-
1.发明授权Methods for operating virtual networks, data network system, computer program and computer program product 有权操作虚拟网络，数据网络系统，计算机程序和计算机程序产品的方法公开(公告)号：US07908350B2
公开(公告)日：2011-03-15
申请号：US12097349
申请日：2006-12-12
IPC分类号： G06F15/173 , G06F15/177
CPC分类号： H04L12/4641
摘要： The invention relates to a method for operating virtual networks. The method comprises providing a first virtual network comprising a first set of network ports assigned to a first virtualization tag (T1) and a second virtual network comprising a second set of network ports assigned to a second virtualization tag (T2), the first and the second virtual network having compatible address ranges and being adapted to only pass data packets within them, providing a first network node having a source address (SA) in the first virtual network and being operationally connected to a first port (P1) assigned to the first virtual network by means of the first virtualization tag (T1), monitoring the first network node in order to detect a predetermined condition, and, on detection of the predetermined condition, reassigning the first port (P1) to the second virtual network by means of assigning the second virtualization tag (T2) to the first port (P1), such that no data packet can be passed from the first network node (N1) to a second network node (N2) connected to a second port (P2) assigned to the first virtual network by means of the first virtualization tag (T1) directly and keeping of the source address (SA) for the first network node (N1) in the second virtual network (104). The invention further relates to a further method for operation virtual networks, a data network system and a computer program product adapted to perform the inventive methods.
摘要翻译： 本发明涉及一种运行虚拟网络的方法。 该方法包括提供包括分配给第一虚拟化标签（T1）的第一组网络端口和包括分配给第二虚拟化标签（T2）的第二组网络端口的第二虚拟网络的第一虚拟网络，所述第一和第 第二虚拟网络具有兼容的地址范围并且适于仅传递其中的数据分组，提供在第一虚拟网络中具有源地址（SA）的第一网络节点并且可操作地连接到分配给第一虚拟网络的第一端口（P1） 虚拟网络通过第一虚拟化标签（T1）进行监视，监视第一网络节点以便检测预定条件，并且在检测到预定条件时，通过以下方式将第一端口（P1）重新分配给第二虚拟网络： 将第二虚拟化标签（T2）分配给第一端口（P1），使得没有数据分组可以从第一网络节点（N1）传递到连接的第二网络节点（N2） 通过第一虚拟化标签（T1）直接分配给第一虚拟网络的第二端口（P2），并保持第二虚拟网络（104）中的第一网络节点（N1）的源地址（SA）。 本发明还涉及用于操作虚拟网络的另一方法，数据网络系统和适于执行本发明方法的计算机程序产品。
-
2.发明申请Methods for Operating Virtual Networks, Data Network System, Computer Program and Computer Program Product 有权操作虚拟网络，数据网络系统，计算机程序和计算机程序产品的方法公开(公告)号：US20090006603A1
公开(公告)日：2009-01-01
申请号：US12097349
申请日：2006-12-12
IPC分类号： G06F15/173
CPC分类号： H04L12/4641
摘要： The invention relates to a method for operating virtual networks. The method comprises providing a first virtual network (103) comprising a first set (101) of network ports assigned to a first virtualization tag (T1) and a second virtual network (104) comprising a second set (105) of network ports assigned to a second virtualization tag (T2), the first and the second virtual network (103, 104) having compatible address ranges and being adapted to only pass data packets within them, providing a first network node (N1) having a source address (SA) in the first virtual network (103) and being operationally connected to a first port (P1) assigned to the first virtual network (103) by means of the first virtualization tag (T1), monitoring the first network node (N1) in order to detect a predetermined condition, and, on detection of the predetermined condition, reassigning the first port (P1) to the second virtual network (104) by means of assigning the second virtualization tag (T2) to the first port (P1), such that no data packet can be passed from the first network node (N1) to a second network node (N2) connected to a second port (P2) assigned to the first virtual network (103) by means of the first virtualization tag (T1) directly and keeping of the source address (SA) for the first network node (N1) in the second virtual network (104). The invention further relates to a further method for operation virtual networks, a data network system, a computer program and a computer program product adapted to perform the inventive methods.
摘要翻译： 本发明涉及一种运行虚拟网络的方法。 该方法包括提供包括分配给第一虚拟化标签（T1）的第一组（101）网络端口和第二虚拟网络（104）的第一虚拟网络（103），所述第二虚拟网络（104）包括分配给 第二虚拟化标签（T2），所述第一和第二虚拟网络（103,104）具有兼容的地址范围，并且仅适于在其中传递数据分组，提供具有源地址（SA）的第一网络节点（N1） 在第一虚拟网络（103）中并且通过第一虚拟化标签（T1）可操作地连接到分配给第一虚拟网络（103）的第一端口（P1），监视第一网络节点（N1），以便 检测预定条件，并且在检测到预定条件时，通过将第二虚拟化标签（T2）分配给第一端口（P1）将第一端口（P1）重新分配给第二虚拟网络（104），使得 没有数据包可以从f传递 第一网络节点（N1）通过第一虚拟化标签（T1）直接连接到分配给第一虚拟网络（103）的第二端口（P2）的第二网络节点（N2），并保持源地址 ）用于第二虚拟网络（104）中的第一网络节点（N1）。 本发明还涉及用于操作虚拟网络的另一方法，数据网络系统，计算机程序和适于执行本发明方法的计算机程序产品。
-
3.发明授权IP network management based on automatically acquired network entity status information 失效IP网络管理基于自动获取的网络实体状态信息公开(公告)号：US08055751B2
公开(公告)日：2011-11-08
申请号：US12274717
申请日：2008-11-20
IPC分类号： G06F15/173
CPC分类号： H04L61/2015 , H04L29/12066 , H04L29/12301 , H04L43/00 , H04L61/1511 , H04L61/2076 , H04L63/20
摘要： Methods and apparatus are provided for managing an IP network interconnecting a plurality of network hosts (2). Status information, indicative of status of a host, is automatically acquired from each host (2). The status information, such as MAC address, security and/or operational information, acquired from a host (2) is automatically recorded in at least one DNS record, associated with the IP address of that host (2), of a DNS server (4). The host status information in the DNS records can then be accessed for network management operations. The automatic acquisition and recording of the status information may be performed by a DHCP server (3) of the network on allocation of dynamic IP addresses to hosts (2).
摘要翻译： 提供了用于管理互连多个网络主机（2）的IP网络的方法和装置。 从主机（2）自动获取表示主机状态的状态信息。 从主机（2）获取的状态信息（例如MAC地址，安全性和/或操作信息）被自动记录在与DNS服务器的主机（2）的IP地址相关联的至少一个DNS记录中 4）。 然后可以访问DNS记录中的主机状态信息以进行网络管理操作。 在向主机（2）分配动态IP地址时，由网络的DHCP服务器（3）执行状态信息的自动采集和记录。
-
公开(公告)号：US20090144419A1
公开(公告)日：2009-06-04
申请号：US12274717
申请日：2008-11-20
IPC分类号： G06F15/173
CPC分类号： H04L61/2015 , H04L29/12066 , H04L29/12301 , H04L43/00 , H04L61/1511 , H04L61/2076 , H04L63/20
摘要： Methods and apparatus are provided for managing an IP network interconnecting a plurality of network hosts (2). Status information, indicative of status of a host, is automatically acquired from each host (2). The status information, such as MAC address, security and/or operational information, acquired from a host (2) is automatically recorded in at least one DNS record, associated with the IP address of that host (2), of a DNS server (4). The host status information in the DNS records can then be accessed for network management operations. The automatic acquisition and recording of the status information may be performed by a DHCP server (3) of the network on allocation of dynamic IP addresses to hosts (2).
摘要翻译： 提供了用于管理互连多个网络主机（2）的IP网络的方法和装置。 从主机（2）自动获取表示主机状态的状态信息。 从主机（2）获取的状态信息（例如MAC地址，安全性和/或操作信息）被自动记录在与DNS服务器的主机（2）的IP地址相关联的至少一个DNS记录中 4）。 然后可以访问DNS记录中的主机状态信息以进行网络管理操作。 在向主机（2）分配动态IP地址时，由网络的DHCP服务器（3）执行状态信息的自动采集和记录。
-
公开(公告)号：US20090037583A1
公开(公告)日：2009-02-05
申请号：US12280350
申请日：2007-02-27
IPC分类号： G06F15/173 , G06F15/16
CPC分类号： H04L61/2514 , H04L29/12367 , H04L29/12509 , H04L61/2567 , H04L63/0209 , H04L63/0227 , H04L69/164
摘要： A method and apparatus are provided for detecting peer-to-peer communication on a data communication network, between an internal client machine within an internal address space and an external client machine. The method includes routing all messages addressed to internal client machines to an analysis device. The analysis device identifies messages pertaining to peer-to-peer communication and identifies the internal client machine to which the messages of a specified nature were addressed. The analysis device terminates the connection with the external client machine if the establishing of the peer-to-peer communication is in violation of a pre-determined internal network rule.
摘要翻译： 提供了一种方法和装置，用于检测数据通信网络上的内部地址空间内部客户端机器与外部客户机器之间的对等通信。 该方法包括将寻址到内部客户机的所有消息路由到分析设备。 分析设备识别与对等通信有关的消息，并标识特定性质的消息被寻址到的内部客户机。 如果对等通信的建立违反了预先确定的内部网络规则，则分析设备终止与外部客户机的连接。
-
公开(公告)号：US20120096548A1
公开(公告)日：2012-04-19
申请号：US11909495
申请日：2006-02-21
IPC分类号： G06F21/00
CPC分类号： H04L63/1441 , H04L63/1408 , H04L63/1491
摘要： A method and apparatus are provided for detecting attacks on a data communication network. The apparatus includes a router with a mechanism for monitoring return messages addressed to an originating user system local to the router. The mechanism includes a message checker for identifying a return message of a specified nature and a rerouter for temporarily routing subsequent messages from the originating user system to the intrusion detection sensor.
摘要翻译： 提供了一种用于检测对数据通信网络的攻击的方法和装置。 该装置包括具有用于监视寻址到路由器本地的始发用户系统的返回消息的机制的路由器。 该机制包括用于识别特定性质的返回消息的消息检查器和用于临时路由从始发用户系统到入侵检测传感器的后续消息的重新路由器。
-
7.发明申请STATELESS METHODS FOR RESOURCE HIDING AND ACCESS CONTROL SUPPORT BASED ON URI ENCRYPTION 审中-公开基于URI加密的资源隐藏和访问控制支持的无条件方法公开(公告)号：US20080313469A1
公开(公告)日：2008-12-18
申请号：US12197231
申请日：2008-08-23
IPC分类号： H04L9/06
CPC分类号： H04L63/0428 , G06F16/955 , G06F21/602 , G06F21/6218 , G06Q30/0601 , H04L9/00 , H04L63/10 , H04L63/168 , H04L2209/56 , H04L2209/60
摘要： An apparatus and method are disclosed for enabling controlled access to resources at a resource provider server. The invention may encrypt or decrypt a portion of a uniform resource identifier (URI), according to a stateless method for hiding resources and/or providing access control support. Upon receipt of a URI having an encrypted portion, the invention decrypts the encrypted portion using a predetermined key to obtain a decrypted segment, extracts additional information from the decrypted segment and forms a decrypted URI, before the decrypted URI is forwarded to a resource producer server. The invention may also encrypt a URI from a resource provider server before it is sent to a client in response to a client request.
摘要翻译： 公开了用于使得能够对资源提供商服务器处的资源进行受控访问的装置和方法。 根据用于隐藏资源和/或提供访问控制支持的无状态方法，本发明可以对统一资源标识符（URI）的一部分进行加密或解密。 在接收到具有加密部分的URI之后，本发明使用预定密钥解密加密部分以获得解密的段，在解密的URI被转发到资源生成器服务器之前从解密的段中提取附加信息并形成解密的URI 。 本发明还可以在资源提供商服务器响应于客户端请求被发送到客户端之前加密URI。
-
公开(公告)号：US08266140B2
公开(公告)日：2012-09-11
申请号：US12403756
申请日：2009-03-13
CPC分类号： G06F17/30864 , G06F17/30997
摘要： A method of acquiring tags using web search includes receiving a search query in a search engine, processing the search query and returning a list of candidate resources corresponding to the search query, determining a candidate resource out of the list of candidate resources, extracting tags from the search query, and tagging the candidate resource with the extracted tags.
摘要翻译： 使用网络搜索获取标签的方法包括在搜索引擎中接收搜索查询，处理搜索查询并返回与搜索查询相对应的候选资源的列表，从候选资源列表中确定候选资源，从候选资源列表中提取标签 搜索查询，以及使用提取的标签标记候选资源。
-
公开(公告)号：US08261346B2
公开(公告)日：2012-09-04
申请号：US12128834
申请日：2008-05-29
申请人： James F. Riordan
发明人： James F. Riordan
CPC分类号： H04L63/1416 , H04L12/14 , H04L29/12009 , H04L61/00 , H04L63/1425 , H04L63/1458 , H04L63/1491
摘要： Described is a technique for detecting attacks on a data communications network having a plurality of addresses for assignment to data processing systems in the network. The technique involves identifying data traffic on the network originating at any assigned address and addressed to any unassigned address. Any data traffic so identified is inspected for data indicative of an attack. On detection of data indicative of an attack, an alert signal is generated.
摘要翻译： 描述了一种用于检测对具有多个地址的数据通信网络的攻击的技术，用于分配给网络中的数据处理系统。 该技术涉及识别网络上源自任何分配地址的数据流量，并发送到任何未分配的地址。 检查如此识别的任何数据流量表示攻击的数据。 在检测到指示攻击的数据时，产生报警信号。
-
公开(公告)号：US08166306B2
公开(公告)日：2012-04-24
申请号：US12141245
申请日：2008-06-18
IPC分类号： H04L9/32
CPC分类号： H04L9/3247 , H04L2209/60 , H04L2209/68 , H04L2209/80 , H04L2209/88
摘要： A method is provided for adding intended meaning to digital signatures. A message, being base content, is received to be signed. Assertions, ontologies, and description of a reasoner are adjoined to the message. Ontologies are a formal specification of vocabulary and rules used to state the assertions. The reasoner validates the assertions against the corresponding ontologies. A compound message is formed including the message, the assertions, the ontologies, and the reasoner. The compound message is signed using a cryptographic digital signature, where the assertions indicate an intended meaning of the digital signature. During verification of semantic signatures, a digital signature is received for a compound message, where the compound message includes assertions, ontologies, and reasoner. The digital signature is verified, and the compound message structure is checked for semantic signature conformance. In response to proper verification, the reasoner is utilized to verify a conformance of the assertions to the ontologies.
摘要翻译： 提供了一种为数字签名添加意图的方法。 收到一个作为基础内容的消息以进行签名。 断言，本体和推理器的描述与消息相邻。 本体是用于陈述断言的词汇和规则的正式规范。 推理者验证对相应本体的断言。 形成复合消息，包括消息，断言，本体和推理器。 复合消息使用加密数字签名进行签名，其中断言表示数字签名的预期含义。 在验证语义签名期间，为复合消息接收数字签名，其中复合消息包括断言，本体和推理器。 验证数字签名，并检查复合消息结构的语义签名一致性。 为了回应正确的验证，推理器被用来验证断言对本体的一致性。
-
-
-
-
-
-
-
-
-
搜索结果
26 条记录 (耗时 0.026 秒)
