公开(公告)号：US07983176B2

公开(公告)日：2011-07-19

申请号：US11228134

申请日：2005-09-16

申请人： Zesen Chen ,  Peter Chou ,  Sean Chen ,  Yongdong Zhao

发明人： Zesen Chen ,  Peter Chou ,  Sean Chen ,  Yongdong Zhao

IPC分类号： H04J3/14

CPC分类号： H04M7/006 ,  H04L41/0213 ,  H04L43/00 ,  H04M3/2281

摘要： A system and method are disclosed for monitoring communications of an individual in a packet network. A system that incorporates teachings of the present disclosure may include, for example, a network monitor having a communications interface coupled to a packet network, and a controller. The controller can be programmed to receive a request from a third party to monitor communications associated with an individual, convey to the third party information monitored on a group of one or more permanent virtual circuits (PVCs) of the packet network associated with the individual, detect an update in the group of one or more PVCs, determine new set of one or more PVCs associated with the individual, and convey to the third party information monitored from the new set of one or more PVCs.

摘要翻译： 公开了一种用于监视分组网络中的个人的通信的系统和方法。 结合本公开的教导的系统可以包括例如具有耦合到分组网络的通信接口的网络监视器和控制器。 控制器可以被编程为接收来自第三方的请求以监视与个人相关联的通信，将与个人相关联的分组网络的一组或多个永久虚拟电路（PVC）的组中监视的信息传达给第三方信息， 检测一个或多个PVC组中的更新，确定与个体相关联的一组或多个PVC的新集合，并将新信息传达给第三方信息。

公开(公告)号：US20060280183A1

公开(公告)日：2006-12-14

申请号：US11149631

申请日：2005-06-10

申请人： Sean Chen ,  Zesen Chen ,  Yongdong Zhao ,  Peter Chou

发明人： Sean Chen ,  Zesen Chen ,  Yongdong Zhao ,  Peter Chou

IPC分类号： H04L12/56

CPC分类号： H04L43/12 ,  H04L12/5601 ,  H04L2012/5626 ,  H04L2012/5636

摘要： A method and apparatus for automatic synchronization of monitoring points for a network management system (“NMS”) along a permanent virtual circuit (“PVC”) is disclosed. A NMS in an synchronous transfer mode (“ATM”) network coupled to a plurality of ATM switches is operative to monitor each of the plurality of ATM switches storied in a monitoring service object corresponding to a PVC. The NMS receives at least one notification from at least one ATM switch of the plurality of ATM switches indicating an ATM switch has been added or removed from the PVC. In response to the at least notification, the NMS adds at least one ATM switch to the monitoring service object or removes at least one ATM switch from the monitoring service object.

摘要翻译： 公开了一种用于沿着永久虚拟电路（“PVC”）的网络管理系统（“NMS”）的监视点的自动同步的方法和装置。 耦合到多个ATM交换机的同步传送模式（“ATM”）网络中的NMS可操作以监视存储在对应于PVC的监视服务对象中的多个ATM交换机中的每一个。 NMS从多个ATM交换机中的至少一个ATM交换机接收至少一个通知，指示已经从PVC添加或移除了ATM交换机。 响应于至少通知，NMS向监控服务对象添加至少一个ATM交换机，或从监控服务对象中移除至少一个ATM交换机。

公开(公告)号：US07889744B2

公开(公告)日：2011-02-15

申请号：US11149631

申请日：2005-06-10

申请人： Sean Chen ,  Zesen Chen ,  Yongdong Zhao ,  Peter Chou

发明人： Sean Chen ,  Zesen Chen ,  Yongdong Zhao ,  Peter Chou

IPC分类号： H04L12/56 ,  H04L12/54

CPC分类号： H04L43/12 ,  H04L12/5601 ,  H04L2012/5626 ,  H04L2012/5636

摘要： A method and apparatus for automatic synchronization of monitoring points for a network management system (“NMS”) along a permanent virtual circuit (“PVC”) is disclosed. A NMS in an asynchronous transfer mode (“ATM”) network coupled to a plurality of ATM switches is operative to monitor each of the plurality of ATM switches storied in a monitoring service object corresponding to a PVC. The NMS receives at least one notification from at least one ATM switch of the plurality of ATM switches indicating an ATM switch has been added or removed from the PVC. In response to the at least notification, the NMS adds at least one ATM switch to the monitoring service object or removes at least one ATM switch from the monitoring service object.

摘要翻译： 公开了一种用于沿着永久虚拟电路（“PVC”）的网络管理系统（“NMS”）的监视点的自动同步的方法和装置。 耦合到多个ATM交换机的异步传输模式（“ATM”）网络中的NMS可操作以监视存储在对应于PVC的监控服务对象中的多个ATM交换机中的每一个。 NMS从多个ATM交换机中的至少一个ATM交换机接收至少一个通知，指示已经从PVC添加或移除了ATM交换机。 响应于至少通知，NMS向监控服务对象添加至少一个ATM交换机，或从监控服务对象中移除至少一个ATM交换机。

公开(公告)号：US20070064678A1

公开(公告)日：2007-03-22

申请号：US11228134

申请日：2005-09-16

申请人： Zesen Chen ,  Peter Chou ,  Sean Chen ,  Yongdong Zhao

发明人： Zesen Chen ,  Peter Chou ,  Sean Chen ,  Yongdong Zhao

IPC分类号： H04L12/66

CPC分类号： H04M7/006 ,  H04L41/0213 ,  H04L43/00 ,  H04M3/2281

摘要： A system and method are disclosed for monitoring communications of an individual in a packet network. A system that incorporates teachings of the present disclosure may include, for example, a network monitor (100) having a communications interface (110) coupled to a packet network (101), and a controller (102). The controller can be programmed to receive (202) a request from a third party to monitor communications associated with an individual, convey (204) to the third party information monitored on a group of one or more permanent virtual circuits (PVCs) of the packet network associated with the individual, detect (205, 206) an update in the group of one or more PVCs, determine (212) a new set of one or more PVCs associated with the individual, and convey (216) to the third party information monitored from the new set of one or more PVCs.

摘要翻译： 公开了一种用于监视分组网络中的个人的通信的系统和方法。 结合本公开的教导的系统可以包括例如具有耦合到分组网络（101）的通信接口（110）的网络监视器（100）和控制器（102）。 控制器可以被编程为接收（202）来自第三方的请求以监视与个人相关联的通信，将（204）传送（204）到在分组的一个或多个永久虚拟电路（PVC）的组上监视的第三方信息 与个人相关联的网络，检测（205,206）一个或多个PVC组中的更新，确定（212）与该个体相关联的一组或多个PVC的新集合，并将（216）传达给第三方信息 从新的一套或多台PVC监测。

公开(公告)号：US07551624B2

公开(公告)日：2009-06-23

申请号：US11148948

申请日：2005-06-09

申请人： Sean Chen ,  Yongdong Zhao ,  Zesen Chen

发明人： Sean Chen ,  Yongdong Zhao ,  Zesen Chen

IPC分类号： H04L12/28

CPC分类号： H04M7/006 ,  H04L29/06027 ,  H04L65/80

摘要： A communications system is described for enforcing a service level agreement for a specified customer on a network. The communications system includes a router to receive at least one packet containing data. A management system is in communication with the router, where the management system provides access control commands to the router for the specified customer based upon an agreed upon codec and an agreed upon packet length. A detection system is in communication with the router. The detection system extracts a codec information and a packet length information from the packet. If the codec matches the agreed upon codec and the packet length matches the agreed upon packet length, then the packet is allowed to proceed. Otherwise the packet is dropped from the network.

摘要翻译： 描述了一种通信系统，用于对网络上的指定客户执行服务级别协议。 通信系统包括用于接收至少一个包含数据的分组的路由器。 管理系统与路由器通信，其中管理系统基于商定的编解码器和约定的分组长度向指定的客户提供对路由器的访问控制命令。 检测系统与路由器通信。 检测系统从分组中提取编解码信息和分组长度信息。 如果编解码器与商定的编解码器匹配，并且分组长度与商定的分组长度相匹配，则允许分组继续进行。 否则，数据包将从网络中丢弃。

公开(公告)号：US20060280163A1

公开(公告)日：2006-12-14

申请号：US11149439

申请日：2005-06-09

申请人： Yongdong Zhao ,  Sean Chen ,  Zesen Chen ,  Shih-Chung Soon ,  Holly Chen

发明人： Yongdong Zhao ,  Sean Chen ,  Zesen Chen ,  Shih-Chung Soon ,  Holly Chen

IPC分类号： H04L12/66

CPC分类号： H04L43/0852

摘要： A system is disclosed for detecting paketization delay of packets in a network. The system includes a router to receive at least one packet containing data. A detection system, which is in communication with the router, extracts a codec information and a packet length information from the packet. A management system, which is in communication with the router, receives the codec information and the packet length information and determines packetization delay based on the codec information and the packet length information.

摘要翻译： 公开了一种用于检测网络中分组的采集延迟的系统。 该系统包括用于接收至少一个包含数据的分组的路由器。 与路由器通信的检测系统从分组中提取编解码信息和分组长度信息。 与路由器通信的管理系统接收编解码器信息和分组长度信息，并根据编解码信息和分组长度信息确定分组延迟。

公开(公告)号：US20130014255A1

公开(公告)日：2013-01-10

申请号：US13604771

申请日：2012-09-06

申请人： Zesen Chen ,  Yongdong Zhao ,  Peter Chou ,  Brian A. Gonsalves ,  Michael Taylor

发明人： Zesen Chen ,  Yongdong Zhao ,  Peter Chou ,  Brian A. Gonsalves ,  Michael Taylor

IPC分类号： G06F21/00

CPC分类号： H04L63/20 ,  H04L63/1408 ,  H04L63/1441

摘要： A method includes receiving an indication of at least one detected security issue at a network device. The indication is received at a security manager processor from a security agent. The method includes selecting, via the security manager processor, at least one executable security object responsive to the indication. The security manager processor verifies compatibility between the at least one executable security object, the network device, and communication media. The method also includes sending the at least one executable security object to the network device via the security manager processor to provide a protective security measure to the network device against the at least one detected security issue upon execution of the at least one executable security object.

摘要翻译： 一种方法包括在网络设备处接收至少一个检测到的安全问题的指示。 来自安全代理的安全管理器处理器接收到该指示。 该方法包括经由安全管理器处理器响应于该指示来选择至少一个可执行安全对象。 安全管理器处理器验证至少一个可执行安全对象，网络设备和通信介质之间的兼容性。 该方法还包括经由安全管理器处理器将至少一个可执行安全对象发送到网络设备，以在执行至少一个可执行安全对象时针对该至少一个检测到的安全问题向网络设备提供保护性安全措施。

公开(公告)号：US09038173B2

公开(公告)日：2015-05-19

申请号：US13604771

申请日：2012-09-06

申请人： Zesen Chen ,  Yongdong Zhao ,  Peter Chou ,  Brian A. Gonsalves ,  Michael Taylor

发明人： Zesen Chen ,  Yongdong Zhao ,  Peter Chou ,  Brian A. Gonsalves ,  Michael Taylor

IPC分类号： H04L29/06

CPC分类号： H04L63/20 ,  H04L63/1408 ,  H04L63/1441

摘要： A method includes receiving an indication of at least one detected security issue at a network device. The indication is received at a security manager processor from a security agent. The method includes selecting, via the security manager processor, at least one executable security object responsive to the indication. The security manager processor verifies compatibility between the at least one executable security object, the network device, and communication media. The method also includes sending the at least one executable security object to the network device via the security manager processor to provide a protective security measure to the network device against the at least one detected security issue upon execution of the at least one executable security object.

摘要翻译： 一种方法包括在网络设备处接收至少一个检测到的安全问题的指示。 来自安全代理的安全管理器处理器接收到该指示。 该方法包括经由安全管理器处理器响应于该指示来选择至少一个可执行安全对象。 安全管理器处理器验证至少一个可执行安全对象，网络设备和通信介质之间的兼容性。 该方法还包括经由安全管理器处理器将至少一个可执行安全对象发送到网络设备，以在执行至少一个可执行安全对象时针对该至少一个检测到的安全问题向网络设备提供保护性安全措施。

公开(公告)号：US07773503B2

公开(公告)日：2010-08-10

申请号：US11148654

申请日：2005-06-09

申请人： Yongdong Zhao ,  Shih-Chung Tom Soon ,  Sean Chen ,  Zesen Chen ,  Wenge Chen

发明人： Yongdong Zhao ,  Shih-Chung Tom Soon ,  Sean Chen ,  Zesen Chen ,  Wenge Chen

IPC分类号： H04J1/16

CPC分类号： H04L29/06027 ,  H04L45/00 ,  H04L45/22 ,  H04L45/28 ,  H04L45/306 ,  H04L47/11 ,  H04L47/12 ,  H04L47/24 ,  H04L65/1069 ,  H04L65/80

摘要： VoIP traffic bandwidth through a router port is controlled so that it does not exceed a predetermined bandwidth to ensure a desired quality of service for all VoIP calls routed through the port. Information of a packet received by the port is extracted from a packet header. The information includes source and destination addresses and port numbers as well as the bandwidth used by the packet. If the packet is from an existing call, the packet is routed and the time the packet was received is updated. If the packet is from a new call, it is determined whether the port has sufficient bandwidth to route the new call. If the port has sufficient bandwidth, the packet is routed, bandwidth is allotted for subsequent packets from the new call, and the port information is updated to accept the subsequent packets. If the port does not have sufficient bandwidth, the packet is dropped.

摘要翻译： 控制通过路由器端口的VoIP业务带宽，使得其不超过预定带宽，以确保通过端口路由的所有VoIP呼叫的期望服务质量。 从分组报头提取端口接收的分组的信息。 该信息包括源和目的地址和端口号以及数据包使用的带宽。 如果分组来自现有呼叫，则分组被路由并且更新分组的时间。 如果分组来自新呼叫，则确定端口是否具有足够的带宽来路由新呼叫。 如果端口具有足够的带宽，则分组被路由，为来自新呼叫的后续分组分配带宽，并更新端口信息以接受后续分组。 如果端口没有足够的带宽，则丢弃该数据包。

公开(公告)号：US20060280184A1

公开(公告)日：2006-12-14

申请号：US11148948

申请日：2005-06-09

申请人： Sean Chen ,  Yongdong Zhao ,  Zesen Chen

发明人： Sean Chen ,  Yongdong Zhao ,  Zesen Chen

IPC分类号： H04L12/56

CPC分类号： H04M7/006 ,  H04L29/06027 ,  H04L65/80

摘要： A communications system is described for enforcing a service level agreement for a specified customer on a network. The communications system includes a router to receive at least one packet containing data. A management system is in communication with the router, where the management system provides access control commands to the router for the specified customer based upon an agreed upon codec and an agreed upon packet length. A detection system is in communication with the router. The detection system extracts a codec information and a packet length information from the packet. If the codec matches the agreed upon codec and the packet length matches the agreed upon packet length, then the packet is allowed to proceed. Otherwise the packet is dropped from the network.