Establishing network connections between transparent network devices
    1.
    发明授权
    Establishing network connections between transparent network devices 有权
    建立透明网络设备之间的网络连接

    公开(公告)号:US08180902B1

    公开(公告)日:2012-05-15

    申请号:US12571430

    申请日:2009-09-30

    Abstract: Transparent network devices intercept messages from non-transparent network devices that establish a connection. Transparent network devices modify these messages to establish an inner connection with each other. The transparent network devices mimic at least some of the outer connection messages to establish their inner connection. The mimicked messages and any optional reset messages are intercepted by the transparent network devices to prevent them from reaching the outer connections. Transparent network devices modify network traffic, using error detection data, fragmentation data, or timestamps, so that inner connection network traffic inadvertently received by outer connection devices is rejected or ignored by the outer connection network devices. Transparent network devices may use different sequence windows for inner and outer connection network traffic. To prevent overlapping sequence windows, transparent network devices monitor the locations of the inner and outer connection sequence windows and may rapidly advance the inner connection sequence window as needed.

    Abstract translation: 透明网络设备拦截来自建立连接的不透明网络设备的消息。 透明网络设备修改这些消息以建立彼此的内部连接。 透明网络设备模拟至少一些外部连接消息以建立其内部连接。 模拟消息和任何可选的重置消息被透明网络设备拦截,以防止它们到达外部连接。 透明网络设备修改网络流量,使用错误检测数据,碎片数据或时间戳,使外部连接设备无意中接收的内部连接网络流量被外部连接网络设备拒绝或忽略。 透明网络设备可以对内部和外部连接网络流量使用不同的序列窗口。 为了防止重叠序列窗口,透明网络设备监视内部和外部连接序列窗口的位置,并可根据需要快速推进内部连接顺序窗口。

    Methods and apparatus supporting access to stored data
    2.
    发明授权
    Methods and apparatus supporting access to stored data 有权
    支持访问存储数据的方法和设备

    公开(公告)号:US07293066B1

    公开(公告)日:2007-11-06

    申请号:US10761652

    申请日:2004-01-21

    Inventor: Mark Stuart Day

    CPC classification number: G06Q30/0603

    Abstract: A data processing device, such as a television set top box, receives user-selected content data from a remote source over a network in response to user initiated content selection information. The data processing device stores the user-selected content data (e.g., readable or playable content data such as movies, text, audio, etc.) in an appropriate storage location of the data processing device. The data processing device enables a user to access only a portion of the user-selected content data stored therein. If the user forgoes a right to selectively retrieve certain content data, the data processing device enables user access to other user-selected content data in the storage location. Thus, if a user experiences a “change in heart,” the user may forgo a right to play back certain content data for a right to selectively retrieve different portions of user-selected content data in the data processing device.

    Abstract translation: 诸如电视机顶盒的数据处理设备响应于用户发起的内容选择信息,经由网络从远程源接收用户选择的内容数据。 数据处理装置将用户选择的内容数据(例如,诸如电影,文本,音频等的可读或可播放的内容数据)存储在数据处理装置的适当的存储位置中。 数据处理装置使得用户仅访问存储在其中的用户选择的内容数据的一部分。 如果用户放弃选择性地检索某些内容数据的权利,则数据处理设备使得用户能够访问存储位置中的其他用户选择的内容数据。 因此,如果用户体验到“心脏改变”,则用户可以放弃播放某些内容数据的权利,以选择性地检索数据处理设备中的用户选择的内容数据的不同部分。

    Methods and apparatus for replicating a catalog in a content distribution network
    3.
    发明授权
    Methods and apparatus for replicating a catalog in a content distribution network 有权
    在内容分发网络中复制目录的方法和装置

    公开(公告)号:US07251670B1

    公开(公告)日:2007-07-31

    申请号:US10320154

    申请日:2002-12-16

    Inventor: Mark Stuart Day

    Abstract: The invention is directed to techniques, in a first content distribution node, for maintaining a first catalog of a first content distribution node. The first content distribution node detects a modification condition associated with the first catalog of the first content distribution node. The modification condition identifies a potential requirement to modify the first catalog. In response to detecting the modification condition, the first content distribution node performs a version-based comparison technique on the first catalog. The version-based comparison technique compares at least one of gap version information and entry version information associated with the modification condition to gap version information and entry version information associated with the first catalog to identify a catalog change condition. If the catalog change condition indicates that a catalog modification is required for the first catalog, the first content distribution node modifies the first catalog in accordance with the catalog change condition.

    Abstract translation: 本发明涉及在第一内容分发节点中用于维护第一内容分发节点的第一目录的技术。 第一内容分发节点检测与第一内容分发节点的第一目录相关联的修改条件。 修改条件标识了修改第一个目录的潜在要求。 响应于检测到修改条件,第一内容分发节点在第一目录上执行基于版本的比较技术。 基于版本的比较技术将间隙版本信息和与修改条件相关联的条目版本信息中的至少一个与间隙版本信息和与第一目录相关联的条目版本信息进行比较,以识别目录更改条件。 如果目录更改条件指示第一目录需要目录修改,则第一内容分发节点根据目录更改条件修改第一个目录。

    Automatic detection of reverse tunnels
    5.
    发明授权
    Automatic detection of reverse tunnels 有权
    自动检测反向隧道

    公开(公告)号:US08151348B1

    公开(公告)日:2012-04-03

    申请号:US10881613

    申请日:2004-06-30

    Inventor: Mark Stuart Day

    CPC classification number: H04L63/1408 H04L2463/144 H04W12/12

    Abstract: Presently disclosed are methods and apparatus for analyzing packets and packet flows to detect covert communications channels (including reverse tunnels) in real time. These systems actively probe a suspicious connection in ways that are not possible in prior art log-based techniques and may initiate countermeasures against discovered covert channels. The present system may be implemented in a network device, such as an intrusion detection system, content engine, or other intermediary device employing a web cache. Embodiments automatically detect suspicious activity at particular source addresses by using relatively simple tests to detect suspect packets that should receive more extensive scrutiny. After more rigorous secondary testing (optionally including active probing techniques), suspect packets are either returned to the occasionally-checked state or flagged for further action, such as raising an alert or taking automatic countermeasures against the covert channel or its originators.

    Abstract translation: 目前公开的是用于分析分组和分组流以实时检测隐蔽通信信道(包括反向隧道)的方法和装置。 这些系统以现有技术的基于日志的技术不可能的方式主动探测可疑连接,并且可以针对发现的隐蔽通道启动对策。 本系统可以在诸如入侵检测系统,内容引擎或采用web缓存的其他中间设备的网络设备中实现。 实施例通过使用相对简单的测试来检测应该接受更广泛审查的可疑分组来自动检测特定源地址的可疑活动。 经过更严格的次级测试(可选地包括主动探测技术),可疑的数据包将被返回到偶尔检查的状态或被标记以进一步采取行动,例如提醒警报或对隐蔽通道或其发起者采取自动对策。

    Convergence processor for media streams
    6.
    发明授权
    Convergence processor for media streams 有权
    用于媒体流的融合处理器

    公开(公告)号:US07698724B1

    公开(公告)日:2010-04-13

    申请号:US10439120

    申请日:2003-05-15

    Inventor: Mark Stuart Day

    Abstract: Multicast groups provide a mechanism to deliver simultaneous media content to a plurality of users. In streaming media systems, such as audio and video systems, each multicast recipient simultaneously receives similar content. Accordingly, each recipient must initiate transmission at the same time. A data communications device delivers multiple media streams of similar content to each of a plurality of users by converging a set of media streams and merging the converged streams onto a single stream for simultaneous delivery to each of the plurality of users from a single media stream resource. A convergence processor identifies a set of streams carrying similar content in a slightly time-shifted manner with respect to the other streams. The convergence processor filters certain streams to augment the streams to converge at a particular point, at which time the streams align respect to media content therein, and merge onto a multicast stream for the duration.

    Abstract translation: 组播组提供了将多媒体内容传送到多个用户的机制。 在诸如音频和视频系统的流媒体系统中,每个多播接收者同时接收类似的内容。 因此,每个接收者必须同时启动传输。 数据通信设备通过汇聚一组媒体流并将融合的流合并到单个流上以将多个类似内容的多个媒体流传送到多个用户中,以从单个媒体流资源同时传送到多个用户中的每一个 。 收敛处理器以稍微偏移的方式相对于其他流来识别携带相似内容的一组流。 汇聚处理器对某些流进行滤波以增加流以在特定点收敛,此时流与媒体内容对齐,并在该持续时间内合并到多播流上。

    Methods and apparatus for accessing presence information
    7.
    发明授权
    Methods and apparatus for accessing presence information 有权
    用于访问存在信息的方法和装置

    公开(公告)号:US07574528B2

    公开(公告)日:2009-08-11

    申请号:US10648999

    申请日:2003-08-27

    Inventor: Mark Stuart Day

    CPC classification number: H04L67/24

    Abstract: A presence server provides presence information to content subscribers via unicast transmission of the presence information. In the case where the presence server receives, from a subscriber, a subscription request for presence information having a relatively large number of subscribers, the presence server directs the content subscriber to a multicast transmission channel. The content subscriber, in turn, accesses the presence information via the multicast transmission channel. By directing content subscribers toward the multicast transmission channel, the presence server conserves connection resources associated with the presence system, thereby allowing the presence system to distribute presence information with a relatively high level of speed and efficiency. Furthermore, by directing content subscribers toward the multicast transmission channel, the presence server minimizes the costs associated with adding new subscribers to the presence system.

    Abstract translation: 呈现服务器通过存在信息的单播传输向内容订户提供呈现信息。 在存在服务器从用户接收到具有相对较多数量的订户的存在信息的订阅请求的情况下,存在服务器将内容订户引导到组播传输信道。 内容订户又通过组播传输信道访问存在信息。 通过将内容订户引导到组播传输信道,存在服务器节省与存在系统相关联的连接资源,从而允许存在系统以相对较高的速度和效率水平分发呈现信息。 此外,通过将内容订阅者指向多播传输信道,存在服务器将与向现有系统添加新订户相关联的成本降至最低。

    Methods and apparatus for monitoring a power source
    8.
    发明授权
    Methods and apparatus for monitoring a power source 有权
    监测电源的方法和装置

    公开(公告)号:US07228447B1

    公开(公告)日:2007-06-05

    申请号:US10247052

    申请日:2002-09-19

    Inventor: Mark Stuart Day

    CPC classification number: G06F1/28

    Abstract: A power source is configured to notify an external monitoring device of a condition such as a low power condition of the power source. The power source has an associated controller that monitors the condition of the power source. The power source receives a first threshold condition for a power source, establishes a communications channel with an external monitoring device, transmits a notification related to the first threshold condition of the power source to the external monitoring device through the communications channel and discontinues the established communications channel based on a reception condition of the external monitoring device. The controller terminates notification after reception of an acknowledgment sent by the external monitoring device or after an elapsed time. The communications channel can be a wireless communications channels or can be a network such as the Internet.

    Abstract translation: 电源被配置为向外部监视装置通知诸如电源的低功率状况的状况。 电源具有监视电源状态的关联控制器。 电源接收电源的第一阈值条件,与外部监视装置建立通信信道,通过通信信道将与电源的第一阈值条件相关的通知发送到外部监视装置,并且中断所建立的通信 基于外部监视装置的接收条件的信道。 控制器在接收到由外部监视装置发送的确认或经过时间之后终止通知。 通信信道可以是无线通信信道,也可以是诸如因特网之类的网络。

    Methods and apparatus for distributing content
    9.
    发明授权
    Methods and apparatus for distributing content 有权
    用于分发内容的方法和装置

    公开(公告)号:US07219153B1

    公开(公告)日:2007-05-15

    申请号:US10307705

    申请日:2002-12-02

    Inventor: Mark Stuart Day

    CPC classification number: H04L29/06027 H04L65/602 H04L65/80 H04L67/26

    Abstract: A system incorporates notification aspects of a presence system with content distribution capabilities of a content delivery network to both notify subscribers of the presence of content from a host and provide relatively fast and efficient delivery of the content to the user. A content host provides content, such as streaming audio or video media, to a content delivery network. The content host also provides notification of the availability of the content to a central site or presence server. A subscriber to the content host receives, from the presence server, notification as to the availability of content by the content host. The subscriber also receives notification as to the location of the content in the content delivery network. Based upon the notification, the subscriber retrieves the content from the content delivery network.

    Abstract translation: 系统将存在系统的通知方面与内容传送网络的内容分发能力结合起来,以向用户通知来自主机的内容的存在,并且向用户提供相对快速和有效的内容传递。 内容主机向内容传送网络提供诸如流音频或视频媒体之类的内容。 内容主机还向中心站点或存在服务器提供内容的可用性的通知。 内容主机的订户从存在服务器接收内容主机对内容的可用性的通知。 用户还接收关于内容传送网络中的内容的位置的通知。 基于通知,订户从内容传送网络检索内容。

    Establishing network connections between transparent network devices
    10.
    发明授权
    Establishing network connections between transparent network devices 有权
    建立透明网络设备之间的网络连接

    公开(公告)号:US08688844B1

    公开(公告)日:2014-04-01

    申请号:US13460392

    申请日:2012-04-30

    Abstract: Transparent network devices intercept messages from non-transparent network devices that establish a connection. Transparent network devices modify these messages to establish an inner connection with each other. The transparent network devices mimic at least some of the outer connection messages to establish their inner connection. The mimicked messages and any optional reset messages are intercepted by the transparent network devices to prevent them from reaching the outer connections. Transparent network devices modify network traffic, using error detection data, fragmentation data, or timestamps, so that inner connection network traffic inadvertently received by outer connection devices is rejected or ignored by the outer connection network devices. Transparent network devices may use different sequence windows for inner and outer connection network traffic. To prevent overlapping sequence windows, transparent network devices monitor the locations of the inner and outer connection sequence windows and may rapidly advance the inner connection sequence window as needed.

    Abstract translation: 透明网络设备拦截来自建立连接的不透明网络设备的消息。 透明网络设备修改这些消息以建立彼此的内部连接。 透明网络设备模拟至少一些外部连接消息以建立其内部连接。 模拟消息和任何可选的重置消息被透明网络设备拦截,以防止它们到达外部连接。 透明网络设备修改网络流量,使用错误检测数据,碎片数据或时间戳,使外部连接设备无意中接收的内部连接网络流量被外部连接网络设备拒绝或忽略。 透明网络设备可以对内部和外部连接网络流量使用不同的序列窗口。 为了防止重叠序列窗口,透明网络设备监视内部和外部连接序列窗口的位置,并可根据需要快速推进内部连接顺序窗口。

Patent Agency Ranking