Bypassing topological restrictions with tunnels
    71.
    发明授权
    Bypassing topological restrictions with tunnels 有权
    绕过隧道的拓扑限制

    公开(公告)号:US06580722B1

    公开(公告)日:2003-06-17

    申请号:US09138586

    申请日:1998-08-21

    申请人: Radia J. Perlman

    发明人: Radia J. Perlman

    IPC分类号: H04J326

    摘要: Data units are tunneled through topological restrictions that reside in a path between a first network device and a second network device. For example, a remote network device that resides outside of the domain of a multicast group obtains access to the multicast group by tunneling through the boundary of the domain. A proxy device within the domain functions as a member of the multicast group on behalf of the remote network device. Data units that are transmitted from the remote network device to the proxy device are tunneled to the multicast group via the proxy device. Data units that are transmitted from the multicast group to the proxy device are tunneled to the remote network device via the proxy device.

    摘要翻译: 数据单元通过驻留在第一网络设备和第二网络设备之间的路径中的拓扑限制进行隧道传送。 例如,驻留在组播组域之外的远程网络设备通过隧道通过域的边界获得对多播组的访问。 域内的代理设备作为组播组的成员,代表远程网络设备。 从远程网络设备传输到代理设备的数据单元通过代理设备被隧道传输到组播组。 从组播组发送到代理设备的数据单元通过代理设备被隧道传输到远程网络设备。

    System and method for organizing devices in a network into a tree using
suitability values
    72.
    发明授权
    System and method for organizing devices in a network into a tree using suitability values 失效
    使用适合性值将网络中的设备组织成树的系统和方法

    公开(公告)号:US6134599A

    公开(公告)日:2000-10-17

    申请号:US61849

    申请日:1998-04-18

    摘要: In a digital data network, a plurality of devices interconnected by a communication link organize themselves into a tree structure. Each of the devices has an associated suitability value that generally relates to the device's suitability for becoming a node in the tree structure. The devices organize themselves into a tree structure in one or more iterations, each iteration comprising two general steps, namely, a node election step and a tree establishment step. In the node election step, the devices whose suitability values are such that they can become nodes in the tree broadcast over the communication link node election messages including their respective suitability values. These devices also receive the node election messages that are broadcast by other devices. Each device determines whether it is elected a node in the tree structure in connection with a comparison between its suitability value and suitability values of node election messages received thereby. During the tree establishment step, the devices in the network communicate with at least one of the device or devices which is or are elected respective nodes in the tree structure to facilitate becoming respective children thereof.

    摘要翻译: 在数字数据网络中,通过通信链路互连的多个设备将自身组织成树结构。 每个设备具有相关联的适用性值,其通常涉及设备适合于成为树结构中的节点。 这些设备在一个或多个迭代中将自身组织成树结构,每次迭代包括两个一般步骤,即节点选举步骤和树建立步骤。 在节点选举步骤中,其适用性值使得它们可以成为通过通信链路节点选举消息广播的树中的节点的设备,包括它们各自的适用性值。 这些设备还接收由其他设备广播的节点选举消息。 每个设备确定它是否被选为树结构中的节点,与其适用性值和由此接收的节点选举消息的适用性值进行比较。 在树建立步骤期间,网络中的设备与树结构中的或被选为相应节点的设备或设备中的至少一个通信以便于成为其相应的子节点。

    Method and apparatus for determining characteristics of a path
    73.
    发明授权
    Method and apparatus for determining characteristics of a path 失效
    用于确定路径特性的方法和装置

    公开(公告)号:US5781534A

    公开(公告)日:1998-07-14

    申请号:US550981

    申请日:1995-10-31

    IPC分类号: H04L12/56

    CPC分类号: H04L45/00 H04L45/26

    摘要: An information gathering mechanism efficiently acquires information about a path interconnecting a source node and a destination node in a computer network. The mechanism comprises a novel packet configuration for soliciting parameters pertaining to network characteristics from routers coupled to the path. This novel probe packet preferably has a flexible format so that it may be processed not only by routers configured to interpret this type of packet, but also those that are incapable of either supplying some of the parameters or, further, deciphering any of the contents of the packet.

    摘要翻译: 信息收集机制有效地获取关于在计算机网络中互连源节点和目的地节点的路径的信息。 该机制包括用于从与路径相连的路由器请求与网络特性有关的参数的新颖分组配置。 这种新颖的探测分组优选地具有灵活的格式,使得它不仅可以被配置为解释这种类型的分组的路由器被处理,而且还可以被处理不能提供一些参数的那些,或者进一步解密 包。

    Mechanism for efficiently synchronizing information over a network
    74.
    发明授权
    Mechanism for efficiently synchronizing information over a network 失效
    通过网络有效地同步信息的机制

    公开(公告)号:US5742820A

    公开(公告)日:1998-04-21

    申请号:US499029

    申请日:1995-07-06

    IPC分类号: G06F13/00 H04L12/56 G06F17/30

    摘要: A novel mechanism efficiently synchronizes the contents of databases stored on nodes of a computer network to-ensure that those contents are consistent. The mechanism comprises a database identifier generated by a node of the computer network and distributed to other receiving nodes coupled to the network. The database identifier is uniquely representative of the contents of the distributing node's database and the receiving nodes compare this unique identifier with their own generated database identifiers to determine if the identifiers, and thus their databases, are consistent and synchronized.

    摘要翻译: 一种新颖的机制有效地同步存储在计算机网络的节点上的数据库的内容,以确保这些内容是一致的。 该机制包括由计算机网络的节点生成并分发给耦合到网络的其他接收节点的数据库标识符。 数据库标识符唯一地代表分发节点的数据库的内容,并且接收节点将该唯一标识符与其自己生成的数据库标识符进行比较,以确定标识符以及因此它们的数据库是否一致和同步。

    Method and apparatus for synchronizing data transmission with on-demand
links of a network
    75.
    发明授权
    Method and apparatus for synchronizing data transmission with on-demand links of a network 失效
    用于使数据传输与网络的按需链路同步的方法和装置

    公开(公告)号:US5596574A

    公开(公告)日:1997-01-21

    申请号:US498640

    申请日:1995-07-06

    CPC分类号: H04L47/10 H04L12/66 H04L29/06

    摘要: A novel synchronization mechanism synchronizes delivery of data packets over on-demand links of a computer network in a manner that efficiently utilizes those links. The mechanism comprises control information generated by a source node and stored in a network layer header of a data packet transmitted to a destination node via at least one router coupled to an on-demand link of the network. Depending upon the state of the control information the router is instructed whether to immediately dial the link to establish a connection for delivery of the packet to the destination node.

    摘要翻译: 新颖的同步机制以有效地利用这些链路的方式使计算机网络的按需链路同步数据分组的传送。 该机制包括由源节点生成并存储在通过耦合到网络的点播链路的至少一个路由器发送到目的地节点的数据分组的网络层报头中的控制信息。 根据控制信息的状态,指示路由器是否立即拨打链路以建立用于将分组传送到目的地节点的连接。

    Method of neighbor discovery over a multiaccess nonbroadcast medium
    76.
    发明授权
    Method of neighbor discovery over a multiaccess nonbroadcast medium 失效
    多地面非广播媒体上邻居发现的方法

    公开(公告)号:US5574860A

    公开(公告)日:1996-11-12

    申请号:US29815

    申请日:1993-03-11

    CPC分类号: H04L45/02

    摘要: A technique for generating, distributing and maintaining a list of operational nodes in a network using a nonbroadcast communication medium, wherein the nodes first collectively agree on the identity of a designated node. Once the designated node is agreed on, the other nodes periodically send Hello messages to it and the designated nodes compiles a list of operational nodes based in part on the Hello messages it receives, and periodically sends a Hello message to each node on the list. The Hello message from the designated node includes a list of addresses of active neighbor nodes, so that every node periodically receives a list of operational neighbor nodes. The number of messages needed to implement this scheme is proportional to the number of nodes, rather than the square of the number of nodes as in a conventional approach in which each node advised every other node of its presence. Selection of the designated node can be on the basis of some unique property of each node, such as identification number or an encoded priority.

    摘要翻译: 一种用于使用非广播通信介质来生成,分发和维护网络中的操作节点的列表的技术,其中节点首先共同地就所指定的节点的身份达成一致。 一旦指定节点达成一致,其他节点就会定期向其发送Hello消息,并且指定的节点将根据接收到的Hello消息编译一个操作节点列表,并定期向列表中的每个节点发送一个Hello消息。 来自指定节点的Hello消息包括活动邻居节点的地址列表,使得每个节点周期性地接收操作的邻居节点的列表。 实现该方案所需的消息数量与节点数量成比例,而不是像常规方法中节点数量的平方,其中每个节点建议其存在的每个其他节点。 指定节点的选择可以基于每个节点的某些独特属性,例如标识号或编码优先级。

    Message encryption using a hash function
    77.
    发明授权
    Message encryption using a hash function 失效
    使用散列函数的邮件加密

    公开(公告)号:US5483598A

    公开(公告)日:1996-01-09

    申请号:US86746

    申请日:1993-07-01

    IPC分类号: H04L9/18 H04L9/20 H04L9/22

    CPC分类号: H04L9/0662 H04L2209/12

    摘要: An encryption system employing a one-time key-pad uses a shared secret number and a one-way hash function with which both the originator and recipient of a message generate successive segments of a key-pad to encrypt and decrypt the message respectively. In one arrangement each key-pad segment is generated by applying the hash function to a combination of the secret number and the previous key-pad segment. In the other embodiment of the invention, each key-pad section is generated by applying the one-way hash function to a combination of the secret number and a corresponding segment of the ciphertext version of the message.

    摘要翻译: 使用一次性键盘的加密系统使用共享密码和单向哈希函数,消息的发起者和接收者都同时生成键盘的连续段来分别加密和解密该消息。 在一种布置中,通过将散列函数应用于秘密号码和先前的键盘片段的组合来产生每个键盘片段。 在本发明的另一实施例中,通过将单向散列函数应用于秘密数字和消息的密文版本的相应段的组合来生成每个键盘部分。

    Method of deriving a per-message signature for a DSS or El Gamal
encryption system
    78.
    发明授权
    Method of deriving a per-message signature for a DSS or El Gamal encryption system 失效
    为DSS或El Gamal加密系统导出每消息签名的方法

    公开(公告)号:US5475763A

    公开(公告)日:1995-12-12

    申请号:US203740

    申请日:1994-02-28

    IPC分类号: H04L9/32 H04L9/30 H04L9/00

    CPC分类号: H04L9/3252

    摘要: A signature system, such as an El Gamal or DSS system, involving the use of a long-term secret number and a per-message secret number generates the per-message secret number without the use of a random number generator or non-volatile storage. The per-message secret number is generated by applying a one-way hash function to a combination of the long-term secret number and the message itself.

    摘要翻译: 诸如El Gamal或DSS系统的签名系统涉及使用长期秘密号码和每消息密钥号码,而不使用随机数字生成器或非易失性存储器产生每消息密码 。 通过将单向散列函数应用于长期密码和消息本身的组合来生成每消息密码。

    Architecture for maintaining the sequence of packet cells transmitted
over a multicast, cell-switched network
    79.
    发明授权
    Architecture for maintaining the sequence of packet cells transmitted over a multicast, cell-switched network 失效
    用于维护通过组播,小区交换网络发送的分组小区的序列的架构

    公开(公告)号:US5418781A

    公开(公告)日:1995-05-23

    申请号:US284913

    申请日:1994-08-02

    IPC分类号: H04L12/56 H04Q11/04

    摘要: A novel switch architecture maintains the sequence of packet cells, received at one port of a multicast port group, during subsequent transfer of the cells to the remaining ports of the group. The novel architecture includes a 2-stage buffering arrangement whereby the first stage comprises a plurality of local buffers, each associated with a port of the switch, and the second stage comprises a single, global buffer. Each local buffer services its associated port of the multicast port group by temporarily storing incoming packet cells until a complete packet is received at that port, at which time the packet cells may be passed to the global buffer as outgoing cells. The global buffer services the remaining ports of the multicast port group by forwarding copies of the outgoing cells, in sequence, to those ports.

    摘要翻译: 一种新颖的交换机架构在将小区随后传送到该组的其余端口的过程中维护在多播端口组的一个端口处接收到的分组小区的序列。 该新颖的架构包括2级缓冲装置,其中第一级包括多个本地缓冲器,每个本地缓冲器与开关的端口相关联,并且第二级包括单个全局缓冲器。 每个本地缓冲区通过临时存储进入的分组信元来为该组播端口组的相关端口服务,直到在该端口接收到完整分组,此时分组小区可以作为传出小区被传递到全局缓冲区。 全局缓冲区通过将输出单元的副本顺序转发到这些端口来为多播端口组的其余端口服务。

    Bridge-like internet protocol router
    80.
    发明授权
    Bridge-like internet protocol router 失效
    桥式互联网协议路由器

    公开(公告)号:US5309437A

    公开(公告)日:1994-05-03

    申请号:US546619

    申请日:1990-06-29

    IPC分类号: H04L12/46 H04J3/02

    CPC分类号: H04L12/4625

    摘要: A device and related method for coupling segments of an extended local area network (LAN) in such a way that message traffic employing inter-network protocols such as TCP/IP will be handled without the difficulties usually associated with bridges, and without the complexity and expense of full IP router capability. The device operates like a bridge for non-TCP/IP traffic. For TCP/IP traffic it operates in a bridge-like manner but maintains a database associating extended LAN segment addresses with port numbers in the device, so that packets can be automatically forwarded over a spanning tree connecting the network segments. A host computer in any network segment can address others in different network segments of the extended LAN as though all were in a single LAN. The device of the invention functions to block the flow of ARP messages and to generate ARP replies that render the device of the invention transparent to hosts within the extended LAN. The device is also transparent to true IP routers, which may still be used to effect communication with points outside the extended LAN.

    摘要翻译: 一种用于耦合扩展局域网(LAN)的段的设备和相关方法,使得采用诸如TCP / IP之类的网络间协议的消息业务将被处理,而不需要通常与网桥相关联的困难,并且没有复杂性和 完全IP路由器功能的费用。 该设备像非TCP / IP流量的桥接一样运行。 对于TCP / IP流量,它以类似桥梁的方式运行,但维护数据库将扩展的LAN段地址与设备中的端口号相关联,从而可以通过连接网段的生成树自动转发数据包。 任何网段中的主机可以对扩展LAN的不同网段中的其他人进行寻址,犹如全部都在单个LAN中一样。 本发明的设备用于阻止ARP消息的流动并且产生使得本发明的设备对于扩展LAN内的主机是透明的ARP应答。 该设备对于真正的IP路由器也是透明的,这可能仍然用于与扩展LAN之外的点进行通信。