公开(公告)号：US08976798B2

公开(公告)日：2015-03-10

申请号：US10352992

申请日：2003-01-28

申请人： John Border ,  Douglas Dillon ,  Peter Pardee

发明人： John Border ,  Douglas Dillon ,  Peter Pardee

IPC分类号： H04L12/28 ,  H04L29/06 ,  H04L12/46

CPC分类号： H04L63/0272 ,  H04L12/4641 ,  H04L63/0209 ,  H04L63/029 ,  H04L63/0428 ,  H04L63/1466

摘要： An approach for providing secure communication services is disclosed. A secure (e.g., a Virtual Private Network (VPN)) tunnel from a source node over an access network, such as a satellite network, to a destination node, wherein the nodes are external to the network. A connection that supports a mechanism for enhancing performance of the network is established for a portion of the secure tunnel that traverses the network.

公开(公告)号：US07596802B2

公开(公告)日：2009-09-29

申请号：US09905215

申请日：2001-07-13

申请人： John Border ,  Douglas Dillon

发明人： John Border ,  Douglas Dillon

IPC分类号： H04L9/00

CPC分类号： H04L41/5022 ,  H04B7/18582 ,  H04B7/18584 ,  H04L12/2854 ,  H04L12/4604 ,  H04L12/66 ,  H04L29/06 ,  H04L29/08846 ,  H04L41/046 ,  H04L41/06 ,  H04L41/083 ,  H04L41/0873 ,  H04L41/0896 ,  H04L43/00 ,  H04L43/0811 ,  H04L45/00 ,  H04L45/22 ,  H04L45/24 ,  H04L45/28 ,  H04L45/30 ,  H04L45/306 ,  H04L45/308 ,  H04L47/10 ,  H04L47/14 ,  H04L47/193 ,  H04L47/2408 ,  H04L47/2433 ,  H04L47/2491 ,  H04L47/40 ,  H04L47/50 ,  H04L49/90 ,  H04L49/901 ,  H04L49/9042 ,  H04L49/9094 ,  H04L63/0281 ,  H04L63/0428 ,  H04L63/1466 ,  H04L67/2814 ,  H04L67/2833 ,  H04L67/2871 ,  H04L67/322 ,  H04L67/327 ,  H04L69/14 ,  H04L69/16 ,  H04L69/161 ,  H04L69/163 ,  H04L69/165 ,  H04L69/18 ,  H04L69/22 ,  H04L69/329 ,  H04W28/18 ,  H04W40/02 ,  Y02D70/1262 ,  Y02D70/30 ,  Y02D70/446

摘要： A communication system having a proxy architecture is disclosed. The system includes a platform that provides performance enhancing functions. The platform includes a spoofing apparatus that routes the information within the communication system. The spoofing apparatus receives spoofing selection and spoofing parameters from the platform and maintains the current parameters in one or more spoofing profiles. The spoofing apparatus routes packets of information throughout the communication system based on the spoofing selection and/or spoofing profile. The spoofing apparatus may also compensate for maximum segment size mismatches during the routing of information. This compensation may include dynamically resizing data segments or disabling three-way handshake spoofing. The above arrangement has particular applicability to a bandwidth constrained communication system, such as a satellite network.

公开(公告)号：US07398552B2

公开(公告)日：2008-07-08

申请号：US10353183

申请日：2003-01-28

申请人： Peter Pardee ,  Douglas Dillon ,  John Border ,  Nigel Bartlett

发明人： Peter Pardee ,  Douglas Dillon ,  John Border ,  Nigel Bartlett

IPC分类号： G06F15/16

CPC分类号： H04L63/0209 ,  H04L12/46 ,  H04L12/4641 ,  H04L63/0272 ,  H04L63/0428 ,  H04L63/1466 ,  H04L67/14

摘要： An approach for supporting security in a communications network is disclosed. A network device includes a security peer that establishes a secure tunnel over a data network (e.g., satellite network) for transport of encrypted traffic. The device also includes a performance peer for establishing a connection supported by the secure tunnel. The performance peer includes a plurality of modules for providing respective performance enhancing functions to minimize performance impact of latency of the network.

摘要翻译： 公开了一种用于支持通信网络中的安全性的方法。 网络设备包括安全对等体，其通过数据网络（例如，卫星网络）建立用于传输加密业务的安全隧道。 该设备还包括用于建立由安全隧道支持的连接的性能对等体。 性能对等体包括多个模块，用于提供相应的性能增强功能以​​最小化网络的等待时间的性能影响。

公开(公告)号：US08131823B2

公开(公告)日：2012-03-06

申请号：US09996445

申请日：2001-11-28

申请人： John Border ,  Douglas Dillon ,  Matthew Butehorn

发明人： John Border ,  Douglas Dillon ,  Matthew Butehorn

IPC分类号： G06F15/16

CPC分类号： G06F17/30902 ,  H04L29/06 ,  H04L67/02 ,  H04L67/142 ,  H04L67/28 ,  H04L67/2828 ,  H04L67/2852 ,  H04L67/42 ,  H04L69/16 ,  H04L69/163

摘要： A communication system for retrieving content stored in a content server (e.g., web server) is disclosed. The system includes a client that is configured to transmit a message requesting content specifying an object from a content server. The system also includes a plurality of proxy servers that include a downstream proxy server and an upstream proxy server. The downstream proxy server is configured to communicate with the client. The upstream proxy server is configured to retrieve the content from the content server and to forward information associated with the object over a data network to the downstream proxy server prior to the client transmitting another message requesting the object. The above arrangement has particular application to a wide area network, such as a satellite network.

摘要翻译： 公开了一种用于检索存储在内容服务器（例如，web服务器）中的内容的通信系统。 该系统包括被配置为从内容服务器发送请求指定对象的内容的消息的客户端。 该系统还包括多个代理服务器，其包括下游代理服务器和上游代理服务器。 下游代理服务器被配置为与客户端进行通信。 上游代理服务器被配置为在客户端发送另一个请求对象的消息之前，从内容服务器检索内容，并通过数据网络将与对象相关联的信息转发到下游代理服务器。 上述布置特别适用于诸如卫星网络的广域网。

公开(公告)号：US07643416B2

公开(公告)日：2010-01-05

申请号：US12046883

申请日：2008-03-12

申请人： Peter Pardee ,  John Border ,  Nigel Bartlett ,  Douglas Dillon

发明人： Peter Pardee ,  John Border ,  Nigel Bartlett ,  Douglas Dillon

IPC分类号： H04L12/26

CPC分类号： H04L69/16 ,  H04L12/4641 ,  H04L47/10 ,  H04L47/12 ,  H04L47/14 ,  H04L47/193 ,  H04L47/24 ,  H04L47/26 ,  H04L47/27 ,  H04L47/28 ,  H04L47/283 ,  H04L63/0272 ,  H04L69/163

摘要： An approach for adaptively providing network performance enhancing functions in a secure environment, such as a virtual private network, is disclosed. Traffic, for example, Internet Protocol (IP) packets, is received for transport over an access network (e.g., satellite network). Next, characteristics (e.g., latency) of the access network are determined. A connection (which supports the performance enhancing functions) is selectively established based on the determined characteristics for transport the received packets over the access network. An encrypted tunnel is provided over the established connection to transmit the received packets.

摘要翻译： 公开了一种在诸如虚拟专用网络的安全环境中自适应地提供网络性能增强功能的方法。 接收到诸如因特网协议（IP）分组的业务，以便通过接入网络（例如，卫星网络）进行传输。 接下来，确定接入网络的特性（例如，等待时间）。 基于用于通过接入网络传送接收到的分组的确定的特性来选择性地建立连接（其支持性能增强功能）。 在已建立的连接上提供加密的隧道以传送接收的分组。

公开(公告)号：US07389330B2

公开(公告)日：2008-06-17

申请号：US10659481

申请日：2003-09-10

申请人： Douglas Dillon ,  John Border ,  Frank Kelly ,  Daniel Friedman

发明人： Douglas Dillon ,  John Border ,  Frank Kelly ,  Daniel Friedman

IPC分类号： G06F15/16 ,  G06F15/167

CPC分类号： H04L67/2814 ,  G06F17/30902 ,  H04L29/06027 ,  H04L65/105 ,  H04L67/02 ,  H04L67/2804 ,  H04L67/2847 ,  H04L67/2876 ,  H04L69/329

摘要： An approach is provided for supporting retrieval of a web page over a data network from a web site is disclosed. A downstream proxy communicating with a host executing a browser receives a request message from a browser to retrieve the web page. An upstream proxy parses the web page to determine an object embedded in the web page, wherein a promise list is generated specifying the embedded object that is to be pre-fetched according to a criterion. The promise list is transmitted to the downstream proxy, wherein the upstream proxy pre-fetches the embedded object from the web site. The upstream proxy determines whether to forward one of the pre-fetched embedded object to the downstream proxy based on a comparison of cookies associated with one of the pre-fetched objects supplied, respectively, by the browser and the web site. This approach as particular applicability in relatively high latency networks, such as a satellite communications system.

摘要翻译： 提供了一种用于支持从网站通过数据网络检索网页的方法。 与执行浏览器的主机通信的下游代理从浏览器接收请求消息以检索网页。 上游代理解析网页以确定嵌入在网页中的对象，其中生成承诺列表，以根据标准指定要预取的嵌入对象。 承诺列表被发送到下游代理，其中上游代理从网站预取嵌入对象。 上游代理基于与浏览器和网站分别提供的预取对象之一相关联的cookie的比较来确定是否将预取的嵌入对象之一转发到下游代理。 这种方法在诸如卫星通信系统的相对高延迟网络中特别适用。

公开(公告)号：US06795848B1

公开(公告)日：2004-09-21

申请号：US09708134

申请日：2000-11-08

申请人： John Border ,  Douglas Dillon ,  Matt Butehorn

发明人： John Border ,  Douglas Dillon ,  Matt Butehorn

IPC分类号： G06F15167

CPC分类号： G06F17/30902 ,  H04L29/06 ,  H04L67/02 ,  H04L67/142 ,  H04L67/28 ,  H04L67/2828 ,  H04L67/2852 ,  H04L67/42 ,  H04L69/16 ,  H04L69/163

摘要： A communication system for retrieving web content is disclosed. A downstream proxy server receives a URL request message from a web browser, in which the URL request message specifies a URL content that has an embedded object. An upstream proxy server receives the URL request message from the downstream proxy server. The upstream proxy server selectively forwards the URL request message to a web server and receives the URL content from the web server, wherein the upstream proxy server forwards the URL content to the downstream proxy server and parses the URL content to obtain the embedded object prior to receiving a corresponding embedded object request message initiated by the web browser.

摘要翻译： 公开了一种用于检索网页内容的通信系统。 下游代理服务器从Web浏览器接收URL请求消息，其中URL请求消息指定具有嵌入对象的URL内容。 上游代理服务器从下游代理服务器接收URL请求消息。 上游代理服务器选择性地将URL请求消息转发到web服务器并从Web服务器接收URL内容，其中上游代理服务器将URL内容转发到下游代理服务器，并解析URL内容以在 接收由web浏览器发起的对应的嵌入对象请求消息。

公开(公告)号：US07389533B2

公开(公告)日：2008-06-17

申请号：US10353247

申请日：2003-01-28

申请人： Nigel Bartlett ,  John Border ,  Douglas Dillon ,  Peter Pardee

发明人： Nigel Bartlett ,  John Border ,  Douglas Dillon ,  Peter Pardee

IPC分类号： G06F9/00 ,  G06F15/16

CPC分类号： H04L69/16 ,  H04L12/4641 ,  H04L47/10 ,  H04L47/12 ,  H04L47/14 ,  H04L47/193 ,  H04L47/24 ,  H04L47/26 ,  H04L47/27 ,  H04L47/28 ,  H04L47/283 ,  H04L63/0272 ,  H04L69/163

摘要： An approach for adaptively providing network performance enhancing functions in a secure environment, such as a virtual private network, is disclosed. Traffic, for example, Internet Protocol (IP) packets, is received for transport over an access network (e.g., satellite network). Next, characteristics (e.g., latency) of the access network are determined. A connection (which supports the performance enhancing functions) is selectively established based on the determined characteristics for transport the received packets over the access network. An encrypted tunnel is provided over the established connection to transmit the received packets.

摘要翻译： 公开了一种在诸如虚拟专用网络的安全环境中自适应地提供网络性能增强功能的方法。 接收到诸如因特网协议（IP）分组的业务，以便通过接入网络（例如，卫星网络）进行传输。 接下来，确定接入网络的特性（例如，等待时间）。 基于用于通过接入网络传送接收到的分组的确定的特性来选择性地建立连接（其支持性能增强功能）。 在已建立的连接上提供加密的隧道以传送接收的分组。

公开(公告)号：US06845120B2

公开(公告)日：2005-01-18

申请号：US10420244

申请日：2003-04-22

申请人： John Border ,  Susan H. Bernegger ,  John C. Pulver ,  Morgan A. Smith

发明人： John Border ,  Susan H. Bernegger ,  John C. Pulver ,  Morgan A. Smith

IPC分类号： G02B3/00 ,  G02B6/12 ,  G02B6/38 ,  G02B6/42 ,  H01S3/08

CPC分类号： G02B6/4224 ,  G02B6/3833 ,  G02B6/3885 ,  G02B6/4249 ,  G02B2006/12102

摘要： A laser array and method of making same has precision fiducial marks that aid in the alignment of the laser array. The invention requires forming additional optical features adjacent to the laser array that is used to write fiducial marks on an opposite surface in the medium containing the laser array. Fiducial marks are formed when high intensity collimated beams of light are directed through the optical features onto a treated portion of the transparent medium. Fiducial accuracies of 1 micron are possible by using this approach.

摘要翻译： 激光阵列及其制造方法具有有助于激光阵列对准的精密基准标记。 本发明需要形成与用于在包含激光阵列的介质的相对表面上写入基准标记的激光器阵列附近的附加光学特征。 当高强度准直光束通过光学特征被引导到透明介质的处理部分上时，形成基准标记。 通过使用这种方法，1微米的基准精度是可能的。

公开(公告)号：US06642295B2

公开(公告)日：2003-11-04

申请号：US10027378

申请日：2001-12-21

申请人： John Border ,  Michael R. McGovern ,  Paul O. McLaughlin

发明人： John Border ,  Michael R. McGovern ,  Paul O. McLaughlin

IPC分类号： C08L320

CPC分类号： G02B1/041 ,  G02B7/008

摘要： An optical nanocomposite material has a nanoparticulate filler dispersed in a polymeric host photoresist material. According to the method of making the nanocomposite material, a predetermined temperature sensitive optical vector, such as refractive index, of the plastic host material and nanoparticulate filler are directionally opposed resulting in a nanocomposite material having significantly improved stability of the refractive index with respect to temperature.

摘要翻译： 光学纳米复合材料具有分散在聚合物主体光致抗蚀剂材料中的纳米颗粒填料。 根据制造纳米复合材料的方法，塑料主体材料和纳米颗粒填料的预定温度敏感光学矢量（例如折射率）定向相反，导致纳米复合材料具有显着提高的折射率相对于温度的稳定性 。