Network Server Layer Providing Disjoint Channels in Response to Client-Layer Disjoint Path Requests
    51.
    发明申请
    Network Server Layer Providing Disjoint Channels in Response to Client-Layer Disjoint Path Requests 审中-公开
    网络服务器层提供响应于客户端层不连续路径请求的不相交通道

    公开(公告)号:US20150263811A1

    公开(公告)日:2015-09-17

    申请号:US14726585

    申请日:2015-05-31

    摘要: In one embodiment, a network server layer provides disjoint channels in response to client-layer disjoint path requests. For example, the network layer can be an optical network, and the client layer may be a packet switching layer (e.g., label switching, Internet Protocol). In one embodiment, a server-layer node receives a client-layer disjoint path request to provide a server-layer channel through a server-layer network. The client-layer disjoint path request includes an identifier corresponding to an existing client-layer path that traverses a current channel through the server-layer network that does not include the server-layer node. The server-layer network determines a particular channel through the server-layer network that is disjoint to the current channel based on route information of the current channel, and then signaling is performed within the server-layer network to establish the particular channel.

    摘要翻译: 在一个实施例中,网络服务器层响应于客户端层不相交路径请求而提供不相交的信道。 例如,网络层可以是光网络,并且客户端层可以是分组交换层(例如,标签交换,因特网协议)。 在一个实施例中,服务器层节点接收客户端层不相交路径请求,以通过服务器层网络提供服务器层信道。 客户端层不相交路径请求包括对应于穿过不包括服务器层节点的服务器层网络的当前信道的现有客户端层路径的标识符。 服务器层网络基于当前信道的路由信息​​,通过服务器层网络确定与当前信道不相关的特定信道,然后在服务器层网络内执行信令以建立特定信道。

    Delay budget based forwarding in communication networks
    52.
    发明授权
    Delay budget based forwarding in communication networks 有权
    在通信网络中延迟基于预算的转发

    公开(公告)号:US09124482B2

    公开(公告)日:2015-09-01

    申请号:US13185805

    申请日:2011-07-19

    摘要: In one embodiment, certain nodes in a computer network maintain a plurality of routing topologies, each associated with a different corresponding delay (e.g., dynamically adjusted). Upon receiving a packet with an indicated delay budget at a particular node, the node updates the delay budget based on an incurred delay up to and including the particular node since the indicated delay budget was last updated, and selects a particular routing topology on which to forward the packet based on the updated delay budget and the corresponding routing topology delays. The packet may then be forwarded with the updated delay budget on the selected routing topology, accordingly.

    摘要翻译: 在一个实施例中,计算机网络中的某些节点维护多个路由拓扑,每个路由拓扑与不同的对应延迟(例如,动态调整)相关联。 在特定节点接收到具有指示的延迟预算的分组之后,节点根据所指示的延迟预算最近更新时,基于直到并包括特定节点的发生的延迟来更新延迟预算,并且选择特定路由拓扑 基于更新的延迟预算和相应的路由拓扑延迟来转发分组。 相应地,可以在所选择的路由拓扑上以更新的延迟预算转发分组。

    Reliable on-demand distributed data management in a sensor-actuator fabric
    53.
    发明授权
    Reliable on-demand distributed data management in a sensor-actuator fabric 有权
    传感器执行器结构中可靠的按需分布式数据管理

    公开(公告)号:US09059929B2

    公开(公告)日:2015-06-16

    申请号:US13524481

    申请日:2012-06-15

    摘要: In one embodiment, a system comprises a plurality of minimalistic data collection nodes in a computer network, the minimalistic data collection nodes configured to generate sensed data values of a particular type and to communicate the data values within the computer network in substantially real-time using distributed data acquisition (DA) packets specific to the particular type of the data values. The system also comprises a plurality of capable data collection nodes in the computer network, the capable data collecting nodes configured to store the data values of the minimalistic data collection nodes from the DA packets. One or more points of use of the system may be configured to request the data values, wherein one or more particular capable data collection nodes of the system are configured to service the request in substantially real-time on behalf of the minimalistic data collection nodes with the stored data values.

    摘要翻译: 在一个实施例中,系统包括计算机网络中的多个简约数据收集节点,所述极简数据收集节点被配置为生成特定类型的感测数据值,并且基本上实时地使用计算机网络内的数据值传达 分布式数据采集(DA)数据包特定于特定类型的数据值。 该系统还包括计算机网络中的多个能力数据收集节点,能力数据收集节点被配置为从DA分组存储简约数据收集节点的数据值。 可以将系统的一个或多个使用点配置为请求数据值,其中系统的一个或多个特定能力的数据收集节点被配置为代表极简数据收集节点基本上实时地为该请求提供服务, 存储的数据值。

    Reduced authentication times for shared-media network migration
    55.
    发明授权
    Reduced authentication times for shared-media network migration 有权
    降低了共享媒体网络迁移的验证时间

    公开(公告)号:US08949959B2

    公开(公告)日:2015-02-03

    申请号:US13400991

    申请日:2012-02-21

    IPC分类号: H04L29/00

    摘要: In one embodiment, a management device in a computer network determines when nodes of the computer network join any one of a plurality of field area routers (FARs), which requires a shared-media mesh security key for that joined FAR. The management device also maintains a database that indicates to which FAR each node in the computer network is currently joined, and to which FARs, if any, each node had previously joined, where the nodes are configured to maintain the mesh security key for one or more previously joined FARs in order to return to those previously joined FARs with the maintained mesh security key. Accordingly, in response to an updated mesh security key for a particular FAR of the plurality of FARs, the management node initiates distribution of the updated mesh security key to nodes having previously joined that particular FAR that are not currently joined to that particular FAR.

    摘要翻译: 在一个实施例中,计算机网络中的管理设备确定计算机网络的何时节点连接多个场区域路由器(FAR)中的任何一个,其需要用于该加入的FAR的共享 - 媒体网状安全密钥。 管理设备还维护一个数据库,指示计算机网络中每个节点当前加入哪个FAR,以及每个节点先前已加入的哪个FAR(如果有的话),其中节点被配置为维护一个或多个节点的网状安全密钥 以前加入的FAR,以便返回到以前加入的FAR与维护的网状安全密钥。 因此,响应于针对多个FAR的特定FAR的更新的网状安全密钥,管理节点发起更新的网状安全密钥到先前已加入到当前未连接到该特定FAR的特定FAR的节点的分发。

    Dynamic keepalive parameters for reverse path validation in computer networks
    56.
    发明授权
    Dynamic keepalive parameters for reverse path validation in computer networks 有权
    用于计算机网络中的反向路径验证的动态保持参数

    公开(公告)号:US08862774B2

    公开(公告)日:2014-10-14

    申请号:US13230373

    申请日:2011-09-12

    摘要: In one embodiment, a network device determines a path from itself to a source device in a computer network, where the source device utilizes the path in reverse to reach the network device. Based on determining a reliability of the path in reverse, the network device may dynamically adjust one or more keepalive parameters for keepalive messages sent on the path. Accordingly, the network device may then send keepalive messages on the path based on the dynamically adjusted keepalive parameters.

    摘要翻译: 在一个实施例中,网络设备确定在自己到计算机网络中的源设备的路径,其中源设备利用相反的路径到达网络设备。 基于反向确定路径的可靠性,网络设备可以动态调整在路径上发送的保持活动消息的一个或多个保持活动参数。 因此,网络设备然后可以基于动态调整的保持活动参数在路径上发送保持活动消息。

    Distributed stateful path computation element overlay architecture
    57.
    发明授权
    Distributed stateful path computation element overlay architecture 有权
    分布状态路径计算元素覆盖架构

    公开(公告)号:US08855014B2

    公开(公告)日:2014-10-07

    申请号:US13524071

    申请日:2012-06-15

    IPC分类号: H04L12/28 H04L1/00

    CPC分类号: H04L45/50 H04L45/04

    摘要: In one embodiment, a particular device in a computer network maintains a locally owned tunnel-state table, and joins a distributed hash table (DHT) ring. In addition, the locally owned tunnel-state table is shared with other devices of the DHT ring to establish a DHT-owned tunnel-state table. The particular device (and other devices) determines ownership of link-state advertisements (LSAs) for a specific portion of a traffic engineering database (TED) according to the DHT ring. As such, when the particular device (or any device) computes a path for a tunnel using a local TED, the particular device may request permission to use resources along the computed path that were advertised in particular LSAs from owners of those particular LSAs when not owned by the particular device.

    摘要翻译: 在一个实施例中,计算机网络中的特定设备维护本地拥有的隧道状态表,并且连接分布式散列表(DHT)环。 此外,本地拥有的隧道状态表与DHT环的其他设备共享,以建立DHT拥有的隧道状态表。 特定设备(和其他设备)根据DHT环确定针对流量工程数据库(TED)的特定部分的链路状态通告(LSA)的所有权。 因此,当特定设备(或任何设备)使用本地TED计算隧道的路径时,特定设备可以请求允许沿着所计算的路径使用资源,这些资源在特定LSA的特定LSA中被发布,来自那些特定LSA的所有者 由特定设备拥有。

    Inter-domain signaling to update remote path computation elements after a call set-up failure
    58.
    发明授权
    Inter-domain signaling to update remote path computation elements after a call set-up failure 有权
    呼叫建立失败后更新远程路径计算元素的域间信令

    公开(公告)号:US08817591B2

    公开(公告)日:2014-08-26

    申请号:US13524168

    申请日:2012-06-15

    IPC分类号: H04L1/00 H04L12/26

    摘要: In one embodiment, a router in a non-originating domain receives a signal to establish a tunnel, the signal having an identification (ID) of an originating path computation element (PCE) of an originating domain from where the signal to establish the tunnel originated. In response to determining that establishment of the tunnel fails, the router may signal the failure of the establishment to a local PCE of the non-originating domain, the signaling indicating the ID of the originating PCE to cause the local PCE to provide updated routing information of the non-originating domain to the originating PCE.

    摘要翻译: 在一个实施例中,非起始域中的路由器接收建立隧道的信号,该信号具有始发域的始发路径计算元件(PCE)的标识(ID),其中建立隧道的信号源自 。 响应于确定隧道的建立失败,路由器可以将建立的失败信号发送到非始发域的本地PCE,该信令指示发起PCE的ID,以使本地PCE提供更新的路由信息 的非始发域到原始PCE。

    Coordinated detection of a grey-hole attack in a communication network
    59.
    发明授权
    Coordinated detection of a grey-hole attack in a communication network 有权
    协调检测通信网络中的灰洞攻击

    公开(公告)号:US08806633B2

    公开(公告)日:2014-08-12

    申请号:US13214874

    申请日:2011-08-22

    IPC分类号: G08B23/00 G06F11/30

    CPC分类号: H04L63/1441 H04L2463/143

    摘要: In one embodiment, a security device receives one or more first unique identifications of packets sent by a first device to a second device for which a corresponding acknowledgment was purportedly returned by the second device to the first device. The security device also receives one or more second unique identifications of packets received by the second device from the first device and acknowledged by the second device to the first device. By comparing the first and second unique identifications, the security device may then determine whether acknowledgments received by the first device were truly returned from the second device based on whether the first and second unique identifications exactly match.

    摘要翻译: 在一个实施例中,安全设备接收由第一设备发送到第二设备的分组发送的分组的一个或多个第一唯一标识,由第二设备将第二设备的相应确认声称地返回给第二设备。 安全设备还从第一设备接收由第二设备接收的分组并由第二设备确认的分组的一个或多个第二唯一标识符给第一设备。 通过比较第一和第二唯一标识,安全设备然后可以基于第一和第二唯一标识是否完全匹配来确定由第一设备接收到的确认是否真的从第二设备返回。

    Sliced tunnels in a computer network
    60.
    发明授权
    Sliced tunnels in a computer network 有权
    计算机网络中的切片隧道

    公开(公告)号:US08634292B2

    公开(公告)日:2014-01-21

    申请号:US13247548

    申请日:2011-09-28

    IPC分类号: H04J1/16

    摘要: In one embodiment, a path for a sliced tunnel that extends from a head-end node to a tail-end node is computed. The sliced tunnel is furcated into a plurality of child tunnels at one or more fork nodes located downstream from the head-end node. Each child tunnel carries a portion of traffic for the sliced tunnel. The sliced tunnel is merged at one or more merge nodes located downstream from respective ones of the fork nodes. The portions of traffic on the child tunnels are aggregated at the merge nodes. The head-end node sends a signaling message to establish the sliced tunnel along the computed path. The signaling message includes an indication of the one or more fork nodes where the sliced tunnel is furcated into child tunnels and the one or more merge nodes where child tunnels are merged. The head-end node then forwards traffic onto the sliced tunnel.

    摘要翻译: 在一个实施例中,计算从头端节点延伸到尾端节点的切片隧道的路径。 切割的隧道在位于头端节点下游的一个或多个叉节点处分割成多个子隧道。 每个子隧道都携带切片隧道的一部分流量。 切片隧道在位于相应叉节点下游的一个或多个合并节点处合并。 子隧道上的部分流量在合并节点处聚合。 头端节点发送信令消息,以沿着计算的路径建立切片隧道。 所述信令消息包括所述一个或多个叉节点的指示,其中所述切片的隧道分割成子隧道,以及所述一个或多个合并节点,其中子隧道被合并。 然后,头端节点将流量转发到切片隧道。