Method and system for providing network management based on defining and applying network administrative intents
    21.
    发明授权
    Method and system for providing network management based on defining and applying network administrative intents 有权
    基于定义和应用网络管理意图提供网络管理的方法和系统

    公开(公告)号:US07710900B2

    公开(公告)日:2010-05-04

    申请号:US11470240

    申请日:2006-09-05

    Abstract: Method and system for providing a dynamic network configuration and management based on defining and applying high level administrative intents including retrieving one or more attributes associated with one or more logical groups in a network, determining one or more network policies based on the one or more retrieved attributes, associating the one or more logical groups to a respective network group identifier, and generating a network group list associated with the one or more network group identifiers, is disclosed.

    Abstract translation: 用于基于定义和应用高级管理意图提供动态网络配置和管理的方法和系统,包括检索与网络中的一个或多个逻辑组相关联的一个或多个属性,基于一个或多个检索到的一个或多个检索到的一个或多个网络策略 属性,将一个或多个逻辑组关联到相应的网络组标识符,以及生成与一个或多个网络组标识符相关联的网络组列表。

    Efficient data path encapsulation between access point and access switch
    22.
    发明申请
    Efficient data path encapsulation between access point and access switch 有权
    接入点和接入交换机之间高效的数据路径封装

    公开(公告)号:US20080165968A1

    公开(公告)日:2008-07-10

    申请号:US11650082

    申请日:2007-01-05

    CPC classification number: H04L63/0428 H04W12/02

    Abstract: In one embodiment, a method for processing encrypted wireless station data at a network device includes receiving from an access point, one or more frames comprising wireless station data fragmented into a plurality of encrypted protocol data units. The frames are configured to identify the encrypted protocol units associated with the wireless station data. The method further includes decrypting the encrypted protocol data units and forwarding the wireless station data. An apparatus for processing encrypted wireless station data, a method for transmitting encrypted multicast data for a wireless client, and a method for processing encrypted wireless station data at an access point are also disclosed.

    Abstract translation: 在一个实施例中,一种用于在网络设备处理加密的无线站数据的方法包括:从接入点接收一个或多个帧,该帧包括分段成多个加密协议数据单元的无线站数据。 这些帧被配置为识别与无线站数据相关联的加密协议单元。 该方法还包括解密加密的协议数据单元并转发无线站数据。 还公开了一种用于处理加密的无线站数据的装置,用于发送用于无线客户端的加密多播数据的方法以及在接入点处理加密的无线站数据的方法。

    Fast handoff for wireless devices in a wired-wireless network
    23.
    发明申请
    Fast handoff for wireless devices in a wired-wireless network 有权
    无线设备在有线无线网络中的快速切换

    公开(公告)号:US20080146230A1

    公开(公告)日:2008-06-19

    申请号:US11640579

    申请日:2006-12-18

    CPC classification number: H04W36/0016 H04W36/02 H04W40/32 H04W40/36

    Abstract: A method and apparatus for handoff of a wireless client from a first network device to a second network device in a wired network are disclosed. In one embodiment, the method includes receiving data from a new wireless client at the second network device and transmitting a request for a route update for the new wireless client to the wired network. Prior to network convergence for the route update, data traffic for the new wireless client is received from the first network device and forwarded to the new wireless client. Context information for the new wireless client is transmitted from the second network device to other network devices in a proximity group of the second network device.

    Abstract translation: 公开了一种用于将无线客户端从有线网络中的第一网络设备切换到第二网络设备的方法和装置。 在一个实施例中,该方法包括从第二网络设备处的新无线客户端接收数据,并向有线网络发送新无线客户端的路由更新请求。 在用于路由更新的网络融合之前,从第一网络设备接收新的无线客户端的数据业务并转发给新的无线客户端。 用于新无线客户端的上下文信息从第二网络设备发送到第二网络设备的接近组中的其他网络设备。

    Minimally disruptive hash table
    24.
    发明授权
    Minimally disruptive hash table 有权
    微小的破坏性哈希表

    公开(公告)号:US08595239B1

    公开(公告)日:2013-11-26

    申请号:US13342503

    申请日:2012-01-03

    Applicant: Navindra Yadav

    Inventor: Navindra Yadav

    CPC classification number: G06F17/30949 H04L45/7453

    Abstract: Methods and articles of manufacture relating to hash tables and in particular to minimally disruptive hash tables are disclosed. In one aspect, the method includes creating the hash table with a plurality of hash table buckets, wherein a count of the plurality of hash table buckets is greater than or equal to a maximum count of elements to be stored in the hash table over a period in which the hash table is used, storing a plurality of elements in the plurality of hash table buckets such that each hash table bucket has one of the plurality of elements, and adding a new element to the hash table. Adding the new element includes determining, using a hash function, a plurality of hash table indexes and inserting the new element in the identified hash table buckets by replacing existing elements stored in the hash table buckets.

    Abstract translation: 公开了与散列表相关的方法和制品,特别是涉及最小破坏的散列表。 一方面,该方法包括使用多个散列表桶创建散列表,其中多个散列表桶的计数大于或等于在一段时间内要存储在哈希表中的元素的最大计数 其中使用所述散列表,将多个元素存储在所述多个散列表桶中,使得每个散列表桶具有所述多个元素中的一个,并将新元素添加到所述散列表。 添加新元素包括使用散列函数确定多个散列表索引,并通过替换存储在散列表桶中的现有元素将新元素插入识别的散列表桶中。

    Multi-factor client authentication
    25.
    发明授权
    Multi-factor client authentication 有权
    多因素客户端认证

    公开(公告)号:US08578468B1

    公开(公告)日:2013-11-05

    申请号:US13475063

    申请日:2012-05-18

    Applicant: Navindra Yadav

    Inventor: Navindra Yadav

    CPC classification number: H04L63/1483 H04L63/08 H04L63/20

    Abstract: A method of client authentication that includes receiving an Internet protocol source address of a client packet and determining a packet origination, a network connection point, and a network path of the client packet. The method further includes comparing the determined packet origination with at least one packet origination associated with the client, comparing the determined network connection point with at least one network connection point associated with the client, and assessing a compatibility between the determined network path and at least one of the determined packet origination or the determined network connection point. The method includes signaling execution of client authentication challenges when either of the two comparisons fails and/or the determined network path is incompatible with at least one of the determined packet origination or the determined network connection point.

    Abstract translation: 一种客户端认证方法,包括接收客户端分组的因特网协议源地址并确定分组发起,网络连接点和客户端分组的网络路径。 该方法还包括将确定的分组发起与至少一个与客户端相关联的分组发起进行比较,将确定的网络连接点与与该客户端相关联的至少一个网络连接点进行比较,以及评估所确定的网络路径与至少 确定的分组发起或确定的网络连接点之一。 该方法包括当两个比较中的任一个失败时和/或所确定的网络路径与所确定的分组发起或所确定的网络连接点中的至少一个不兼容时,信令执行客户端认证挑战。

    Routing to the access layer to support mobility of internet protocol devices
    26.
    发明授权
    Routing to the access layer to support mobility of internet protocol devices 有权
    路由到接入层,支持互联网协议设备的移动性

    公开(公告)号:US08520595B2

    公开(公告)日:2013-08-27

    申请号:US12773355

    申请日:2010-05-04

    CPC classification number: H04W40/24 H04L45/04 H04L45/42

    Abstract: Techniques are provided for seamless integration of wired and wireless functionality packet forwarding in network. A plurality of access switches are provided in each of a plurality of mobility sub-domains that are part of a mobility domain of a network. Each access switch serves one or more Internet Protocol (IP) subnets, each comprising a plurality of IP addresses. An access switch obtains an IP address for a wireless device according to the one or more IP subnets that the access switch serves. The access switch sends an association advertisement message to indicate the IP address of the wireless device and to enable other access switches and routers to compute a path to the wireless device. When a wireless device obtains an IP address, it can keep the same IP address as it roams in the mobility domain.

    Abstract translation: 为网络中有线和无线功能数据包转发的无缝集成提供了技术。 在作为网络的移动性域的一部分的多个移动性子域中的每一个中提供多个接入交换机。 每个接入交换机提供一个或多个互联网协议(IP)子网,每个网络包括多个IP地址。 接入交换机根据接入交换机所服务的一个或多个IP子网获取无线设备的IP地址。 接入交换机发送关联广告消息以指示无线设备的IP地址,并使其他接入交换机和路由器能够计算到无线设备的路径。 当无线设备获得IP地址时,它可以保持与移动域中漫游相同的IP地址。

    Maintaining point of presence at tunneling endpoint for roaming clients in distributed wireless controller system
    27.
    发明授权
    Maintaining point of presence at tunneling endpoint for roaming clients in distributed wireless controller system 有权
    维护分布式无线控制器系统中漫游客户端隧道端点的存在点

    公开(公告)号:US08441983B2

    公开(公告)日:2013-05-14

    申请号:US12773360

    申请日:2010-05-04

    CPC classification number: H04W40/24 H04L45/04 H04L45/42

    Abstract: Techniques are provided to support roaming of wireless devices in a network such that the wireless devices can keep their Internet Protocol (IP) addresses as they roam within and across mobility sub-domains. When a wireless device roams from one access switch to another access switch, a tunneling endpoint apparatus in the wireless device's home mobility sub-domain is configured to serve as the point of presence for the roamed wireless device. Traffic for the roamed wireless device is tunneled from the access switch where the wireless device has roamed (where it is currently attached) to the tunneling endpoint apparatus. When the wireless device roams across mobility sub-domains, then traffic is tunneled from the access switch where the wireless device is currently attached to the tunneling endpoint apparatus in that mobility sub-domain (called a “foreign” mobility sub-domain) to the tunneling endpoint apparatus in the wireless device's home mobility sub-domain.

    Abstract translation: 提供技术以支持网络中的无线设备的漫游,使得无线设备可以在移动性子域内漫游时保持其互联网协议(IP)地址。 当无线设备从一个接入交换机漫游到另一个接入交换机时,无线设备的归属移动性子域中的隧道端点设备被配置为用作漫游无线设备的存在点。 漫游无线设备的业务从无线设备已经漫游(其当前附接的)的接入交换机隧道传送到隧道终端设备。 当无线设备漫游跨越移动性子域时,则将业务从无线设备当前附接到的接入交换机隧道传送到该移动性子域(称为“外部”移动性子域)的隧道端点设备, 隧道终端设备在无线设备的归属移动性子域中。

    Hierarchical control signaling for mobile clients in distributed wireless controller system
    28.
    发明授权
    Hierarchical control signaling for mobile clients in distributed wireless controller system 有权
    分布式无线控制器系统中移动客户端的层次控制信令

    公开(公告)号:US08428006B2

    公开(公告)日:2013-04-23

    申请号:US12823227

    申请日:2010-06-25

    CPC classification number: H04W8/085 H04W8/26

    Abstract: A system and method for a hierarchical distributed control architecture to support roaming wireless client devices. Access switches serve one or more Internet Protocol (IP) subnets that include plural IP addresses. The access switches are arranged in switch peer groups and store information about other access switches in that switch peer group and about locations of wireless client devices that are associated with any access switch in the switch peer group. The access switches are further grouped into a corresponding mobility sub-domain each including plural switch peer groups. Plural controller devices control access switches in a corresponding mobility sub-domain. Each controller device stores information about the access switches and about locations of wireless client devices within its mobility sub-domain. A central controller device communicates with the controller devices for the respective mobility sub-domains. The central controller device stores information about locations of wireless client devices in the mobility sub-domains.

    Abstract translation: 一种用于支持漫游无线客户端设备的分层分布式控制架构的系统和方法。 接入交换机提供包含多个IP地址的一个或多个因特网协议(IP)子网。 接入交换机被安排在交换机对等体组中,并且存储关于该交换机对等体组中的其他接入交换机的信息以及与交换机对等体组中的任何接入交换机相关联的无线客户端设备的位置。 接入交换机被进一步分组成每个包括多个交换对等体组的对应的移动性子域。 多个控制器设备控制相应移动性子域中的接入交换机。 每个控制器设备存储有关接入交换机的信息以及无线客户端设备在其移动性子域内的位置。 中央控制器设备与各个移动性子域的控制器设备进行通信。 中央控制器设备存储关于无线客户端设备在移动性子域中的位置的信息。

    Link state protocol routing message containment
    29.
    发明授权
    Link state protocol routing message containment 有权
    链路状态协议路由消息遏制

    公开(公告)号:US08423668B2

    公开(公告)日:2013-04-16

    申请号:US11967931

    申请日:2007-12-31

    CPC classification number: H04W40/30 H04L45/025 H04L45/04

    Abstract: In one example embodiment, a system and method are shown that includes calculating a first SPF tree for a first device, the first SPF tree including a root node and a first child node, the first device being the root node of the first SPF tree. Additionally, the system and method may include calculating a second SPF tree for a second device that is a neighbor of the first device, the second SPF tree including a root node and a first child node, the second device being the root node of the second SPF tree. Further, the system and method may include building a set of interested nodes including the second device, if the first child node if the first SPF tree and the first child node of the second SPF tree are distinct.

    Abstract translation: 在一个示例实施例中,示出了系统和方法,其包括为第一设备计算第一SPF树,第一SPF树包括根节点和第一子节点,第一设备是第一SPF树的根节点。 另外,该系统和方法可以包括为作为第一设备的邻居的第二设备计算第二SPF树,第二SPF树包括根节点和第一子节点,第二设备是第二设备的根节点 SPF树。 此外,所述系统和方法可以包括:如果第一子节点(如果第一SPF树和第二SPF树的第一子节点是不同的),则建立包括第二设备的一组感兴趣的节点。

    Session Layer for Monitoring Utility Application Traffic
    30.
    发明申请
    Session Layer for Monitoring Utility Application Traffic 有权
    用于监视实用程序应用程序流量的会话层

    公开(公告)号:US20130054784A1

    公开(公告)日:2013-02-28

    申请号:US13219773

    申请日:2011-08-29

    Abstract: Techniques are provided to facilitate monitoring of utility application traffic streams. At a network device that routes utility application traffic for utility devices, control information is received, where the control information is configured to cause the network device to monitor utility application traffic that passes through the network device. The network device monitors a header inserted into utility application traffic messages based on the control information.

    Abstract translation: 提供技术以便于监控公用应用业务流。 在用于实用设备路由实用程序应用程序流量的网络设备上,接收控制信息,其中控制信息被配置为使得网络设备监视通过网络设备的应用程序流量。 网络设备基于控制信息监视插入到应用程序业务消息中的报头。

Patent Agency Ranking