公开(公告)号：US08719449B2

公开(公告)日：2014-05-06

申请号：US12955540

申请日：2010-11-29

Applicant: Suresh Krishnan ,  Alan Kavanagh

Inventor： Suresh Krishnan ,  Alan Kavanagh

IPC: G06F15/16

CPC classification number: H04L45/741 ,  H04L61/2514 ,  H04L61/2517 ,  H04L61/6095

Abstract: Methods, network address translation (NAT) devices, network nodes and system for allowing identification of a private device in a public network or treating traffic of a private device in a public network. The NAT may allocate a private IPv4 address to the private device, reserve a block of ports on the public IPv4 address for the private device and send an identification of the block of ports to a network node in the public network. The network node of the public network may receive an identification of a block of ports on the public IPv4 address indicating that the block of ports is reserved for the private device and activate a rule for treating traffic of the private device.

Abstract translation: 方法，网络地址转换（NAT）设备，网络节点和系统，用于允许在公共网络中识别专用设备或处理公共网络中的专用设备的流量。 NAT可以将私有IPv4地址分配给私有设备，在私有设备的公共IPv4地址上保留端口块，并将该端口块的标识发送到公共网络中的网络节点。 公共网络的网络节点可以接收公共IPv4地址上的端口块的标识，指示端口块被保留用于专用设备，并激活用于处理专用设备的流量的规则。

公开(公告)号：US20120136976A1

公开(公告)日：2012-05-31

申请号：US12955540

申请日：2010-11-29

Applicant: Suresh Krishnan ,  Alan Kavanagh

Inventor： Suresh Krishnan ,  Alan Kavanagh

IPC: G06F15/16 ,  G06F15/173

CPC classification number: H04L45/741 ,  H04L61/2514 ,  H04L61/2517 ,  H04L61/6095

Abstract: Methods, network address translation (NAT) devices, network nodes and system for allowing identification of a private device in a public network or treating traffic of a private device in a public network. The NAT may allocate a private IPv4 address to the private device, reserve a block of ports on the public IPv4 address for the private device and send an identification of the block of ports to a network node in the public network. The network node of the public network may receive an identification of a block of ports on the public IPv4 address indicating that the block of ports is reserved for the private device and activate a rule for treating traffic of the private device.

Abstract translation: 方法，网络地址转换（NAT）设备，网络节点和系统，用于允许在公共网络中识别专用设备或处理公共网络中的专用设备的流量。 NAT可以将私有IPv4地址分配给私有设备，在私有设备的公共IPv4地址上保留端口块，并将该端口块的标识发送到公共网络中的网络节点。 公共网络的网络节点可以接收公共IPv4地址上的端口块的标识，指示端口块被保留用于专用设备，并激活用于处理专用设备的流量的规则。

公开(公告)号：US09432211B2

公开(公告)日：2016-08-30

申请号：US13224791

申请日：2011-09-02

Applicant: Alan Kavanagh ,  Suresh Krishnan

Inventor： Alan Kavanagh ,  Suresh Krishnan

IPC: G06F15/173 ,  H04L12/28 ,  H04L12/24 ,  H04L29/12 ,  H04L12/26 ,  H04M15/00 ,  H04L29/06

CPC classification number: H04L12/2874 ,  H04L12/2498 ,  H04L12/2876 ,  H04L29/12245 ,  H04L41/509 ,  H04L43/026 ,  H04L43/028 ,  H04L65/4069 ,  H04L69/22 ,  H04M15/82 ,  H04M15/8228

Abstract: An edge node of an Access/Network Service Provider (ANP) network tracks the delivery into the ANP network of content from Contzzent Providers (CP), and generates accounting sessions with an accounting server. The edge node is provisioned with the IP addresses of known CP servers. A content delivery session, characterized by a CP IP address and a content identifier, such as a Differentiated Service Code Point (DSCP) value, is started upon the source IP address of a packet matching a known CP, and a packet count is incremented for each subsequent packet from the CP with the same content identifier. An accounting session is initiated with an accounting server when the content delivery session is started, and the accounting session is terminated, with the packet count for the session, upon a time-out since the last packet received. Multiple content delivery sessions may be ongoing simultaneously.

Abstract translation: 接入/网络服务提供商（ANP）网络的边缘节点跟踪从服务提供商（CP）到内容的ANP网络的传送，并与计费服务器一起生成计费会话。 边缘节点配有已知CP服务器的IP地址。 在与已知CP匹配的分组的源IP地址上开始以CP IP地址和诸如差分服务码点（DSCP）值的内容标识符为特征的内容递送会话，并且分组计数增加以用于 来自CP的每个后续分组具有相同的内容标识符。 当内容发送会话启动时，计费会话由计费服务器发起，并且计费会话终止，会话的数据包计数自上次收到的数据包之后的超时。 多个内容传送会话可能同时进行。

公开(公告)号：US09015346B2

公开(公告)日：2015-04-21

申请号：US14222032

申请日：2014-03-21

Applicant: Suresh Krishnan ,  Alan Kavanagh

Inventor： Suresh Krishnan ,  Alan Kavanagh

IPC: G06F15/16 ,  H04L12/56 ,  H04L29/12

CPC classification number: H04L45/741 ,  H04L61/2514 ,  H04L61/2517 ,  H04L61/6095

Abstract: Methods, network address translation (NAT) devices, network nodes and system for allowing identification of a private device in a public network or treating traffic of a private device in a public network. The NAT may allocate a private IPv4 address to the private device, reserve a block of ports on the public IPv4 address for the private device and send an identification of the block of ports to a network node in the public network. The network node of the public network may receive an identification of a block of ports on the public IPv4 address indicating that the block of ports is reserved for the private device and activate a rule for treating traffic of the private device.

Abstract translation: 方法，网络地址转换（NAT）设备，网络节点和系统，用于允许在公共网络中识别专用设备或处理公共网络中的专用设备的流量。 NAT可以将私有IPv4地址分配给私有设备，在私有设备的公共IPv4地址上保留端口块，并将该端口块的标识发送到公共网络中的网络节点。 公共网络的网络节点可以接收公共IPv4地址上的端口块的标识，指示端口块被保留用于专用设备，并激活用于处理专用设备的流量的规则。

公开(公告)号：US20130132544A1

公开(公告)日：2013-05-23

申请号：US13304012

申请日：2011-11-23

Applicant: Suresh Krishnan ,  Alan Kavanagh

Inventor： Suresh Krishnan ,  Alan Kavanagh

IPC: G06F15/173

CPC classification number: H04L67/2814 ,  H04L67/1021 ,  H04L67/2804 ,  H04L67/2842 ,  H04W4/18

Abstract: A network element in a network is provided. The network element includes a receiver that receives a content request message. The received content request message indicates content to be transmitted to a device. The network element includes a processor in communication with the receiver. The processor generates a modified content request message by inserting identification data into the content request message. The identification data identifies at least one of a plurality of network nodes in the network. The network element includes a transmitter that transmits the modified content request message to a content distribution network server. The receiver further receives a redirect message that is based on the transmitted modified content request message. The redirect message identifies that a one of the plurality of network nodes is a cache location storing the indicated content.

Abstract translation: 提供网络中的网元。 网元包括接收内容请求消息的接收器。 接收到的内容请求消息指示要发送到设备的内容。 网络元件包括与接收器通信的处理器。 处理器通过将标识数据插入到内容请求消息中来生成修改的内容请求消息。 识别数据标识网络中的多个网络节点中的至少一个。 网元包括将修改的内容请求消息发送到内容分发网络服务器的发送器。 接收机还接收基于发送的修改内容请求消息的重定向消息。 重定向消息识别出多个网络节点之一是存储指示内容的高速缓存位置。

公开(公告)号：US20100107231A1

公开(公告)日：2010-04-29

申请号：US12582544

申请日：2009-10-20

Applicant: Alan Kavanagh ,  Suresh Krishnan

Inventor： Alan Kavanagh ,  Suresh Krishnan

IPC: H04L9/32 ,  G06F21/00 ,  G06F11/07 ,  G06F15/16

CPC classification number: H04L63/08 ,  H04L9/3213 ,  H04L61/2015 ,  H04L63/0892

Abstract: Methods and network node in a network for receiving a network access request related to a subscriber via at least one external network interface and treating the network access request by using at least a first function and second function. A failure indication related to the subscriber is obtained from at least one of the first function or the second function. The network access request is thereafter denied by sending an access result via the external network interface. The access result comprises a cause of failure indicating the at least one of the first function or the second function as a source for the failure. The first and second functions may be, for instance, an AAA function and a DHCP function.

Abstract translation: 网络中的方法和网络节点，用于经由至少一个外部网络接口接收与订户相关的网络接入请求，并且通过使用至少第一功能和第二功能来处理所述网络接入请求。 从第一功能或第二功能中的至少一个获得与订户相关的故障指示。 此后，网络访问请求通过外部网络接口发送访问结果而被拒绝。 访问结果包括故障原因，指示第一功能或第二功能中的至少一个作为故障的源。 第一和第二功能可以是例如AAA功能和DHCP功能。

公开(公告)号：US20140006638A1

公开(公告)日：2014-01-02

申请号：US13676718

申请日：2012-11-14

Applicant: Alan Kavanagh ,  Suresh Krishnan

Inventor： Alan Kavanagh ,  Suresh Krishnan

IPC: G06F15/16

CPC classification number: H04L61/6004 ,  G06F9/45558 ,  G06F2009/45595 ,  H04L12/6418 ,  H04L61/2007 ,  H04L61/2061 ,  H04L61/251 ,  H04L61/2525 ,  H04L61/6059

Abstract: A method, for use in a data center having tenants, of routing an IPv4 packet over an IPv6 network as an IPv6 packet includes: receiving the IPv4 packet from a first virtual machine associated with a first tenant and addressed to a second virtual machine associated with a second tenant; generating the header of the IPv6 packet to include an IPv6 address determined by applying a reversible transformation to one of: a combination of the IPv4 source address and an identifier of the first tenant, and a combination of the IPv4 destination address and an identifier of the second tenant; generating the payload of the IPv6 packet based on the payload of the received IPv4 packet; generating the IPv6 packet by assembling the generated payload with the generated header of the IPv6 packet; and transmitting the generated IPv6 packet over the IPv6 network to the second virtual machine.

Abstract translation: 一种在具有租户的数据中心中使用的用于通过IPv6网络将IPv4分组路由为IPv6分组的方法包括：从与第一租户相关联的第一虚拟机接收IPv4分组并寻址到与第一虚拟机相关联的第二虚拟机 第二租户 生成IPv6分组的报头以包括通过应用可逆转换确定的IPv6地址，其中IPv4地址与第一租户的标识符的组合，以及IPv4目的地地址和 第二租户 基于接收的IPv4分组的有效载荷来生成IPv6分组的有效载荷; 通过组合生成的有效载荷与IPv6分组的生成报头来生成IPv6分组; 以及通过IPv6网络将生成的IPv6分组发送到第二虚拟机。

公开(公告)号：US20100189052A1

公开(公告)日：2010-07-29

申请号：US12482981

申请日：2009-06-11

Applicant: Alan Kavanagh ,  Suresh Krishnan

Inventor： Alan Kavanagh ,  Suresh Krishnan

IPC: H04W60/00

CPC classification number: H04L61/2015 ,  H04L29/12915 ,  H04L61/6059 ,  H04L63/0892 ,  H04L63/20 ,  H04W12/06

Abstract: A method and nodes are provided for registering a terminal. The terminal is capable of connecting in two distinct networks. The registration process for the terminal maps an identity and traffic handling policies of the terminal in a first network with an address prefix of the terminal obtained from the second network. The address prefix is obtained from the second network following authorization of the terminal in the first network. As traffic is exchanged between the terminal and a correspondent node while the terminal is accessing the second network, the mapping is used to ensure that policies for the terminal in the first network are applied in the second network.

Abstract translation: 提供了一种用于注册终端的方法和节点。 终端能够连接在两个不同的网络中。 终端的注册过程将第一网络中的终端的身份和流量处理策略映射到从第二网络获得的终端的地址前缀。 在第一网络中的终端的授权之后，从第二网络获得地址前缀。 由于当终端正在访问第二网络时，在终端和对端节点之间交换流量，所以映射用于确保第一网络中的终端的策略被应用于第二网络。

公开(公告)号：US20140204947A1

公开(公告)日：2014-07-24

申请号：US14222032

申请日：2014-03-21

Applicant: Suresh Krishnan ,  Alan Kavanagh

Inventor： Suresh Krishnan ,  Alan Kavanagh

IPC: H04L12/56

CPC classification number: H04L45/741 ,  H04L61/2514 ,  H04L61/2517 ,  H04L61/6095

Abstract: Methods, network address translation (NAT) devices, network nodes and system for allowing identification of a private device in a public network or treating traffic of a private device in a public network. The NAT may allocate a private IPv4 address to the private device, reserve a block of ports on the public IPv4 address for the private device and send an identification of the block of ports to a network node in the public network. The network node of the public network may receive an identification of a block of ports on the public IPv4 address indicating that the block of ports is reserved for the private device and activate a rule for treating traffic of the private device.

Abstract translation: 方法，网络地址转换（NAT）设备，网络节点和系统，用于允许在公共网络中识别专用设备或处理公共网络中的专用设备的流量。 NAT可以将私有IPv4地址分配给私有设备，在私有设备的公共IPv4地址上保留端口块，并将该端口块的标识发送到公共网络中的网络节点。 公共网络的网络节点可以接收公共IPv4地址上的端口块的标识，指示端口块被保留用于专用设备，并激活用于处理专用设备的流量的规则。

公开(公告)号：US08495713B2

公开(公告)日：2013-07-23

申请号：US12965552

申请日：2010-12-10

Applicant: Suresh Krishnan ,  Alan Kavanagh

Inventor： Suresh Krishnan ,  Alan Kavanagh

IPC: H04L29/06

CPC classification number: H04L63/162 ,  H04L63/08 ,  H04L63/0884 ,  H04L63/102 ,  H04W12/06 ,  H04W88/04

Abstract: Systems and methods provide for authenticating a device. A method for authenticating a device can include receiving, at communications node, a first message, wherein the first message includes a first Extensible Authentication Protocol (EAP) packet which includes an EAP (Identify) ID response and a first destination address; generating, by the communications node, a second message, wherein the second message includes the first EAP ID response and a second destination address which is different from the first destination address; and transmitting, by the communications node, the second message toward the second destination address.

Abstract translation: 系统和方法提供认证设备。 用于认证设备的方法可以包括在通信节点处接收第一消息，其中第一消息包括包括EAP（识别）ID响应和第一目的地地址的第一可扩展认证协议（EAP）分组; 由所述通信节点生成第二消息，其中所述第二消息包括所述第一EAP ID响应和与所述第一目的地地址不同的第二目的地地址; 以及由所述通信节点向所述第二目的地地址发送所述第二消息。