公开(公告)号：US20140024354A1

公开(公告)日：2014-01-23

申请号：US13551613

申请日：2012-07-18

申请人： Fadi Haik ,  Adi Ben-Dayan ,  Or Kaplan ,  Gilad Oren ,  Eran Yariv

发明人： Fadi Haik ,  Adi Ben-Dayan ,  Or Kaplan ,  Gilad Oren ,  Eran Yariv

IPC分类号： H04W52/02 ,  H04W24/00

CPC分类号： H04W52/0258 ,  G01C21/20 ,  G01S5/0018 ,  G01S5/0257 ,  G01S5/0278 ,  G01S5/0294 ,  H04W4/02 ,  H04W4/029 ,  H04W4/046 ,  H04W4/21 ,  H04W48/04 ,  H04W52/02 ,  H04W52/0251 ,  H04W52/0254 ,  H04W64/00 ,  Y02B70/30 ,  Y02D70/00 ,  Y02D70/142 ,  Y02D70/144 ,  Y02D70/146 ,  Y02D70/164 ,  Y02D70/166

摘要： Architecture that facilitates power conservation in mobile devices such as cell phones using prediction. The architecture is an algorithmic-based solution that transforms infrequently-captured geolocation data of an entity into a continuous probable location approximation. Given the location history and additional data about the recent location of the mobile device, the current location of the device can be estimated with some probability. Additionally, given the location history and additional data about the recent location of the device, the probability of the device actually being at a given point on a map is computed.

摘要翻译： 支持使用预测的移动设备（如手机）实现节能的体系结构。 该架构是一种基于算法的解决方案，将实体的不经常捕获的地理位置数据转换为连续可能的位置近似。 给定位置历史和关于移动设备的最近位置的附加数据，可以以某种概率估计设备的当前位置。 此外，考虑到位置历史和关于设备的最近位置的附加数据，计算设备实际在地图上给定点的概率。

公开(公告)号：US20130091197A1

公开(公告)日：2013-04-11

申请号：US13334065

申请日：2011-12-22

申请人： Avi Bar-Zeev ,  Gur Kimchi ,  Brian C. Beckman ,  Scott Isaacs ,  Meir Ben-Itay ,  Eran Yariv ,  Blaise Aguera y Arcas

发明人： Avi Bar-Zeev ,  Gur Kimchi ,  Brian C. Beckman ,  Scott Isaacs ,  Meir Ben-Itay ,  Eran Yariv ,  Blaise Aguera y Arcas

IPC分类号： G06F15/16

CPC分类号： H04L67/42 ,  G06F1/3203 ,  G06F1/3215 ,  H04L67/02 ,  H04L67/32 ,  H04L67/34

摘要： Architecture that embeds a server (a local server) inside a mobile device operating system (OS) close to the data (but under the OS services) such that the server has access to native capabilities, and offers an Internet-like frontend with which a browser or application can communicate. The local server appears as a web server, and small programs can be pushed into the local server from the browser or a remote server such that the local server can be made to perform work more effectively. Local and remote events can be triggered such as launching a browser (or other application(s)), initiating remote server calls, triggering battery save mode, locking the phone, etc. The local server can run a script execution environment such as node.js, an event driven I/O model where callbacks are invoked to handle emergent conditions (e.g., explicit requests, state changes, etc.).

摘要翻译： 将服务器（本地服务器）嵌入到靠近数据（但在OS服务下）的移动设备操作系统（OS）内的架构，以便服务器可以访问本地功能，并提供类似Internet的前端， 浏览器或应用程序可以进行通信。 本地服务器显示为Web服务器，小型程序可以从浏览器或远程服务器推送到本地服务器，从而可以使本地服务器更有效地执行工作。 可以触发本地和远程事件，例如启动浏览器（或其他应用程序），启动远程服务器呼叫，触发电池保存模式，锁定手机等。本地服务器可以运行脚本执行环境（如节点）。 js是一种事件驱动的I / O模型，其中调用回调来处理紧急情况（例如，显式请求，状态更改等）。

公开(公告)号：US20120316774A1

公开(公告)日：2012-12-13

申请号：US13156365

申请日：2011-06-09

申请人： Eran Yariv ,  Yair E. Geva ,  Fadi Haik

发明人： Eran Yariv ,  Yair E. Geva ,  Fadi Haik

IPC分类号： G01C21/00

CPC分类号： G01C21/26 ,  G01C21/3685

摘要： The disclosed architecture facilitates the capture of data associated with a specific geographic location, as captured by a mobile device of a user at the geographic location, for the purpose of guiding the user back to that specific geographic location. When applied to vehicles or other types of user mobility (e.g., walking) the architecture automatically detects that a user has controlled a means of transportation to a stationary (or parked) state, such as associated with a parked car. When the stationary state is reached, the location is detected (e.g., using user device sensing systems). Detection can include recording images, sounds, speech, geolocation data, etc., associated with the location and/or means of transportation. The user can configure a reminder to activate at the location to assist in the user recalling the location when returning to the means of transportation.

摘要翻译： 所公开的架构便于捕获与由地理位置处的用户的移动设备捕获的特定地理位置相关联的数据，以便将用户引导回该特定地理位置。 当应用于车辆或其他类型的用户移动性（例如，步行）时，架构自动检测用户已经将运输工具控制到静止（或停放）状态，例如与停放的汽车相关联的状态。 当达到静止状态时，检测位置（例如，使用用户设备感测系统）。 检测可以包括与位置和/或运输方式相关联的记录图像，声音，语音，地理定位数据等。 用户可以配置提醒以在该位置激活以帮助用户在返回到运输工具时召回该位置。

公开(公告)号：US20120295645A1

公开(公告)日：2012-11-22

申请号：US13110001

申请日：2011-05-18

申请人： Eran Yariv ,  Yair E. Geva ,  Fadi Haik

发明人： Eran Yariv ,  Yair E. Geva ,  Fadi Haik

IPC分类号： G06F15/16 ,  H04W4/12

CPC分类号： H04W4/12 ,  H04L12/1895 ,  H04L51/24 ,  H04L67/322 ,  H04W68/00

摘要： Architecture that enables alerts and notifications to have priorities and time/space durations. Non-critical alerts can be displayed in a non-obtrusive manner and alert/notifications coalesced. Alerts/notifications can be assigned priorities, thereby enabling the alerts/notifications to be non-intrusive to the user. Methods include detecting when the user is using a mobile phone (or other suitable device) and then sending the alert/notification in response to the detected use based on threshold criteria relative to an accumulated sum of alerts/notifications, and an importance level (e.g., of each). Additionally, alert/notification priority can be changed (e.g. elevated, lowered) according to time (when) and space (where), thereby enabling the user to be intrusively notified based on the level, even if not previously signaled. Time and space bounds (criteria) can be assigned to alerts/notifications for merger/grouping and/or set to be auto-dismissed if no longer applicable.

摘要翻译： 使警报和通知具有优先级和时间/空间持续时间的体系结构。 非关键警报可以以非突出的方式显示，警报/通知合并。 可以为警报/通知分配优先级，从而使警报/通知不会侵入用户。 方法包括检测用户何时使用移动电话（或其他合适的设备），然后响应于检测到的使用，基于相对于累加的警报/通知总和的阈值标准来发送警报/通知，以及重要性级别（例如， ， 每个）。 此外，警报/通知优先级可以根据时间（何时）和空间（其中）改变（例如，升高，降低），从而使用户能够基于电平被静态地通知用户，即使以前没有被通知。 可以将时间和空间界限（条件）分配给用于合并/分组的警报/通知，和/或将其设置为自动关闭（如果不再适用）。

公开(公告)号：US20120239584A1

公开(公告)日：2012-09-20

申请号：US13052093

申请日：2011-03-20

申请人： Eran Yariv ,  Gur Kimchi ,  Barney Darryl Pell ,  Yair E. Gheva ,  Brian Beckman ,  Elad Ben-Israel

发明人： Eran Yariv ,  Gur Kimchi ,  Barney Darryl Pell ,  Yair E. Gheva ,  Brian Beckman ,  Elad Ben-Israel

IPC分类号： G01C21/00 ,  G06Q99/00

CPC分类号： G01C21/3438

摘要： Turn-by-turn directions can guide a user to a dynamic destination, such as a person or a rendezvous location. The turn-by-turn directions enable one user to follow another or, alternatively, multiple people to rendezvous with each other. The selection can be via identifiers used in network contexts, such as social networking Individuals can select the circumstances under which their location can be revealed. Turn-by-turn directions enabling following utilize anticipated locations or predictions of likely destinations based on historical and contextual information. Turn-by-turn directions enabling rendezvous reference a rendezvous location, which is either the same for all users, or which differs among them. Also, the directions can reference intermediate, “staging”, locations from which further intermediate, or ultimate, destinations can be routed to.

摘要翻译： 转弯方向可以将用户引导到动态目的地，例如人或交会位置。 转弯方向使一个用户可以跟随另一个或另一个使用者彼此交会。 选择可以通过在网络环境中使用的标识符，例如社交网络。个人可以选择可以揭示其位置的情况。 根据历史和上下文信息，可以使用预期的位置或预测可能的目的地。 转弯方向使会合参考会合位置，对于所有用户来说都是相同的，或者它们之间有所不同。 此外，方向可以参考中间，“分期”，进一步中间或最终目的地可以路由到的位置。

公开(公告)号：US20120054825A1

公开(公告)日：2012-03-01

申请号：US13292018

申请日：2011-11-08

申请人： Charles D. Bassett ,  Eran Yariv ,  Ian M. Carbaugh ,  Lokesh Srinivas Koppolu ,  Maksim Noy ,  Sarah A. Wahlert ,  Pradeep Bahl

发明人： Charles D. Bassett ,  Eran Yariv ,  Ian M. Carbaugh ,  Lokesh Srinivas Koppolu ,  Maksim Noy ,  Sarah A. Wahlert ,  Pradeep Bahl

IPC分类号： G06F21/00

CPC分类号： H04L63/0263 ,  H04L63/20

摘要： A method and system for creating security policies for firewall and connection policies in an integrated manner is provided. The security system provides a user interface through which a user can define a security rule that specifies both a firewall policy and a connection policy. After the security rule is specified, the security system automatically generates a firewall rule and a connection rule to implement the security rule. The security system provides the firewall rule to a firewall engine that is responsible for enforcing the firewall rules and provides the connection rule to an IPsec engine that is responsible for enforcing the connection rules.

摘要翻译： 提供了以综合方式为防火墙和连接策略创建安全策略的方法和系统。 安全系统提供用户界面，用户可以通过该界面定义指定防火墙策略和连接策略的安全规则。 指定安全规则后，安全系统自动生成防火墙规则和连接规则，实现安全规则。 安全系统向防火墙引擎提供防火墙规则，该引擎负责执行防火墙规则，并向负责执行连接规则的IPsec引擎提供连接规则。

公开(公告)号：US08056124B2

公开(公告)日：2011-11-08

申请号：US11183317

申请日：2005-07-15

申请人： Charles D. Bassett ,  Eran Yariv ,  Ian M. Carbaugh ,  Lokesh Srinivas Koppolu ,  Maksim Noy ,  Sarah A. Wahlert ,  Pradeep Bahl

发明人： Charles D. Bassett ,  Eran Yariv ,  Ian M. Carbaugh ,  Lokesh Srinivas Koppolu ,  Maksim Noy ,  Sarah A. Wahlert ,  Pradeep Bahl

IPC分类号： G06F9/00 ,  G06F15/16 ,  G06F17/00

CPC分类号： H04L63/0263 ,  H04L63/20

摘要： A method and system for creating security policies for firewall and connection policies in an integrated manner is provided. The security system provides a user interface through which a user can define a security rule that specifies both a firewall policy and a connection policy. After the security rule is specified, the security system automatically generates a firewall rule and a connection rule to implement the security rule. The security system provides the firewall rule to a firewall engine that is responsible for enforcing the firewall rules and provides the connection rule to an IPsec engine that is responsible for enforcing the connection rules.

摘要翻译： 提供了以综合方式为防火墙和连接策略创建安全策略的方法和系统。 安全系统提供用户界面，用户可以通过该界面定义指定防火墙策略和连接策略的安全规则。 指定安全规则后，安全系统自动生成防火墙规则和连接规则，实现安全规则。 安全系统向防火墙引擎提供防火墙规则，该引擎负责执行防火墙规则，并向负责执行连接规则的IPsec引擎提供连接规则。

公开(公告)号：US07970928B2

公开(公告)日：2011-06-28

申请号：US11958374

申请日：2007-12-17

申请人： Murari Sridharan ,  Deepak Bansal ,  Eran Yariv ,  Ronen Barenboim ,  Maxim Stepin ,  Alexander Malysh

发明人： Murari Sridharan ,  Deepak Bansal ,  Eran Yariv ,  Ronen Barenboim ,  Maxim Stepin ,  Alexander Malysh

IPC分类号： G06F15/16

CPC分类号： H04L69/16 ,  H04L69/163

摘要： Discovery of intermediate network devices is performed using a technique that piggybacks upon the existing standard TCP (Transport Control Protocol) “SACK” (Selective Acknowledgment) option in a SYN/ACK packet so that discovery information may be shared between pair-wise-deployed peer intermediate devices when a TCP/IP connection (Transport Control Protocol/Internet Protocol) is first established between network endpoints using a conventional three-way handshake. Use of the SACK option is combined with another technique which comprises modifying the original 16-bit value of the TCP receive window size to a special arbitrary value to mark a SYN packet as being generated by a first peer device. The marked SYN when received by the second peer device triggers that device's discovery information to be piggybacked in the SACK option of the SYN/ACK packet. The first device then piggybacks its discovery information in the SACK option of the ACK packet which completes the three-way handshake.

摘要翻译： 使用搭载SYN / ACK分组中的现有标准TCP（传输控制协议）“SACK”（选择性确认）选项的技术来执行中间网络设备的发现，使得发现信息可以在成对部署的对等体之间共享 当使用传统的三次握手在网络端点之间首先建立TCP / IP连接（传输控制协议/互联网协议）时的中间设备。 使用SACK选项与另一种技术相结合，其中包括将TCP接收窗口大小的原始16位值修改为特殊任意值，以将SYN分组标记为由第一对等设备生成。 标记的SYN在第二个对等设备接收时触发该设备的发现信息被捎带在SYN / ACK数据包的SACK选项中。 然后，第一个设备在ACK包的SACK选项中搭载其发现信息，完成三次握手。

公开(公告)号：US20100262547A1

公开(公告)日：2010-10-14

申请号：US12423026

申请日：2009-04-14

申请人： Eran Yariv ,  Roy Varshavsky

发明人： Eran Yariv ,  Roy Varshavsky

IPC分类号： G06Q20/00 ,  G06F17/30 ,  G06Q40/00

CPC分类号： G06Q30/08 ,  G06Q20/10 ,  G06Q50/188

摘要： User information corresponding to a plurality of users can be received at a user information collector computing environment and stored in a user information computer database. A general offer from a purchaser to purchase at least part of the user information can be received at a user information broker. Also at the broker, individual offers for the users can be processed. Each of the individual offers can be an offer to purchase access by the purchaser to user information corresponding to one of the users. Acceptances of the individual offers can be received by the broker from accepting users. A broker payment to the broker can be received from the purchaser, and a user payment can be sent to each of the accepting users. In addition, user information corresponding to the accepting users can be sent to the purchaser. User information data mining can also be done.

摘要翻译： 可以在用户信息收集器计算环境中接收与多个用户对应的用户信息，并存储在用户信息计算机数据库中。 可以在用户信息代理处接收购买者购买至少部分用户信息的一般报价。 另外在经纪人，可以处理用户的个人报价。 每个单独的优惠可以是购买者购买访问与用户之一相对应的用户信息的优惠。 经纪人可以接受个人报价的接受，接受用户。 可以从买方接收经纪人的经纪人支付，并且可以向每个接受用户发送用户支付。 此外，可以将与接受用户对应的用户信息发送给购买者。 用户信息数据挖掘也可以完成。

公开(公告)号：US20060259498A1

公开(公告)日：2006-11-16

申请号：US11126713

申请日：2005-05-11

申请人： Carl Ellison ,  Eran Yariv

发明人： Carl Ellison ,  Eran Yariv

IPC分类号： G06F7/00

CPC分类号： G06F16/9024

摘要： Signatures are sought in a source text. These signatures may be defined by regular expressions, and thus may include substrings. These substrings are located by a substring locator may be implemented using a finite state machine or a trie with walkers. When a substring is located, the existence and location of the substring is reported to a signature locator. The signature locator tracks reported substrings and determines whether a signature has been found. Complex signatures are supported which may include, for example, two substrings separated by a specific number of wildcards, or by at least and/or at most a certain number of wildcards. High performance which allows real-time searching of network traffic for signatures is enabled.

摘要翻译： 在源文本中寻找签名。 这些签名可以由正则表达式定义，因此可以包括子字符串。 这些子字符串由子字符定位器定位，可以使用有限状态机或具有步行器的特里单元来实现。 当一个子字符串被定位时，子字符串的存在和位置被报告给签名定位器。 签名定位器跟踪报告的子串，并确定是否已找到签名。 支持复杂签名，其可以包括例如由特定数量的通配符分隔的两个子串，或至少和/或至多一定数量的通配符。 支持高性能，允许实时搜索网络流量进行签名。