公开(公告)号：US09219751B1

公开(公告)日：2015-12-22

申请号：US13943642

申请日：2013-07-16

申请人： Lee Chen ,  John Chiong ,  Dennis Oshiba

发明人： Lee Chen ,  John Chiong ,  Dennis Oshiba

IPC分类号： H04L29/06 ,  H04L29/08 ,  H04L12/58 ,  H04M1/725 ,  G06F21/00

CPC分类号： H04L63/0263 ,  G06F21/00 ,  G06F21/44 ,  H04L12/66 ,  H04L51/04 ,  H04L63/02 ,  H04L63/0227 ,  H04L63/0236 ,  H04L63/0245 ,  H04L63/0254 ,  H04L63/029 ,  H04L63/0407 ,  H04L63/08 ,  H04L63/10 ,  H04L63/102 ,  H04L63/105 ,  H04L63/164 ,  H04L63/168 ,  H04L63/20 ,  H04L63/30 ,  H04L65/1026 ,  H04L67/10 ,  H04L67/1004 ,  H04L67/104 ,  H04L67/141 ,  H04L67/22 ,  H04L67/306 ,  H04L67/42 ,  H04L69/28 ,  H04L69/329 ,  H04M1/72547 ,  H04W12/00

摘要： Method for applying a security policy to an application session, includes: recognizing the application session between a network and an application via a security gateway; determining by the security gateway a user identity of the application session using information about the application session; obtaining by the security gateway the security policy comprising network parameters mapped to the user identity; and applying the security policy to the application session by the security gateway. The user identity may be a network user identity or an application user identity recognized from packets of the application session. The security policy may comprise a network traffic policy mapped and/or a document access policy mapped to the user identity, where the network traffic policy is applied to the application session. The security gateway may further generate a security report concerning the application of the security policy to the application session.

摘要翻译： 将安全策略应用于应用会话的方法包括：通过安全网关识别网络与应用之间的应用会话; 使用关于应用会话的信息由安全网关确定应用会话的用户身份; 由安全网关获取包括映射到用户身份的网络参数的安全策略; 并将安全策略应用于安全网关的应用会话。 用户身份可以是从应用会话的分组识别的网络用户身份或应用用户身份。 安全策略可以包括被映射的网络流量策略和/或映射到用户身份的文档访问策略，其中将网络流量策略应用于应用会话。 安全网关还可以生成关于安全策略应用于应用会话的安全报告。

公开(公告)号：US20070180101A1

公开(公告)日：2007-08-02

申请号：US11328823

申请日：2006-01-10

申请人： Lee Chen ,  Rishi Sampat ,  John Chiong ,  Dennis Oshiba

发明人： Lee Chen ,  Rishi Sampat ,  John Chiong ,  Dennis Oshiba

IPC分类号： G06F17/00 ,  G06F15/173

CPC分类号： H04L67/22 ,  H04L63/0227

摘要： A system and method are disclosed that may include receiving a first event log for a data network user; identifying the user that is the subject of the first event log; updating a user activity record, within stored user activity records, with activity information included in the first event log, the activity information being represented in a first format in the first event log; and repeating the steps of receiving, identifying, and updating for at least one additional event log having activity information stored therein in at least one format other than the first format.

摘要翻译： 公开了一种可以包括接收数据网络用户的第一事件日志的系统和方法; 识别作为第一事件日志主题的用户; 在所存储的用户活动记录中，使用包括在所述第一事件日志中的活动信息来更新用户活动记录，所述活动信息以所述第一事件日志中的第一格式表示; 并且以除了第一格式之外的至少一种格式重复对存储有活动信息的至少一个附加事件日志进行接收，识别和更新的步骤。

公开(公告)号：US20100235880A1

公开(公告)日：2010-09-16

申请号：US12788339

申请日：2010-05-27

申请人： Lee Chen ,  John Chiong ,  Dennis Oshiba

发明人： Lee Chen ,  John Chiong ,  Dennis Oshiba

IPC分类号： G06F21/20 ,  G06F15/173 ,  G06F15/16

CPC分类号： H04L63/0263 ,  G06F21/00 ,  G06F21/44 ,  H04L12/66 ,  H04L51/04 ,  H04L63/02 ,  H04L63/0227 ,  H04L63/0236 ,  H04L63/0245 ,  H04L63/0254 ,  H04L63/029 ,  H04L63/0407 ,  H04L63/08 ,  H04L63/10 ,  H04L63/102 ,  H04L63/105 ,  H04L63/164 ,  H04L63/168 ,  H04L63/20 ,  H04L63/30 ,  H04L65/1026 ,  H04L67/10 ,  H04L67/1004 ,  H04L67/104 ,  H04L67/141 ,  H04L67/22 ,  H04L67/306 ,  H04L67/42 ,  H04L69/28 ,  H04L69/329 ,  H04M1/72547 ,  H04W12/00

摘要： Method for applying a security policy to an application session, includes: recognizing the application session between a network and an application via a security gateway; determining by the security gateway a user identity of the application session using information about the application session; obtaining by the security gateway the security policy comprising network parameters mapped to the user identity; and applying the security policy to the application session by the security gateway. The user identity may be a network user identity or an application user identity recognized from packets of the application session. The security policy may comprise a network traffic policy mapped and/or a document access policy mapped to the user identity, where the network traffic policy is applied to the application session. The security gateway may further generate a security report concerning the application of the security policy to the application session.

摘要翻译： 将安全策略应用于应用会话的方法包括：通过安全网关识别网络和应用之间的应用会话; 使用关于应用会话的信息由安全网关确定应用会话的用户身份; 由安全网关获取包括映射到用户身份的网络参数的安全策略; 并将安全策略应用于安全网关的应用会话。 用户身份可以是从应用会话的分组识别的网络用户身份或应用用户身份。 安全策略可以包括被映射的网络流量策略和/或映射到用户身份的文档访问策略，其中将网络流量策略应用于应用会话。 安全网关还可以生成关于安全策略应用于应用会话的安全报告。

公开(公告)号：US08312507B2

公开(公告)日：2012-11-13

申请号：US12788339

申请日：2010-05-27

申请人： Lee Chen ,  John Chiong ,  Dennis Oshiba

发明人： Lee Chen ,  John Chiong ,  Dennis Oshiba

IPC分类号： H04L29/06

CPC分类号： H04L63/0263 ,  G06F21/00 ,  G06F21/44 ,  H04L12/66 ,  H04L51/04 ,  H04L63/02 ,  H04L63/0227 ,  H04L63/0236 ,  H04L63/0245 ,  H04L63/0254 ,  H04L63/029 ,  H04L63/0407 ,  H04L63/08 ,  H04L63/10 ,  H04L63/102 ,  H04L63/105 ,  H04L63/164 ,  H04L63/168 ,  H04L63/20 ,  H04L63/30 ,  H04L65/1026 ,  H04L67/10 ,  H04L67/1004 ,  H04L67/104 ,  H04L67/141 ,  H04L67/22 ,  H04L67/306 ,  H04L67/42 ,  H04L69/28 ,  H04L69/329 ,  H04M1/72547 ,  H04W12/00

摘要： Method for applying a security policy to an application session, includes: recognizing the application session between a network and an application via a security gateway; determining by the security gateway a user identity of the application session using information about the application session; obtaining by the security gateway the security policy comprising network parameters mapped to the user identity; and applying the security policy to the application session by the security gateway. The user identity may be a network user identity or an application user identity recognized from packets of the application session. The security policy may comprise a network traffic policy mapped and/or a document access policy mapped to the user identity, where the network traffic policy is applied to the application session. The security gateway may further generate a security report concerning the application of the security policy to the application session.

摘要翻译： 将安全策略应用于应用会话的方法包括：通过安全网关识别网络与应用之间的应用会话; 使用关于应用会话的信息由安全网关确定应用会话的用户身份; 由安全网关获取包括映射到用户身份的网络参数的安全策略; 并将安全策略应用于安全网关的应用会话。 用户身份可以是从应用会话的分组识别的网络用户身份或应用用户身份。 安全策略可以包括被映射的网络流量策略和/或映射到用户身份的文档访问策略，其中将网络流量策略应用于应用会话。 安全网关还可以生成关于安全策略应用于应用会话的安全报告。

公开(公告)号：US08849938B2

公开(公告)日：2014-09-30

申请号：US13558350

申请日：2012-07-26

申请人： Rajkumar Jalan ,  Dennis Oshiba

发明人： Rajkumar Jalan ,  Dennis Oshiba

IPC分类号： G06F15/16 ,  H04L29/08 ,  G06F9/50 ,  G06F11/00 ,  G06F15/173

CPC分类号： H04L67/1008 ,  G06F9/45558 ,  G06F9/5061 ,  G06F11/1469 ,  G06F11/2025 ,  G06F11/3466 ,  G06F2009/45595 ,  H04L41/0668 ,  H04L49/70 ,  H04L67/101 ,  H04L67/1031 ,  H04L67/1034 ,  H04L67/1095 ,  H04L67/322 ,  H04L67/325

摘要： A method for electing a master blade in a virtual application distribution chassis (VADC), includes: sending by each blade a VADC message to each of the other blades; determining by each blade that the VADC message was not received from the master blade within a predetermined period of time; in response, sending a master claim message including a blade priority by each blade to the other blades; determining by each blade whether any of the blade priorities obtained from the received master claim messages is higher than the blade priority of the receiving blade; in response to determining that none of the blade priorities obtained is higher, setting a status of a given receiving blade to a new master blade; and sending by the given receiving blade a second VADC message to the other blades indicating the status of the new master blade of the given receiving blade.

摘要翻译： 一种用于在虚拟应用分发机架（VADC）中选择主刀片的方法，包括：由每个刀片发送VADC消息给每个其他刀片; 在预定时间段内由每个刀片确定VADC消息未被从主刀片接收; 作为响应，将包括由每个刀片的刀片优先级的主要声明消息发送到其他刀片; 由每个刀片确定从所接收的主机声明消息获得的任何刀片优先级是否高于接收刀片的刀片优先级; 响应于确定没有获得的叶片优先级更高，将给定接收叶片的状态设置为新的主叶片; 并且由给定接收刀片发送第二VADC消息给另一个刀片，指示给定接收刀片的新主刀片的状态。

公开(公告)号：US09154577B2

公开(公告)日：2015-10-06

申请号：US13154399

申请日：2011-06-06

申请人： Rajkumar Jalan ,  Dennis Oshiba

发明人： Rajkumar Jalan ,  Dennis Oshiba

IPC分类号： G06F15/177 ,  H04L29/08 ,  H04L29/06

CPC分类号： H04L41/084 ,  H04L29/06 ,  H04L41/0806 ,  H04L41/0816 ,  H04L67/34

摘要： Synchronization of configuration files of a virtual application distribution chassis, includes: processing a configuration command received by a master blade; updating a first configuration file with the configuration command and an updated tag by the master blade; sending a configuration message by the master blade to the slave blades informing of the updated configuration file, the configuration message comprising the updated tag; in response to receiving the configuration message by a given slave blade of the one or more slave blades, comparing the updated tag in the configuration message with a tag in a second configuration file stored at the given slave blade; and in response to determining that the updated tag in the configuration message is more recent than the tag in the second configuration file stored at the given slave blade, sending a request for the updated configuration file to the master blade by the given slave blade.

摘要翻译： 虚拟应用分发机箱的配置文件同步包括：处理主刀片接收的配置命令; 使用配置命令更新第一配置文件和由主刀片更新的标签; 将所述主刀片的配置消息发送到所述从属刀片，通知所述更新的配置文件，所述配置消息包括所述更新的标签; 响应于由一个或多个从属刀片的给定从属刀片接收配置消息，将配置消息中的更新标签与存储在给定从属刀片上的第二配置文件中的标签进行比较; 并且响应于确定配置消息中的更新的标签比存储在给定从属刀片中的第二配置文件中的标签更新，由给定从属刀片向主刀片发送对更新的配置文件的请求。

公开(公告)号：US20120179770A1

公开(公告)日：2012-07-12

申请号：US13363055

申请日：2012-01-31

申请人： Rajkumar Jalan ,  Dennis Oshiba

发明人： Rajkumar Jalan ,  Dennis Oshiba

IPC分类号： G06F15/16

CPC分类号： H04L67/1008 ,  G06F9/45558 ,  G06F9/5061 ,  G06F11/1469 ,  G06F11/2025 ,  G06F11/3466 ,  G06F2009/45595 ,  H04L41/0668 ,  H04L49/70 ,  H04L67/101 ,  H04L67/1031 ,  H04L67/1034 ,  H04L67/1095 ,  H04L67/322 ,  H04L67/325

摘要： A method for electing a master blade in a virtual application distribution chassis (VADC), includes: sending by each blade a VADC message to each of the other blades; determining by each blade that the VADC message was not received from the master blade within a predetermined period of time; in response, sending a master claim message including a blade priority by each blade to the other blades; determining by each blade whether any of the blade priorities obtained from the received master claim messages is higher than the blade priority of the receiving blade; in response to determining that none of the blade priorities obtained is higher, setting a status of a given receiving blade to a new master blade; and sending by the given receiving blade a second VADC message to the other blades indicating the status of the new master blade of the given receiving blade.

摘要翻译： 一种用于在虚拟应用分发机架（VADC）中选择主刀片的方法，包括：由每个刀片发送VADC消息给每个其他刀片; 在预定时间段内由每个刀片确定VADC消息未被从主刀片接收; 作为响应，将包括由每个刀片的刀片优先级的主要声明消息发送到其他刀片; 由每个刀片确定从所接收的主机声明消息获得的任何刀片优先级是否高于接收刀片的刀片优先级; 响应于确定没有获得的叶片优先级更高，将给定接收叶片的状态设置为新的主叶片; 并且由给定接收刀片发送第二VADC消息给另一个刀片，指示给定接收刀片的新主刀片的状态。

公开(公告)号：US20120297240A1

公开(公告)日：2012-11-22

申请号：US13558350

申请日：2012-07-26

申请人： Rajkumar Jalan ,  Dennis Oshiba

发明人： Rajkumar Jalan ,  Dennis Oshiba

IPC分类号： G06F11/20 ,  G06F15/16

CPC分类号： H04L67/1008 ,  G06F9/45558 ,  G06F9/5061 ,  G06F11/1469 ,  G06F11/2025 ,  G06F11/3466 ,  G06F2009/45595 ,  H04L41/0668 ,  H04L49/70 ,  H04L67/101 ,  H04L67/1031 ,  H04L67/1034 ,  H04L67/1095 ,  H04L67/322 ,  H04L67/325

摘要： A method for electing a master blade in a virtual application distribution chassis (VADC), includes: sending by each blade a VADC message to each of the other blades; determining by each blade that the VADC message was not received from the master blade within a predetermined period of time; in response, sending a master claim message including a blade priority by each blade to the other blades; determining by each blade whether any of the blade priorities obtained from the received master claim messages is higher than the blade priority of the receiving blade; in response to determining that none of the blade priorities obtained is higher, setting a status of a given receiving blade to a new master blade; and sending by the given receiving blade a second VADC message to the other blades indicating the status of the new master blade of the given receiving blade.

摘要翻译： 一种用于在虚拟应用分发机架（VADC）中选择主刀片的方法，包括：由每个刀片发送VADC消息给每个其他刀片; 在预定时间段内由每个刀片确定VADC消息未被从主刀片接收; 作为响应，将包括由每个刀片的刀片优先级的主要声明消息发送到其他刀片; 由每个刀片确定从所接收的主机声明消息获得的任何刀片优先级是否高于接收刀片的刀片优先级; 响应于确定没有获得的叶片优先级更高，将给定接收叶片的状态设置为新的主叶片; 并且由给定接收刀片发送第二VADC消息给另一个刀片，指示给定接收刀片的新主刀片的状态。

公开(公告)号：US08266235B2

公开(公告)日：2012-09-11

申请号：US13363055

申请日：2012-01-31

申请人： Rajkumar Jalan ,  Dennis Oshiba

发明人： Rajkumar Jalan ,  Dennis Oshiba

IPC分类号： G06F15/16 ,  G06F11/00 ,  G06F15/173

CPC分类号： H04L67/1008 ,  G06F9/45558 ,  G06F9/5061 ,  G06F11/1469 ,  G06F11/2025 ,  G06F11/3466 ,  G06F2009/45595 ,  H04L41/0668 ,  H04L49/70 ,  H04L67/101 ,  H04L67/1031 ,  H04L67/1034 ,  H04L67/1095 ,  H04L67/322 ,  H04L67/325

摘要： A method for electing a master blade in a virtual application distribution chassis (VADC), includes: sending by each blade a VADC message to each of the other blades; determining by each blade that the VADC message was not received from the master blade within a predetermined period of time; in response, sending a master claim message including a blade priority by each blade to the other blades; determining by each blade whether any of the blade priorities obtained from the received master claim messages is higher than the blade priority of the receiving blade; in response to determining that none of the blade priorities obtained is higher, setting a status of a given receiving blade to a new master blade; and sending by the given receiving blade a second VADC message to the other blades indicating the status of the new master blade of the given receiving blade.

摘要翻译： 一种用于在虚拟应用分发机架（VADC）中选择主刀片的方法，包括：由每个刀片发送VADC消息给每个其他刀片; 在预定时间段内由每个刀片确定VADC消息未被从主刀片接收; 作为响应，将包括由每个刀片的刀片优先级的主要声明消息发送到其他刀片; 由每个刀片确定从所接收的主机声明消息获得的任何刀片优先级是否高于接收刀片的刀片优先级; 响应于确定没有获得的叶片优先级更高，将给定接收叶片的状态设置为新的主叶片; 并且由给定接收刀片发送第二VADC消息给另一个刀片，指示给定接收刀片的新主刀片的状态。