公开(公告)号：US08826307B2

公开(公告)日：2014-09-02

申请号：US12106255

申请日：2008-04-18

申请人： Narasimha Rao S.s. Nagampalli ,  Alireza Dabagh ,  Alok Manchanda ,  Taroon Mandhana ,  Sharad Mittal ,  Olivier Contant ,  Noel W. Anderson ,  Bernard Aboba ,  Jerry E. Peterson

发明人： Narasimha Rao S.s. Nagampalli ,  Alireza Dabagh ,  Alok Manchanda ,  Taroon Mandhana ,  Sharad Mittal ,  Olivier Contant ,  Noel W. Anderson ,  Bernard Aboba ,  Jerry E. Peterson

IPC分类号： G06F3/00 ,  G06F9/44 ,  G06F9/46 ,  G06F13/00

CPC分类号： G06F13/102

摘要： A computer with an extensible framework for facilitating communication between a software component installed on the computer and a device driver that executes functions in response to vendor-specific command objects (e.g., OIDs). The framework defines data structures and a standardized format for defining and implementing private interfaces. After selecting a private interface that is commonly supported by a software component and a driver, a private communication path may be established by an operating system component to facilitate the transfer of command information from the software component to the driver. The private communication path allows commands packaged as OIDs to be routed from software components to intended drivers. By defining private interfaces which route commands from software components to intended drivers, the extensible framework mitigates potential incompatibilities that may arise when drivers created by different vendors include OIDs with the same OID value.

摘要翻译： 具有可扩展框架的计算机，用于促进安装在计算机上的软件组件与响应于供应商特定的命令对象（例如，OID）执行功能的设备驱动程序之间的通信。 框架定义数据​​结构和用于定义和实现私有接口的标准化格式。 在选择通常被软件组件和驱动程序支持的私有接口之后，可以由操作系统组件建立专用通信路径，以便于将命令信息从软件组件传输到驱动器。 专用通信路径允许打包成OID的命令从软件组件路由到预期的驱动程序。 通过定义将命令从软件组件路由到预期驱动程序的私有接口，可扩展框架可减轻不同供应商创建的驱动程序包含具有相同OID值的OID时可能出现的潜在不兼容性。

公开(公告)号：US20120030674A1

公开(公告)日：2012-02-02

申请号：US13194402

申请日：2011-07-29

申请人： Sambhrama Madhusudhan Mundkur ,  Alireza Dabagh ,  Dustin Lyle Green ,  Narasimha Rao S.S. Nagampalli

发明人： Sambhrama Madhusudhan Mundkur ,  Alireza Dabagh ,  Dustin Lyle Green ,  Narasimha Rao S.S. Nagampalli

IPC分类号： G06F9/455

CPC分类号： G06F13/4022

摘要： Techniques are disclosed for the non-disruptive and reliable live migration of a virtual machine (VM) from a source host to a target host, where network data is placed directly into the VM's memory. When a live migration begins, a network interface card (NIC) of the source stops placing newly received packets into the VM's memory. A virtual server driver (VSP) on the source stores the packets being processed and forces a return of the memory where the packets are stored to the NIC. When the VM has been migrated to the target, and the source VSP has transferred the stored packets to the target host, the VM resumes processing the packets, and when the VM sends messages to the target NIC that the memory associated with a processed packet is free, a VSP on the target intercepts that message, blocking the target NIC from receiving it.

摘要翻译： 公开了技术，用于将虚拟机（VM）从源主机到目标主机的非中断和可靠的实时迁移，其中网络数据被直接放置到VM的存储器中。 当实时迁移开始时，源的网络接口卡（NIC）会将新接收的数据包放入虚拟机的内存中。 源上的虚拟服务器驱动程序（VSP）存储正在处理的数据包，并强制将存储在数据包中的内存返回给NIC。 当VM已经迁移到目标，并且源VSP已经将存储的分组传送到目标主机时，VM恢复处理分组，并且当VM向目标NIC发送消息时，与处理的分组相关联的存储器是 免费，目标上的VSP拦截该消息，阻止目标NIC接收它。

公开(公告)号：US20100174808A1

公开(公告)日：2010-07-08

申请号：US12350115

申请日：2009-01-07

申请人： Alireza Dabagh ,  Narasimha Rao S.S. Nagampalli ,  Robert C. Combs ,  Alexander Malysh ,  Narasimhan A. Venkataramaiah

发明人： Alireza Dabagh ,  Narasimha Rao S.S. Nagampalli ,  Robert C. Combs ,  Alexander Malysh ,  Narasimhan A. Venkataramaiah

IPC分类号： G06F15/177

CPC分类号： G06F1/3203 ,  Y02D10/126

摘要： A computing device that has a network interface that performs a subset of possible networking functions while the computing device is in a sleep mode. The subset of functions may be simply implemented on the network interface, yet to substantially reduce the frequency with which the computing device has to wake up to perform networking functions. The subset of functions may be selected to maintain a network presence of the computing device while the device is in sleep mode, and may include responding to requests for MAC information, sending keep-alive messages or exchanging security information that, in accordance with network protocols, has a limited lifetime that would otherwise expire while the computing device is in sleep mode.

摘要翻译： 一种具有网络接口的计算设备，所述网络接口在所述计算设备处于睡眠模式时执行可能的联网功能的子集。 功能的子集可以简单地在网络接口上实现，而大大降低了计算设备必须唤醒以执行联网功能的频率。 可以选择功能的子集以在设备处于睡眠模式时维持计算设备的网络存在，并且可以包括响应对MAC信息的请求，发送保持活动消息或交换根据网络协议的安全信息 ，具有在计算设备处于睡眠模式时否则将过期的有限寿命。

公开(公告)号：US09104406B2

公开(公告)日：2015-08-11

申请号：US12350115

申请日：2009-01-07

申请人： Alireza Dabagh ,  Narasimha Rao S.S. Nagampalli ,  Robert C. Combs ,  Alexander Malysh ,  Narasimhan A. Venkataramaiah

发明人： Alireza Dabagh ,  Narasimha Rao S.S. Nagampalli ,  Robert C. Combs ,  Alexander Malysh ,  Narasimhan A. Venkataramaiah

IPC分类号： G06F15/177 ,  G06F1/32

CPC分类号： G06F1/3203 ,  Y02D10/126

摘要： A computing device that has a network interface that performs a subset of possible networking functions while the computing device is in a sleep mode. The subset of functions may be simply implemented on the network interface, yet to substantially reduce the frequency with which the computing device has to wake up to perform networking functions. The subset of functions may be selected to maintain a network presence of the computing device while the device is in sleep mode, and may include responding to requests for MAC information, sending keep-alive messages or exchanging security information that, in accordance with network protocols, has a limited lifetime that would otherwise expire while the computing device is in sleep mode.

摘要翻译： 一种具有网络接口的计算设备，所述网络接口在所述计算设备处于睡眠模式时执行可能的联网功能的子集。 功能的子集可以简单地在网络接口上实现，而大大降低了计算设备必须唤醒以执行联网功能的频率。 可以选择功能的子集以在设备处于睡眠模式时维持计算设备的网络存在，并且可以包括响应对MAC信息的请求，发送保持活动消息或交换根据网络协议的安全信息 ，具有在计算设备处于睡眠模式时否则将过期的有限寿命。

公开(公告)号：US20100115146A1

公开(公告)日：2010-05-06

申请号：US12264130

申请日：2008-11-03

申请人： David J. Roth ,  Daniel J. Driscoll ,  Huseyin G. Gok ,  Douglas K. Brubacher ,  Daniel L. Conti ,  Yatharth Gupta ,  David A. Roberts ,  Narasimha Rao S.S. Nagampalli ,  Jeff T. Smith ,  Ashraf M. Hamad

发明人： David J. Roth ,  Daniel J. Driscoll ,  Huseyin G. Gok ,  Douglas K. Brubacher ,  Daniel L. Conti ,  Yatharth Gupta ,  David A. Roberts ,  Narasimha Rao S.S. Nagampalli ,  Jeff T. Smith ,  Ashraf M. Hamad

IPC分类号： G06F3/00 ,  G06F3/048

CPC分类号： G06F9/4413 ,  H04W4/20 ,  H04W4/21

摘要： Pairing service technologies is described. In embodiment(s), peripheral devices can be discovered, such as by a computer device, and a peripheral device can be configured with multiple services that each correspond to one or more data communication protocols. The multiple services of the peripheral device can be determined, and a pairing sequence can be prioritized for the multiple services. The data communication protocol(s) can then be paired according to the pairing sequence to configure the multiple services of the peripheral device.

摘要翻译： 描述配对服务技术。 在实施例中，可以例如通过计算机设备来发现外围设备，并且外围设备可以配置有多个服务，每个服务对应于一个或多个数据通信协议。 可以确定外围设备的多个服务，并且可以为多个服务优先配对配对顺序。 然后可以根据配对顺序将数据通信协议配对，以配置外围设备的多个业务。

公开(公告)号：US20090265720A1

公开(公告)日：2009-10-22

申请号：US12106255

申请日：2008-04-18

申请人： Narasimha Rao S.s. Nagampalli ,  Alireza Dabagh ,  Alok Manchanda ,  Taroon Mandhana ,  Sharad Mittal ,  Olivier Contant ,  Noel W. Anderson ,  Bernard Aboba ,  Jerry E. Peterson

发明人： Narasimha Rao S.s. Nagampalli ,  Alireza Dabagh ,  Alok Manchanda ,  Taroon Mandhana ,  Sharad Mittal ,  Olivier Contant ,  Noel W. Anderson ,  Bernard Aboba ,  Jerry E. Peterson

IPC分类号： G06F13/10

CPC分类号： G06F13/102

摘要： A computer with an extensible framework for facilitating communication between a software component installed on the computer and a device driver that executes functions in response to vendor-specific command objects (e.g., OIDs). The framework defines data structures and a standardized format for defining and implementing private interfaces. After selecting a private interface that is commonly supported by a software component and a driver, a private communication path may be established by an operating system component to facilitate the transfer of command information from the software component to the driver. The private communication path allows commands packaged as OIDs to be routed from software components to intended drivers. By defining private interfaces which route commands from software components to intended drivers, the extensible framework mitigates potential incompatibilities that may arise when drivers created by different vendors include OIDs with the same OID value.

摘要翻译： 具有可扩展框架的计算机，用于促进安装在计算机上的软件组件与响应于供应商特定的命令对象（例如，OID）执行功能的设备驱动程序之间的通信。 框架定义数据​​结构和用于定义和实现私有接口的标准化格式。 在选择通常被软件组件和驱动程序支持的私有接口之后，可以由操作系统组件建立专用通信路径，以便于将命令信息从软件组件传输到驱动器。 专用通信路径允许打包成OID的命令从软件组件路由到预期的驱动程序。 通过定义将命令从软件组件路由到预期驱动程序的私有接口，可扩展框架减轻了由不同供应商创建的驱动程序包含具有相同OID值的OID时可能出现的潜在不兼容性。

公开(公告)号：US20090172774A1

公开(公告)日：2009-07-02

申请号：US12402448

申请日：2009-03-11

申请人： Shirish R. Koti ,  Narasimha Rao S.S. Nagampalli ,  Maxim A. Ivanov ,  Sachin C. Sheth ,  Emanuel Paleologu ,  Yun Lin ,  Eric E. Youngblut

发明人： Shirish R. Koti ,  Narasimha Rao S.S. Nagampalli ,  Maxim A. Ivanov ,  Sachin C. Sheth ,  Emanuel Paleologu ,  Yun Lin ,  Eric E. Youngblut

IPC分类号： G06F21/00

CPC分类号： H04L63/0218 ,  H04L63/0263 ,  H04L63/20

摘要： A method and system for distributing and enforcing security policies is provided. A firewall agent executing at a host computer system that is to be protected receives security policies for the enforcement engines responsible for enforcing the security policies on the host computer system. A security policy has rules that each provide a condition and action to be performed when the condition is satisfied. A rule also has a rule type that is used by the distribution system to identify the security components that are responsible for enforcing the rules. To distribute the security policies that have been received at a host computer system, the firewall agent identifies to which enforcement engine a rule applies based in part on rule type. The firewall agent then distributes the rule to the identified enforcement engine, which then enforces the rule.

摘要翻译： 提供了分发和执行安全策略的方法和系统。 在要被保护的主机计算机系统上执行的防火墙代理接收负责执行主机计算机系统上的安全策略的执行引擎的安全策略。 安全策略具有规则，每个条件在条件满足时提供要执行的条件和操作。 规则还具有由分发系统用于识别负责执行规则的安全组件的规则类型。 为了分发在主机计算机系统上接收到的安全策略，防火墙代理将部分基于规则类型标识适用于哪个执行引擎。 防火墙代理然后将规则分发到所识别的强制引擎，然后执行该规则。