公开(公告)号：US09531792B2

公开(公告)日：2016-12-27

申请号：US14007963

申请日：2012-03-30

申请人： Lin Chen ,  Yuming Mao

发明人： Lin Chen ,  Yuming Mao

IPC分类号： H04L29/08 ,  G06F17/30

CPC分类号： H04L67/10 ,  G06F17/30067

摘要： The present invention proposes a information file generating system and method based on parallel processing. Wherein, said information file generating system based on parallel processing comprises a file request processing device, a control device, a temporary task processing device, an abnormity processing device and an input/output device. Among them, said file request processing device is used to receive and analyze a file request instruction from an application server, and create an information file generation task and at least one temporary information file generation task according to the result of the analysis. The information file generating system and method based on parallel processing disclosed in the present invention are easy to be operated, can ensure the real-time performance and accuracy, and can improve the work efficiency and performance of the system.

摘要翻译： 本发明提出一种基于并行处理的信息文件生成系统和方法。 其中，所述基于并行处理的信息文件生成系统包括文件请求处理装置，控制装置，临时任务处理装置，异常处理装置以及输入输出装置。 其中，所述文件请求处理装置用于从应用服务器接收和分析文件请求指令，并根据分析结果创建信息文件生成任务和至少一个临时信息文件生成任务。 本发明公开的基于并行处理的信息文件生成系统和方法易于操作，可以保证实时的性能和准确性，并能提高系统的工作效率和性能。

公开(公告)号：US07823195B1

公开(公告)日：2010-10-26

申请号：US11842018

申请日：2007-08-20

申请人： Ken Xie ,  Yan Ke ,  Yuming Mao

发明人： Ken Xie ,  Yan Ke ,  Yuming Mao

IPC分类号： H04L29/06 ,  G06F17/00 ,  G06F15/16

CPC分类号： H04L12/66 ,  H04L63/0263

摘要： An improved firewall for providing network security is described. The improved firewall provides for dynamic rule generation, as well using conventional fixed rules. This improvement is provided without significant increase in the processing time required for most packets. Additionally, the improved firewall provides for translation of IP addresses between the firewall and the internal network.

公开(公告)号：US20080253366A1

公开(公告)日：2008-10-16

申请号：US11734198

申请日：2007-04-11

申请人： Nir Zuk ,  Yuming Mao ,  Haoying Xu ,  Arnit Green

发明人： Nir Zuk ,  Yuming Mao ,  Haoying Xu ,  Arnit Green

IPC分类号： H04L12/56

CPC分类号： H04L69/22 ,  H04L45/04 ,  H04L45/308 ,  H04L45/54 ,  H04L45/56 ,  H04L45/60 ,  H04L45/66 ,  H04L45/745

摘要： Methods and apparatus for processing data packets in a computer network are described. One general method includes receiving a data packet; examining the data packet to classify the data packet including classifying the data packet as a L2 or L3 packet and including determining at least one zone associated with the packet; processing the packet in accordance with one or more policies associated with the zone; determining forwarding information associated with the data packet; and if one or more policies permit, forwarding the data packet toward an intended destination using the forwarding information.

摘要翻译： 描述了在计算机网络中处理数据分组的方法和装置。 一种一般方法包括接收数据包; 检查所述数据分组以对所述数据分组进行分类，包括将所述数据分组分类为L2或L3分组，并且包括确定与所述分组相关联的至少一个区域; 根据与该区域相关联的一个或多个策略来处理分组; 确定与所述数据分组相关联的转发信息; 并且如果一个或多个策略允许，则使用转发信息将数据分组转发到预期目的地。

公开(公告)号：US07095716B1

公开(公告)日：2006-08-22

申请号：US10112924

申请日：2002-03-28

申请人： Yan Ke ,  Yuming Mao ,  Jian Tong ,  Guangsong Huang

发明人： Yan Ke ,  Yuming Mao ,  Jian Tong ,  Guangsong Huang

IPC分类号： H04J1/16

CPC分类号： H04L63/0236 ,  H04L63/0272 ,  H04L63/1416

摘要： Methods and apparatus, including computer program products, implementing and using techniques for processing a data packet. An input port receives a data packet, a switching board classifies the data packet, determines whether the data packet should be accepted, and switches the data packet to a management board if the data packet is a first data packet in a session, and to a processing board if the data packet is not a first data packet in a session. A management board receives a data packet from the switching board, examines the data packet and forwards the data packet to one of the processing boards. One or more processing boards receives non-first data packets from the switching board and data packets from the management board and processes the data packets. A firewall and a secure gateway with firewall and virtual private network functionality for processing a data packet are also described.

摘要翻译： 方法和装置，包括计算机程序产品，用于处理数据包的实现和使用技术。 输入端口接收数据包，交换板对数据包进行分类，确定是否接受数据包，如果数据包是会话中的第一个数据包，则将数据包切换到管理板， 处理板，如果数据包不是会话中的第一个数据包。 管理板从交换板接收数据包，检查数据包，并将数据包转发到其中一个处理板。 一个或多个处理板从交换板和来自管理板的数据分组接收非第一数据分组并处理数据分组。 还描述了防火墙和具有用于处理数据分组的防火墙和虚拟专用网络功能的安全网关。

公开(公告)号：US06772347B1

公开(公告)日：2004-08-03

申请号：US09525369

申请日：2000-03-15

申请人： Ken Xie ,  Yan Ke ,  Yuming Mao

发明人： Ken Xie ,  Yan Ke ,  Yuming Mao

IPC分类号： G06F1300

CPC分类号： H04L49/901 ,  H04L29/06 ,  H04L49/90 ,  H04L49/9057 ,  H04L63/02 ,  H04L69/16 ,  H04L69/22

摘要： Systems and methods for network security including a firewall. One firewall includes a firewall engine. The firewall engine includes a first engine including a first set of rules for sorting incoming IP packets into initially allowed packets and initially denied packets. The firewall engine also includes a filter including a second set of rules for receiving and further sorting the initially denied packets into allowed packets and denied packets.

摘要翻译： 网络安全的系统和方法，包括防火墙。 一个防火墙包括防火墙引擎。 防火墙引擎包括第一引擎，其包括用于将进入的IP分组分类为最初允许的分组并且最初拒绝分组的第一组规则。 防火墙引擎还包括一个过滤器，该过滤器包括第二组规则，用于接收并进一步将最初被拒绝的包分类为允许的包和被拒绝的包。

公开(公告)号：US20140082053A1

公开(公告)日：2014-03-20

申请号：US14007963

申请日：2012-03-30

申请人： Lin Chen ,  Yuming Mao

发明人： Lin Chen ,  Yuming Mao

IPC分类号： H04L29/08

CPC分类号： H04L67/10 ,  G06F17/30067

摘要： The present invention proposes a information file generating system and method based on parallel processing. Wherein, said information file generating system based on parallel processing comprises a file request processing device, a control device, a temporary task processing device, an abnormity processing device and an input/output device. Among them, said tile request processing device is used to receive and analyze a file request instruction from an application server, and create an information file generation task and at least one temporary information file generation task according to the result of the analysis. The information file generating system and method based on parallel processing disclosed in the present invention are easy to be operated, can ensure the real-time performance and accuracy, and can improve the work efficiency and performance of the system.

摘要翻译： 本发明提出一种基于并行处理的信息文件生成系统和方法。 其中，所述基于并行处理的信息文件生成系统包括文件请求处理装置，控制装置，临时任务处理装置，异常处理装置以及输入输出装置。 其中，所述瓦片请求处理装置用于从应用服务器接收和分析文件请求指令，并根据分析结果创建信息文件生成任务和至少一个临时信息文件生成任务。 本发明公开的基于并行处理的信息文件生成系统和方法易于操作，可以保证实时的性能和准确性，并能提高系统的工作效率和性能。

公开(公告)号：US08654779B1

公开(公告)日：2014-02-18

申请号：US13302808

申请日：2011-11-22

申请人： Yan Ke ,  Yuming Mao ,  Jian Tong ,  Guangsong Huang

发明人： Yan Ke ,  Yuming Mao ,  Jian Tong ,  Guangsong Huang

IPC分类号： H04L12/28

CPC分类号： H04L63/0236 ,  H04L63/0272 ,  H04L63/1416

摘要： Methods and apparatus, including computer program products, implementing and using techniques for processing a data packet. An input port receives a data packet, a switching board classifies the data packet, determines whether the data packet should be accepted, and switches the data packet to a management board if the data packet is a first data packet in a session, and to a processing board if the data packet is not a first data packet in a session. A management board receives a data packet from the switching board, examines the data packet and forwards the data packet to one of the processing boards. One or more processing boards receives non-first data packets from the switching board and data packets from the management board and processes the data packets. A firewall and a secure gateway with firewall and virtual private network functionality for processing a data packet are also described.

摘要翻译： 方法和装置，包括计算机程序产品，用于处理数据包的实现和使用技术。 输入端口接收数据包，交换板对数据包进行分类，确定是否接受数据包，如果数据包是会话中的第一个数据包，则将数据包切换到管理板， 处理板，如果数据包不是会话中的第一个数据包。 管理板从交换板接收数据包，检查数据包，并将数据包转发到其中一个处理板。 一个或多个处理板从交换板和来自管理板的数据分组接收非第一数据分组并处理数据分组。 还描述了防火墙和具有用于处理数据分组的防火墙和虚拟专用网络功能的安全网关。

公开(公告)号：US20120246116A1

公开(公告)日：2012-09-27

申请号：US13393206

申请日：2010-08-31

申请人： Yanming Yang ,  Lin Chen ,  Jinzhi Hua ,  Yuming Mao ,  Xiao Zhuang ,  Zhijun Lu

发明人： Yanming Yang ,  Lin Chen ,  Jinzhi Hua ,  Yuming Mao ,  Xiao Zhuang ,  Zhijun Lu

IPC分类号： G06F17/30 ,  G06F12/00

CPC分类号： G06F17/30581 ,  G06F11/2094

摘要： A system and a method for replicating data among heterogeneous databases are disclosed. The system comprises: an initialization module for creating and initializing at least one shared memory, at least one message queue and at least one semaphore in a computer; a source data processing module including a data reader, a data adapter and a data loader; a target data replication module for replicating the data in the shared memory to at least one target database according to the messages in the message queue; and a cleaning module for releasing the shared memory after the replication has been completed. The method comprises the steps of: creating and initializing the shared memory, the message queue and the semaphore in the computer; reading data from at least one source database, then converting the data into target data to be stored in at least one target database, and loading the target data in the shared memory; replicating the target data in the shared memory to the at least one target database according to the messages in the message queue; and releasing the shared memory after the replication has been completed.

摘要翻译： 公开了一种用于在异构数据库之间复制数据的系统和方法。 该系统包括：用于在计算机中创建和初始化至少一个共享存储器，至少一个消息队列和至少一个信号量的初始化模块; 源数据处理模块，包括数据读取器，数据适配器和数据加载器; 目标数据复制模块，用于根据消息队列中的消息将共享存储器中的数据复制到至少一个目标数据库; 以及用于在复制完成之后释放共享存储器的清洁模块。 该方法包括以下步骤：在计算机中创建和初始化共享存储器，消息队列和信号量; 从至少一个源数据库中读取数据，然后将数据转换成存储在至少一个目标数据库中的目标数据，并将目标数据加载到共享存储器中; 根据消息队列中的消息将共享存储器中的目标数据复制到至少一个目标数据库; 并在复制完成后释放共享内存。

公开(公告)号：US07093280B2

公开(公告)日：2006-08-15

申请号：US09967893

申请日：2001-09-27

申请人： Yan Ke ,  Yuming Mao ,  Wilson Xu ,  Brian Yean-Shiang Leu

发明人： Yan Ke ,  Yuming Mao ,  Wilson Xu ,  Brian Yean-Shiang Leu

IPC分类号： H04L9/32 ,  G06F17/00

CPC分类号： H04L63/02 ,  H04L12/4641 ,  H04L12/4645 ,  H04L12/467 ,  H04L49/25 ,  H04L49/351 ,  H04L49/354 ,  H04L63/0209 ,  H04L63/0272 ,  H04L63/08 ,  H04L63/20

摘要： Methods and apparatus, including computer program products, implementing and using techniques for processing a data packet in a packet forwarding device. A data packet is received. A virtual local area network destination is determined for the received data packet, and a set of rules associated with the virtual local area network destination is identified. The rules are applied to the data packet. If a virtual local area network destination has been determined for the received data packet, the data packet is output to the destination, using the result from the application of the rules. If no destination has been determined, the data packet is dropped. A security system for partitioning security system resources into a plurality of separate security domains that are configurable to enforce one or more policies and to allocate security system resources to the one or more security domains, is also described.

公开(公告)号：US08769664B1

公开(公告)日：2014-07-01

申请号：US12363102

申请日：2009-01-30

申请人： Nir Zuk ,  Wilson Xu ,  Yuming Mao

发明人： Nir Zuk ,  Wilson Xu ,  Yuming Mao

IPC分类号： G06F9/00 ,  G06F15/16 ,  H04L29/06

CPC分类号： H04L63/02 ,  H04L63/0236

摘要： Methods, systems, and apparatus, including computer program products, featuring receiving at a first security device a packet. The first security device determines that the packet is associated with a flow assigned to a distinct second security device. The first security device sends the packet to the second security device. After the second security device performs security processing using the packet, the first security device receives from the second security device a message regarding the packet. The first security device transmits the packet.

摘要翻译： 方法，系统和装置，包括计算机程序产品，其特征在于在第一安全装置处接收分组。 第一安全设备确定分组与分配给不同的第二安全设备的流相关联。 第一个安全设备将数据包发送到第二个安全设备。 在第二安全设备使用该分组执行安全处理之后，第一安全设备从第二安全设备接收关于分组的消息。 第一安全设备发送数据包。