Inspection of data channels and recording of media streams
    22.
    发明授权
    Inspection of data channels and recording of media streams 有权
    检查数据通道和记录媒体流

    公开(公告)号:US09369491B2

    公开(公告)日:2016-06-14

    申请号:US14537336

    申请日:2014-11-10

    Abstract: In one implementation, two or more endpoints or client devices communication uses a peer-to-peer, browser based, real time communication protocol. One example of such a protocol is Web Real-Time Communication (WebRTC). An intermediary device receives from a first endpoint, a request for communication with a second endpoint, using the browser based real time communication. The intermediary device identifies a control protocol based on the request for communication, and receives one or more write keys from the first endpoint. The intermediary device monitors communication between the first endpoint and the second endpoint using the one or more write keys. Examples for the intermediary devices include servers, firewalls, and other network devices.

    Abstract translation: 在一个实现中,两个或多个端点或客户端设备通信使用基于浏览器的基于对等的实时通信协议。 这种协议的一个例子是Web实时通信(WebRTC)。 中间设备使用基于浏览器的实时通信从第一端点接收与第二端点通信的请求。 中间设备基于通信请求识别控制协议,并从第一端点接收一个或多个写入密钥。 中间设备使用一个或多个写入密钥监视第一端点和第二端点之间的通信。 中间设备的示例包括服务器,防火墙和其他网络设备。

    INSPECTION OF DATA CHANNELS AND RECORDING OF MEDIA STREAMS
    23.
    发明申请
    INSPECTION OF DATA CHANNELS AND RECORDING OF MEDIA STREAMS 有权
    检查数据通道和记录媒体流

    公开(公告)号:US20160134659A1

    公开(公告)日:2016-05-12

    申请号:US14537336

    申请日:2014-11-10

    Abstract: In one implementation, two or more endpoints or client devices communication uses a peer-to-peer, browser based, real time communication protocol. One example of such a protocol is Web Real-Time Communication (WebRTC). An intermediary device receives from a first endpoint, a request for communication with a second endpoint, using the browser based real time communication. The intermediary device identifies a control protocol based on the request for communication, and receives one or more write keys from the first endpoint. The intermediary device monitors communication between the first endpoint and the second endpoint using the one or more write keys. Examples for the intermediary devices include servers, firewalls, and other network devices.

    Abstract translation: 在一个实现中,两个或多个端点或客户端设备通信使用基于浏览器的基于对等的实时通信协议。 这种协议的一个例子是Web实时通信(WebRTC)。 中间设备使用基于浏览器的实时通信从第一端点接收与第二端点通信的请求。 中间设备基于通信请求识别控制协议,并从第一端点接收一个或多个写入密钥。 中间设备使用一个或多个写入密钥监视第一端点和第二端点之间的通信。 中间设备的示例包括服务器,防火墙和其他网络设备。

    COORDINATION OF MULTIPATH TRAFFIC
    24.
    发明申请
    COORDINATION OF MULTIPATH TRAFFIC 有权
    协调多路径交通

    公开(公告)号:US20150026756A1

    公开(公告)日:2015-01-22

    申请号:US13944607

    申请日:2013-07-17

    CPC classification number: H04W12/08 G06F15/16 H04L29/06 H04L63/10 H04L63/20

    Abstract: In one implementation, traffic in a mobile network is directed across multiple paths to a single cloud server or security server (e.g., a security as a service). The mobile device detects a cloud connector through a primary connection based on an attachment or connection via a first interface of a mobile device. The mobile device sends a request to the cloud connector for an identification of a cloud security server associated with the cloud connector. After receiving the identification of the cloud security server, the mobile device directs one or more subsequent data flows or subflows for a second interface or another interface of the mobile device to the cloud server or security server. The second data flow and the second interface are associated with another network that is external to the enterprise network and trusted network connection or not associated with the enterprise network and the trusted network connection.

    Abstract translation: 在一个实现中,移动网络中的流量被定向到单个云服务器或安全服务器(例如,作为服务的安全性)的多个路径。 移动设备通过基于通过移动设备的第一接口的附件或连接的主连接来检测云连接器。 移动设备向云连接器发送请求以识别与云连接器相关联的云安全服务器。 在接收到云安全服务器的标识之后,移动设备将用于移动设备的第二接口或另一接口的一个或多个后续数据流或子流引导到云服务器或安全服务器。 第二数据流和第二接口与企业网络外部的另一网络和可信网络连接相关联,或者与企业网络和可信网络连接不相关联。

    Flow characteristic based peer-to-peer system

    公开(公告)号:US10404781B2

    公开(公告)日:2019-09-03

    申请号:US14636208

    申请日:2015-03-03

    Abstract: In one embodiment, there is provided a device implementing a leecher peer, the device including a processor to request a list of seeder peers from a tracker, receive the list, select a first seeder peer from the list from which to download at least part of a content item, start downloading the at least part of the content item from the first seeder peer, receive a message from the first seeder peer indicating a deterioration in an upload flow characteristic of the first seeder peer, in response to receiving the message, request an updated list of seeder peers, receive the updated list, select a second one of the seeder peers from the updated list from which to download another part of the content item, cease downloading the content item from the first seeder peer, and start downloading the other part of the content item from the second seeder peer.

    Token delegation for third-party authorization in computer networking

    公开(公告)号:US09648141B2

    公开(公告)日:2017-05-09

    申请号:US14674596

    申请日:2015-03-31

    CPC classification number: H04L67/42 H04L63/0807 H04L67/06 H04L67/20 H04L67/289

    Abstract: In one embodiment, first content is served by an application server to a client computer through an Internet service provider network. The first content includes a link to second content on a third-party server. A token request is sent from the third-party server to the application server in response to selection of the link by the client computer. A token is provided to the third-party server by the application server in response to the token request. The token is configured to authorize data flow at a bandwidth for the second content by the Internet service provider network to the client computer. The data flow is authorized based on an agreement for the bandwidth between an operator of the application server and an operator of the Internet service provider network.

    Single Proxies in Secure Communication Using Service Function Chaining
    28.
    发明申请
    Single Proxies in Secure Communication Using Service Function Chaining 有权
    使用服务功能链的安全通信中的单一代理

    公开(公告)号:US20160366191A1

    公开(公告)日:2016-12-15

    申请号:US14734164

    申请日:2015-06-09

    Abstract: A first service node receives a message configured to set up a secure communication session between a client and a server, in which the first service node acts as a proxy. Data packets in the secure communication session are subject to multiple service functions that require decryption of the data packets. A service function chain assigns a service node to each of the service functions. A service header is generated including metadata instructing the service nodes other than the first service node not to act as proxies in the secure communication session. The message and the service header are transmitted to a second service node in the service function chain.

    Abstract translation: 第一服务节点接收被配置为在客户机和服务器之间建立安全通信会话的消息,其中第一服务节点用作代理。 安全通信会话中的数据分组受到需要解密数据分组的多种服务功能。 服务功能链将服务节点分配给每个服务功能。 生成服务报头,包括指示不同于第一服务节点的服务节点的元数据不作为安全通信会话中的代理。 消息和服务头部被发送到服务功能链中的第二服务节点。

    Recording Encrypted Media Session
    29.
    发明申请
    Recording Encrypted Media Session 审中-公开
    录制加密媒体会话

    公开(公告)号:US20160269365A1

    公开(公告)日:2016-09-15

    申请号:US14643802

    申请日:2015-03-10

    Abstract: In one implementation, a media stream is recorded using one or more keys. The one or more keys are also encrypted. The one or more encrypted keys may be stored with the encrypted media session at a cloud storage service. A network device receives a request to record a media stream and accesses at least one stream key for the media stream. The stream key is for encrypting the media stream. The network device encrypts the stream key with a master key. The encrypted stream key is stored in association with the encrypted media stream.

    Abstract translation: 在一个实现中,使用一个或多个键来记录媒体流。 一个或多个键也被加密。 一个或多个加密密钥可以与云存储服务处的加密的媒体会话一起存储。 网络设备接收记录媒体流的请求,并访问媒体流的至少一个流密钥。 流密钥用于加密媒体流。 网络设备用主密钥加密流密钥。 加密的流密钥与加密的媒体流相关联地存储。

    DIFFERENTIATED QUALITY OF SERVICE USING SECURITY AS A SERVICE
    30.
    发明申请
    DIFFERENTIATED QUALITY OF SERVICE USING SECURITY AS A SERVICE 有权
    使用安全作为服务的差异化服务质量

    公开(公告)号:US20150334029A1

    公开(公告)日:2015-11-19

    申请号:US14278598

    申请日:2014-05-15

    Abstract: Various embodiments are disclosed for prioritizing network flows and providing differentiated quality of service in a telecommunications network. In some embodiments, a SecaaS can be utilized to signal flow characteristics of one or more network flows to a connector in a network so that the network can install differentiated quality of service against the one or more network flows based upon the received flow characteristics. Some embodiments enable a connector in a network to act as a PCP client to signal received flow characteristics to an upstream PCP server hosted by an adjacent access network.

    Abstract translation: 公开了各种实施例用于优先化网络流并在电信网络中提供差异化​​的服务质量。 在一些实施例中,可以使用SecaaS来向网络中的连接器发送一个或多个网络流的流特性,使得网络可以基于所接收的流特性来针对所述一个或多个网络流安装差异化服务质量。 一些实施例使得网络中的连接器能够充当PCP客户端,以将接收到的流量特性信号发送到由相邻接入网络托管的上游PCP服务器。

Patent Agency Ranking