公开(公告)号：US20060106802A1

公开(公告)日：2006-05-18

申请号：US10991580

申请日：2004-11-18

申请人： Christopher Giblin ,  Tadeusz Pietraszek ,  James Riordan ,  Chris Vanden Berghe

发明人： Christopher Giblin ,  Tadeusz Pietraszek ,  James Riordan ,  Chris Vanden Berghe

IPC分类号： G06F7/00 ,  G06F17/30

CPC分类号： H04L63/0428 ,  G06F16/955 ,  G06F21/602 ,  G06F21/6218 ,  G06Q30/0601 ,  H04L9/00 ,  H04L63/10 ,  H04L63/168 ,  H04L2209/56 ,  H04L2209/60

摘要： An apparatus and method are disclosed for enabling controlled access to resources at a resource provider server. The invention may encrypt or decrypt a portion of a uniform resource identifier (URI), according to a stateless method for hiding resources and/or providing access control support. Upon receipt of a URI having an encrypted portion, the invention decrypts the encrypted portion using a predetermined key to obtain a decrypted segment, extracts additional information from the decrypted segment and forms a decrypted URI, before the decrypted URI is forwarded to a resource producer server. The invention may also encrypt a URI from a resource provider server before it is sent to a client in response to a client request.

摘要翻译： 公开了用于使得能够对资源提供商服务器处的资源进行受控访问的装置和方法。 根据用于隐藏资源和/或提供访问控制支持的无状态方法，本发明可以对统一资源标识符（URI）的一部分进行加密或解密。 在接收到具有加密部分的URI之后，本发明使用预定密钥解密加密部分以获得解密的段，在解密的URI被转发到资源生成器服务器之前从解密的段中提取附加信息并形成解密的URI 。 本发明还可以在资源提供商服务器响应于客户端请求被发送到客户端之前加密URI。

公开(公告)号：US20060010389A1

公开(公告)日：2006-01-12

申请号：US11177573

申请日：2005-07-08

申请人： John Rooney ,  Christopher Giblin ,  Marcel Waldvogel ,  Paul Hurley

发明人： John Rooney ,  Christopher Giblin ,  Marcel Waldvogel ,  Paul Hurley

IPC分类号： G06F17/00

CPC分类号： H04L63/1425 ,  H04L63/1458 ,  H04L2463/141

摘要： The invention provides methods, apparatus and systems for detecting distributed denial of service (DDoS) attacks within the Internet by sampling packets at a point or points in Internet backbone connections to determine a packet metric parameter. The packet metric parameter which might comprise the volume of packets received is analysed over selected time intervals with respect to specified geographical locations in which the hosts transmitting the packets are located. The expected behaviour can be employed to identify traffic distortions revealing a DDoS attack. In a complementary aspect, the invention provides a method of authenticating packets at routers in order to elevate the QoS of authenticated packets. This method can be used to block or filter packets and can be used in conjunction with the DDoS attack detection system to defend against DDoS attacks within the Internet in a distributed manner.

摘要翻译： 本发明提供了通过在因特网骨干连接点或点采样分组来检测因特网内的分布式拒绝服务（DDoS）攻击的方法，装置和系统，以确定分组度量参数。 可以根据发送分组的主机所在的指定地理位置的选定时间间隔分析可能包括接收到的分组量的分组度量参数。 可以使用预期的行为来识别暴露DDoS攻击的流量扭曲。 在互补的方面，本发明提供了一种在路由器上认证分组的方法，以便提高认证分组的QoS。 该方法可用于阻止或过滤报文，并可与DDoS攻击检测系统结合使用，以分布式的方式防范互联网内的DDoS攻击。

公开(公告)号：US20060279958A1

公开(公告)日：2006-12-14

申请号：US11151366

申请日：2005-06-13

申请人： James Cline ,  Christopher Giblin

发明人： James Cline ,  Christopher Giblin

IPC分类号： F21V21/00

CPC分类号： F21V21/096 ,  F21S4/10

摘要： An apparatus and method is disclosed for providing the attachment of a plurality of magnetic devices for use in a decorative lighting system. The magnetic device comprises a magnetic base assembly, coupled with a magnet recessed into a first side of the magnetic base assembly, a supporting element, coupled to a second side of the magnetic base assembly, a first interior element parallel with a second interior element extending from the exterior top portion of the supporting element to a circular element in the interior bottom portion of the supporting element.

摘要翻译： 公开了用于提供用于装饰照明系统中的多个磁性装置的附接的装置和方法。 磁性装置包括磁性基座组件，该磁性基座组件与凹入磁性基座组件的第一侧的磁体耦合，耦合到磁性基座组件的第二侧的支撑元件，与第二内部元件平行的第一内部元件， 从支撑元件的外部顶部到支撑元件的内部底部中的圆形元件。