-
公开(公告)号：US09661020B2
公开(公告)日：2017-05-23
申请号：US14509010
申请日：2014-10-07
Applicant: CloudFlare, Inc.
Inventor： Lee Hahn Holloway , Srikanth N. Rao , Matthew Browning Prince , Matthieu Philippe François Tourne , Ian Gerald Pye , Ray Raymond Bejjani , Terry Paul Rodery, Jr.
IPC: H04L29/06
CPC classification number: H04L63/1458 , G06F21/552 , G06F21/577 , H04L63/0281 , H04L63/1408 , H04L63/1416 , H04L63/1425 , H04L63/1433 , H04L63/1466 , H04L63/20
Abstract: A proxy server in a cloud-based proxy service receives a message that indicates that a domain, whose traffic passes through the proxy server, may be under a denial-of-service (DoS) attack. The proxy server enables a rule for the domain that specifies that future requests for resources at that domain are subject to at least initially passing a set of one or more challenges. In response to receiving a request for a resource of that domain from a visitor, the proxy server presents the set of challenges that, if not passed, are an indication that that the visitor is part of the DoS attack. If the set of challenges are passed, the request may be processed. If the set of challenges are not passed, the request may be dropped.
-
32.发明申请公开(公告)号：US20170134346A1
公开(公告)日：2017-05-11
申请号：US15413187
申请日：2017-01-23
Applicant: CloudFlare, Inc.
Inventor： Sébastien Andreas Henry Pahl , Matthieu Philippe François Tourne , Piotr Sikora , Ray Raymond Bejjani , Dane Orion Knecht , Matthew Browning Prince , John Graham-Cumming , Lee Hahn Holloway , Albertus Strasheim
CPC classification number: H04L63/0435 , G06F21/335 , H04L9/0825 , H04L9/3263 , H04L63/0442 , H04L63/061 , H04L63/0823 , H04L63/0869 , H04L63/166
Abstract: A server establishes a secure session with a client device where a private key used in the handshake when establishing the secure session is stored in a different server. During the handshake procedure, the server receives a premaster secret that has been encrypted using a public key bound with a domain for which the client device is attempting to establish a secure session with. The server transmits the encrypted premaster secret to another server for decryption. The server receives the decrypted premaster secret and continues with the handshake procedure including generating a master secret from the decrypted premaster secret and generating one or more session keys that are used in the secure session for encrypting and decrypting communication between the client device and the server.
-
公开(公告)号：US09628509B2
公开(公告)日：2017-04-18
申请号：US14109815
申请日：2013-12-17
Applicant: CloudFlare, Inc.
Inventor： Lee Hahn Holloway , Srikanth N. Rao , Matthew Browning Prince , Matthieu Philippe François Tourne , Ian Gerald Pye , Ray Raymond Bejjani , Terry Paul Rodery, Jr.
IPC: H04L29/06
CPC classification number: H04L63/1458 , G06F21/552 , G06F21/577 , H04L63/0281 , H04L63/1408 , H04L63/1416 , H04L63/1425 , H04L63/1433 , H04L63/1466 , H04L63/20
Abstract: A cloud-based proxy service identifies a denial-of-service (DoS) attack including determining that there is a potential DoS attack being directed to an IP address of the cloud-based proxy service; and responsive to determining that there are a plurality of domains that resolve to that IP address, identifying the one of the plurality of domains that is the target of the DoS attack. The domain that is under attack is identified by scattering the plurality of domains to resolve to different IP addresses, where a result of the scattering is that each of those domains resolves to a different IP address, and identifying one of those plurality of domains as the target of the DoS attack by determining that there is an abnormally high amount of traffic being directed to the IP address in which that domain resolves.
-
34.发明授权Method and apparatus for automatically optimizing the loading of images in a cloud-based proxy service 有权用于自动优化基于云的代理服务中的图像加载的方法和装置公开(公告)号：US09565265B2
公开(公告)日：2017-02-07
申请号：US14937799
申请日：2015-11-10
Applicant: CLOUDFLARE, INC.
Inventor： Christopher Stephen Joel , Michael Sofaer , Lee Hahn Holloway , Ray Raymond Bejjani , Matthieu Philippe François Tourne , Sébastien Andreas Henry Pahl , Dane Orion Knecht
CPC classification number: H04L67/2804 , G06F17/30905 , G06T3/40 , H04L67/2823 , H04W4/185
Abstract: A request is received at a proxy server for a web page, the request originating from a client network application of a client device. The requested web page includes multiple references to multiple images. The proxy server retrieves the requested web page. The proxy server modifies code of the retrieved web page such that the client network application will not, for each one of images, request that image until the location where that image is to be displayed is within a viewport of the client network application or within a defined distance from the viewport of the client network application. The proxy server transmits the modified web page to the client device.
Abstract translation: 在用于网页的代理服务器处接收到来自客户端设备的客户端网络应用的请求。 所请求的网页包括对多个图像的多个引用。 代理服务器检索所请求的网页。 代理服务器修改检索到的网页的代码，使得客户端网络应用程序对于每个图像将不请求该图像，直到该图像要被显示的位置在客户端网络应用的视口内，或者在 与客户端网络应用程序的视口的距离。 代理服务器将修改的网页发送到客户端设备。
-
35.发明授权Secure session capability using public-key cryptography without access to the private key 有权使用公共密钥加密技术安全的会话功能，无需访问私钥公开(公告)号：US09553856B2
公开(公告)日：2017-01-24
申请号：US14315241
申请日：2014-06-25
Applicant: CloudFlare, Inc.
Inventor： Sébastien Andreas Henry Pahl , Matthieu Philippe François Tourne , Piotr Sikora , Ray Raymond Bejjani , Dane Orion Knecht , Matthew Browning Prince , John Graham-Cumming , Lee Hahn Holloway , Albertus Strasheim
CPC classification number: H04L63/0435 , G06F21/335 , H04L9/0825 , H04L9/3263 , H04L63/0442 , H04L63/061 , H04L63/0823 , H04L63/0869 , H04L63/166
Abstract: A server establishes a secure session with a client device where a private key used in the handshake when establishing the secure session is stored in a different server. During the handshake procedure, the server receives a premaster secret that has been encrypted using a public key bound with a domain for which the client device is attempting to establish a secure session with. The server transmits the encrypted premaster secret to another server for decryption. The server receives the decrypted premaster secret and continues with the handshake procedure including generating a master secret from the decrypted premaster secret and generating one or more session keys that are used in the secure session for encrypting and decrypting communication between the client device and the server.
Abstract translation: 服务器与客户端设备建立安全会话，其中在建立安全会话时用于握手的私钥被存储在不同的服务器中。 在握手过程中，服务器接收使用与客户端设备尝试建立安全会话的域绑定的公共密钥进行加密的预安全秘密。 服务器将加密的前提密码发送到另一个服务器进行解密。 服务器接收解密的预分配密钥，并且继续握手过程，包括从解密的前端秘密生成主密钥，并生成在安全会话中使用的用于加密和解密客户端设备与服务器之间的通信的一个或多个会话密钥。
-
Patent Agency Ranking
36.发明授权公开(公告)号：US09385864B2
公开(公告)日：2016-07-05
申请号：US14630585
申请日：2015-02-24
Applicant: CloudFlare, Inc.
Inventor： Sébastien Andreas Henry Pahl , Matthieu Philippe François Tourne , Piotr Sikora , Ray Raymond Bejjani , Dane Orion Knecht , Matthew Browning Prince , John Graham-Cumming , Lee Hahn Holloway , Nicholas Thomas Sullivan , Albertus Strasheim
CPC classification number: H04L9/0844 , H04L9/14 , H04L9/30 , H04L9/321 , H04L9/3263 , H04L9/3268 , H04L63/061 , H04L63/166
Abstract: A server establishes a secure session with a client device where a private key used in the handshake when establishing the secure session is stored in a different server. During the handshake procedure, the server proxies messages to/from the different server including a set of signed cryptographic parameters signed using the private key on the different server. The different server generates the master secret, and generates and transmits the session keys to the server that are to be used in the secure session for encrypting and decrypting communication between the client device and the server.
-
37.发明申请公开(公告)号：US20160080337A1
公开(公告)日：2016-03-17
申请号：US14937805
申请日：2015-11-10
Applicant: CLOUDFLARE, INC.
Inventor： Sébastien Andreas Henry Pahl , Matthieu Philippe François Tourne , Piotr Sikora , Ray Raymond Bejjani , Dane Orion Knecht , Matthew Browning Prince , John Graham-Cumming , Lee Hahn Holloway , Nicholas Thomas Sullivan , Albertus Strasheim
IPC: H04L29/06
CPC classification number: H04L63/061 , G06F21/33 , H04L9/0844 , H04L9/085 , H04L63/0442 , H04L63/045 , H04L63/0869 , H04L63/16 , H04L63/164 , H04L63/166 , H04L63/168
Abstract: A server establishes a secure session with a client device where a private key used in the handshake when establishing the secure session is stored in a different server. During the handshake procedure, the server receives a premaster secret that has been encrypted using a public key bound with a domain for which the client device is attempting to establish a secure session. The server transmits the encrypted premaster secret to the different server for decryption along with other information necessary to compute a master secret and session keys for the secure session. The different server decrypts the encrypted premaster secret, generates the master secret, and generates session keys that are used in the secure session for encrypting and decrypting communication between the client device and the server and transmits those session keys to that server.
-
38.发明申请SECURE SESSION CAPABILITY USING PUBLIC-KEY CRYPTOGRAPHY WITHOUT ACCESS TO THE PRIVATE KEY 有权使用公共密钥的安全性能力，无需访问私钥公开(公告)号：US20160013935A1
公开(公告)日：2016-01-14
申请号：US14630585
申请日：2015-02-24
Applicant: CloudFlare, Inc.
Inventor： Sébastien Andreas Henry Pahl , Matthieu Philippe François Tourne , Piotr Sikora , Ray Raymond Bejjani , Dane Orion Knecht , Matthew Browning Prince , John Graham-Cumming , Lee Hahn Holloway , Nicholas Thomas Sullivan , Albertus Strasheim
CPC classification number: H04L9/0844 , H04L9/14 , H04L9/30 , H04L9/321 , H04L9/3263 , H04L9/3268 , H04L63/061 , H04L63/166
Abstract: A server establishes a secure session with a client device where a private key used in the handshake when establishing the secure session is stored in a different server. During the handshake procedure, the server proxies messages to/from the different server including a set of signed cryptographic parameters signed using the private key on the different server. The different server generates the master secret, and generates and transmits the session keys to the server that are to be used in the secure session for encrypting and decrypting communication between the client device and the server.
Abstract translation: 服务器与客户端设备建立安全会话，其中在建立安全会话时用于握手的私钥被存储在不同的服务器中。 在握手过程中，服务器向不同的服务器代理消息，包括使用不同服务器上的私钥签名的一组签名的加密参数。 不同的服务器生成主密钥，并生成并发送会话密钥到要在安全会话中使用的服务器，以加密和解密客户端设备和服务器之间的通信。
-
公开(公告)号：US11818167B2
公开(公告)日：2023-11-14
申请号：US17509829
申请日：2021-10-25
Applicant: CloudFlare, Inc.
Inventor： Lee Hahn Holloway , Srikanth N. Rao , Matthew Browning Prince , Matthieu Philippe François Tourne , Ian Gerald Pye , Ray Raymond Bejjani , Terry Paul Rodery, Jr.
CPC classification number: H04L63/1458 , G06F21/552 , G06F21/577 , H04L63/0281 , H04L63/1408 , H04L63/1416 , H04L63/1425 , H04L63/1433 , H04L63/1466 , H04L63/20
Abstract: An authoritative DNS server receives DNS requests for domains. The authoritative DNS server responds to the requests with address records that include IP addresses that are selected from a larger pool of IP addresses, where a first response to a DNS query for a domain can include IP addresses different from IP addresses included in a second response for the same domain. Also, the same IP addresses may be returned for a first domain and a different, second domain. The authoritative DNS server may randomly select the IP addresses to include in responses to the requests regardless of the domain.
-
40.发明授权公开(公告)号：US11438178B2
公开(公告)日：2022-09-06
申请号：US16820489
申请日：2020-03-16
Applicant: CLOUDFLARE, INC.
Inventor： Sébastien Andreas Henry Pahl , Matthieu Philippe François Tourne , Piotr Sikora , Ray Raymond Bejjani , Dane Orion Knecht , Matthew Browning Prince , John Graham-Cumming , Lee Hahn Holloway , Nicholas Thomas Sullivan , Albertus Strasheim
IPC: H04L29/06 , H04L9/32 , H04L9/40 , G06F21/33 , H04L9/08 , H04L67/141 , H04L67/01 , H04L9/14 , H04L9/30
Abstract: A server establishes a secure session with a client device where a private key used in the handshake when establishing the secure session is stored in a different server. During the handshake procedure, the server receives a premaster secret that has been encrypted using a public key bound with a domain for which the client device is attempting to establish a secure session with. The server transmits the encrypted premaster secret to the different server for decryption along with other information necessary to compute a master secret. The different server decrypts the encrypted premaster secret, generates the master secret, and transmits the master secret to the server. The server receives the master secret and continues with the handshake procedure including generating one or more session keys that are used in the secure session for encrypting and decrypting communication between the client device and the server.
-
-
-
-
-
-
-
-
-
Search Results
54
records
(took 0.033 seconds)
