公开(公告)号：US07702333B2

公开(公告)日：2010-04-20

申请号：US11382814

申请日：2006-05-11

申请人： Jesse R. Walker ,  Kapil Sood ,  Meiyuan Zhao

发明人： Jesse R. Walker ,  Kapil Sood ,  Meiyuan Zhao

IPC分类号： H04W4/00

CPC分类号： H04L9/3213 ,  H04L9/3271 ,  H04L63/0807 ,  H04L2209/38 ,  H04L2209/80 ,  H04W12/06 ,  H04W28/26 ,  H04W36/0038 ,  H04W84/12 ,  H04W88/08

摘要： Embodiments of an authorization server and method for securely reserving resources in a wireless network are generally described herein. Other embodiments may be described and claimed. In some embodiments, access points reserve bandwidth thereon through the verification of reservation tokens received from the mobile station.

摘要翻译： 在此通常描述用于在无线网络中安全地保留资源的授权服务器和方法的实施例。 可以描述和要求保护其他实施例。 在一些实施例中，接入点通过对从移动台接收到的保留令牌的验证来保留其上的带宽。

公开(公告)号：US20090215404A1

公开(公告)日：2009-08-27

申请号：US12037107

申请日：2008-02-26

申请人： Vijay Sarathi Kesavan ,  Kapil Sood

发明人： Vijay Sarathi Kesavan ,  Kapil Sood

IPC分类号： H04B1/38 ,  H04B7/00

CPC分类号： H04W48/18 ,  H04W36/00 ,  H04W52/0229 ,  H04W88/06 ,  Y02D70/1224 ,  Y02D70/124 ,  Y02D70/142 ,  Y02D70/144 ,  Y02D70/146 ,  Y02D70/162 ,  Y02D70/164 ,  Y02D70/166 ,  Y02D70/168 ,  Y02D70/22 ,  Y02D70/23

摘要： Device, system, and method of wireless network selection and handover. For example, a multi-transceiver wireless device includes: at least first and second co-located wireless transceivers; one or more firmware modules to handle network selection of at least one of the first and second wireless transceivers based on one or more commands received from one or more drivers when the multi-transceiver wireless device is in full-power mode; and a manageability engine to handle network selection of at least one of the first and second wireless transceivers when the multi-transceiver wireless device is in reduced-power mode.

摘要翻译： 无线网络选择和切换的设备，系统和方法。 例如，多收发器无线设备包括：至少第一和第二共定位无线收发器; 一个或多个固件模块，用于当所述多收发器无线设备处于全功率模式时，基于从一个或多个驱动器接收的一个或多个命令来处理所述第一和第二无线收发器中的至少一个的网络选择; 以及当所述多收发器无线设备处于降低功率模式时，可管理性引擎来处理所述第一和第二无线收发器中的至少一个的网络选择。

公开(公告)号：US20090061799A1

公开(公告)日：2009-03-05

申请号：US11849313

申请日：2007-09-03

申请人： Minyoung Park ,  Kapil Sood

发明人： Minyoung Park ,  Kapil Sood

IPC分类号： H04B1/38

CPC分类号： H04W52/0258 ,  Y02D70/1224 ,  Y02D70/1262 ,  Y02D70/142 ,  Y02D70/144 ,  Y02D70/146 ,  Y02D70/162 ,  Y02D70/164 ,  Y02D70/166 ,  Y02D70/22

摘要： Device, system, and method of power saving in wireless network. For example, a method includes: receiving from a wireless access point a wireless communication signal indicting wireless network load information represented as a value of a parameter in a Basic Service Set load information element, wherein the parameter comprises a parameter selected from a group consisting of: a station count parameter, a channel utilization ratio parameter, an available admission control parameter, a network congestion parameter, a transmission power suggestion parameter, a reception power suggestion parameter, and a late adaptation suggestion parameter; and modifying a power consumption mode of a communication unit of a wireless communication device based on said parameter.

摘要翻译： 无线网络节能的设备，系统和方法。 例如，一种方法包括：从无线接入点接收指示表示为基本服务集负载信息元素中的参数的值的无线网络负载信息的无线通信信号，其中所述参数包括从以下组成的组中选择的参数： ：站计数参数，信道利用率参数，可用接纳控制参数，网络拥塞参数，发送功率建议参数，接收功率建议参数和速率适配建议参数; 以及基于所述参数修改无线通信设备的通信单元的功耗模式。

公开(公告)号：US20080066143A1

公开(公告)日：2008-03-13

申请号：US11518005

申请日：2006-09-07

申请人： Tsung-Yuan Charles Tai ,  Kapil Sood

发明人： Tsung-Yuan Charles Tai ,  Kapil Sood

IPC分类号： H04L9/00

CPC分类号： G06F21/57 ,  G06F8/61 ,  G06F9/45545 ,  G06F9/45558 ,  G06F9/5077 ,  G06F21/53 ,  G06F2009/45587

摘要： A method, apparatus and system enable a temporary partition on a host to be isolated. More specifically, a temporary partition may be initialized in a partitioned host, assigned its own security policy and given the necessary resources to complete a task. Thereafter, the temporary partition may be dismantled. Since the temporary partition is isolated from the remaining partitions on the host, the temporary partition may be allowed to run a “weaker” security policy than the rest of the partitions because the isolation of the temporary partition ensures that the security of the remaining partitions may remain uncompromised.

摘要翻译： 方法，装置和系统使主机上的临时分区能够被隔离。 更具体地说，可以在分配的主机中初始化临时分区，分配其自己的安全策略并给出必要的资源来完成任务。 此后，可以拆除临时隔离物。 由于临时分区与主机上的剩余分区隔离，因此临时分区可能会比其他分区运行“较弱”的安全策略，因为临时分区的隔离可确保其余分区的安全性 保持不妥协

公开(公告)号：US20190141536A1

公开(公告)日：2019-05-09

申请号：US16235420

申请日：2018-12-28

申请人： Alexander Bachmutsky ,  Dario Sabella ,  Francesc Guim Bernat ,  John J. Browne ,  Kapil Sood ,  Kshitij Arun Doshi ,  Mats Gustav Agerstam ,  Ned M. Smith ,  Rajesh Poornachandran ,  Tarun Viswanathan

发明人： Alexander Bachmutsky ,  Dario Sabella ,  Francesc Guim Bernat ,  John J. Browne ,  Kapil Sood ,  Kshitij Arun Doshi ,  Mats Gustav Agerstam ,  Ned M. Smith ,  Rajesh Poornachandran ,  Tarun Viswanathan

IPC分类号： H04W12/08 ,  H04W12/00 ,  H04W76/10 ,  H04W12/06 ,  H04W28/02 ,  G06F9/455

摘要： A service coordinating entity device includes communications circuitry to communicate with a first access network, processing circuitry, and a memory device. The processing circuitry is to perform operations to, in response to a request for establishing a connection with a user equipment (UE) in a second access network, retrieve a first Trusted Level Agreement (TLA) including trust attributes associated with the first access network. One or more exchanges of the trust attributes of the first TLA and trust attributes of a second TLA associated with the second access network are performed using a computing service executing on the service coordinating entity. A common TLA with trust attributes associated with communications between the first and second access networks is generated based on the exchanges. Data traffic is routed from the first access network to the UE in the second access network based on the trust attributes of the common TLA.

公开(公告)号：US20190138294A1

公开(公告)日：2019-05-09

申请号：US16235598

申请日：2018-12-28

申请人： Ned M. Smith ,  Kshitij Arun Doshi ,  John J. Browne ,  Vincent J. Zimmer ,  Francesc Guim Bernat ,  Kapil Sood

发明人： Ned M. Smith ,  Kshitij Arun Doshi ,  John J. Browne ,  Vincent J. Zimmer ,  Francesc Guim Bernat ,  Kapil Sood

IPC分类号： G06F8/65 ,  G06F21/44 ,  G06F21/64 ,  H04L9/12 ,  H04L9/14 ,  H04L9/32 ,  H04L9/08 ,  H04L29/06

摘要： Various systems and methods for enabling derivation and distribution of an attestation manifest for a software update image are described. In an example, these systems and methods include orchestration functions and communications, providing functionality and components for a software update process which also provides verification and attestation among multiple devices and operators.

公开(公告)号：US20170094377A1

公开(公告)日：2017-03-30

申请号：US14866567

申请日：2015-09-25

申请人： Andrew J. Herdrich ,  Patrick L. Connor ,  Dinesh Kumar ,  Alexander W. Min ,  Daniel J. Dahle ,  Kapil Sood ,  Jeffrey A. Shaw ,  Edwin Verplanke ,  Scott P. Dubal ,  James R. Hearn

发明人： Andrew J. Herdrich ,  Patrick L. Connor ,  Dinesh Kumar ,  Alexander W. Min ,  Daniel J. Dahle ,  Kapil Sood ,  Jeffrey A. Shaw ,  Edwin Verplanke ,  Scott P. Dubal ,  James R. Hearn

IPC分类号： H04Q9/02 ,  H04L12/26 ,  H04L12/24

CPC分类号： H04Q9/02 ,  H04L41/5009 ,  H04L41/5019 ,  H04L43/08 ,  H04L43/10

摘要： Devices and techniques for out-of-band platform tuning and configuration are described herein. A device can include a telemetry interface to a telemetry collection system and a network interface to network adapter hardware. The device can receive platform telemetry metrics from the telemetry collection system, and network adapter silicon hardware statistics over the network interface, to gather collected statistics. The device can apply a heuristic algorithm using the collected statistics to determine processing core workloads generated by operation of a plurality of software systems communicatively coupled to the device. The device can provide a reconfiguration message to instruct at least one software system to switch operations to a different processing core, responsive to detecting an overload state on at least one processing core, based on the processing core workloads. Other embodiments are also described.

公开(公告)号：US20160226913A1

公开(公告)日：2016-08-04

申请号：US14709168

申请日：2015-05-11

申请人： Kapil Sood ,  Valerie J. Young ,  Muthaiah Venkatachalam ,  Manuel Nedbal

发明人： Kapil Sood ,  Valerie J. Young ,  Muthaiah Venkatachalam ,  Manuel Nedbal

IPC分类号： H04L29/06

CPC分类号： H04L63/205 ,  G06F21/552 ,  G06F21/577 ,  G06F2221/2101 ,  H04L47/25 ,  H04L63/1408 ,  H04L63/1425 ,  H04L63/20 ,  H04L67/10 ,  H04Q9/00

摘要： Technologies for performing security monitoring services of a network functions virtualization (NFV) security architecture that includes an NVF security services controller and one or more NFV security services agents. The NFV security services controller is configured to transmit a security monitoring policy to the NFV security services agents and enforce the security monitoring policy at the NFV security services agents. The NFV security services agents are configured to monitor telemetry data and package at least a portion of the telemetry for transmission to an NFV security monitoring analytics system of the NFV security architecture for security threat analysis. Other embodiments are described and claimed.

摘要翻译： 用于执行包括NVF安全服务控制器和一个或多个NFV安全服务代理的网络功能虚拟化（NFV）安全体系结构的安全监控服务的技术。 NFV安全服务控制器配置为向NFV安全服务代理传输安全监控策略，并在NFV安全服务代理处执行安全监控策略。 NFV安全服务代理被配置为监视遥测数据并封装至少一部分遥测以传输到用于安全威胁分析的NFV安全架构的NFV安全监控分析系统。 描述和要求保护其他实施例。

公开(公告)号：US09407612B2

公开(公告)日：2016-08-02

申请号：US14530128

申请日：2014-10-31

申请人： Kapil Sood ,  Jeffrey B. Shaw ,  John R. Fastabend

发明人： Kapil Sood ,  Jeffrey B. Shaw ,  John R. Fastabend

IPC分类号： H04L29/00 ,  H04L29/06 ,  H04L9/08

CPC分类号： H04L63/06 ,  H04L9/0861 ,  H04L9/0877 ,  H04L9/088 ,  H04L9/0891 ,  H04L9/3234 ,  H04L63/0272 ,  H04L63/0428 ,  H04L63/20 ,  H04L2209/80

摘要： Technologies for secure inter-virtual network function communication include a computing device to determine a cryptographic key for secure communication over at least one of an inter-virtual network function (VNF) network, an inter-virtual network function component (VNFC) network, or a VNF-VNFC network based on a security policy of the computing device; and. The computing device securely communicates over at least one of the inter-VNF, inter-VNFC, or VNF-VNFC network based on the determined cryptographic key.

摘要翻译： 用于安全的虚拟网络功能通信的技术包括计算设备，用于通过虚拟网络功能（VNF）网络，虚拟网络功能组件（VNFC）网络或虚拟网络功能组件（VNFC）网络中的至少一个来确定用于安全通信的密码密钥， 基于计算设备的安全策略的VNF-VNFC网络; 和。 计算设备基于所确定的加密密钥，通过VNF，VNFC-VNF-VNFC网络中的至少一个安全地进行通信。

公开(公告)号：US09223392B2

公开(公告)日：2015-12-29

申请号：US13953160

申请日：2013-07-29

申请人： Kapil Sood

发明人： Kapil Sood

IPC分类号： G06F1/32 ,  H04L12/10 ,  H04L12/861

CPC分类号： G06F1/3293 ,  G06F1/3209 ,  G06F1/3287 ,  H04L12/10 ,  H04L49/90 ,  Y02D10/171 ,  Y02D50/20

摘要： Technologies for reduced power network processing include a main processor, a low-power co-processor, and a network interface controller. The network interface controller receives one or more network packets while the computing device is in a sleep state, filters the one or more network packets to identify network packets to be handled by the low-power co-processor without waking the main processor from the sleep state, and wakes the low-power co-processor, without waking the main processor, to handle at least one network packet of the identified network packets to be handled by the low-power co-processor.

摘要翻译： 用于减少电力网络处理的技术包括主处理器，低功率协处理器和网络接口控制器。 网络接口控制器在计算设备处于睡眠状态时接收一个或多个网络分组，对一个或多个网络分组进行过滤，以识别由低功率协处理器处理的网络分组，而不会使主处理器从休眠状态唤醒 状态，并且在不唤醒主处理器的情况下唤醒低功率协处理器来处理由低功率协处理器处理的所识别的网络分组的至少一个网络分组。