S. Wahbe ,  David A. Wortendyke

IPC分类号： H04L12/56

CPC分类号： H04L61/15 ,  H04L29/12047 ,  H04L67/327 ,  H04L69/32

摘要： Methods and systems for providing a virtual network are disclosed. At least one layer of abstraction is created between network service applications and conventional network protocols by inserting an adaptive dispatcher between applications and network transport services on each machine in a network. The message protocol in the virtual network is extensible, allowing application programs to create new headers within any message as needed. The adaptive dispatcher contains handlers that route and dispatch messages within the virtual network based on arbitrary content within each message, including any combination of headers and/or data content. Each device on the virtual network has a virtual address to which messages are directed, allowing devices to move within the network without reconfiguring routing tables. Handlers may be automatically created when an event meeting predefined criteria occurs, including the non-occurrence of a condition, making the virtual network self-healing and adaptive to reconfiguration.

摘要翻译： 公开了用于提供虚拟网络的方法和系统。 通过在网络中的每台机器上的应用程序和网络传输服务之间插入自适应调度器，在网络服务应用程序和常规网络协议之间创建至少一个抽象层。 虚拟网络中的消息协议是可扩展的，允许应用程序根据需要在任何消息内创建新头。 自适应调度器包含基于每个消息内的任意内容（包括报头和/或数据内容的任何组合）在虚拟网络内路由和调度消息的处理程序。 虚拟网络上的每个设备都具有指向消息的虚拟地址，允许设备在网络内移动而不重新配置路由表。 当满足预定义标准的事件发生时，可以自动创建处理程序，包括不发生条件，使虚拟网络自我修复并适应重新配置。

公开(公告)号：US07809938B2

公开(公告)日：2010-10-05

申请号：US11254545

申请日：2005-10-20

申请人： Giovanni M. Della-Libera ,  Christopher G. Kaler ,  Scott A. Konersmann ,  Butler W. Lampson ,  Paul J. Leach ,  Bradford H. Lovering ,  Steven E. Lucco ,  Stephen J. Millet ,  Richard F. Rashid ,  John P. Shewchuk

发明人： Giovanni M. Della-Libera ,  Christopher G. Kaler ,  Scott A. Konersmann ,  Butler W. Lampson ,  Paul J. Leach ,  Bradford H. Lovering ,  Steven E. Lucco ,  Stephen J. Millet ,  Richard F. Rashid ,  John P. Shewchuk

IPC分类号： H04L29/06

CPC分类号： H04L63/08 ,  G06Q20/3676 ,  H04L63/10 ,  H04L63/168 ,  H04L63/20 ,  H04L67/02 ,  H04L67/28 ,  H04L67/2804 ,  H04L67/2823

摘要： A distributed security system is provided. The distributed security system uses a security policy that is written in a policy language that is transport and security protocol independent as well as independent of cryptographic technologies. This security policy can be expressed using the language to create different security components allowing for greater scalability and flexibility. By abstracting underlying protocols and technologies, multiple environments and platforms can be supported.

摘要翻译： 提供分布式安全系统。 分布式安全系统使用以政策语言编写的安全策略，该策略语言是传输和安全协议独立的，而与密码技术无关。 该安全策略可以用语言来表示，以创建不同的安全组件，从而实现更大的可扩展性和灵活性。 通过抽象底层协议和技术，可以支持多个环境和平台。

公开(公告)号：US08302149B2

公开(公告)日：2012-10-30

申请号：US11254519

申请日：2005-10-20

申请人： Giovanni M. Della-Libera ,  Christopher G. Kaler ,  Scott A. Konersmann ,  Butler W. Lampson ,  Paul J. Leach ,  Bradford H. Lovering ,  Steven E. Lucco ,  Stephen J. Millet ,  Richard F. Rashid ,  John P. Shewchuk

发明人： Giovanni M. Della-Libera ,  Christopher G. Kaler ,  Scott A. Konersmann ,  Butler W. Lampson ,  Paul J. Leach ,  Bradford H. Lovering ,  Steven E. Lucco ,  Stephen J. Millet ,  Richard F. Rashid ,  John P. Shewchuk

IPC分类号： H04L29/06

CPC分类号： H04L63/08 ,  G06Q20/3676 ,  H04L63/10 ,  H04L63/168 ,  H04L63/20 ,  H04L67/02 ,  H04L67/28 ,  H04L67/2804 ,  H04L67/2823

摘要： A distributed security system is provided. The distributed security system uses a security policy that is written in a policy language that is transport and security protocol independent as well as independent of cryptographic technologies. This security policy can be expressed using the language to create different security components allowing for greater scalability and flexibility. By abstracting underlying protocols and technologies, multiple environments and platforms can be supported.

摘要翻译： 提供分布式安全系统。 分布式安全系统使用以政策语言编写的安全策略，该策略语言是传输和安全协议独立的，而与密码技术无关。 该安全策略可以用语言来表示，以创建不同的安全组件，从而实现更大的可扩展性和灵活性。 通过抽象底层协议和技术，可以支持多个环境和平台。

公开(公告)号：US07752431B2

公开(公告)日：2010-07-06

申请号：US11254264

申请日：2005-10-20

申请人： Giovanni M. Della-Libera ,  Christopher G. Kaler ,  Scott A. Konersmann ,  Butler W. Lampson ,  Paul J. Leach ,  Bradford H. Lovering ,  Steven E. Lucco ,  Stephen J. Millet ,  Richard F. Rashid ,  John P. Shewchuk

发明人： Giovanni M. Della-Libera ,  Christopher G. Kaler ,  Scott A. Konersmann ,  Butler W. Lampson ,  Paul J. Leach ,  Bradford H. Lovering ,  Steven E. Lucco ,  Stephen J. Millet ,  Richard F. Rashid ,  John P. Shewchuk

IPC分类号： H04L29/06

CPC分类号： H04L63/08 ,  G06Q20/3676 ,  H04L63/10 ,  H04L63/168 ,  H04L63/20 ,  H04L67/02 ,  H04L67/28 ,  H04L67/2804 ,  H04L67/2823

摘要： A distributed security system is provided. The distributed security system uses a security policy that is written in a policy language that is transport and security protocol independent as well as independent of cryptographic technologies. This security policy can be expressed using the language to create different security components allowing for greater scalability and flexibility. By abstracting underlying protocols and technologies, multiple environments and platforms can be supported.

公开(公告)号：US07752442B2

公开(公告)日：2010-07-06

申请号：US11254539

申请日：2005-10-20

申请人： Giovanni M. Della-Libera ,  Christopher G. Kaler ,  Scott A. Konersmann ,  Butler W. Lampson ,  Paul J. Leach ,  Bradford H. Lovering ,  Steven E. Luocco ,  Stephen J. Millet ,  Richard F. Rashid ,  John P. Shewchuk

发明人： Giovanni M. Della-Libera ,  Christopher G. Kaler ,  Scott A. Konersmann ,  Butler W. Lampson ,  Paul J. Leach ,  Bradford H. Lovering ,  Steven E. Luocco ,  Stephen J. Millet ,  Richard F. Rashid ,  John P. Shewchuk

IPC分类号： H04L9/32

CPC分类号： H04L63/08 ,  G06Q20/3676 ,  H04L63/10 ,  H04L63/168 ,  H04L63/20 ,  H04L67/02 ,  H04L67/28 ,  H04L67/2804 ,  H04L67/2823

摘要： A distributed security system is provided. The distributed security system uses a security policy that is written in a policy language that is transport and security protocol independent as well as independent of cryptographic technologies. This security policy can be expressed using the language to create different security components allowing for greater scalability and flexibility. By abstracting underlying protocols and technologies, multiple environments and platforms can be supported.

公开(公告)号：US07194553B2

公开(公告)日：2007-03-20

申请号：US09983539

申请日：2001-10-24

申请人： Steven E. Lucco ,  Erik B. Christensen ,  Andrew J. Layman ,  David E. Levin ,  Bradford H. Lovering ,  Henrik Frystyk Nielsen ,  John P. Shewchuk

发明人： Steven E. Lucco ,  Erik B. Christensen ,  Andrew J. Layman ,  David E. Levin ,  Bradford H. Lovering ,  Henrik Frystyk Nielsen ,  John P. Shewchuk

IPC分类号： G06F15/16 ,  G00F15/173

CPC分类号： H04L29/12132 ,  H04L29/12066 ,  H04L45/02 ,  H04L61/1511 ,  H04L61/1552 ,  H04L67/02 ,  H04L67/2814 ,  H04L67/2819

摘要： An apparatus and method is provided for resolving virtual network names using one or more name routers. A conventional Uniform Resource Locator (URL) naming scheme is extended by allowing any component to be mapped to an address. The resolution process occurs recursively through a plurality of name routers. Resolution can be contextual, such that the same virtual network name may be resolved differently depending on the identity of the client or other parameters.

摘要翻译： 提供了一种用于使用一个或多个名称路由器来解析虚拟网络名称的装置和方法。 通过允许任何组件映射到地址来扩展常规的统一资源定位符（URL）命名方案。 解析过程通过多个名称路由器递归地发生。 分辨率可以是上下文的，使得可以根据客户端的身份或其他参数来不同地解析相同的虚拟网络名称。

公开(公告)号：US07653747B2

公开(公告)日：2010-01-26

申请号：US11422106

申请日：2006-06-05

申请人： Steven E. Lucco ,  Erik B. Christensen ,  Andrew J. Layman ,  David E. Levin ,  Bradford H. Lovering ,  Henrik Frystyk Nielsen ,  John P. Shewchuk

发明人： Steven E. Lucco ,  Erik B. Christensen ,  Andrew J. Layman ,  David E. Levin ,  Bradford H. Lovering ,  Henrik Frystyk Nielsen ,  John P. Shewchuk

IPC分类号： G06F15/16

CPC分类号： H04L29/12132 ,  H04L29/12066 ,  H04L45/02 ,  H04L61/1511 ,  H04L61/1552 ,  H04L67/02 ,  H04L67/2814 ,  H04L67/2819

摘要： An apparatus and method is provided for resolving virtual network names using one or more name routers. A conventional Uniform Resource Locator (URL) naming scheme is extended by allowing any component to be mapped to an address. The resolution process occurs recursively through a plurality of name routers. Resolution can be contextual, such that the same virtual network name may be resolved differently depending on the identity of the client or other parameters.

摘要翻译： 提供了一种用于使用一个或多个名称路由器来解析虚拟网络名称的装置和方法。 通过允许任何组件映射到地址来扩展常规的统一资源定位符（URL）命名方案。 解析过程通过多个名称路由器递归地发生。 分辨率可以是上下文的，使得可以根据客户端的身份或其他参数来不同地解析相同的虚拟网络名称。

公开(公告)号：US06839716B1

公开(公告)日：2005-01-04

申请号：US09734265

申请日：2000-12-11

申请人： Giovanni M. Della-Libera ,  Patrick M. Dengler ,  Anders Hejlsberg ,  Bradford H. Lovering ,  John P. Shewchuk

发明人： Giovanni M. Della-Libera ,  Patrick M. Dengler ,  Anders Hejlsberg ,  Bradford H. Lovering ,  John P. Shewchuk

IPC分类号： G06F17/30

CPC分类号： G06F17/30569 ,  Y10S707/99936 ,  Y10S707/99944

摘要： A method of building a dataset in a computing system includes extracting data meeting a predetermined criteria from at least a first database, filling the dataset with data items, extracting from the first database relationships between the data items meeting the predetermined criteria, and filling the dataset with the relationships. A system for building a dataset in a computing system includes a data extraction module, a data populating module, a relationship extraction module, and a relationship populating module. The data extraction module extracts data meeting a predetermined criteria from at least a first database. The data populating module fills the dataset with data items. The relationship extraction module extracts from the first database relationships between the data items meeting the predetermined criteria. The relationship populating module fills the dataset with the relationships. A dataset contained within memory of a computing system includes a table component for containing data extracted from a database. The dataset also includes a relations component for containing relationships extracted from the database.

摘要翻译： 一种在计算系统中构建数据集的方法包括从至少第一数据库提取满足预定标准的数据，用数据项填充数据集，从满足预定标准的数据项之间的第一数据库中提取关系，并填充数据集 与关系。 用于在计算系统中构建数据集的系统包括数据提取模块，数据填充模块，关系提取模块和关系填充模块。 数据提取模块从至少第一数据库提取满足预定标准的数据。 数据填充模块用数据项填充数据集。 关系提取模块从满足预定标准的数据项之间的第一数据库关系提取。 关系填充模块用关系填充数据集。 包含在计算系统的存储器内的数据集包括用于包含从数据库提取的数据的表组件。 数据集还包括用于包含从数据库提取的关系的关系组件。