-
11.发明授权公开(公告)号：US09680807B2
公开(公告)日：2017-06-13
申请号：US14937805
申请日：2015-11-10
Applicant: CLOUDFLARE, INC.
Inventor： Sébastien Andreas Henry Pahl , Matthieu Phillippe François Tourne , Piotr Sikora , Ray Raymond Bejjani , Dane Orion Knecht , Matthew Browning Prince , John Graham-Cumming , Lee Hahn Holloway , Nicholas Thomas Sullivan , Albertus Strasheim
CPC classification number: H04L63/061 , G06F21/33 , H04L9/0844 , H04L9/085 , H04L63/0442 , H04L63/045 , H04L63/0869 , H04L63/16 , H04L63/164 , H04L63/166 , H04L63/168
Abstract: A server establishes a secure session with a client device where a private key used in the handshake when establishing the secure session is stored in a different server. During the handshake procedure, the server receives a premaster secret that has been encrypted using a public key bound with a domain for which the client device is attempting to establish a secure session. The server transmits the encrypted premaster secret to the different server for decryption along with other information necessary to compute a master secret and session keys for the secure session. The different server decrypts the encrypted premaster secret, generates the master secret, and generates session keys that are used in the secure session for encrypting and decrypting communication between the client device and the server and transmits those session keys to that server.
-
公开(公告)号：US09516130B1
公开(公告)日：2016-12-06
申请号：US14857735
申请日：2015-09-17
Applicant: CLOUDFLARE, INC.
Inventor： John Graham-Cumming
CPC classification number: H04L67/2842 , H04L67/42
Abstract: A caching system receives a request Uniform Resource Identifier (URI) that includes multiple parameters. The request URI is modified to create a canonical request URI including: ordering the parameters by name while keeping a relative order of any of the parameters that have a same name but different value; normalizing a case of the parameters; and removing any of the parameters that are determined to have no effect on a resource that corresponds to the request URI. The modified request URI is hashed thereby creating a hash value. The hash value is used to determine whether the resource that corresponds to the request URI is available in cache.
Abstract translation: 缓存系统接收包含多个参数的请求统一资源标识符（URI）。 修改请求URI以创建规范请求URI，包括：按名称排序参数，同时保持具有相同名称但值不同的任何参数的相对顺序; 规范化参数的情况; 并删除被确定为对与请求URI相对应的资源没有影响的任何参数。 修改的请求URI被哈希化，从而创建哈希值。 哈希值用于确定与请求URI相对应的资源是否在缓存中可用。
-
13.发明申请SECURE SESSION CAPABILITY USING PUBLIC-KEY CRYPTOGRAPHY WITHOUT ACCESS TO THE PRIVATE KEY 有权使用公共密钥的安全性能力，无需访问私钥公开(公告)号：US20150288514A1
公开(公告)日：2015-10-08
申请号：US14248254
申请日：2014-04-08
Applicant: CLOUDFLARE, INC.
Inventor： Sébastien Andreas Henry Pahl , Matthieu Philippe François Tourne , Piotr Sikora , Ray Raymond Bejjani , Dane Orion Knecht , Matthew Browning Prince , John Graham-Cumming , Lee Hahn Holloway , Nicholas Thomas Sullivan , Albertus Strasheim
IPC: H04L9/08
CPC classification number: H04L63/061 , G06F21/33 , H04L9/0844 , H04L9/085 , H04L63/0442 , H04L63/045 , H04L63/0869 , H04L63/16 , H04L63/164 , H04L63/166 , H04L63/168
Abstract: A server establishes a secure session with a client device where a private key used in the handshake when establishing the secure session is stored in a different server. During the handshake procedure, the server receives a premaster secret that has been encrypted using a public key bound with a domain for which the client device is attempting to establish a secure session. The server transmits the encrypted premaster secret to the different server for decryption along with other information necessary to compute a master secret and session keys for the secure session. The different server decrypts the encrypted premaster secret, generates the master secret, and generates session keys that are used in the secure session for encrypting and decrypting communication between the client device and the server and transmits those session keys to that server.
Abstract translation: 服务器与客户端设备建立安全会话，其中在建立安全会话时在握手中使用的私钥被存储在不同的服务器中。 在握手过程中，服务器接收使用与客户端设备尝试建立安全会话的域绑定的公共密钥进行加密的预安全秘密。 服务器将加密的前提密码传送到不同的服务器以进行解密以及计算安全会话的主密钥和会话密钥所需的其他信息。 不同的服务器解密加密的前提秘密，生成主密钥，并生成在安全会话中使用的会话密钥，用于加密和解密客户端设备与服务器之间的通信，并将这些会话密钥发送到该服务器。
-
公开(公告)号：US20240126569A1
公开(公告)日：2024-04-18
申请号：US18393385
申请日：2023-12-21
Applicant: CLOUDFLARE, INC.
Inventor： Kenton Taylor Varda , Zachary Aaron Bloom , Marek Przemyslaw Majkowski , Ingvar Stepanyan , Kyle Kloepper , Dane Orion Knecht , John Graham-Cumming , Dani Grant
IPC: G06F9/448 , G06F9/455 , G06F21/53 , H04L9/40 , H04L41/50 , H04L67/00 , H04L67/02 , H04L67/10 , H04L67/53 , H04L67/63
CPC classification number: G06F9/4484 , G06F9/45558 , G06F21/53 , H04L9/40 , H04L41/50 , H04L63/10 , H04L67/02 , H04L67/10 , H04L67/34 , H04L67/53 , H04L67/63 , G06F2009/45587
Abstract: A compute server receives a request that triggers execution of a code piece out of multiple code pieces. A single process at the compute server executes the code piece, which is run in an isolated execution environment. Each other code piece runs in other isolated execution environments respectively and executed by the single process. The code piece, when executed, modifies a response to the request. The response is generated based at least in part on the executed code piece. The generated response is transmitted.
-
15.发明申请公开(公告)号：US20210014204A1
公开(公告)日：2021-01-14
申请号：US17036988
申请日：2020-09-29
Applicant: Cloudflare, Inc.
Inventor： Sébastien Andreas Henry Pahl , Matthieu Philippe François Tourne , Piotr Sikora , Ray Raymond Bejjani , Dane Orion Knecht , Matthew Browning Prince , John Graham-Cumming , Lee Hahn Holloway , Albertus Strasheim
Abstract: A first server receives a set of cryptographic parameters from a second server. The set of cryptographic parameters is received from the second server as part of a secure session establishment between a client device and the second server. The first server accesses a private key that is not stored on the second server. The first server signs the set of cryptographic parameters using the private key. The first server transmits the signed set of cryptographic parameters to the second server. The first server receives, from the second server, a request to generate a premaster secret using a value generated by the second server that is included in the request and generates the premaster secret. The first server transmits the premaster secret to the second server for use in the secure session establishment between the client device and the second server.
-
Patent Agency Ranking
公开(公告)号：US10893031B2
公开(公告)日：2021-01-12
申请号：US16422947
申请日：2019-05-24
Applicant: CLOUDFLARE, INC.
Inventor： Nicholas Thomas Sullivan , Lee Hahn Holloway , Piotr Sikora , Ryan Lackey , John Graham-Cumming , Dane Orion Knecht , Patrick Donahue , Zi Lin
Abstract: A server receives a request from a client to establish a secure session. The server analyzes the request to determine a set of one or more properties of the request. The server selects, based at least in part on the determined set of properties, one of multiple certificates for a hostname of the server, where each of the certificates is signed using a different signature and hash algorithm pair. The server returns the selected certificate to the client.
-
17.发明授权公开(公告)号：US10860340B2
公开(公告)日：2020-12-08
申请号：US16450585
申请日：2019-06-24
Applicant: CLOUDFLARE, INC.
Inventor： Kenton Taylor Varda , Zachary Aaron Bloom , Marek Przemyslaw Majkowski , Ingvar Stepanyan , Kyle Kloepper , Dane Orion Knecht , John Graham-Cumming , Dani Grant
Abstract: A compute server receives a request from a client device that triggers execution of a code piece. The compute server is one of multiple compute servers that are part of a distributed cloud computing network. The request is directed to a zone. A single process at the compute server executes the code piece in an isolated execution environment. The single process is also executing other code pieces in other isolated execution environments respectively. A response is generated to the request based at least in part on the executed code piece, and the generated response is transmitted to the client device.
-
18.发明授权公开(公告)号：US10785198B2
公开(公告)日：2020-09-22
申请号：US16188244
申请日：2018-11-12
Applicant: CLOUDFLARE, INC.
Inventor： Sébastien Andreas Henry Pahl , Matthieu Philippe François Tourne , Piotr Sikora , Ray Raymond Bejjani , Dane Orion Knecht , Matthew Browning Prince , John Graham-Cumming , Lee Hahn Holloway , Albertus Strasheim
Abstract: A server establishes a secure session with a client device where a private key used in the handshake when establishing the secure session is stored in a different server. During the handshake procedure, the server receives a premaster secret that has been encrypted using a public key bound with a domain for which the client device is attempting to establish a secure session with. The server transmits the encrypted premaster secret to another server for decryption. The server receives the decrypted premaster secret and continues with the handshake procedure including generating a master secret from the decrypted premaster secret and generating one or more session keys that are used in the secure session for encrypting and decrypting communication between the client device and the server.
-
公开(公告)号：US10779015B2
公开(公告)日：2020-09-15
申请号：US15726315
申请日：2017-10-05
Applicant: Cloudflare, Inc.
Inventor： Dane Orion Knecht , Igor Postelnik , Oliver Yu , John Graham-Cumming , Dani Grant , Nitin Rao
IPC: H04N21/231 , H04N21/218 , H04N21/239 , H04N21/232 , H04N21/262 , H04N21/845
Abstract: A server in a content delivery network (CDN) receives a request for a web page of a domain handled by an origin server. The server retrieves the web page and the web page references a video. The server retrieves a file that indicates a list of locations of the domain in which segments of the video are located. The server fetches at least an initial portion of the segments. The server receives a request for the video. The server transmits to the requester at least the initial portion of the segments. The server receives a subsequent request of a different portion of the segments. The server transmits a response to the requester that instructs the requester to transmit the request for the different portion of segments to a second server in the CDN.
-
公开(公告)号：US20190281032A1
公开(公告)日：2019-09-12
申请号：US16422947
申请日：2019-05-24
Applicant: CLOUDFLARE, INC.
Inventor： Nicholas Thomas Sullivan , Lee Hahn Holloway , Piotr Sikora , Ryan Lackey , John Graham-Cumming , Dane Orion Knecht , Patrick Donahue , Zi Lin
Abstract: A server receives a request from a client to establish a secure session. The server analyzes the request to determine a set of one or more properties of the request. The server selects, based at least in part on the determined set of properties, one of multiple certificates for a hostname of the server, where each of the certificates is signed using a different signature and hash algorithm pair. The server returns the selected certificate to the client.
-
-
-
-
-
-
-
-
-
Search Results
92
records
(took 0.017 seconds)
