公开(公告)号：US20090300045A1

公开(公告)日：2009-12-03

申请号：US12128371

申请日：2008-05-28

申请人： Jay Chaudhry ,  Arcady V. Schekochikhin ,  Srikanth Devarajan ,  Narinder Paul ,  Kailash Kailash

发明人： Jay Chaudhry ,  Arcady V. Schekochikhin ,  Srikanth Devarajan ,  Narinder Paul ,  Kailash Kailash

IPC分类号： G06F17/30 ,  G06F21/00

CPC分类号： G06F21/552 ,  G06F21/577 ,  G06F21/6218 ,  H04L63/0218 ,  H04L63/10 ,  H04L63/1408 ,  H04L63/1441

摘要： Systems, methods and apparatus for a distributed security that provides security processing external to a network edge. The system can include many distributed processing nodes and one or more authority nodes that provide security policy data, threat data, and other security data to the processing nodes. The processing nodes detect and stop the distribution of malware, spyware and other undesirable content before such content reaches the destination network and computing systems.

摘要翻译： 用于分布式安全性的系统，方法和设备，为网络边缘提供安全处理。 该系统可以包括向处理节点提供安全策略数据，威胁数据和其他安全数据的许多分布式处理节点和一个或多个权限节点。 处理节点在此类内容到达目标网络和计算系统之前检测并停止恶意软件，间谍软件和其他不需要的内容的分发。

公开(公告)号：US20070140301A1

公开(公告)日：2007-06-21

申请号：US11312816

申请日：2005-12-20

申请人： Kailash Kailash ,  Saravanakumar Annamalaisami

发明人： Kailash Kailash ,  Saravanakumar Annamalaisami

IPC分类号： H04J3/00

CPC分类号： H04L43/024

摘要： The present invention is directed towards “skip” and “differential” recording techniques for recording values of network parameter to a log in a lossless manner while reducing storage resources used to record such values. The counter monitor of the present invention monitors and records values of counters at time intervals to generate a counter log provided via temporary or permanent storage. The counter monitor compares a reading of the value of the counter to a previously obtained value of the counter. If the value of the counter has not changed, the counter monitor records only the timestamp to the counter log, thereby “skipping” the recording of the unchanged value. If there is any change in the value of the counter, then the change in value of the counter, i.e., a “differential” value, along with the timestamp is stored in the counters log. To further reduce storage resource usage, the counter monitor also stores changes to the timestamps as differential changes in time values.

摘要翻译： 本发明涉及用于以无损耗方式将网络参数的值记录到日志的“跳过”和“差分”记录技术，同时减少用于记录这些值的存储资源。 本发明的计数器监视器以时间间隔监视和记录计数器的值，以产生经由临时或永久存储提供的计数器日志。 计数器监视器将计数器的值的读数与先前获得的计数器的值进行比较。 如果计数器的值没有改变，则计数器监视器将时间戳记录到计数器日志中，从而“跳过”不变值的记录。 如果计数器的值有任何变化，则计数器值的变化，即“差分”值以及时间戳存储在计数器日志中。 为了进一步减少存储资源的使用，计数器监视器还将时间戳的变化存储为时间值的差异变化。

公开(公告)号：US20060195660A1

公开(公告)日：2006-08-31

申请号：US11323196

申请日：2005-12-30

申请人： Prabakar Sundarrajan ,  Prakash Khemani ,  Kailash Kailash ,  Ajay Soni ,  Rajiv Sinha ,  Saravana Annamalaisami ,  Bharath Bhushan K R ,  Anil Kumar

发明人： Prabakar Sundarrajan ,  Prakash Khemani ,  Kailash Kailash ,  Ajay Soni ,  Rajiv Sinha ,  Saravana Annamalaisami ,  Bharath Bhushan K R ,  Anil Kumar

IPC分类号： G06F12/14 ,  G06F13/28 ,  G06F12/00 ,  G06F12/16

CPC分类号： H04L67/2852 ,  H04L69/329

摘要： The present invention is directed towards a method and system for modifying by a cache responses from a server that do not identify a dynamically generated object as cacheable to identify the dynamically generated object to a client as cacheable in the response. In some embodiments, such as an embodiment handling HTTP requests and responses for objects, the techniques of the present invention insert an entity tag, or “etag” into the response to provide cache control for objects provided without entity tags and/or cache control information from an originating server. This technique of the present invention provides an increase in cache hit rates by inserting information, such as entity tag and cache control information for an object, in a response to a client to enable the cache to check for a hit in a subsequent request.

摘要翻译： 本发明涉及一种用于通过来自服务器的高速缓存响应进行修改的方法和系统，所述响应不将动态生成的对象标识为可缓存，以将响应中的动态生成的对象标识为可缓存的客户端。 在一些实施例中，诸如处理对象的HTTP请求和响应的实施例，本发明的技术将实体标签或“etag”插入到响应中，以为没有实体标签和/或高速缓存控制信息提供的对象提供高速缓存控制 从始发服务器。 本发明的这种技术通过在对客户机的响应中插入诸如实体标签和对象的高速缓存控制信息的信息来提供高速缓存命中率，从而使高速缓存能够检查后续请求中的命中。

公开(公告)号：US08806201B2

公开(公告)日：2014-08-12

申请号：US12179377

申请日：2008-07-24

申请人： Kailash Kailash ,  Shashidhara Mysore Nanjundaswamy ,  Amarnath Mullick ,  Jose Raphel

发明人： Kailash Kailash ,  Shashidhara Mysore Nanjundaswamy ,  Amarnath Mullick ,  Jose Raphel

IPC分类号： H04N7/16 ,  G06F12/14 ,  H04L9/00 ,  H03M1/68 ,  H04L29/06 ,  H04L9/32 ,  H04L29/08 ,  H04L29/12

CPC分类号： H04L9/3234 ,  H04L9/3297 ,  H04L61/1523 ,  H04L63/0442 ,  H04L63/068 ,  H04L63/0807 ,  H04L63/102 ,  H04L67/02 ,  H04L2209/60 ,  H04L2463/121

摘要： Systems, methods and apparatus for a distributed security that provides authentication and authorization management. The system can include an epoch processor that is used to validate authentication and authorization data that is valid only for an epoch. The epoch processor can maintain a public key that can be used to decrypt the authentication and authorization data during the epoch that the key is valid. The epoch processor can receive a new public key during each epoch. The epoch processor can also determine if the authentication or authorization data was fraudulently generated based on the contents of the data, and verifying whether the data is valid for the epoch in which it was decrypted.

摘要翻译： 用于提供认证和授权管理的分布式安全性的系统，方法和设备。 该系统可以包括用于验证仅对于时代有效的认证和授权数据的历元处理器。 纪元处理器可以维护公钥，该密钥可用于在密钥有效的时期期间解密认证和授权数据。 时代处理器可以在每个时期接收新的公钥。 时标处理器还可以基于数据的内容来确定认证或授权数据是否被欺诈地生成，并且验证数据是否对于其被解密的时期有效。

公开(公告)号：US08799502B2

公开(公告)日：2014-08-05

申请号：US11554933

申请日：2006-10-31

申请人： Jose Kolencheril Raphel ,  Kailash Kailash ,  Michel K. Susai

发明人： Jose Kolencheril Raphel ,  Kailash Kailash ,  Michel K. Susai

IPC分类号： G06F15/16 ,  G06F15/177 ,  H04J3/16 ,  H04J3/22

CPC分类号： H04L67/2819 ,  H04L47/10 ,  H04L47/263 ,  H04L67/28 ,  H04L69/24

摘要： A method for maximizing server throughput while avoiding overload of a server is presented. The method involves intercepting, via an interface unit, a client request for information from the server. Next, the interface unit determines the current server performance, where the server performance is based on the number of connections opened to the server, the response time of the server and the rate at which the response time is changing. Finally, the interface unit forwards the client request to the server if the current server performance is close to an optimal performance, whereby avoiding overload of the server.

摘要翻译： 提出了一种最大化服务器吞吐量同时避免服务器过载的方法。 该方法涉及通过接口单元截取来自服务器的客户端信息请求。 接下来，接口单元确定当前服务器性能，其中服务器性能基于对服务器打开的连接数，服务器的响应时间和响应时间改变的速率。 最后，如果当前服务器性能接近最佳性能，接口单元将客户端请求转发到服务器，从而避免服务器过载。

公开(公告)号：US08656462B2

公开(公告)日：2014-02-18

申请号：US12179403

申请日：2008-07-24

申请人： Kailash Kailash ,  Shashidhara Mysore Nanjundaswamy ,  Amarnath Mullick ,  Jose Raphel

发明人： Kailash Kailash ,  Shashidhara Mysore Nanjundaswamy ,  Amarnath Mullick ,  Jose Raphel

IPC分类号： G06F7/04

CPC分类号： H04L63/08 ,  H04L63/166 ,  H04L63/20

摘要： Systems, methods and apparatus for a distributed security that provides authentication and authorization management. The system can include a state manager that is used to identify and maintain the source associated with a client browser that submits requests to the state manager. The state manager can allow requests that are authorized and request authorization for requests that are not. The state manager can maintain the states associated with each domain to reduce the number of transaction needed to authenticate and/or authorize subsequent requests to the same domain or to different domains.

摘要翻译： 用于提供认证和授权管理的分布式安全性的系统，方法和设备。 该系统可以包括状态管理器，其用于识别和维护与向国家管理器提交请求的客户端浏览器相关联的源。 状态管理器可以允许被授权的请求，并请求不是请求的请求。 状态管理器可以维护与每个域相关联的状态，以减少对同一域或不同域进行认证和/或授权后续请求所需的事务数量。

公开(公告)号：US08549581B1

公开(公告)日：2013-10-01

申请号：US12128506

申请日：2008-05-28

申请人： Kailash Kailash ,  Jose Raphel

发明人： Kailash Kailash ,  Jose Raphel

IPC分类号： G06F7/04

CPC分类号： H04L63/1441 ,  G06F21/56 ,  G06F21/6218 ,  H04L63/0209

摘要： Guard tables including absence information are used in a security system to limit the processing of negative queries. A key corresponding to a request to access a network resource is hashed and the output of the hash is a bit position in a guard table. The bit value at the bit position in the guard table is checked to determine if the information to which the key corresponds is absent from a datastore. Further processing of the request can be based on the indicated presence or absence information.

摘要翻译： 包括缺席信息在内的保护表在安全系统中用于限制负查询的处理。 对应于访问网络资源的请求的密钥被散列，并且散列的输出是保护表中的位置。 检查保护表中位位置处的位值，以确定密钥对应的信息是否不在数据存储区中。 请求的进一步处理可以基于指示的存在或不存在信息。

公开(公告)号：US08499057B2

公开(公告)日：2013-07-30

申请号：US13031919

申请日：2011-02-22

申请人： Prabakar Sundarrajan ,  Prakash Khemani ,  Kailash Kailash ,  Ajay Soni ,  Rajiv Sinha ,  Saravana Annamalaisami ,  Bharath Bushan K. R. ,  Anil Kumar

发明人： Prabakar Sundarrajan ,  Prakash Khemani ,  Kailash Kailash ,  Ajay Soni ,  Rajiv Sinha ,  Saravana Annamalaisami ,  Bharath Bushan K. R. ,  Anil Kumar

IPC分类号： G06F15/16 ,  G06F15/173

CPC分类号： G06F17/30902

摘要： The present invention is directed towards a “flash crowd” technique for handling situations where the cache receives additional requests, e.g., nearly simultaneous requests, for the same object during the time the server is processing and returning the response object for a first requestor. Once all such nearly simultaneous requests are responded to by the cache, the object is flushed from the cache, with no additional expiry time or invalidation action needed. This technique of the present invention enables data to be cached and served for very small amounts of time for objects that would otherwise be considered non-cacheable. As such, this technique yields a significant improvement in applications that serve fast changing data to a large volume of concurrent users, such, for example, as real time stock quotes, or a fast evolving news story.

摘要翻译： 本发明涉及一种用于处理高速缓存在服务器处理期间为相同对象接收附加请求（例如几乎同时的请求）并返回第一请求者的响应对象的情况的“闪存人群”技术。 一旦所有这些几乎同时的请求都被缓存所响应，则该对象从缓存中刷新，而不需要额外的到期时间或无效操作。 本发明的这种技术使数据被缓存并且被服务非常少的时间，否则将被认为是不可缓存的对象。 因此，这种技术在将快速变化的数据提供给大量并发用户（例如实时股票报价或快速发展的新闻故事）的应用程序中产生了显着的改进。

公开(公告)号：US20130132472A1

公开(公告)日：2013-05-23

申请号：US13744614

申请日：2013-01-18

申请人： Prabakar Sundarrajan ,  Prakash Khemani ,  Kailash Kailash ,  Ajay Soni ,  Rajiv Sinha ,  Saravana Annamalaisami ,  Bharath BHUSHAN K.R. ,  Anil Kumar

发明人： Prabakar Sundarrajan ,  Prakash Khemani ,  Kailash Kailash ,  Ajay Soni ,  Rajiv Sinha ,  Saravana Annamalaisami ,  Bharath BHUSHAN K.R. ,  Anil Kumar

IPC分类号： H04L29/06

CPC分类号： H04L67/42 ,  G06F17/30902

摘要： A method for maintaining a cache of dynamically generated objects. The method includes storing in the cache dynamically generated objects previously served from an originating server to a client. A communication between the client and server is intercepted by the cache. The cache parses the communication to identify an object determinant and to determine whether the object determinant indicates whether a change has occurred or will occur in an object at the originating server. The cache marks the object stored in the cache as invalid if the object determinant so indicates. If the object has been marked as invalid, the cache retrieves the object from the originating server.

摘要翻译： 一种用于维护动态生成的对象的缓存的方法。 该方法包括将先前从始发服务器提供的动态生成的对象存储到缓存器中。 客户端和服务器之间的通信被缓存拦截。 高速缓存解析通信以识别对象行列式，并且确定对象行列式是否指示发生服务器上的对象是否已发生或将发生更改。 如果对象行列式指示，高速缓存将存储在缓存中的对象标记为无效。 如果对象被标记为无效，缓存将从始发服务器检索该对象。

公开(公告)号：US08429111B1

公开(公告)日：2013-04-23

申请号：US12185443

申请日：2008-08-04

申请人： Kailash Kailash ,  Arcady V. Schekochikhin ,  Srikanth Devarajan ,  Narinder Paul

发明人： Kailash Kailash ,  Arcady V. Schekochikhin ,  Srikanth Devarajan ,  Narinder Paul

IPC分类号： G06F17/00 ,  G06N5/02

CPC分类号： H03M7/40

摘要： Methods, systems, and apparatus, including computer program products, for generating or using augmentation queries. In one aspect, statistical model of statistical data is used to support lossless predictive compression. Data instances are identified in statistical data and classified into one of a plurality of data types. Each data type is associated with a corresponding compression process that is used to compress data instances of that type.

摘要翻译： 用于生成或使用增强查询的方法，系统和装置，包括计算机程序产品。 在一个方面，统计数据的统计模型用于支持无损预测压缩。 数据实例在统计数据中标识并分类为多种数据类型之一。 每个数据类型与用于压缩该类型的数据实例的相应的压缩过程相关联。