SYSTEM AND METHOD FOR REPORTING PACKET CHARACTERISTICS IN A NETWORK ENVIRONMENT
    2.
    发明申请
    SYSTEM AND METHOD FOR REPORTING PACKET CHARACTERISTICS IN A NETWORK ENVIRONMENT 有权
    在网络环境中报告分组特性的系统和方法

    公开(公告)号:US20110116377A1

    公开(公告)日:2011-05-19

    申请号:US12621066

    申请日:2009-11-18

    IPC分类号: H04J1/16 H04L12/16

    摘要: A method is provided in one example and includes receiving a request to initiate a communication flow associated with a subscriber and identifying one or more parameters to be monitored for the communication flow. The method further includes extracting one or more bits from packets associated with the communication flow; the bits are used to determine an operating system associated with the communication flow. A policy decision can be executed for the communication flow based on the operating system associated with the communication flow. In more specific examples, the bits are sent to a next destination in response to a threshold being reached for at least one of the parameters. The parameters can be associated a volume parameter or a time parameter. The policy decision could include blocking traffic associated with the subscriber, initiating billing, redirecting the communication, managing a quality of service level for the communication flow, etc.

    摘要翻译: 在一个示例中提供了一种方法,并且包括接收发起与订户相关联的通信流的请求,并且识别要监视通信流的一个或多个参数。 该方法还包括从与通信流相关联的分组中提取一个或多个比特; 这些位用于确定与通信流相关联的操作系统。 可以基于与通信流相关联的操作系统对通信流执行策略决定。 在更具体的示例中,响应于针对至少一个参数的阈值而将比特发送到下一个目的地。 参数可以关联一个音量参数或一个时间参数。 策略决定可以包括阻止与用户相关联的流量,启动计费,重定向通信,管理通信流的服务质量等。

    Apparatus and Method for Thermally Controlled Processing of Microelectronic Workpieces
    3.
    发明申请
    Apparatus and Method for Thermally Controlled Processing of Microelectronic Workpieces 审中-公开
    微电子工件热处理设备及方法

    公开(公告)号:US20080011450A1

    公开(公告)日:2008-01-17

    申请号:US11776952

    申请日:2007-07-12

    IPC分类号: B05B1/00 F17D3/00

    摘要: Apparatus and method for thermally controlled processing of microelectronic workpieces with liquids. An apparatus in accordance with and embodiment of the invention includes a process vessel configured to carry a processing liquid, such as an electroless processing liquid. The vessel has a thermally transmissive wall for transferring heat to and/or from the processing liquid within. A heat transfer device, such as a reservoir that receives processing liquid spilling over from the process vessel, transfers heat to or from the processing liquid within the process vessel. The heat transfer device can also transfer heat to or from an internal or external heat source, such as a conduit carrying a heat transfer fluid, or an electrical resistance heater. The interaction between the microelectronic workpiece and the processing liquid can be further controlled by controlling the rate at which the microelectronic workpiece rotates and/or the manner in which the microelectronic workpiece is introduced to and/or withdrawn from the processing liquid.

    摘要翻译: 用液体对微电子工件进行热处理的装置和方法。 根据本发明的实施例的装置包括配置成承载诸如无电处理液体的处理液体的处理容器。 容器具有用于将热量传递到和/或内部的处理液体的热传递壁。 传热装置,例如容纳从处理容器溢出的处理液体的储存器,将热量传递到处理容器内或从处理容器内的处理液体。 传热装置还可以将热量传递到内部或外部热源,例如承载传热流体的导管或电阻加热器。 通过控制微电子工件旋转的速度和/或微电子工件被引入和/或从处理液中取出的方式,可以进一步控制微电子工件和处理液之间的相互作用。

    Techniques for network protection based on subscriber-aware application proxies
    5.
    发明授权
    Techniques for network protection based on subscriber-aware application proxies 有权
    基于用户感知应用代理的网络保护技术

    公开(公告)号:US08844035B2

    公开(公告)日:2014-09-23

    申请号:US13369498

    申请日:2012-02-09

    IPC分类号: H04L29/06

    摘要: Techniques for responding to intrusions on a packet switched network include receiving user data at a subscriber-aware gateway server between a network access server and a content server. The user data includes subscriber identifier data that indicates a unique identifier for a particular user, network address data that indicates a network address for a host used by the particular user, NAS data that indicates an identifier for the network access server, flow list data that indicates one or more open data packet flows, and suspicious activity data. The suspicious activity data indicates a value for a property of the open data packet flows that indicates suspicious activity. It is determined whether an intrusion condition is satisfied based on the suspicious activity data. If the intrusion condition is satisfied, then the gateway responds based at least in part on user data other than the network address data.

    摘要翻译: 用于响应分组交换网络上的入侵的技术包括在网络接入服务器和内容服务器之间的用户感知网关服务器处接收用户数据。 用户数据包括指示特定用户的唯一标识符的用户标识符数据,指示特定用户使用的主机的网络地址的网络地址数据,指示网络接入服务器的标识符的NAS数据, 指示一个或多个打开的数据分组流和可疑活动数据。 可疑活动数据表示指示可疑活动的开放数据分组流的属性的值。 基于可疑活动数据确定是否满足入侵条件。 如果入侵条件满足,则网关至少部分地基于除了网络地址数据之外的用户数据进行响应。

    System and method for server farm resource allocation
    6.
    发明授权
    System and method for server farm resource allocation 有权
    服务器场资源分配的系统和方法

    公开(公告)号:US07640023B2

    公开(公告)日:2009-12-29

    申请号:US11417960

    申请日:2006-05-03

    IPC分类号: H04W72/00

    摘要: Techniques and systems for server farm load balancing and resource allocation are disclosed. In one embodiment, a method of load balancing can include: arranging servers into service groups; receiving an access request with information related to a differentiation between the service groups; selecting one of the service groups based on a mapping comparison to the information; and selecting one of the servers within the selected service group based on a hardware utilization comparison. The servers can include GPRS (General Packet Radio Service) Gateway Support Node (GGSN) or Remote Authentication Dial In User Service (RADIUS) servers, for example. The information can include an Access Point Name (APN) or Calling Station ID, for example.

    摘要翻译: 披露了用于服务器场负载平衡和资源分配的技术和系统。 在一个实施例中,负载平衡的方法可以包括:将服务器排列成服务组; 接收具有与服务组之间的区别相关的信息的访问请求; 基于与信息的映射比较来选择服务组之一; 以及基于硬件利用率比较来选择所选服务组内的一个服务器。 服务器可以包括例如GPRS(通用分组无线电业务)网关支持节点(GGSN)或远程认证拨入用户服务(RADIUS)服务器。 该信息可以包括例如接入点名称(APN)或呼叫站ID。

    ALLOWING TCP ACK TO PASS A GATEWAY WHILE QUEUING DATA FOR PARSING
    7.
    发明申请
    ALLOWING TCP ACK TO PASS A GATEWAY WHILE QUEUING DATA FOR PARSING 有权
    允许TCP ACK通过网关在队列数据进行分配

    公开(公告)号:US20090067416A1

    公开(公告)日:2009-03-12

    申请号:US11854299

    申请日:2007-09-12

    IPC分类号: H04L12/56

    摘要: In one embodiment, a method for providing an ACK packet while queuing data is provided. One or more packets in a series of packets may be received from a client at a gateway. The gateway determines that a packet in the series of packets has not been received. The one or more packets are then queued. The queued packets may have included an ACK for one or more previously sent packets. Thus, if the gateway had forwarded the one or more packets that are queued, then the ACK would have been received by the server. However, the one or more packets are queued and thus the ACK included in the packets is not sent with the queued packets. Even though the plurality of packets are queued, an acknowledgement packet is generated and then sent for the previously sent packets. The acknowledgement packet acknowledges to the server that the one or more previously sent packets were received by the client. The server may then continue transmitting packets to the client and knows it does not need to retransmit the one or more previously sent packets.

    摘要翻译: 在一个实施例中,提供了一种在排队数据期间提供ACK分组的方法。 一系列分组中的一个或多个分组可以从网关的客户端接收。 网关确定未收到一系列数据包中的数据包。 然后将一个或多个数据包排队。 排队的分组可以包括用于一个或多个先前发送的分组的ACK。 因此,如果网关转发了排队的一个或多个数据包,则该服务器将接收该ACK。 然而,一个或多个分组被排队,因此包中的ACK不与排队的分组一起发送。 即使多个分组被排队,生成确认分组,然后发送给先前发送的分组。 确认分组向服务器确认客户端接收到一个或多个先前发送的分组。 然后,服务器可以继续向客户端发送分组,并且知道它不需要重传一个或多个先前发送的分组。

    Parsing Out of Order Data Packets at a Content Gateway of a Network
    8.
    发明申请
    Parsing Out of Order Data Packets at a Content Gateway of a Network 有权
    在网络的内容网关上解析不合规格的数据包

    公开(公告)号:US20080259926A1

    公开(公告)日:2008-10-23

    申请号:US11738358

    申请日:2007-04-20

    IPC分类号: H04L12/56

    摘要: In one embodiment, a method includes receiving, at a local node of a network, a sequenced data packet of a flow made up of multiple sequenced data packets from a source node directed toward a destination node. The flow is to be parsed by the local node to describe the flow for administration of the network. Based on sequence data in the sequenced data packet, it is determined whether the sequenced data packet is out of order in the flow. If it is determined that the sequenced data packet is out of order, then the sequenced data packet is forwarded toward the destination node before parsing the sequenced data packet. The out of order sequenced data packet is also stored for subsequent parsing at the local node.

    摘要翻译: 在一个实施例中,一种方法包括在网络的本地节点处接收由来自指向目的地节点的源节点的多个排序数据分组组成的流的排序数据分组。 该流程将由本地节点进行解析,以描述网络管理流程。 基于顺序数据包中的序列数据,确定顺序数据包是否在流程中是无序的。 如果确定排序的数据分组是无序的,则在分析排序的数据分组之前,将排序的数据分组转发到目的地节点。 无序排序数据包也存储在本地节点的后续解析中。

    Techniques for network protection based on subscriber-aware application proxies
    9.
    发明申请
    Techniques for network protection based on subscriber-aware application proxies 有权
    基于用户感知应用代理的网络保护技术

    公开(公告)号:US20070113284A1

    公开(公告)日:2007-05-17

    申请号:US11273112

    申请日:2005-11-14

    IPC分类号: G06F12/14

    摘要: Techniques for responding to intrusions on a packet switched network include receiving user data at a subscriber-aware gateway server between a network access server and a content server. The user data includes subscriber identifier data that indicates a unique identifier for a particular user, network address data that indicates a network address for a host used by the particular user, NAS data that indicates an identifier for the network access server, flow list data that indicates one or more open data packet flows, and suspicious activity data. The suspicious activity data indicates a value for a property of the open data packet flows that indicates suspicious activity. It is determined whether an intrusion condition is satisfied based on the suspicious activity data. If the intrusion condition is satisfied, then the gateway responds based at least in part on user data other than the network address data.

    摘要翻译: 用于响应分组交换网络上的入侵的技术包括在网络接入服务器和内容服务器之间的用户感知网关服务器处接收用户数据。 用户数据包括指示特定用户的唯一标识符的用户标识符数据,指示特定用户使用的主机的网络地址的网络地址数据,指示网络接入服务器的标识符的NAS数据, 指示一个或多个打开的数据分组流和可疑活动数据。 可疑活动数据表示指示可疑活动的开放数据分组流的属性的值。 基于可疑活动数据确定是否满足入侵条件。 如果入侵条件满足,则网关至少部分地基于除了网络地址数据之外的用户数据进行响应。

    System and Method for Providing Source Awareness in a Wireless Application Protocol Network Environment
    10.
    发明申请
    System and Method for Providing Source Awareness in a Wireless Application Protocol Network Environment 有权
    在无线应用协议网络环境中提供源意识的系统和方法

    公开(公告)号:US20060248225A1

    公开(公告)日:2006-11-02

    申请号:US11458123

    申请日:2006-07-18

    IPC分类号: G06F15/173

    摘要: A method for communicating in a wireless application protocol (WAP) network environment is provided that includes receiving a request packet at a WAP gateway and positioning an identifier into the request packet. A content switch then identifies the identifier and correlates the identifier to a source that generated the request packet. An internet protocol (IP) address associated with the source is positioned in the request packet before communicating the request packet to a next destination.

    摘要翻译: 提供了一种在无线应用协议(WAP)网络环境中进行通信的方法,其包括在WAP网关处接收请求分组并将标识符定位到请求分组中。 内容交换机然后识别标识符并将该标识符与生成请求分组的源相关联。 在将请求包传送到下一个目的地之前,与源相关联的因特网协议(IP)地址位于请求包中。