-
公开(公告)号：US20090300739A1
公开(公告)日：2009-12-03
申请号：US12127803
申请日：2008-05-27
CPC分类号： H04L63/0281 , G06F21/31 , H04L63/08 , H04L63/0884 , H04L67/146 , H04L67/28
摘要： Aspects of the subject matter described herein relate to authentication for a distributed secure content management system. In aspects, a request to access a resource available through the Internet is routed to a security component. The security component is one of a plurality of security components distributed throughout the Internet and responsible for authenticating entities associated with an enterprise. The security component determines an authentication protocol to use with the entity and then authenticates the entity. If the entity is authenticated, the entity is allowed to use a forward proxy.
摘要翻译： 本文描述的主题的方面涉及用于分布式安全内容管理系统的认证。 在方面，将访问通过因特网可用的资源的请求路由到安全组件。 安全组件是分布在整个互联网上的多个安全组件之一，负责认证与企业相关联的实体。 安全组件确定与实体一起使用的身份验证协议，然后验证实体。 如果实体被认证，则允许实体使用转发代理。
-
公开(公告)号：US08910255B2
公开(公告)日：2014-12-09
申请号：US12127803
申请日：2008-05-27
CPC分类号： H04L63/0281 , G06F21/31 , H04L63/08 , H04L63/0884 , H04L67/146 , H04L67/28
摘要： Aspects of the subject matter described herein relate to authentication for a distributed secure content management system. In aspects, a request to access a resource available through the Internet is routed to a security component. The security component is one of a plurality of security components distributed throughout the Internet and responsible for authenticating entities associated with an enterprise. The security component determines an authentication protocol to use with the entity and then authenticates the entity. If the entity is authenticated, the entity is allowed to use a forward proxy.
摘要翻译： 本文描述的主题的方面涉及用于分布式安全内容管理系统的认证。 在方面，将访问通过因特网可用的资源的请求路由到安全组件。 安全组件是分布在整个互联网上的多个安全组件之一，负责认证与企业相关联的实体。 安全组件确定与实体一起使用的身份验证协议，然后验证实体。 如果实体被认证，则允许实体使用转发代理。
-
3.发明授权Authentication in a globally distributed infrastructure for secure content management 有权全球分布式基础架构中的身份验证，用于安全内容管理公开(公告)号：US08935742B2
公开(公告)日：2015-01-13
申请号：US12193070
申请日：2008-08-18
申请人： Nir Nice , Oleg Ananiev , John Wohlfert , Amit Finkelstein , Alik Teplitsky
发明人： Nir Nice , Oleg Ananiev , John Wohlfert , Amit Finkelstein , Alik Teplitsky
CPC分类号： G06F21/56 , G06F17/30867 , G06F21/55 , G06F21/629 , G06F2221/2115 , G06F2221/2141 , G06F2221/2149 , G06F2221/2151 , G06Q30/0204 , G06Q30/0215 , H04L63/0281 , H04L63/14 , H04L63/20
摘要： Secure content management is enabled as a cloud-based service through which security protection and policy enforcement may be implemented for both on-premise network users and roaming users. The global SCM service integrates the security functionalities—such as anti-virus, spyware, and phishing protection, firewall, intrusion detection, centralized management, and the like—that are typically provided by enterprise network SCM appliance hardware or servers into a cloud-based service that users reach via Internet-based points-of-presence (“POPs”). The POPs are configured with forward proxy servers, and in some implementations, caching and network acceleration components, and coupled to hubs which provide configuration management and identity management services such as active directory services.
摘要翻译： 启用安全内容管理作为基于云的服务，通过该服务可以为内部部署的网络用户和漫游用户实施安全保护和策略强制。 全球SCM服务将通常由企业网络SCM设备硬件或服务器提供的安全功能（如防病毒，间谍软件和网络钓鱼保护，防火墙，入侵检测，集中管理等）集成到基于云的 用户通过基于互联网的在线点（“POPs”）达成的服务。 POP被配置有转发代理服务器，并且在一些实现中，缓存和网络加速组件，并且耦合到提供诸如主动目录服务的配置管理和身份管理服务的集线器。
-
4.发明申请Authentication in a globally distributed infrastructure for secure content management 有权全球分布式基础架构中的身份验证，用于安全内容管理公开(公告)号：US20090178109A1
公开(公告)日：2009-07-09
申请号：US12193070
申请日：2008-08-18
申请人： Nir Nice , Oleg Ananiev , John Wohlfert , Amit Finkelstein , Alik Teplitsky
发明人： Nir Nice , Oleg Ananiev , John Wohlfert , Amit Finkelstein , Alik Teplitsky
CPC分类号： G06F21/56 , G06F17/30867 , G06F21/55 , G06F21/629 , G06F2221/2115 , G06F2221/2141 , G06F2221/2149 , G06F2221/2151 , G06Q30/0204 , G06Q30/0215 , H04L63/0281 , H04L63/14 , H04L63/20
摘要： Secure content management is enabled as a cloud-based service through which security protection and policy enforcement may be implemented for both on-premise network users and roaming users. The global SCM service integrates the security functionalities—such as anti-virus, spyware, and phishing protection, firewall, intrusion detection, centralized management, and the like—that are typically provided by enterprise network SCM appliance hardware or servers into a cloud-based service that users reach via Internet-based points-of-presence (“POPs”). The POPs are configured with forward proxy servers, and in some implementations, caching and network acceleration components, and coupled to hubs which provide configuration management and identity management services such as active directory services.
摘要翻译： 启用安全内容管理作为基于云的服务，通过该服务可以为内部部署的网络用户和漫游用户实施安全保护和策略强制。 全球SCM服务将通常由企业网络SCM设备硬件或服务器提供的安全功能（如防病毒，间谍软件和网络钓鱼保护，防火墙，入侵检测，集中管理等）集成到基于云的 用户通过基于互联网的在线点（“POPs”）达成的服务。 POPs配置有转发代理服务器，在某些实现中，缓存和网络加速组件，并耦合到提供配置管理和身份管理服务（如主动目录服务）的集线器。
-
公开(公告)号：US08910270B2
公开(公告)日：2014-12-09
申请号：US12356152
申请日：2009-01-20
申请人： Nir Nice , Amit Finkelstein , Dror Kremer , Noam Ben-Yochanan , Shyam Seshadri
发明人： Nir Nice , Amit Finkelstein , Dror Kremer , Noam Ben-Yochanan , Shyam Seshadri
CPC分类号： H04L63/0281 , G06F17/30861 , H04L61/1511 , H04L61/256 , H04L61/3055 , H04L63/164
摘要： In some embodiments of the invention, techniques may make private identifiers for private network resources usable to establish connections to those private network resources from computing devices connected to an outside network. For example, when a computing device is connected to an outside network and attempting to contact a private network resource, DNS may be used to resolve a domain name for the private network resource to an IP address for an edge resource of the private network. Communications may be passed between the computing device and the edge resource according to protocols which embed the identifier originally used to identify the private network resource. The edge resource of the private network may analyze communications over the connection to determine this identifier, and use it to pass the communication to the desired private network resource.
摘要翻译： 在本发明的一些实施例中，技术可以使私有网络资源的专用标识符可用于从连接到外部网络的计算设备建立到那些专用网络资源的连接。 例如，当计算设备连接到外部网络并尝试联系专用网络资源时，可以使用DNS将专用网络资源的域名解析为专用网络的边缘资源的IP地址。 根据最初用于标识专用网络资源的标识符的协议，可以在计算设备和边缘资源之间传递通信。 私有网络的边缘资源可以分析通过连接的通信以确定该标识符，并且使用它来将通信传递到期望的专用网络资源。
-
公开(公告)号：US20100186079A1
公开(公告)日：2010-07-22
申请号：US12356152
申请日：2009-01-20
申请人： Nir Nice , Amit Finkelstein , Dror Kremer , Noam Ben-Yochanan , Shyam Seshadri
发明人： Nir Nice , Amit Finkelstein , Dror Kremer , Noam Ben-Yochanan , Shyam Seshadri
CPC分类号： H04L63/0281 , G06F17/30861 , H04L61/1511 , H04L61/256 , H04L61/3055 , H04L63/164
摘要： In some embodiments of the invention, techniques may make private identifiers for private network resources usable to establish connections to those private network resources from computing devices connected to an outside network. For example, when a computing device is connected to an outside network and attempting to contact a private network resource, DNS may be used to resolve a domain name for the private network resource to an IP address for an edge resource of the private network. Communications may be passed between the computing device and the edge resource according to protocols which embed the identifier originally used to identify the private network resource. The edge resource of the private network may analyze communications over the connection to determine this identifier, and use it to pass the communication to the desired private network resource.
摘要翻译： 在本发明的一些实施例中，技术可以使私有网络资源的专用标识符可用于从连接到外部网络的计算设备建立到那些专用网络资源的连接。 例如，当计算设备连接到外部网络并尝试联系专用网络资源时，可以使用DNS将专用网络资源的域名解析为专用网络的边缘资源的IP地址。 根据最初用于标识专用网络资源的标识符的协议，可以在计算设备和边缘资源之间传递通信。 私有网络的边缘资源可以分析通过连接的通信以确定该标识符，并且使用它来将通信传递到期望的专用网络资源。
-
7.发明申请Method and data structure for performing regular expression searches in a fixed length word language 有权用固定长度的单词语言执行正则表达式搜索的方法和数据结构公开(公告)号：US20060074852A1
公开(公告)日：2006-04-06
申请号：US11271934
申请日：2005-11-10
申请人： Amit Finkelstein
发明人： Amit Finkelstein
IPC分类号： G06F17/30
CPC分类号： G06F17/30616 , Y10S707/99934 , Y10S707/99936 , Y10S707/99943
摘要： Given a language with all words in a fixed length, and a set of regular expressions composed only from characters in the alphabet of the language or the “?” sign (any single character), the system of the invention defines a data structure that is used to efficiently find the set of matching regular expressions for a given query word. The system may be adjusted by appropriate selection of a control variable to vary the storage space required and the search time necessary to complete the query. Specifically, the system of the present invention provides a space versus time trade-off between the storage space required for the data structures of the present invention and the amount of time to search those data structures to determine the matching set of regular expressions.
摘要翻译： 给定一个具有固定长度的所有单词的语言，以及仅由语言字母表中的字符组成的一组正则表达式或“？” 符号（任何单个字符），本发明的系统定义了用于有效地找到给定查询词的匹配正则表达式集合的数据结构。 可以通过适当地选择控制变量来调整系统以改变所需的存储空间和完成查询所需的搜索时间。 具体而言，本发明的系统提供了本发明的数据结构所需的存储空间与搜索这些数据结构以确定正则表达式的匹配集合的时间量之间的时间间隔权衡。
-
公开(公告)号：US20090232009A1
公开(公告)日：2009-09-17
申请号：US12049168
申请日：2008-03-14
申请人： Amit Finkelstein , Lior Alon , Stanislav Galpert , Michael Pechuk
发明人： Amit Finkelstein , Lior Alon , Stanislav Galpert , Michael Pechuk
IPC分类号： G06F11/00
CPC分类号： H04L12/66 , H04L29/12066 , H04L43/0811 , H04L61/1511
摘要： Verification of Internet connectivity using multiple prior connection attempts to Internet destination(s). The Internet destinations may be destinations that have high reliability and that do not easily have intermediating systems that might deny a connection request. Such an Internet destination might be, for example, root Domain Name Server (DNS) servers. Connection attempt results are obtained by for at least some of the connection attempts, tracking which resulted in success and failure. Internet connectivity is then verified based on the collective results, rather than relying on any one single connection attempt. In one embodiment, the frequency of the connection attempts may depend on a current state of the Internet connection.
摘要翻译： 使用多个先前连接到互联网目的地的尝试验证互联网连接。 互联网目的地可以是具有高可靠性并且不容易具有可能拒绝连接请求的中间系统的目的地。 这样的Internet目的地可以是例如根域名服务器（DNS）服务器。 通过至少一些连接尝试获得连接尝试结果，跟踪导致成功和失败。 然后根据集体结果验证互联网连接，而不是依赖于任何一次连接尝试。 在一个实施例中，连接尝试的频率可以取决于因特网连接的当前状态。
-
公开(公告)号：US07860982B2
公开(公告)日：2010-12-28
申请号：US12049168
申请日：2008-03-14
申请人： Amit Finkelstein , Lior Alon , Stanislav Galpert , Michael Pechuk
发明人： Amit Finkelstein , Lior Alon , Stanislav Galpert , Michael Pechuk
CPC分类号： H04L12/66 , H04L29/12066 , H04L43/0811 , H04L61/1511
摘要： Verification of Internet connectivity using multiple prior connection attempts to Internet destination(s). The Internet destinations may be destinations that have high reliability and that do not easily have intermediating systems that might deny a connection request. Such an Internet destination might be, for example, root Domain Name Server (DNS) servers. Connection attempt results are obtained by for at least some of the connection attempts, tracking which resulted in success and failure. Internet connectivity is then verified based on the collective results, rather than relying on any one single connection attempt. In one embodiment, the frequency of the connection attempts may depend on a current state of the Internet connection.
摘要翻译： 使用多个先前连接到互联网目的地的尝试验证互联网连接。 互联网目的地可以是具有高可靠性并且不容易具有可能拒绝连接请求的中间系统的目的地。 这样的Internet目的地可以是例如根域名服务器（DNS）服务器。 通过至少一些连接尝试获得连接尝试结果，跟踪导致成功和失败。 然后根据集体结果验证互联网连接，而不是依赖于任何一次连接尝试。 在一个实施例中，连接尝试的频率可以取决于因特网连接的当前状态。
-
10.发明授权Method and data structure for performing regular expression searches in a fixed length word language 有权用固定长度的单词语言执行正则表达式搜索的方法和数据结构公开(公告)号：US07386548B2
公开(公告)日：2008-06-10
申请号：US11271934
申请日：2005-11-10
申请人： Amit Finkelstein
发明人： Amit Finkelstein
IPC分类号： G06F17/30
CPC分类号： G06F17/30616 , Y10S707/99934 , Y10S707/99936 , Y10S707/99943
摘要： Given a language with all words in a fixed length, and a set of regular expressions composed only from characters in the alphabet of the language or the “?” sign (any single character), the system of the invention defines a data structure that is used to efficiently find the set of matching regular expressions for a given query word. The system may be adjusted by appropriate selection of a control variable to vary the storage space required and the search time necessary to complete the query. Specifically, the system of the present invention provides a space versus time trade-off between the storage space required for the data structures of the present invention and the amount of time to search those data structures to determine the matching set of regular expressions.
摘要翻译： 给定一个具有固定长度的所有单词的语言，以及仅由语言字母表中的字符组成的一组正则表达式或“？” 符号（任何单个字符），本发明的系统定义了用于有效地找到给定查询词的匹配正则表达式集合的数据结构。 可以通过适当地选择控制变量来调整系统以改变所需的存储空间和完成查询所需的搜索时间。 具体而言，本发明的系统提供了本发明的数据结构所需的存储空间与搜索这些数据结构以确定正则表达式的匹配集合的时间量之间的时间间隔权衡。
-
-
-
-
-
-
-
-
-
搜索结果
17 条记录 (耗时 0.027 秒)