公开(公告)号：US07783781B1

公开(公告)日：2010-08-24

申请号：US11243629

申请日：2005-10-05

申请人： Jesse Abraham Rothstein ,  David D. Schmitt ,  Arindum Mukerji

发明人： Jesse Abraham Rothstein ,  David D. Schmitt ,  Arindum Mukerji

IPC分类号： G06F15/16 ,  G06F15/173

CPC分类号： H04L69/04 ,  H04L67/06

摘要： A method, system, and apparatus are directed towards compression of content over a network. The content may include content length information, such as within a header. In one embodiment, a portion of the content may be compressed to approximately fill a buffer of a predefined size. If there remains additional uncompressed content, a new content length may be determined based in part on the length of the compressed content and the remaining uncompressed content. The buffered content and the new content length may then be forwarded in response to the request. The remaining uncompressed content may be split into predefined blocks using identity compression. Identity compression may then be applied to the remaining uncompressed content which is then forwarded to a destination in response to the request.

摘要翻译： 一种方法，系统和装置旨在通过网络压缩内容。 内容可以包括内容长度信息，例如在标题内。 在一个实施例中，内容的一部分可以被压缩以大致填充预定大小的缓冲器。 如果仍然存在额外的未压缩内容，则可以部分地基于压缩内容的长度和剩余的未压缩内容来确定新的内容长度。 然后可以响应于该请求转发缓冲的内容和新的内容长度。 剩余的未压缩内容可以使用身份压缩分割成预定义的块。 然后，可以将身份压缩应用于剩余的未压缩内容，然后响应于请求将身份压缩转发到目的地。

公开(公告)号：US08516156B1

公开(公告)日：2013-08-20

申请号：US12838280

申请日：2010-07-16

申请人： Jesse A. Rothstein ,  David D. Schmitt ,  Arindum Mukerji

发明人： Jesse A. Rothstein ,  David D. Schmitt ,  Arindum Mukerji

IPC分类号： G06F15/16

CPC分类号： H04L69/04 ,  H04L67/06

摘要： A method, system, and apparatus are directed towards compression of content over a network. The content may include content length information, such as within a header. In one embodiment, a portion of the content may be compressed to approximately fill a buffer of a predefined size. If there remains additional uncompressed content, a new content length may be determined based in part on the length of the compressed content and the remaining uncompressed content. The buffered content and the new content length may then be forwarded in response to the request. The remaining uncompressed content may be split into predefined blocks using identity compression. Identity compression may then be applied to the remaining uncompressed content which is then forwarded to a destination in response to the request.

摘要翻译： 一种方法，系统和装置旨在通过网络压缩内容。 内容可以包括内容长度信息，例如在标题内。 在一个实施例中，内容的一部分可以被压缩以大致填充预定大小的缓冲器。 如果仍然存在额外的未压缩内容，则可以部分地基于压缩内容的长度和剩余的未压缩内容来确定新的内容长度。 然后可以响应于该请求转发缓冲的内容和新的内容长度。 剩余的未压缩内容可以使用身份压缩分割成预定义的块。 然后，可以将身份压缩应用于剩余的未压缩内容，然后响应于请求将身份压缩转发到目的地。

公开(公告)号：US08091125B1

公开(公告)日：2012-01-03

申请号：US12057208

申请日：2008-03-27

申请人： John R. Hughes ,  Richard R. Masters ,  David D. Schmitt

发明人： John R. Hughes ,  Richard R. Masters ,  David D. Schmitt

IPC分类号： G06F9/00 ,  G06F15/16 ,  G06F17/00

CPC分类号： G06F9/4843 ,  H04L9/3249 ,  H04L63/0428 ,  H04L63/0485 ,  H04L63/166 ,  H04L2209/125 ,  H04L2209/76

摘要： A system and method for performing asynchronous cryptographic operations. A cryptographic toolkit receives requests for cryptographic operations, and initiates the cryptographic operations within a thread of execution. The toolkit detects when the cryptographic operations are complete, retrieves the results, and returns the results to a calling program. The cryptographic operations are performed in an asynchronous manner, without blocking a calling program. The calling program can specify whether the requested operations are to be performed without blocking.

摘要翻译： 一种用于执行异步加密操作的系统和方法。 加密工具包接收加密操作的请求，并在执行线程中启动加密操作。 工具包检测加密操作何时完成，检索结果，并将结果返回给调用程序。 密码操作以异步方式执行，而不阻塞调用程序。 调用程序可以指定是否在不阻塞的情况下执行请求的操作。

公开(公告)号：US08850223B1

公开(公告)日：2014-09-30

申请号：US10327220

申请日：2002-12-20

申请人： Brett Helsel ,  Ryan C. Kearny ,  Greg Davis ,  David D. Schmitt

发明人： Brett Helsel ,  Ryan C. Kearny ,  Greg Davis ,  David D. Schmitt

IPC分类号： G06F21/00

CPC分类号： G06F21/72

摘要： An inventive apparatus that integrates the operation of a hard disk emulator and a cryptographic accelerator on a single blade server card. An application with cryptographic operations can off load computationally intensive calculations to the cryptographic accelerator so that the speed at which the application performs actions can be increased significantly. Typically, the hard disk emulator is a flash memory component and the accelerator can perform at least modular exponentiation calculations. One bus is employed for communication between the hard disk emulator and the accelerator. Another bus is employed to communicate with other resources off the card. Often, the card is configured to operate as one of a several blade servers in a chassis.

摘要翻译： 在单个刀片服务器卡上集成了硬盘仿真器和加密加速器的操作的创新装置。 具有加密操作的应用程序可以将计算密集型计算加载到加密加速器，从而可以显着增加应用程序执行动作的速度。 通常，硬盘仿真器是闪存组件，并且加速器可以执行至少模幂运算。 一个总线用于硬盘仿真器和加速器之间的通信。 另一辆公共汽车用于与卡片上的其他资源通信。 通常，该卡被配置为作为机箱中的几个刀片服务器之一运行。

公开(公告)号：US08782393B1

公开(公告)日：2014-07-15

申请号：US11420677

申请日：2006-05-26

申请人： Jesse Abraham Rothstein ,  Arindum Mukerji ,  David D. Schmitt ,  John R. Hughes

发明人： Jesse Abraham Rothstein ,  Arindum Mukerji ,  David D. Schmitt ,  John R. Hughes

IPC分类号： G06F21/00

CPC分类号： H04L63/166 ,  H04L63/0272 ,  H04L63/0281 ,  H04L63/045 ,  H04L63/061

摘要： A method, system, and apparatus are directed towards enabling access to payload by a third-party sent over an SSL session. The third-party may be a proxy situated between a client and a server. SSL handshake messages are sent between the client and the server to establish the SSL connection. As the SSL handshake messages are routed through the proxy, the proxy may extract data. In addition, one of the client or the server may send another message within, or out-of-band to, the series of SSL handshake message directly to the proxy. The other SSL message may include secret data that the proxy may use to generate a session key for the SSL connection. With the session key, the proxy may receive SSL messages over the SSL connection, modify and/or transpose the payload within the received SSL messages, and/or terminate the SSL connection at the proxy.

摘要翻译： 一种方法，系统和装置旨在使得能够通过SSL会话发送的第三方对负载进行访问。 第三方可以是位于客户端和服务器之间的代理。 在客户端和服务器之间发送SSL握手消息，建立SSL连接。 当SSL握手消息通过代理路由时，代理可以提取数据。 此外，客户端或服务器中的一个可以直接向该代理发送一系列SSL握手消息内或带外的另一消息。 另一SSL消息可以包括代理可用于生成用于SSL连接的会话密钥的秘密数据。 通过会话密钥，代理可以通过SSL连接接收SSL消息，修改和/或转发收到的SSL消息内的有效负载，和/或终止代理服务器上的SSL连接。