公开(公告)号：US20080256356A1

公开(公告)日：2008-10-16

申请号：US11734315

申请日：2007-04-12

申请人： Arun Kwangil Iyengar ,  Mudhakar Srivatsa ,  Jian Yin

发明人： Arun Kwangil Iyengar ,  Mudhakar Srivatsa ,  Jian Yin

IPC分类号： H04L9/32

CPC分类号： H04L9/0836 ,  H04L9/0822 ,  H04L9/32 ,  H04L2209/601

摘要： Improved key management techniques are disclosed for temporal access control of one or more services in a computer network. For example, a method for providing access control in a client-server system includes the following steps. A client obtains an authorization key for a time interval. A server derives an encryption key corresponding to a given time and uses the encryption key to encrypt a message. The client derives a decryption key corresponding to the given time and decrypts the message.

摘要翻译： 公开了改进的密钥管理技术，用于计算机网络中的一个或多个服务的时间访问控制。 例如，在客户机 - 服务器系统中提供访问控制的方法包括以下步骤。 客户端获取一个时间间隔的授权密钥。 服务器导出与给定时间相对应的加密密钥，并使用加密密钥加密消息。 客户端导出与给定时间相对应的解密密钥，并对消息进行解密。

公开(公告)号：US20100235632A1

公开(公告)日：2010-09-16

申请号：US12757836

申请日：2010-04-09

申请人： Arun K. Iyengar ,  Mudhakar Srivatsa ,  Jian Yin

发明人： Arun K. Iyengar ,  Mudhakar Srivatsa ,  Jian Yin

IPC分类号： H04L29/06 ,  G06F21/00 ,  G06F17/00 ,  H04L9/00 ,  H04L9/28

CPC分类号： H04L9/3213 ,  H04L9/3271 ,  H04L63/0236 ,  H04L63/126 ,  H04L63/1458 ,  H04L2463/102 ,  H04L2463/141

摘要： According to an embodiment of the invention, a system for processing a plurality of service requests in a client-server system includes a challenge server for: presenting a cryptographic challenge to the client; initializing a trust cookie that encodes a client's initial priority level after the client correctly solves the cryptographic challenge; computing a trust level score for the client based on a service request wherein said trust level score is associated with an amount of resources expended by the server in handling the service request such that a higher trust level score is computed for service requests consuming less system resources; assigning the trust level score to the client based on the computation; and embedding the assigned trust level score in the trust cookie included in all responses sent from the server to the client. The system further includes an application server coupled with a firewall.

摘要翻译： 根据本发明的实施例，用于在客户机 - 服务器系统中处理多个服务请求的系统包括：挑战服务器，用于：向客户端呈现密码挑战; 在客户端正确解决密码挑战之后，初始化编码客户端初始优先级的信任cookie; 基于服务请求计算客户端的信任级别得分，其中所述信任级别得分与服务器在处理服务请求时消耗的资源量相关联，以便为消耗较少系统资源的服务请求计算更高的信任级别得分 ; 基于计算将信任级别分数分配给客户端; 并将分配的信任级别分数嵌入到从服务器发送到客户端的所有响应中包含的信任cookie中。 该系统还包括与防火墙耦合的应用服务器。

公开(公告)号：US07721091B2

公开(公告)日：2010-05-18

申请号：US11433534

申请日：2006-05-12

申请人： Arun K. Iyengar ,  Mudhakar Srivatsa ,  Jian Yin

发明人： Arun K. Iyengar ,  Mudhakar Srivatsa ,  Jian Yin

IPC分类号： H04L29/06 ,  G06F21/00

CPC分类号： H04L9/3213 ,  H04L9/3271 ,  H04L63/0236 ,  H04L63/126 ,  H04L63/1458 ,  H04L2463/102 ,  H04L2463/141

摘要： According to an embodiment of the invention, a method for processing a plurality of service requests in a client-server system includes server steps of receiving at least one request for service from a client and providing a level of service based on a trust level provided in the at least one request. According to another embodiment, a method of authenticating messages includes steps of: embedding authentication information into a message at the application level; downloading a script from a computer for sending the message; running said script to send said message to a server; and checking said message by said server at the network level.

摘要翻译： 根据本发明的一个实施例，一种在客户机 - 服务器系统中处理多个服务请求的方法包括：服务器步骤，从客户端接收至少一个服务请求，并根据提供的信任级别提供服务级别 至少一个请求。 根据另一个实施例，一种验证消息的方法包括以下步骤：将认证信息嵌入在应用级的消息中; 从计算机下载脚本以发送消息; 运行所述脚本将所述消息发送到服务器; 并在网络级检查所述服务器的所述消息。

公开(公告)号：US08250631B2

公开(公告)日：2012-08-21

申请号：US12757836

申请日：2010-04-09

申请人： Arun K Iyengar ,  Mudhakar Srivatsa ,  Jian Yin

发明人： Arun K Iyengar ,  Mudhakar Srivatsa ,  Jian Yin

IPC分类号： H04L29/06

CPC分类号： H04L9/3213 ,  H04L9/3271 ,  H04L63/0236 ,  H04L63/126 ,  H04L63/1458 ,  H04L2463/102 ,  H04L2463/141

摘要： According to an embodiment of the invention, a system for processing a plurality of service requests in a client-server system includes a challenge server for: presenting a cryptographic challenge to the client; initializing a trust cookie that encodes a client's initial priority level after the client correctly solves the cryptographic challenge; computing a trust level score for the client based on a service request wherein said trust level score is associated with an amount of resources expended by the server in handling the service request such that a higher trust level score is computed for service requests consuming less system resources; assigning the trust level score to the client based on the computation; and embedding the assigned trust level score in the trust cookie included in all responses sent from the server to the client. The system further includes an application server coupled with a firewall.

摘要翻译： 根据本发明的实施例，用于在客户机 - 服务器系统中处理多个服务请求的系统包括：挑战服务器，用于：向客户端呈现密码挑战; 在客户端正确解决密码挑战之后，初始化编码客户端初始优先级的信任cookie; 基于服务请求计算客户端的信任级别得分，其中所述信任级别得分与服务器处理服务请求所消耗的资源量相关联，以便为消耗较少系统资源的服务请求计算更高的信任级别得分 ; 基于计算将信任级别分数分配给客户端; 并将分配的信任级别分数嵌入到从服务器发送到客户端的所有响应中包含的信任cookie中。 该系统还包括与防火墙耦合的应用服务器。

公开(公告)号：US20070266426A1

公开(公告)日：2007-11-15

申请号：US11433534

申请日：2006-05-12

申请人： Arun Iyengar ,  Mudhakar Srivatsa ,  Jian Yin

发明人： Arun Iyengar ,  Mudhakar Srivatsa ,  Jian Yin

IPC分类号： H04L9/32 ,  G06K9/00 ,  H04L9/00 ,  G06F17/30 ,  G06F15/16 ,  G06F7/04 ,  G06F7/58 ,  G06K19/00

CPC分类号： H04L9/3213 ,  H04L9/3271 ,  H04L63/0236 ,  H04L63/126 ,  H04L63/1458 ,  H04L2463/102 ,  H04L2463/141

摘要： According to an embodiment of the invention, a method for processing a plurality of service requests in a client-server system includes server steps of receiving at least one request for service from a client and providing a level of service based on a trust level provided in the at least one request. According to another embodiment, a method of authenticating messages includes steps of: embedding authentication information into a message at the application level; downloading a script from a computer for sending the message; running said script to send said message to a server; and checking said message by said server at the network level.

摘要翻译： 根据本发明的一个实施例，一种在客户机 - 服务器系统中处理多个服务请求的方法包括：服务器步骤，从客户端接收至少一个服务请求，并根据提供的信任级别提供服务级别 至少一个请求。 根据另一个实施例，一种验证消息的方法包括以下步骤：将认证信息嵌入在应用级的消息中; 从计算机下载脚本以发送消息; 运行所述脚本将所述消息发送到服务器; 并在网络级检查所述服务器的所述消息。

公开(公告)号：US08898269B2

公开(公告)日：2014-11-25

申请号：US13047267

申请日：2011-03-14

申请人： Dakshi Agrawal ,  Matthew Duggan ,  Vasileios Pappas ,  Mudhakar Srivatsa ,  Kristian Jon Stewart ,  Murtaza Zafer

发明人： Dakshi Agrawal ,  Matthew Duggan ,  Vasileios Pappas ,  Mudhakar Srivatsa ,  Kristian Jon Stewart ,  Murtaza Zafer

IPC分类号： G06F15/173 ,  H04L12/24

CPC分类号： H04L41/12 ,  H04L41/145

摘要： Network management data is managed by determining that a first version and a second version of a set of network management data have been created. The set of network management data is associated with a plurality of managed entities in a network. First and second network graphs are created based on the first version and second version of the set of network management data, respectively. The first and second network graphs include a first and second set of entities in the plurality of managed entities, respectively. A similarity metric is assigned between at least one or more entities in the first and second set of entities. At least a first entity in the first set of entities and at least a second entity in the second set of entities are determined to be identical entities based on the similarity metric being one of equal to and above a first given threshold.

摘要翻译： 通过确定网络管理数据集合的第一版本和第二版本已被创建来管理网络管理数据。 该组网络管理数据与网络中的多个被管理实体相关联。 分别基于网络管理数据集的第一版本和第二版本来创建第一和第二网络图。 第一和第二网络图分别包括多个被管实体中的第一和第二组实体。 在第一和第二组实体中的至少一个或多个实体之间分配相似性度量。 第一组实体中的至少第一实体和第二组实体中的至少第二实体基于相似性度量被确定为相同的实体，其等于和高于第一给定阈值。

公开(公告)号：US08856445B2

公开(公告)日：2014-10-07

申请号：US13479507

申请日：2012-05-24

申请人： Dakshi Agrawal ,  Franck Le ,  Vasileios Pappas ,  Mudhakar Srivatsa ,  Dinesh C. Verma

发明人： Dakshi Agrawal ,  Franck Le ,  Vasileios Pappas ,  Mudhakar Srivatsa ,  Dinesh C. Verma

IPC分类号： G06F12/08

CPC分类号： G06F17/30902 ,  H04L67/2842

摘要： Methods and apparatus are provided for performing byte caching using a chunk size based on the object type of the object being cached. Byte caching is performed by receiving at least one data packet from at least one network node; extracting at least one data object from the at least one data packet; identifying an object type associated with the at least one data packet; determining a chunk size associated with the object type; and storing at least a portion of the at least one data packet in a byte cache based on the determined chunk size. The chunk size of the object type can be determined, for example, by evaluating one or more additional criteria, such as network conditions and object size. The object type may be, for example, an image object type; an audio object type; a video object type; and a text object type.

摘要翻译： 提供方法和装置，用于使用基于被缓存的对象的对象类型的块大小执行字节高速缓存。 通过从至少一个网络节点接收至少一个数据分组来执行字节高速缓存; 从所述至少一个数据分组提取至少一个数据对象; 识别与所述至少一个数据分组相关联的对象类型; 确定与对象类型相关联的块大小; 以及基于所确定的块大小将所述至少一个数据分组的至少一部分存储在字节高速缓存中。 可以例如通过评估一个或多个附加标准（例如网络条件和对象大小）来确定对象类型的块大小。 对象类型可以是例如图像对象类型; 音频对象类型; 视频对象类型; 和一个文本对象类型。

公开(公告)号：US20130208888A1

公开(公告)日：2013-08-15

申请号：US13370935

申请日：2012-02-10

申请人： Dakshi Agrawal ,  Sihung Lee ,  Vasileios Pappas ,  Mudhakar Srivatsa

发明人： Dakshi Agrawal ,  Sihung Lee ,  Vasileios Pappas ,  Mudhakar Srivatsa

IPC分类号： H04H20/71 ,  H04K1/00

CPC分类号： H04L67/1021 ,  G06F12/0806 ,  G06F17/30209 ,  G06F17/30902 ,  H04B7/18584 ,  H04L67/1002 ,  H04L67/1014 ,  H04L67/104 ,  H04L67/1095 ,  H04L67/18 ,  H04L67/2842 ,  H04L67/2857 ,  H04L67/288 ,  H04L67/289 ,  H04L2029/06054 ,  H04W4/02

摘要： A method, system and computer program product for managing content distribution in a mobile communications environment. The communications environment includes a core network and a multitude of end-user devices. In one embodiment, the method comprises downloading content from the core network to the end-user devices; and maintaining a map between the end-user devices, the content downloaded to the end-user devices, and the locations of the end-user devices. When a first of the end-user devices requests a specified content, this map and one or more rules are used to identify a second of the end-user devices having the specified content. The first of the end-user devices fetches the specified content from this identified second of the end-user devices. In one embodiment, object location descriptors embedded in the content are rewritten when the content is downloaded to the end-user devices.

摘要翻译： 一种用于管理移动通信环境中的内容分发的方法，系统和计算机程序产品。 通信环境包括核心网络和许多最终用户设备。 在一个实施例中，该方法包括将内容从核心网络下载到最终用户设备; 以及维护终端用户设备之间的映射，下载到最终用户设备的内容以及最终用户设备的位置。 当第一个最终用户设备请求指定的内容时，该映射和一个或多个规则用于识别具有指定内容的第二个终端用户设备。 最终用户设备中的第一个从该标识的第二个最终用户设备中获取指定的内容。 在一个实施例中，当将内容下载到最终用户设备时，嵌入在内容中的对象位置描述符被重写。

公开(公告)号：US08291056B2

公开(公告)日：2012-10-16

申请号：US12165029

申请日：2008-06-30

申请人： Murthy V. Devarakonda ,  Nithya Rajamani ,  Mudhakar Srivatsa

发明人： Murthy V. Devarakonda ,  Nithya Rajamani ,  Mudhakar Srivatsa

IPC分类号： G06F15/173

CPC分类号： H04L41/06 ,  H04L41/14 ,  H04L41/5003 ,  H04L49/90

摘要： One embodiment of the present method and apparatus for performance and policy analysis in distributed computing systems includes representing a distributed computing system as a state transition model. A queuing network is then superimposed upon the state transition model, and the effects of one or more policies on the distributed computing system performance are identified in accordance with a solution to the queuing network.

摘要翻译： 用于分布式计算系统中的性能和策略分析的本方法和装置的一个实施例包括将分布式计算系统表示为状态转换模型。 然后将排队网络叠加在状态转换模型上，并且根据排队网络的解决方案来识别一个或多个策略对分布式计算系统性能的影响。

公开(公告)号：US20120066167A1

公开(公告)日：2012-03-15

申请号：US12880357

申请日：2010-09-13

申请人： Achille Fokoue ,  Mudhakar Srivatsa

发明人： Achille Fokoue ,  Mudhakar Srivatsa

IPC分类号： G06N5/00 ,  G06N7/02

CPC分类号： G06N5/02

摘要： Techniques for assessing trust in information are provided. The techniques include collecting information from one or more information sources, detecting one or more inconsistencies in one or more statements from the information collected from the one or more sources, assigning a penalty to each information source involved in an inconsistency and a reward for each statement not involved in any inconsistencies, and using each assigned penalty and reward to perform an aggregation to assess trust in the collected information.

摘要翻译： 提供信息信任评估技术。 这些技术包括从一个或多个信息源收集信息，从从一个或多个源收集的信息中检测一个或多个语句中的一个或多个不一致性，为每个语句的不一致性和奖励指定每个信息源的惩罚 不涉及任何不一致之处，并使用每个分配的罚款和奖励来进行聚合，以评估收集的信息的信任。