摘要:
A method and system for implementing secure network communications between a first device and a second device, at least one of the devices communicating with the other device via a firewall device, are provided. The method and system may include obtaining an encryption parameter that is shared by the first device, second device and firewall device. A data packet sent by the first device may then be copied within the firewall device, so that decryption of the copy of the data packet within a portion of the firewall device may take place. In particular, the portion of the firewall device in which decryption takes place is defined such that contents of the portion are inaccessible to an operator of the firewall device. Thus, scanning of the decrypted copy of the data packet for compliance with a predetermined criterion may take place within the firewall device, without an operator of the firewall device having access to the contents of the data packet to be transmitted. Thereafter, the original data packet can be forwarded to its originally-intended recipient.
摘要:
Method for performing the analysis of the characteristics of a data path from a first data processing device to a second data processing device through a network comprising at least an autonomous system consisting in defining a scenario file the scenario to be used, such a scenario including the actions to be used, building a parameter file defining the parameters to be used in the actions, running at least one analysis module based upon the actions of the scenario file and the parameters of the parameter file, the analysis module calling at least a predefined information requesting procedure, and storing in at least an output file the data resulting from the running of the analysis modules
摘要:
A method and system as disclosed for use in a virus-free certificate proxy (107, 801), of retrieving from one or a plurality of virus-free certificate authorities (104, 804) a virus-free certificate (200) certifying that a file is virus-free. The method includes the steps of: receiving (1001) virus-free certificate request for a file; selecting a virus-free certificate authority (104, 804) having authority to generate a virus-free certificate (200) for the file; requesting (1003 . . . 1007) the virus-free certificate to the selected virus-free certificate authority (104, 804); receiving (1003 . . . 1007) from the selected virus-free certificate authority the generated virus-free certificate; sending back (1005) in response to the virus-free certificate request the received virus-free certificate.
摘要:
Method for transmitting high-priority packets in an IP transmission network based upon the Internet Protocol (IP) wherein low-priority packets or fragments of packets are transmitted between a sender and a receiver and at least a high-priority packet can be transmitted from the sender to the receiver by pre-emption of a low-priority packet or a fragment of packet. The method comprises in the sender, the steps of determining whether a low-priority packet or fragment of packet is being transmitted from the sender to the receiver when a high-priority packet has to be transmitted, setting to 1 a reserved bit within the IP header of the high-priority packet used as a pre-emption indicator if a low-priority packet or fragment of packet is currently transmitted, transmitting the high-priority packet with the pre-emption indicator set to 1 from the sender to the receiver, and resuming the transmission of the low-priority packet or fragment of packet at the end of transmission of the high-priority packet.
摘要:
Method of managing the exchange of a file from a sender (13) to a receiver (12, 15) in a data transmission network (10, 11) wherein any user amongst a plurality of users can send an electronic mail with at least an attached file to at least another user. The method comprises the following steps: the original file corresponding to the file to be sent as an attachment to the electronic mail is forwarded by the sender to a file server (14), a substitute file including at least data identifying the original file is sent by the file server back to the sender upon receiving the original file, the substitute file is attached to the electronic mail before sending this one by the sender to the receiver, and the receiver gets, at anytime, the original file from the file server by providing the file server with the parameters of the substitute file.
摘要:
The present invention uses the SAR and CPCS functions of the AAL-5 to define an AAL-5 SSCS for performing the AAL-1 and AAL2 functions. The defined AAL-5 format comprises a SSCS trailer of N (preferred value is 8) bytes an CPCS-PDU of N+8 (preferred value is 16) cells (16.times.48 bytes=768 bytes). In the preferred embodiment, the AAL-5 CPCS-PDU is transported inside 16 ATM cells. The CPCS and SSCS trailers provide the the same efficiency as AAL-1 and the global structure based on 16 cells is completely similar and transparent in term of delay and overhead. The payload size is 48 bytes for the 15 first cells, and 32 bytes for the last cell. The CPCS-PDU payload size is always a multiple of 8 bytes.