System and method for controlling network demand via congestion pricing
    1.
    发明授权
    System and method for controlling network demand via congestion pricing 有权
    通过拥堵定价来控制网络需求的系统和方法

    公开(公告)号:US07284047B2

    公开(公告)日:2007-10-16

    申请号:US10010881

    申请日:2001-11-08

    IPC分类号: G06F15/173 G06F15/16

    摘要: A method and system for avoiding network congestion by measuring network load to adjust a rate at each source. The load (e.g., as a price value) is provided to network traffic sources, which adjust their flows based on a per-flow weight (willingness to pay). The load may be determined in-band by routers or out-of-band by an observer node. A load value (e.g., as a price) is increased or decreased based on the actual load or an estimate based on the actual load. The sources obtain the load value and control the output rates per flow based on each flow's associated weight (willingness to pay), e.g., as set by an administrator. Further, two classes of applications are enabled by allowing certain applications to ignore price.

    摘要翻译: 一种通过测量网络负载来调整每个源的速率来避免网络拥塞的方法和系统。 将负载(例如,作为价格值)提供给网络流量源,网络流量源基于每流量权重(愿意支付)来调整流量。 可以由路由器在带内确定负载,或者由观察者节点在带外确定负载。 负载值(例如,作为价格)基于实际负载或基于实际负载的估计而增加或减少。 源获得负载值,并根据每个流量的相关权重(支付意愿)来控制每个流的输出速率,例如由管理员设置的。 此外,通过允许某些应用程序忽略价格,启用了两类应用程序。

    Method and system for measuring load and capacity on a variable capacity channel
    2.
    发明授权
    Method and system for measuring load and capacity on a variable capacity channel 有权
    用于测量可变容量通道上的负载和容量的方法和系统

    公开(公告)号:US07296083B2

    公开(公告)日:2007-11-13

    申请号:US10187043

    申请日:2002-06-28

    IPC分类号: G06F15/16

    摘要: A method and system are presented for determining the loading and capacity on a variable capacity channel by measuring the times at which packets are enqueued for transmission, and have their transmission completed, or by measuring these times in addition to the arrival times of the packets. The times may be measured using a device driver or other operating system component. The measurement may be performed in a centralized or distributed fashion for multi-access or point to point channels.

    摘要翻译: 提出了一种方法和系统,用于通过测量分组入队传输的时间并完成传输,或通过测量这些时间以及分组的到达时间来确定可变容量信道上的负载和容量。 时间可以使用设备驱动程序或其他操作系统组件进行测量。 测量可以以集中或分布的方式对多路访问或点对点信道进行。

    DISTRIBUTED DETECTION WITH DIAGNOSIS
    4.
    发明申请
    DISTRIBUTED DETECTION WITH DIAGNOSIS 审中-公开
    分诊检测与诊断

    公开(公告)号:US20080103729A1

    公开(公告)日:2008-05-01

    申请号:US11554980

    申请日:2006-10-31

    IPC分类号: G06F19/00 G06F17/40 G06F11/30

    摘要: Activity models are maintained on a plurality of computers on a network. When a user or a particular activity model at a computer discovers an error, it may query its own activity model to determine a possible source of the error. If it is determined to not be the likely source of the error, the activity model queries the activity models of those computers on the network that it depends on. These activity models may then query the activity models of the computers that their particular host computer depends on and so forth. Ultimately the results of these activity model queries may be used to diagnose the likely source of the error and may be presented to the requesting user as a report.

    摘要翻译: 在网络上的多台计算机上维护活动模型。 当用户或计算机上的特定活动模型发现错误时,它可以查询其自己的活动模型以确定错误的可能来源。 如果确定不是错误的可能来源,则活动模型会查询网络上依赖的那些计算机的活动模型。 然后,这些活动模型可以查询其特定主机依赖的计算机的活动模型等等。 最终,这些活动模型查询的结果可以用于诊断错误的可能来源,并且可以作为报告呈现给请求用户。

    Dynamic activity model of network services
    5.
    发明授权
    Dynamic activity model of network services 有权
    网络服务动态活动模型

    公开(公告)号:US07949745B2

    公开(公告)日:2011-05-24

    申请号:US11554935

    申请日:2006-10-31

    IPC分类号: G06F15/173

    摘要: An activity model is generated at a computer. The activity model may be generated by monitoring incoming and outgoing data in the computer. The collected data is analyzed to form a graph that describes and predicts what output is generated in response to received input. Later, a window of input and output data is collected from the computer. This collected window of data is used to query the activity model. The graph in the activity model is then used to give the probability that the collected window of data was collected from the computer used to generate the activity model. A high probability indicates that the computer is performing normally, while a low probability indicates that the computer may behaving erratically and there may be a problem with the computer.

    摘要翻译: 在计算机上生成活动模型。 可以通过监视计算机中的传入和传出数据来生成活动模型。 分析所收集的数据以形成描述并预测响应于接收到的输入产生什么输出的图。 之后,从计算机收集输入和输出数据的窗口。 该收集的数据窗口用于查询活动模型。 然后使用活动模型中的图表给出从用于生成活动模型的计算机收集数据收集窗口的概率。 高概率表示计算机正常运行,而低概率表示计算机可能运行不规律,并且计算机可能存在问题。

    DYNAMIC ACTIVITY MODEL OF NETWORK SERVICES
    6.
    发明申请
    DYNAMIC ACTIVITY MODEL OF NETWORK SERVICES 有权
    网络服务动态活动模型

    公开(公告)号:US20080101352A1

    公开(公告)日:2008-05-01

    申请号:US11554935

    申请日:2006-10-31

    IPC分类号: H04L12/56

    摘要: An activity model is generated at a computer. The activity model may be generated by monitoring incoming and outgoing data in the computer. The collected data is analyzed to form a graph that describes and predicts what output is generated in response to received input. Later, a window of input and output data is collected from the computer. This collected window of data is used to query the activity model. The graph in the activity model is then used to give the probability that the collected window of data was collected from the computer used to generate the activity model. A high probability indicates that the computer is performing normally, while a low probability indicates that the computer may behaving erratically and there may be a problem with the computer.

    摘要翻译: 在计算机上生成活动模型。 可以通过监视计算机中的传入和传出数据来生成活动模型。 分析所收集的数据以形成描述并预测响应于接收到的输入产生什么输出的图。 之后,从计算机收集输入和输出数据的窗口。 该收集的数据窗口用于查询活动模型。 然后使用活动模型中的图表给出从用于生成活动模型的计算机收集数据收集窗口的概率。 高概率表示计算机正常运行,而低概率表示计算机可能运行不规律,并且计算机可能存在问题。

    Distributed network management
    8.
    发明授权
    Distributed network management 有权
    分布式网络管理

    公开(公告)号:US08649380B2

    公开(公告)日:2014-02-11

    申请号:US13300608

    申请日:2011-11-20

    IPC分类号: H04L12/28

    摘要: Hosts or end-systems residing at the edges of a network gather data about the traffic they transmit into and receive from the network. The network's routing protocol (typically a link-state protocol such as OSPF) is monitored and routing data or packets are used to recover the network's current status and topology. This data can be collected, fused, and maintained and a platform, preferably distributed, can be provided to query the data, thus enabling a variety of network management applications.

    摘要翻译: 驻留在网络边缘的主机或终端系统收集关于它们从网络发送和接收的流量的数据。 监控网络的路由协议(通常是链路状态协议,如OSPF),并使用路由数据或数据包来恢复网络的当前状态和拓扑。 可以收集,融合和维护该数据,并且可以提供优选分布的平台来查询数据,从而实现各种网络管理应用。

    THIRD PARTY INITIATION OF COMMUNICATIONS BETWEEN REMOTE PARTIES
    9.
    发明申请
    THIRD PARTY INITIATION OF COMMUNICATIONS BETWEEN REMOTE PARTIES 有权
    第三方启动远程通信之间的通信

    公开(公告)号:US20120159595A1

    公开(公告)日:2012-06-21

    申请号:US12972526

    申请日:2010-12-20

    申请人: Paul Barham

    发明人: Paul Barham

    IPC分类号: G06F15/16 G06F21/00 H04L9/32

    摘要: A data transfer system is described herein that allows data to be sent directly between two computing devices at the request of a third party client computer. The system allows a third party to initiate data transfers between computers in a network file system. This results in a significant speed increase because little to no data travels over the third party's potentially slower connection. The data transfer system provides a mechanism to determine if the direct transfer would be more efficient than two separate read and write operations, based on measurements of bandwidth and latency between each computing device. The data transfer system provides support for the source server to compress the data and the destination server to decompress the data at the direction of a third party client to further save network bandwidth.

    摘要翻译: 本文描述了允许在第三方客户端计算机的请求下在两个计算设备之间直接发送数据的数据传送系统。 系统允许第三方在网络文件系统中的计算机之间启动数据传输。 这导致显着的速度增加,因为几乎没有数据传播通过第三方的潜在较慢的连接。 基于每个计算设备之间的带宽和延迟的测量,数据传输系统提供了一种机制,以确定直接传输是否比两个单独的读取和写入操作更有效。 数据传输系统提供对源服务器的压缩数据和目的服务器的支持,以在第三方客户端的方向解压缩数据,以进一步节省网络带宽。

    TAMPER PROOF LOCATION SERVICES
    10.
    发明申请
    TAMPER PROOF LOCATION SERVICES 有权
    防篡改位置服务

    公开(公告)号:US20120159156A1

    公开(公告)日:2012-06-21

    申请号:US12972534

    申请日:2010-12-20

    IPC分类号: H04L29/06 G01S19/42

    摘要: A secure location system is described herein that leverages location-based services and hardware to make access decisions. Many mobile computers have location devices, such as GPS. They also have a trusted platform module (TPM) or other security device. Currently GPS location data is made directly accessible to untrusted application code using a simple protocol. The secure location system provides a secure mechanism whereby the GPS location of a computer at a specific time can be certified by the operating system kernel and TPM. The secure location system logs user activity with a label indicating the geographic location of the computing device at the time of the activity. The secure location system can provide a difficult to forge, time-stamped location through a combination of kernel-mode GPS access and TPM security hardware. Thus, the secure location system incorporates secure location information into authorization and other operating system decisions.

    摘要翻译: 本文描述了利用基于位置的服务和硬件来进行访问决定的安全定位系统。 许多移动计算机具有诸如GPS的定位设备。 它们还具有可信平台模块(TPM)或其他安全设备。 目前,GPS位置数据可以使用简单的协议直接访问不受信任的应用程序代码。 安全定位系统提供了一种安全机制,由此可以通过操作系统内核和TPM来认证计算机在特定时间的GPS位置。 安全位置系统使用指示活动时计算设备的地理位置的标签记录用户活动。 安全定位系统可以通过内核模式GPS访问和TPM安全硬件的组合来提供难以伪造的时间戳位置。 因此,安全定位系统将安全位置信息合并到授权和其他操作系统决策中。