公开(公告)号：US20060218304A1

公开(公告)日：2006-09-28

申请号：US11085849

申请日：2005-03-22

申请人： Sarit Mukherjee ,  Sampath Rangarajan ,  Pablo Rodriguez

发明人： Sarit Mukherjee ,  Sampath Rangarajan ,  Pablo Rodriguez

IPC分类号： G06F15/16

CPC分类号： H04L67/2814 ,  G06F17/30902

摘要： A method and apparatus for retrieving embedded objects of a web page across links. The method and apparatus include receiving, at a gateway, a requested top-level web page having at least one embedded uniform resource locator (URL) from at least one content server in response to a request for the web page from an end-user browser. The at least one embedded URL is modified with an IP address of a caching proxy. The caching proxy may be either co-located or separate from the gateway. The top-level web page and modified embedded URLs are sent to the end-user browser, wherein the caching proxy forwards the at least one embedded URL from the at least one content server to the end-user browser.

公开(公告)号：US06275471B1

公开(公告)日：2001-08-14

申请号：US09078065

申请日：1998-05-12

申请人： Dennis Bushmitch ,  Sarit Mukherjee

发明人： Dennis Bushmitch ,  Sarit Mukherjee

IPC分类号： H04J116

CPC分类号： H04L65/607 ,  H04L1/1809 ,  H04L1/1851 ,  H04L1/1877 ,  H04L29/06027 ,  H04L65/80 ,  H04N7/17318 ,  H04N21/6125 ,  H04N21/6375 ,  H04N21/6437

摘要： A method is provided for reliable real-time data streaming in a multimedia delivery system. The system is implemented using a real-time protocol that is based on the well-known Real-time Transport Protocol (RTP) suite which provides a framework for implementing near real-time reliable data delivery over non real-time unreliable data link layer technologies (e.g., Ethernet). These protocols provide near real-time reliable or best feasible data streaming while utilizing best effort unreliable network services (e.g., Internet). Under the Reliable protocol, an entire data block, including any missing or lost data packets, is reconstructed from all of the individual data packets through the use of a selective negative acknowledgement (NACK) mechanism. In contrast, the Best Feasible protocol sacrifices some of the data packet's reliability by not retransmitting “late” packets. An additional timing parameter encapsulated in the NACK message will facilitate the determination of whether it is “feasible” to retransmit a missing data packet. A real-time identification technique has been incorporated into the format of each transmitted data packet that allows for the identification of both its sender and intended recipient(s) without having to call an underlying socket specific function.

摘要翻译： 提供了一种用于多媒体传送系统中的可靠实时数据流的方法。 该系统使用基于众所周知的实时传输协议（RTP）套件的实时协议实现，该实时协议为通过非实时不可靠数据链路层技术实现近实时可靠的数据传送提供了框架 （例如，以太网）。 这些协议提供接近实时可靠或最佳可行的数据流，同时利用尽力而为的不可靠网络服务（例如因特网）。 在可靠协议下，通过使用选择性否定确认（NACK）机制，从所有单独的数据分组重构整个数据块，包括任何丢失或丢失的数据分组。 相比之下，最佳可行协议通过不重传“迟来”数据包来牺牲一些数据包的可靠性。 封装在NACK消息中的附加定时参数将有助于确定重传丢失的数据分组是否“可行”。 实时识别技术已经被并入到每个传输的数据分组的格式中，其允许对其发送者和预期接收者进行标识，而不必调用底层套接字特定的功能。

公开(公告)号：US06263435B1

公开(公告)日：2001-07-17

申请号：US09401450

申请日：1999-09-22

申请人： Lakshminath R. Dondeti ,  Sarit Mukherjee ,  Ashok Samal

发明人： Lakshminath R. Dondeti ,  Sarit Mukherjee ,  Ashok Samal

IPC分类号： H04L900

CPC分类号： H04L9/0836 ,  H04L9/0822 ,  H04L9/0891 ,  H04L63/0442 ,  H04L63/064 ,  H04L63/065 ,  H04L63/0823 ,  H04L63/104

摘要： A logical tree structure and method for managing membership in a multicast group provides scalability and security from internal attacks. The structure defines key groups and subgroups, with each subgroup having a subgroup manager. Dual encryption allows the sender of the multicast data to manage distribution of a first set of encryption keys whereas the individual subgroup managers manage the distribution of a second set of encryption keys. The two key sets allow the sender to delegate much of the group management responsibilities without compromising security because a key from each set is required to access the multicast data. Security is further maintained via a method in which subgroup managers can be either member subgroup managers or participant subgroup managers. Access to both keys is provided to member subgroup managers whereas access to only one key is provided to participant subgroup managers. Nodes can be added without the need to generate a new encryption key at the top level which provides improved scalability.

摘要翻译： 用于管理多播组中的成员资格的逻辑树结构和方法提供来自内部攻击的可扩展性和安全性。 该结构定义了关键组和子组，每个子组都有一个子组管理器。 双重加密允许多播数据的发送者管理第一组加密密钥的分发，而各个子组管理器管理第二组加密密钥的分发。 两个密钥集允许发送方委托大量的组管理职责，而不会影响安全性，因为需要每组密钥来访问组播数据。 通过子组管理员可以是成员子组管理员或参与者子组管理器的方法进一步维护安全性。 向成员子组管理员提供对这两个密钥的访问，而只向一个密钥的访问提供给参与者子组管理器。 可以添加节点，而无需在顶层生成新的加密密钥，从而提供改进的可扩展性。

公开(公告)号：US08442031B2

公开(公告)日：2013-05-14

申请号：US11165850

申请日：2005-06-24

申请人： Katherine H. Guo ,  Sarit Mukherjee ,  Kumar Venkata Vemuri

发明人： Katherine H. Guo ,  Sarit Mukherjee ,  Kumar Venkata Vemuri

IPC分类号： H04L12/66 ,  H04L12/28 ,  H04J3/16

CPC分类号： H04L65/1043 ,  H04L65/1016

摘要： The invention includes a method and apparatus for regenerative signaling. Specifically, the method includes receiving at least one base protocol message formatted in accordance with at least one base protocol, obtaining service information associated with at least one network service, and generating, in response to the at least one base protocol message, at least one companion protocol message formatted in accordance with at least one companion protocol. The at least one base protocol message is associated with at least one service endpoint. The service information associated with at least one network service is obtained using the at least one base protocol message. The at least one companion protocol message is generated using at least a portion of the service information. The at least one companion protocol message is operable for controlling the at least one network service in a manner substantially transparent to the at least one service endpoint.

摘要翻译： 本发明包括用于再生信令的方法和装置。 具体地说，该方法包括接收根据至少一个基本协议格式化的至少一个基本协议消息，获得与至少一个网络服务相关联的服务信息，以及响应于该至少一个基本协议消息，生成至少一个 根据至少一个协同协议格式化的协同协议消息。 所述至少一个基本协议消息与至少一个服务端点相关联。 使用至少一个基本协议消息获得与至少一个网络服务相关联的服务信息。 使用服务信息的至少一部分来生成至少一个协同协议消息。 所述至少一个协同协议消息可操作用于以对所述至少一个服务端点基本透明的方式来控制所述至少一个网络服务。

公开(公告)号：US08068502B2

公开(公告)日：2011-11-29

申请号：US11027908

申请日：2004-12-30

申请人： Sarit Mukherjee ,  Sanjoy Paul ,  Krishan K. Sabnani

发明人： Sarit Mukherjee ,  Sanjoy Paul ,  Krishan K. Sabnani

IPC分类号： H04L12/28

CPC分类号： H04L67/16 ,  H04L67/02 ,  H04L67/14 ,  H04L67/142 ,  H04L67/145 ,  H04L69/329

摘要： The invention comprises a method and apparatus for establishing a persistent connection between a user device and a service gateway. Specifically, the method comprises obtaining state information in response to a connection request, establishing a connection between the user device and the service gateway using the state information, and maintaining the state information associated with the connection such that the connection is persistent through at least one network state change.

摘要翻译： 本发明包括用于在用户设备和服务网关之间建立持久连接的方法和装置。 具体地说，该方法包括响应于连接请求获取状态信息，使用状态信息建立用户设备与服务网关之间的连接，以及维护与该连接相关联的状态信息，使得通过至少一个 网络状态变化。

公开(公告)号：US20110090911A1

公开(公告)日：2011-04-21

申请号：US12582939

申请日：2009-10-21

申请人： Fang Hao ,  T.V. Lakshman ,  Sarit Mukherjee ,  Haoyu Song

发明人： Fang Hao ,  T.V. Lakshman ,  Sarit Mukherjee ,  Haoyu Song

IPC分类号： H04L12/56

CPC分类号： H04L12/4641 ,  G06F9/45558 ,  G06F2009/45595 ,  H04L12/4633 ,  H04L49/70

摘要： A capability is provided for providing transparent cloud computing with a virtualized network infrastructure. A method for enabling use of a resource of a data center as an extension of a customer network includes receiving, at a forwarding element (FE), a packet intended for a virtual machine hosted at an edge domain of the data center, determining a VLAN ID of the VLAN for the customer network in the edge domain, updating the packet to include the VLAN ID of the VLAN for the customer network in the edge domain, and propagating the updated packet from the FE toward virtual machine. The edge domain supports a plurality of VLANs for a respective plurality of customer networks. The packet includes an identifier of the customer network and a MAC address of the virtual machine. The VLAN ID of the VLAN for the customer network in the edge domain is determined using the identifier of the customer network and the MAC address of the virtual machine. The FE may be associated with the edge domain at which the virtual machine is hosted, an edge domain of the data center that is different than the edge domain at which the virtual machine is hosted, or the customer network. Depending on the location of the FE at which the packet is received, additional processing may be provided as needed.

摘要翻译： 提供了一种提供透明云计算与虚拟化网络基础架构的能力。 用于使数据中心的资源能够用作客户网络的扩展的方法包括在转发元件（FE）处接收旨在用于驻留在数据中心的边缘域的虚拟机的分组，确定VLAN 边缘域中客户网络的VLAN ID，更新报文，包括边缘域中客户网络的VLAN的VLAN ID，并将更新的报文从FE传播到虚拟机。 边缘域为相应的多个客户网络支持多个VLAN。 该分组包括客户网络的标识符和虚拟机的MAC地址。 边缘域中客户网络的VLAN的VLAN ID使用客户网络的标识符和虚拟机的MAC地址来确定。 FE可以与托管虚拟机的边缘域，数据中心的边缘域与虚拟机所在的边缘域或客户网络相关联。 根据接收到分组的FE的位置，可以根据需要提供额外的处理。

公开(公告)号：US20100125883A1

公开(公告)日：2010-05-20

申请号：US12270990

申请日：2008-11-14

申请人： Sarit Mukherjee ,  Limin Wang

发明人： Sarit Mukherjee ,  Limin Wang

IPC分类号： H04N7/173

CPC分类号： H04N21/64322 ,  H04N21/6125 ,  H04N21/6405 ,  H04N21/64723

摘要： Embodiments of the present invention are methods for selecting, out of a lineup of IPTV channels, a subset of channels for caching. The methods take into account viewers' tendency to walk through the channels that lie between their current channel and their desired channel if that walking distance is short, and, alternatively, viewers' tendency to jump to a distant channel. Accordingly, embodiments of the present invention include any channel selection method which selects for caching any number of channels less than the entire lineup, and where at least two of those channels form a segment of adjacent channels. Other embodiments include methods which rely upon specific extrinsic data, e.g., IGMP and EPG information, for selecting a subset of channels to be cached.

摘要翻译： 本发明的实施例是用于从IPTV频道的阵容中选择用于高速缓存的信道子集的方法。 这些方法考虑到观众倾向于通过位于其当前频道和所需频道之间的频道，如果步行距离短，或者观众倾向于跳到遥远的频道。 因此，本发明的实施例包括任何频道选择方法，其选择用于缓存小于整个阵容的任何数量的信道，并且其中这些信道中的至少两个形成相邻信道的分段。 其他实施例包括依赖于特定外在数据（例如IGMP和EPG信息）的方法，用于选择要缓存的信道的子集。

公开(公告)号：US07478427B2

公开(公告)日：2009-01-13

申请号：US10429815

申请日：2003-05-05

申请人： Sarit Mukherjee ,  Sanjoy Paul ,  Sampath Rangarajan ,  Anil Takkallapalli

发明人： Sarit Mukherjee ,  Sanjoy Paul ,  Sampath Rangarajan ,  Anil Takkallapalli

IPC分类号： G06F21/00 ,  G06F15/16 ,  H04L9/00

CPC分类号： H04L63/0272 ,  H04L12/4633 ,  H04L63/164

摘要： A method and apparatus for providing at least two virtual private network VPN tunnels from a client device in a VPN network having an enterprise gateway and a network VPN gateway. The method and apparatus includes a client device having an Internet Key Exchange (IKE) module for establishing the at least two tunnels using an IKE protocol wherein a first tunnel is an end-to-end VPN tunnel to the enterprise gateway, and a second tunnel is a network-based tunnel to the network VPN gateway. An IPsec Network Driver Interface interfaces with the IKE module, which includes a security authentication database (SADB) that stores downloaded enterprise security policies respectively for each of the at least two tunnels. A routing table stores IP addresses of local presences and hosts respectively associated with the at least two tunnels, whereby packets are routed over the at least two tunnels based on the downloaded policies.

摘要翻译： 一种用于在具有企业网关和网络VPN网关的VPN网络中从客户端设备提供至少两个虚拟专用网络VPN隧道的方法和装置。 该方法和装置包括具有互联网密钥交换（IKE）模块的客户端设备，用于使用IKE协议建立至少两个隧道，其中第一隧道是到企业网关的端到端VPN隧道，以及第二隧道 是到网络VPN网关的基于网络的隧道。 IPsec网络驱动程序接口与IKE模块接口，该IKE模块包括一个安全认证数据库（SADB），它分别为至少两个隧道中的每个隧道存储下载的企业安全策略。 路由表存储分别与至少两个隧道相关联的本地存在和主机的IP地址，由此基于所下载的策略，通过至少两个隧道路由分组。

公开(公告)号：US20080212763A1

公开(公告)日：2008-09-04

申请号：US11712516

申请日：2007-03-01

申请人： Girish P. Chandranmenon ,  Fang Hao ,  Scott C. Miller ,  Sarit Mukherjee

发明人： Girish P. Chandranmenon ,  Fang Hao ,  Scott C. Miller ,  Sarit Mukherjee

IPC分类号： H04M3/42

CPC分类号： H04L67/16 ,  G06Q10/06 ,  H04L67/18 ,  H04L67/24

摘要： An “always-on” network and associated systems enable customers to compare and select products and services offered by one or more providers faster than previously thought possible. In addition, communication connections may be established between customers and providers in real-time.

摘要翻译： “永远在线”的网络和相关系统使客户能够比以前认为的更快地比较和选择一个或多个提供商提供的产品和服务。 此外，可以实时地在客户和供应商之间建立通信连接。

公开(公告)号：US20070220363A1

公开(公告)日：2007-09-20

申请号：US11539915

申请日：2006-10-10

申请人： Sudhir Aggarwal ,  Hemant Banavar ,  Sarit Mukherjee ,  Sampath Rangarajan

发明人： Sudhir Aggarwal ,  Hemant Banavar ,  Sarit Mukherjee ,  Sampath Rangarajan

IPC分类号： G06F11/00

CPC分类号： H04L1/0072 ,  A63F13/12 ,  A63F13/358 ,  A63F2300/534 ,  A63F2300/535 ,  G07F17/32 ,  G07F17/3223 ,  G07F17/3239

摘要： The invention includes a method and apparatus for attempting to synchronize delivery of information at a plurality of receiving systems. The method includes generating, at a sending system, a plurality of current messages adapted for rendering an asset within an application space of a respective plurality of receiving systems, determining an accumulated export error for each of the receiving systems, transmitting the current messages toward the respective receiving systems in a manner adapted to reduce the accumulated export errors. The accumulated export error for a receiving system includes an estimated current message export error for a current message generated by the sending system for the receiving system and an accumulated previous message export error for at least one previous message generated by the sending system for the receiving system.

摘要翻译： 本发明包括用于尝试在多个接收系统上同步信息传递的方法和装置。 该方法包括在发送系统处生成适于在相应的多个接收系统的应用空间内呈现资产的多个当前消息，确定每个接收系统的累积的导出错误，将当前消息发送到 相应的接收系统以适于减少累积的出口错误的方式。 接收系统的累积导出错误包括由发送系统为接收系统生成的当前消息的估计当前消息导出错误以及由发送系统为接收系统生成的至少一个先前消息的累积先前消息导出错误 。