公开(公告)号：US08676916B2

公开(公告)日：2014-03-18

申请号：US13531012

申请日：2012-06-22

申请人： Steven Michael Bellovin ,  Thomas Joseph Killian ,  Bruce LaRose ,  Aviel D. Rubin ,  Norman Loren Schryer

发明人： Steven Michael Bellovin ,  Thomas Joseph Killian ,  Bruce LaRose ,  Aviel D. Rubin ,  Norman Loren Schryer

IPC分类号： G06F15/16 ,  G06F15/173 ,  H04L29/06 ,  H04L29/08

CPC分类号： H04L29/06 ,  H04L29/08072 ,  H04L61/1511 ,  H04L61/2015 ,  H04L61/2061 ,  H04L61/2514 ,  H04L63/0272 ,  H04L63/0428 ,  H04L63/08 ,  H04L63/20 ,  Y10S707/99931 ,  Y10S707/9994 ,  Y10S707/99941 ,  Y10S707/99945 ,  Y10S707/99948

摘要： A system and method are provided for use in establishing secure end-to-end communication links over a VPN gateway via a network interface unit. Illustrative embodiments include establishing and providing secure communication relationships between users (customers) and companies for e-commerce and other business purposes. Each company's data and linkage to users remaining private and secure from the other participating companies as well as from the general public over the Internet. Login by user with network interface units, addressing, authentication, and other configuration operations achieved using a web page-based GUI are applied in establishing tunnels from LAN clients to desired VPN destinations. Required authentication exchanges and required encryption key exchanges facilitate the secure communications. Financial arrangements regarding the provisioning and use of network interface units are also disclosed.

摘要翻译： 提供了一种系统和方法，用于经由网络接口​​单元在VPN网关上建立安全的端到端通信链路。 说明性实施例包括在用户（客户）和公司之间建立和提供用于电子商务和其他商业目的的安全通信关系。 每个公司的数据和与其他参与公司以及互联网上的公众保持私密和安全的用户的联系。 用户使用基于Web页面的GUI实现的网络接口单元，寻址，认证和其他配置操作进行登录，用于建立从LAN客户端到所需VPN目的地的隧道。 所需的认证交换和所需的加密密钥交换便于安全通信。 还披露了关于网络接口单元的供应和使用的财务安排。

公开(公告)号：US08239531B1

公开(公告)日：2012-08-07

申请号：US10244359

申请日：2002-09-16

申请人： Steven Michael Bellovin ,  Thomas Joseph Killian ,  Bruce LaRose ,  Aviel D. Rubin ,  Norman Loren Schryer

发明人： Steven Michael Bellovin ,  Thomas Joseph Killian ,  Bruce LaRose ,  Aviel D. Rubin ,  Norman Loren Schryer

IPC分类号： G06F15/173 ,  G06F15/16

CPC分类号： H04L29/06 ,  H04L29/08072 ,  H04L61/1511 ,  H04L61/2015 ,  H04L61/2061 ,  H04L61/2514 ,  H04L63/0272 ,  H04L63/0428 ,  H04L63/08 ,  H04L63/20 ,  Y10S707/99931 ,  Y10S707/9994 ,  Y10S707/99941 ,  Y10S707/99945 ,  Y10S707/99948

摘要： A system and method are provided for use in establishing secure end-to-end communication links over a VPN gateway via a network interface unit. Illustrative embodiments include establishing and providing secure communication relationships between users (customers) and companies for e-commerce and other business purposes. Each company's data and linkage to users remaining private and secure from the other participating companies as well as from the general public over the Internet. Login by user with network interface units, addressing, authentication, and other configuration operations achieved using a web page-based GUI are applied in establishing tunnels from LAN clients to desired VPN destinations. Required authentication exchanges and required encryption key exchanges facilitate the secure communications. Financial arrangements regarding the provisioning and use of network interface units are also disclosed.

摘要翻译： 提供了一种系统和方法，用于经由网络接口​​单元在VPN网关上建立安全的端到端通信链路。 说明性实施例包括在用户（客户）和公司之间建立和提供用于电子商务和其他商业目的的安全通信关系。 每个公司的数据和与其他参与公司以及互联网上的公众保持私密和安全的用户的联系。 用户使用基于Web页面的GUI实现的网络接口单元，寻址，认证和其他配置操作进行登录，用于建立从LAN客户端到所需VPN目的地的隧道。 所需的认证交换和所需的加密密钥交换便于安全通信。 还披露了关于网络接口单元的供应和使用的财务安排。

公开(公告)号：US20130163757A1

公开(公告)日：2013-06-27

申请号：US13531012

申请日：2012-06-22

申请人： Steven Michael Bellovin ,  Thomas Joseph Killian ,  Bruce LaRose ,  Aviel D. Rubin ,  Norman Loren Schryer

发明人： Steven Michael Bellovin ,  Thomas Joseph Killian ,  Bruce LaRose ,  Aviel D. Rubin ,  Norman Loren Schryer

IPC分类号： H04L9/08

CPC分类号： H04L29/06 ,  H04L29/08072 ,  H04L61/1511 ,  H04L61/2015 ,  H04L61/2061 ,  H04L61/2514 ,  H04L63/0272 ,  H04L63/0428 ,  H04L63/08 ,  H04L63/20 ,  Y10S707/99931 ,  Y10S707/9994 ,  Y10S707/99941 ,  Y10S707/99945 ,  Y10S707/99948

摘要： A system and method are provided for use in establishing secure end-to-end communication links over a VPN gateway via a network interface unit. Illustrative embodiments include establishing and providing secure communication relationships between users (customers) and companies for e-commerce and other business purposes. Each company's data and linkage to users remaining private and secure from the other participating companies as well as from the general public over the Internet. Login by user with network interface units, addressing, authentication, and other configuration operations achieved using a web page-based GUI are applied in establishing tunnels from LAN clients to desired VPN destinations. Required authentication exchanges and required encryption key exchanges facilitate the secure communications. Financial arrangements regarding the provisioning and use of network interface units are also disclosed.

摘要翻译： 提供了一种系统和方法，用于经由网络接口​​单元在VPN网关上建立安全的端到端通信链路。 说明性实施例包括在用户（客户）和公司之间建立和提供用于电子商务和其他商业目的的安全通信关系。 每个公司的数据和与其他参与公司以及互联网上的公众保持私密和安全的用户的联系。 用户使用基于Web页面的GUI实现的网络接口单元，寻址，认证和其他配置操作进行登录，用于建立从LAN客户端到所需VPN目的地的隧道。 所需的认证交换和所需的加密密钥交换便于安全通信。 还披露了关于网络接口单元的供应和使用的财务安排。

公开(公告)号：US08107479B2

公开(公告)日：2012-01-31

申请号：US10705048

申请日：2003-11-10

申请人： Steven Michael Bellovin ,  Joseph Henry Condon ,  Richard Vandervoort Cox ,  Alexander Gibson Fraser ,  Charles Robert Kalmanek, Jr. ,  Alan Edward Kaplan ,  Thomas Joseph Killian ,  William Todd Marshall ,  Peter Z. Onufryk ,  Kadangode K. Ramakrishnan ,  Norman Loren Schryer

发明人： Steven Michael Bellovin ,  Joseph Henry Condon ,  Richard Vandervoort Cox ,  Alexander Gibson Fraser ,  Charles Robert Kalmanek, Jr. ,  Alan Edward Kaplan ,  Thomas Joseph Killian ,  William Todd Marshall ,  Peter Z. Onufryk ,  Kadangode K. Ramakrishnan ,  Norman Loren Schryer

IPC分类号： H04L12/28

CPC分类号： H04Q11/0478 ,  H04L29/06 ,  H04L69/40 ,  H04L2012/5615 ,  H04L2012/5663 ,  H04M7/0057 ,  H04M7/006

摘要： A system and method for providing telephony and high-speed data access over a broadband access network, comprising a network interface unit (NIU) coupled to a backup local exchange carrier (LEC) line, the broadband access network coupled to the NIU, an intermediate point-of-presence (IPOP) coupled to the broadband access network, and at least one external access network coupled to the IPOP. The system also provides for a fail-safe mode in which the NIU supports the LEC line for lifeline services.

摘要翻译： 一种用于通过宽带接入网络提供电话和高速数据接入的系统和方法，包括耦合到备用本地交换载波（LEC）线路的网络接口单元（NIU），耦合到NIU的宽带接入网络，中间 耦合到宽带接入网络的接入点（IPOP）以及耦合到IPOP的至少一个外部接入网络。 该系统还提供了故障安全模式，其中NIU支持用于生命线服务的LEC线路。

公开(公告)号：US06665299B1

公开(公告)日：2003-12-16

申请号：US09231681

申请日：1999-01-14

申请人： Steven Michael Bellovin ,  Joseph Henry Condon ,  Richard Vandervoort Cox ,  Alexander Gibson Fraser ,  Charles Robert Kalmanek, Jr. ,  Alan Edward Kaplan ,  Thomas Joseph Killian ,  William Todd Marshall ,  Peter Z. Onufryk ,  Kadangode K. Ramakrishnan ,  Norman Loren Schryer

发明人： Steven Michael Bellovin ,  Joseph Henry Condon ,  Richard Vandervoort Cox ,  Alexander Gibson Fraser ,  Charles Robert Kalmanek, Jr. ,  Alan Edward Kaplan ,  Thomas Joseph Killian ,  William Todd Marshall ,  Peter Z. Onufryk ,  Kadangode K. Ramakrishnan ,  Norman Loren Schryer

IPC分类号： H04L1228

CPC分类号： H04Q11/0478 ,  H04L29/06 ,  H04L69/40 ,  H04L2012/5615 ,  H04L2012/5663 ,  H04M7/0057 ,  H04M7/006

摘要： A system and method for providing telephony and high speed data access over a broadband access network, comprising a network interface unit (NIU) coupled to a backup local exchange carrier (LEC) line, the broadband access network coupled to the NIU, an intermediate point-of-presence (IPOP) coupled to the broadband access network, and at least one external access network coupled to the IPOP. The system also provides for a fail-safe mode in which the NIU supports the LEC line for lifeline services.

摘要翻译： 一种用于通过宽带接入网络提供电话和高速数据接入的系统和方法，包括耦合到备用本地交换载波（LEC）线路的网络接口单元（NIU），耦合到NIU的宽带接入网络，中间点 （IPOP），以及耦合到IPOP的至少一个外部接入网络。 该系统还提供了故障安全模式，其中NIU支持用于生命线服务的LEC线路。

公开(公告)号：US07035410B1

公开(公告)日：2006-04-25

申请号：US09516236

申请日：2000-03-01

申请人： William A. Aiello ,  Steven Michael Bellovin ,  Charles Robert Kalmanek, Jr. ,  William Todd Marshall ,  Aviel D. Rubin

发明人： William A. Aiello ,  Steven Michael Bellovin ,  Charles Robert Kalmanek, Jr. ,  William Todd Marshall ,  Aviel D. Rubin

IPC分类号： G06F17/00

CPC分类号： H04L9/0822 ,  H04L9/3263

摘要： The broadband telephony interface is provisioned by receiving information authenticating a provisioning server, establishing a communication channel between the user and the provisioning server over which is transmitted authorization information from the user to the provisioning server, and encrypting and transmitting a cryptographic key associated with the user to the provisioning server. The cryptographic key can be a symmetric key or a public key corresponding to a private key stored in the broadband telephony interface. The cryptographic key can be utilized to generate other keys which are utilized to secure communication channels for the telephony service. The broadband telephony interface advantageously can be implemented as untrusted hardware or software that is installed by a customer.

摘要翻译： 通过接收认证供应服务器的信息来提供宽带电话接口，在用户和供应服务器之间建立通信信道，通过该通信信道从用户向供应服务器发送授权信息，以及加密和发送与用户相关联的密码密钥 到配置服务器。 加密密钥可以是与存储在宽带电话接口中的专用密钥相对应的对称密钥或公钥。 密码密钥可用于生成用于保护电话服务的通信信道的其他密钥。 宽带电话接口有利地可以被实现为由客户安装的不可信硬件或软件。

公开(公告)号：US06870845B1

公开(公告)日：2005-03-22

申请号：US09366678

申请日：1999-08-04

申请人： Steven Michael Bellovin ,  Charles Robert Kalmanek, Jr. ,  William Todd Marshall ,  Partho Pratim Mishra ,  Douglas M Nortz ,  Kadangode K. Ramakrishnan

发明人： Steven Michael Bellovin ,  Charles Robert Kalmanek, Jr. ,  William Todd Marshall ,  Partho Pratim Mishra ,  Douglas M Nortz ,  Kadangode K. Ramakrishnan

IPC分类号： H04L12/56 ,  H04L29/06 ,  H04L29/12 ,  H04M7/00 ,  H04L12/28

CPC分类号： H04L65/1069 ,  H04L29/06027 ,  H04L29/12377 ,  H04L47/724 ,  H04L47/805 ,  H04L61/2517 ,  H04M7/128

摘要： A call between a first network associated with a calling party and a second network associated with a called party is connected. The source address for packets associated with the call arc translated. The packets are sent from the calling party to the called party without the called party receiving the source address that indicates at least one from the group of a logical identity of the calling party and a geographical identity of the calling party.

摘要翻译： 连接与呼叫方相关联的第一网络与与被叫方相关联的第二网络之间的呼叫。 与呼叫关联的数据包的源地址被转换。 分组从呼叫方发送到被叫方，而被叫方从接收到指示呼叫方的逻辑身份组和呼叫方的地理标识中的至少一个的源地址。

公开(公告)号：US5805820A

公开(公告)日：1998-09-08

申请号：US679466

申请日：1996-07-15

申请人： Steven Michael Bellovin ,  William Roberts Cheswick

发明人： Steven Michael Bellovin ,  William Roberts Cheswick

IPC分类号： G06F13/00 ,  H04L29/06 ,  H04L29/12 ,  G06F15/163

CPC分类号： H04L63/02 ,  H04L29/06 ,  H04L29/12066 ,  H04L29/12783 ,  H04L61/1511 ,  H04L61/35 ,  Y10S707/99939

摘要： A device and method redirect query requests to restrict access to private information of a domain in a domain name system. The device includes a switching device that redirects query requests for the private information from within the domain to a device within the domain. The private information includes IP addresses and domain names. All the devices in the domain may be modified to direct all query requests to the switching device or the switching device may be incorporated into a firewall of the domain.

摘要翻译： 设备和方法重定向查询请求以限制对域名系统中域的私有信息的访问。 该设备包括交换设备，其将来自域内的专用信息的查询请求重定向到域内的设备。 私人信息包括IP地址和域名。 可以修改域中的所有设备以将所有查询请求引导到交换设备，或者交换设备可以被并入到域的防火墙中。

公开(公告)号：US20120179840A1

公开(公告)日：2012-07-12

申请号：US13429975

申请日：2012-03-26

申请人： David Gerald Belanger ,  Steven Michael Bellovin ,  Maria F. Fernandez ,  Robert J. Hall ,  Charles Robert Kalmanek, JR. ,  Divesh Srivastava ,  Kathleen McKenna

发明人： David Gerald Belanger ,  Steven Michael Bellovin ,  Maria F. Fernandez ,  Robert J. Hall ,  Charles Robert Kalmanek, JR. ,  Divesh Srivastava ,  Kathleen McKenna

IPC分类号： G06F15/16

CPC分类号： H04L67/02 ,  H04L67/10

摘要： A distributed transformation network provides delivery of content from a content publisher to a content recipient. Content from the content publisher is received at an entry node of the distributed transformation network and transmitted to a transformation node in the distributed transformation network. The content is transformed according to publisher, recipient or network administrator specifications and transmitting to delivery nodes which deliver the transformed content to the content recipient. The published content may be in an XML-based format and transformed into an XML-related format or any other structured language format as desired in the provided specification.

摘要翻译： 分布式转换网络提供从内容发布者到内容接收者的内容传递。 在分布式变换网络的入口节点处接收来自内容发布者的内容，并将其发送到分布式转换网络中的转换节点。 内容根据发布者，收件人或网络管理员规范进行转换，并传送到将转换后的内容传递给内容收件人的传送节点。 发布的内容可以是基于XML的格式，并且根据所提供的规范中的需要转换成与XML相关的格式或任何其他结构化语言格式。

公开(公告)号：US20100120414A1

公开(公告)日：2010-05-13

申请号：US12691447

申请日：2010-01-21

申请人： Steven Michael Bellovin

发明人： Steven Michael Bellovin

IPC分类号： H04W24/00

CPC分类号： H04W4/12 ,  H04W24/04 ,  H04W76/19

摘要： A method and apparatus for anticipating communication interruption. If, during an established call between two communication devices, a telecommunication device determines that a communication link to one of the devices will be interrupted, either temporarily or permanently, the device predicts the interruption in the communication link. The device may send a message, as pre-determined by at least one of the communication device, to the communication device of the predicted or pending call drop or interruption. After the interruption the previously established call is resumed. If a reconnection attempt is appropriate, then the device will attempt to reconnect to the dropped device. If a reconnection attempt is not appropriate, or if the reconnection attempt is unsuccessful, the non-dropped communication device is connected, as predetermined by either of the communication devices, to an appropriate connection, such as, to a voice mail. If the reconnection attempt is successful, the call between the two communication devices is re-established.

摘要翻译： 一种用于预测通信中断的方法和装置。 如果在两个通信设备之间的建立呼叫期间，电信设备确定到设备中的一个的通信链路将暂时或永久中断，则设备预测通信链路中的中断。 该设备可以将由通信设备中的至少一个预先确定的消息发送到预测或未决呼叫丢弃或中断的通信设备。 中断之后，恢复以前建立的呼叫。 如果重新连接尝试合适，则设备将尝试重新连接到丢弃的设备。 如果重新连接尝试不合适，或者如果重新连接尝试不成功，则未丢弃的通信设备如通信设备之一所预期的那样被连接到诸如语音邮件的适当连接。 如果重新连接尝试成功，则重新建立两个通信设备之间的呼叫。