Network and application attack protection based on application layer message inspection
    61.
    发明授权
    Network and application attack protection based on application layer message inspection 有权
    基于应用层消息检测的网络和应用攻击防护

    公开(公告)号:US07725934B2

    公开(公告)日:2010-05-25

    申请号:US11007152

    申请日:2004-12-07

    IPC分类号: G06F11/00 G06F12/14

    摘要: A method is disclosed for protecting a network against a denial-of-service attack by inspecting application layer messages at a network element. According to one aspect, when a network element intercepts data packets that contain an application layer message, the network element constructs the message from the payload portions of the packets. The network element determines whether the message satisfies specified criteria. The criteria may indicate characteristics of messages that are suspected to be involved in a denial-of-service attack, for example. If the message satisfies the specified criteria, then the network element prevents the data packets that contain the message from being received by the application for which the message was intended. The network element may accomplish this by dropping the packets, for example. As a result, the application's host does not waste processing resources on messages whose only purpose might be to deluge and overwhelm the application.

    摘要翻译: 公开了一种通过检查网络元件上的应用层消息来保护网络免受拒绝服务攻击的方法。 根据一个方面,当网络元件拦截包含应用层消息的数据分组时,网络单元从分组的有效载荷部分构造消息。 网络元素确定消息是否满足指定的条件。 标准可以指示例如涉嫌参与拒绝服务攻击的消息的特征。 如果消息满足指定的标准,则网络元素防止包含消息的数据包被消息所针对的应用程序接收。 例如,网元可以通过丢弃分组来实现。 因此,应用程序的主机不会浪费处理资源,因为消息的唯一目的可能是洪水和压倒应用程序。

    Flexible frame based energy efficient multimedia processor architecture and method
    62.
    发明申请
    Flexible frame based energy efficient multimedia processor architecture and method 审中-公开
    基于灵活框架的节能多媒体处理器架构与方法

    公开(公告)号:US20090238479A1

    公开(公告)日:2009-09-24

    申请号:US12322720

    申请日:2009-02-06

    IPC分类号: G06K9/46 G06K9/36

    摘要: A codec system is provided which includes encoding and decoding functions in a plurality of application environments. The codec subsystem encodes raw uncompressed HD-SDI video signals from a camera's optical subsystem into an MPEG-2 transport stream which is stored in onboard media. The subsystem may be programmed to encode or decode a plurality of video and audio formats as required by multiple HD-camera manufactures. A stand alone encoder decoder system is also provided in a network configuration for a studio production system. A programmable set of hardware including BSP, HD-SDI, SD-SDI, multiplexer/demultiplexer and MPEG-2 transport streams are provided. An intelligent power consumption management system is also provided.

    摘要翻译: 提供了一种编解码器系统,其包括在多个应用环境中的编码和解码功能。 编解码器子系统将原始未压缩的HD-SDI视频信号从相机的光学子系统编码为存储在机载媒体上的MPEG-2传输流。 子系统可以被编程为按照多个HD摄像机制造商的要求对多个视频和音频格式进行编码或解码。 在工作室生产系统的网络配置中还提供了独立的编码器解码器系统。 提供了包括BSP,HD-SDI,SD-SDI,多路复用器/解复用器和MPEG-2传输流的可编程硬件组。 还提供了智能功耗管理系统。

    MANAGING MULTIPLE APPLICATION CONFIGURATION VERSIONS IN A HETEROGENEOUS NETWORK
    63.
    发明申请
    MANAGING MULTIPLE APPLICATION CONFIGURATION VERSIONS IN A HETEROGENEOUS NETWORK 有权
    管理异构网络中的多个应用程序配置版本

    公开(公告)号:US20080181131A1

    公开(公告)日:2008-07-31

    申请号:US11669799

    申请日:2007-01-31

    IPC分类号: H04L12/28

    摘要: A system that enables automatic version provisioning in heterogeneous application oriented network (AON) architectures is provided. Generally, the specification enables appropriate version configurations to be selected at runtime as needed in an AON environment. More particularly, the subject specification describes the ability of a device (e.g., AON node) to perform and/or select a self-configuration operation based upon the environment and the runtime operation. To facilitate message-based runtime instantiation of the appropriate configuration, the system enables network applicable configurations to be pushed to each of the nodes in the AON architecture.

    摘要翻译: 提供了一种在异构面向应用的网络(AON)体系结构中实现自动版本配置的系统。 通常,规范允许在运行时根据需要在AON环境中选择适当的版本配置。 更具体地,主题说明书描述了设备(例如,AON节点)基于环境和运行时操作执行和/或选择自配置操作的能力。 为了促进基于消息的运行时实例化适当的配置,系统使网络适用的配置被推送到AON架构中的每个节点。

    Sustained release compositions for delivery of pharmaceutical proteins
    64.
    发明申请
    Sustained release compositions for delivery of pharmaceutical proteins 审中-公开
    用于递送药物蛋白质的缓释组合物

    公开(公告)号:US20080031966A1

    公开(公告)日:2008-02-07

    申请号:US11703553

    申请日:2007-02-07

    IPC分类号: A61K9/52 A61P3/10

    CPC分类号: A61K9/0073 A61K38/28

    摘要: The present invention provides sustained release compositions that can be manufactured easily while providing long duration of the pharmaceutically useful protein being delivered. The compositions comprise insoluble complexes of the pharmaceutically useful protein and a precipitating agent at an appropriate ratio to achieve a desired sustained release profile. The precipitating agent can be selected from a group of various agents including divalent metal cations, Hofmeister series salts and pH adjusters. Particularly provided are compositions comprising insulin that are suitable for pulmonary delivery.

    摘要翻译: 本发明提供了可以容易地制造的持续释放组合物,同时提供递送的药学有用的蛋白质的长时间。 组合物以适当的比例包含药学上有用的蛋白质和沉淀剂的不溶性复合物,以达到期望的持续释放曲线。 沉淀剂可以选自包括二价金属阳离子,Hofmeister系列盐和pH调节剂的各种试剂组。 特别提供的是包含适合于肺部输送的胰岛素的组合物。

    Video overlay buffer mirrored through a shared mailbox between two processors in a feature phone
    65.
    发明授权
    Video overlay buffer mirrored through a shared mailbox between two processors in a feature phone 有权
    视频叠加缓冲区通过功能手机中的两个处理器之间的共享邮箱镜像

    公开(公告)号:US07289823B1

    公开(公告)日:2007-10-30

    申请号:US10904337

    申请日:2004-11-04

    IPC分类号: H04M1/00 H04B1/38 H04L12/58

    摘要: A feature phone has two processors that share a display. The display is attached to an applications processor that has a frame buffer for refreshing the display. A base-band processor also runs programs that generate graphics data that is written to a base-band frame buffer. Updates to the base-band frame buffer are sent through a shared-memory interface to a shared memory, and a shared mailbox is written with the message length, triggering a mailbox-interrupt to the applications processor. The applications processor reads the message from the shared memory and updates a copied frame buffer. An overlay engine uses the copied frame buffer to refresh the display when the base-band processor has the focus, or to refresh a smaller base-band window that covers a portion of the display, leaving the rest of the display area for applications-processor graphics data. Rapid switching between the copied and local frame buffer is possible.

    摘要翻译: 功能手机具有共享显示器的两个处理器。 显示器连接到具有用于刷新显示器的帧缓冲器的应用处理器。 基带处理器还运行生成写入基带帧缓冲区的图形数据的程序。 对基带帧缓冲区的更新通过共享存储器接口发送到共享存储器,并且共享邮箱被写入消息长度,从而触发对应用处理器的邮箱中断。 应用处理器从共享存储器读取消息并更新复制的帧缓冲区。 当基带处理器具有焦点时,覆盖引擎使用复制的帧缓冲器来刷新显示器,或者刷新覆盖显示器的一部分的较小的基带窗口,留下用于应用处理器的其余显示区域 图形数据。 复制和本地帧缓冲区之间的快速切换是可能的。

    Virtualization of hardware user-interface using a shared mailbox between two processors in a feature phone
    66.
    发明授权
    Virtualization of hardware user-interface using a shared mailbox between two processors in a feature phone 有权
    使用功能手机中的两个处理器之间的共享邮箱进行虚拟化硬件用户界面

    公开(公告)号:US07107044B1

    公开(公告)日:2006-09-12

    申请号:US10904336

    申请日:2004-11-04

    IPC分类号: H04M1/00

    摘要: A feature phone has two processors that share a key pad for user input. The key pad is attached to a base-band processor and sends an interrupt to a user-hardware-interrupt UHI driver running on the base-band processor when the user presses a key. When a hot switch indicates that the local base-band processor has the focus, a key-press event is sent to the local kernel to be sent to programs on the base-band processor. When the hot switch indicates that a remote applications processor has the focus, a message for the event is written through a shared-memory interface to a shared memory on the applications processor. A shared mailbox is written with the message length, triggering a mailbox-interrupt to the applications processor. A virtual UHI driver running on the applications processor reads the event message from the shared memory and passes key-press information to programs on the applications processor.

    摘要翻译: 功能手机具有两个处理器,共享用于用户输入的键盘。 钥匙垫连接到基带处理器,并在用户按下键时向基带处理器上运行的用户硬件中断UHI驱动程序发送中断。 当热交换机指示本地基带处理器具有焦点时,将按键事件发送到本地内核以发送到基带处理器上的程序。 当热交换机指示远程应用处理器具有焦点时,该事件的消息通过共享存储器接口写入应用处理器上的共享存储器。 共享邮箱用消息长度写入,触发邮箱中断给应用处理器。 在应用处理器上运行的虚拟UHI驱动程序从共享内存中读取事件消息,并将密钥信息传递给应用程序处理器上的程序。

    Infrastructure for an open digital services marketplace
    68.
    发明授权
    Infrastructure for an open digital services marketplace 失效
    开放数字服务市场的基础设施

    公开(公告)号:US06205466B1

    公开(公告)日:2001-03-20

    申请号:US09118248

    申请日:1998-07-17

    IPC分类号: G06F900

    摘要: A software infrastructure for providing an open digital services marketplace including a naming manager that enables a requesting task to refer to a desired resource using a name which is local to the requesting task and a router that forwards the request to an appropriate handler for the desired resource and that enables at least one additional task to be invoked in response to the request. The infrastructure includes a permission manager that compares a set of access rights of the requesting task to the desired resource to a set of permissions associated with the desired resource such that the access rights are kept separately from the reference to the desired resource. The desired resource, the requesting task, the additional task, and a set of additional components used to handle the request are each modeled as a resource defined by a corresponding set of meta-data which includes a set of attributes and a reference to a grammar for interpreting the attributes.

    摘要翻译: 一种用于提供开放数字服务市场的软件基础设施,包括命名管理器,其允许请求任务使用请求任务本地的名称引用期望的资源,以及将请求转发到所需资源的适当处理程序的路由器 并且这使得能够响应于该请求调用至少一个附加任务。 基础设施包括权限管理器,其将请求任务的一组访问权限与期望的资源进行比较,以与所需资源相关联的一组权限进行比较,使得访问权限与对期望的资源的引用分开地保持。 所需资源,请求任务,附加任务和用于处理请求的一组附加组件各自被建模为由对应的一组元数据定义的资源,该元数据包括一组属性和对语法的引用 用于解释属性。