System and method for managing user session meta-data in a reverse proxy
    2.
    发明申请
    System and method for managing user session meta-data in a reverse proxy 审中-公开
    用于在逆向代理中管理用户会话元数据的系统和方法

    公开(公告)号:US20060026286A1

    公开(公告)日:2006-02-02

    申请号:US10885300

    申请日:2004-07-06

    IPC分类号: G06F15/16

    摘要: A system and method for detecting and managing user session meta-data at a reverse proxy server. The reverse proxy server is logically located between one or more origin servers and any number of users. The reverse proxy server detects the establishment and tearing down of a user session, and any expiration associated with the user session. The reverse proxy server identifies the creation of a session from the pattern and/or content of communications between a user and an origin server, and associates the user (e.g., by username or user ID) with the session (e.g., session ID or cookie). A user session table may be populated with an entry for each observed session. Tear down of a session may be detected by identifying an explicit user logout or a session termination by the origin server.

    摘要翻译: 一种用于在逆向代理服务器处检测和管理用户会话元数据的系统和方法。 反向代理服务器逻辑上位于一个或多个源服务器和任意数量的用户之间。 反向代理服务器检测用户会话的建立和拆除以及与用户会话相关联的任何到期。 反向代理服务器根据用户和原始服务器之间的通信模式和/或内容来识别会话的创建,并将用户(例如,通过用户名或用户ID)与会话相关联(例如,会话ID或cookie )。 用户会话表可以填充每个观察到的会话的条目。 可以通过识别源服务器的显式用户注销或会话终止来检测会话的撕裂。

    System and method for managing security meta-data in a reverse proxy
    3.
    发明授权
    System and method for managing security meta-data in a reverse proxy 有权
    用于管理逆向代理中的安全元数据的系统和方法

    公开(公告)号:US07600230B2

    公开(公告)日:2009-10-06

    申请号:US10885338

    申请日:2004-07-06

    IPC分类号: G06F3/00 G06F15/16 G06F7/04

    摘要: A system and method for managing security meta-data in a reverse proxy server. The reverse proxy caches data served by an origin server, and also stores security meta-data for authenticating a user and/or authorizing access to cached data. The security meta-data may include an ACL (Access Control List), access control token or descriptor, other access control information, user credentials, user privileges or roles, group membership, user aliases, etc. The reverse proxy may automatically receive access control information from the origin server when a request for data is forwarded to the origin server, or may explicitly request the information from the origin server or a security server. The reverse proxy receives and applies invalidation messages to invalidate stored security meta-data. Also, the reverse proxy acts in a stateful manner, with knowledge of the correlation between a given user and that user's session with the origin server.

    摘要翻译: 用于在逆向代理服务器中管理安全元数据的系统和方法。 反向代理缓存由原始服务器服务的数据,并且还存储用于认证用户的安全元数据和/或授权访问缓存的数据。 安全元数据可以包括ACL(访问控制列表),访问控制令牌或描述符,其他访问控制信息,用户凭证,用户特权或角色,组成员资格,用户别名等。反向代理可以自动接收访问控制 当请求数据被转发到原始服务器时,来自原始服务器的信息,或者可以从源服务器或安全服务器显式地请求信息。 反向代理接收并应用无效消息以使存储的安全元数据无效。 此外,反向代理以有状态的方式运行,知道给定用户与该用户与源服务器的会话之间的相关性。

    System and method for managing security meta-data in a reverse proxy

    公开(公告)号:US20060010442A1

    公开(公告)日:2006-01-12

    申请号:US10885338

    申请日:2004-07-06

    IPC分类号: G06F9/46

    摘要: A system and method for managing security meta-data in a reverse proxy server. The reverse proxy caches data served by an origin server, and also stores security meta-data for authenticating a user and/or authorizing access to cached data. The security meta-data may include an ACL (Access Control List), access control token or descriptor, other access control information, user credentials, user privileges or roles, group membership, user aliases, etc. The reverse proxy may automatically receive access control information from the origin server when a request for data is forwarded to the origin server, or may explicitly request the information from the origin server or a security server. The reverse proxy receives and applies invalidation messages to invalidate stored security meta-data. Also, the reverse proxy acts in a stateful manner, with knowledge of the correlation between a given user and that user's session with the origin server.

    Web object access authorization protocol based on an HTTP validation model
    5.
    发明申请
    Web object access authorization protocol based on an HTTP validation model 有权
    基于HTTP验证模型的Web对象访问授权协议

    公开(公告)号:US20050246383A1

    公开(公告)日:2005-11-03

    申请号:US10836917

    申请日:2004-04-30

    摘要: One embodiment of the present invention provides a system that facilitates serving data from a cache server. The system operates upon receiving a request for the data at the cache server. The system first determines if the request requires access control, and also if the data is available in the cache. If the request requires access control and if the data is available in the cache, the system sends an authorization request to an origin server. Upon receiving a response from the origin server, the system determines if the response is an authorization. If so, the system sends the data to the requester.

    摘要翻译: 本发明的一个实施例提供一种便于从缓存服务器提供数据的系统。 该系统在接收到缓存服务器上的数据请求时进行操作。 系统首先确定请求是否需要访问控制,以及数据是否在缓存中可用。 如果请求需要访问控制,并且如果数据在缓存中可用,则系统向原始服务器发送授权请求。 在收到源服务器的响应后,系统确定响应是否为授权。 如果是这样,系统会将数据发送给请求者。

    Web object access authorization protocol based on an HTTP validation model
    6.
    发明授权
    Web object access authorization protocol based on an HTTP validation model 有权
    基于HTTP验证模型的Web对象访问授权协议

    公开(公告)号:US07437754B2

    公开(公告)日:2008-10-14

    申请号:US10836917

    申请日:2004-04-30

    IPC分类号: H04L9/32 G06F15/16

    摘要: One embodiment of the present invention provides a system that facilitates serving data from a cache server. The system operates upon receiving a request for the data at the cache server. The system first determines if the request requires access control, and also if the data is available in the cache. If the request requires access control and if the data is available in the cache, the system sends an authorization request to an origin server. Upon receiving a response from the origin server, the system determines if the response is an authorization. If so, the system sends the data to the requester.

    摘要翻译: 本发明的一个实施例提供一种便于从缓存服务器提供数据的系统。 该系统在接收到缓存服务器上的数据请求时进行操作。 系统首先确定请求是否需要访问控制,以及数据是否在缓存中可用。 如果请求需要访问控制,并且如果数据在缓存中可用,则系统向原始服务器发送授权请求。 在收到源服务器的响应后,系统确定响应是否为授权。 如果是这样,系统会将数据发送给请求者。

    Methods and apparatuses for allocation of resource blocks
    8.
    发明授权
    Methods and apparatuses for allocation of resource blocks 有权
    资源块分配方法和装置

    公开(公告)号:US09521677B2

    公开(公告)日:2016-12-13

    申请号:US14345134

    申请日:2012-03-29

    申请人: Su Yi Ming Lei Shaoyi Xu

    发明人: Su Yi Ming Lei Shaoyi Xu

    摘要: Provided are methods and corresponding apparatuses for allocation of resource blocks. A method for allocation of resource blocks comprises receiving, from a base station, information regarding a measurement location at which at least one identified resource block has been measured; and using, based upon a current location of a mobile relay node and the measurement location, the at least one identified resource block for communication between the mobile relay node and at least one user equipment connected therewith, wherein the at least one identified resource block is not used for communication between the base station and at least one user equipment connected therewith at the measurement location and a measurement of the at least one identified resource block is below a predetermined threshold. With the claimed inventions, interference in the high speed railway communication could be ameliorated and the spectrum efficiency would be improved.

    摘要翻译: 提供了用于分配资源块的方法和相应的装置。 一种用于分配资源块的方法包括从基站接收关于已经测量了至少一个所识别的资源块的测量位置的信息; 以及基于移动中继节点的当前位置和所述测量位置,使用所述至少一个识别的资源块来进行所述移动中继节点与至少一个与之相连的用户设备之间的通信,其中所述至少一个识别的资源块是 不用于在测量位置处的基站与与其连接的至少一个用户设备之间的通信,并且至少一个识别的资源块的测量低于预定阈值。 通过所要求的发明,可以改善高速铁路通信的干扰,提高频谱效率。

    Method and apparatus for dynamically adjusting uplink-downlink configuration
    9.
    发明授权
    Method and apparatus for dynamically adjusting uplink-downlink configuration 有权
    动态调整上行链路 - 下行链路配置的方法和装置

    公开(公告)号:US09392606B2

    公开(公告)日:2016-07-12

    申请号:US14345107

    申请日:2012-03-30

    IPC分类号: H04L1/00 H04W72/04 H04L5/14

    摘要: Embodiments of the disclosure provide a method and apparatus for dynamically adjusting UL-DL configuration. In the method according to embodiments of the present invention, downlink traffic load and uplink traffic load for transmission between a BS and a UE in a TDD system may be obtained, a UL-DL traffic load relation may be determined based on the downlink traffic load and the uplink traffic load and a UL-DL configuration may be selected based on the UL-DL traffic load relation.

    摘要翻译: 本公开的实施例提供了用于动态调整UL-DL配置的方法和装置。 在根据本发明的实施例的方法中,可以获得用于TDD系统中的BS与UE之间的传输的下行业务负载和上行流量负载,可以基于下行业务负载来确定UL-DL业务负载关系 并且可以基于UL-DL业务负载关系来选择上行链路业务负载和UL-DL配置。

    Method and apparatus for determining transmission power of a secondary transmitter in a hierarchical spectrum sharing system
    10.
    发明授权
    Method and apparatus for determining transmission power of a secondary transmitter in a hierarchical spectrum sharing system 有权
    用于确定分层频谱共享系统中的次发射机的发射功率的方法和装置

    公开(公告)号:US09313746B2

    公开(公告)日:2016-04-12

    申请号:US13995845

    申请日:2011-09-16

    摘要: The present invention provides a method and apparatus for determining a transmission power of a secondary transmitter in a hierarchical spectrum sharing system. The method can comprise steps of obtaining channel quality information on a primary link from at least one primary receiver within a transmission range of the secondary transmitter; and determining the transmission power for the secondary transmitter based on the channel quality information, wherein the transmission power is matched with the channel quality indicated by the channel quality information. According to the embodiments of the present invention, a power control scheme is applied to the secondary transmitter based on the channel quality information on the primary link. In such a way, the secondary transmitter' throughput can be improved with controllable rate loss to the primary receiver and accordingly the spectrum efficiency for the whole system can be further upgraded.

    摘要翻译: 本发明提供一种用于确定分层频谱共享系统中的次发射机的发射功率的方法和装置。 该方法可以包括以下步骤:从次发射机的传输范围内的至少一个主接收机获得主链路上的信道质量信息; 以及基于所述信道质量信息确定所述辅助发射机的发射功率,其中所述发射功率与由所述信道质量信息指示的信道质量匹配。 根据本发明的实施例,基于主链路上的信道质量信息,将次级发射机应用功率控制方案。 以这种方式,可以通过对主接收机的可控的速率损失来提高次级发射机的吞吐量,因此可以进一步升级整个系统的频谱效率。