公开(公告)号：US07343619B2

公开(公告)日：2008-03-11

申请号：US10219379

申请日：2002-08-14

申请人： Yoram Ofek ,  Marcel Mordechay Yung ,  Mario Baldi ,  David Howard Sitrick

发明人： Yoram Ofek ,  Marcel Mordechay Yung ,  Mario Baldi ,  David Howard Sitrick

IPC分类号： H04L9/32

CPC分类号： H04L69/16 ,  G06F21/14 ,  H04L47/10 ,  H04L47/193 ,  H04L47/27 ,  H04L47/283 ,  H04L63/0227 ,  H04L63/10 ,  H04L69/161 ,  H04L69/163 ,  Y10S707/99939

摘要： The objective of this invention is to ensure that programs that generate and send data packets are well behaved. This invention discloses a method and system that consist of an end station and a network interface, such that, the network interface is capable of determining the authenticity of the program used by the end station to generate and send data packets. The method is based on using a hidden program that was obfuscated within the program that is used to generate and send data packets from the end station. The hidden program is being updated dynamically and it includes the functionality for generating a pseudo random sequence of security signals. Only the network interface knows how the pseudo random sequence of security signals were generated, and therefore, the network interface is able to check the validity of the pseudo random sequence of security signals, and thereby, verify the authenticity of the programs used to generate and send data packets.

摘要翻译： 本发明的目的是确保生成和发送数据分组的程序表现良好。 本发明公开了一种由终端站和网络接口组成的方法和系统，使得网络接口能够确定终端站使用的程序的真实性来生成和发送数据分组。 该方法基于使用在程序内被模糊化的隐藏程序，该程序用于从终端站生成和发送数据包。 隐藏的程序正在动态更新，它包括用于生成安全信号的伪随机序列的功能。 只有网络接口知道如何产生安全信号的伪随机序列，因此，网络接口能够检查安全信号的伪随机序列的有效性，从而验证用于生成和 发送数据包。

公开(公告)号：US07367045B2

公开(公告)日：2008-04-29

申请号：US10218993

申请日：2002-08-14

申请人： Yoram Ofek ,  Marcel Mordechay Yung ,  Mario Baldi

发明人： Yoram Ofek ,  Marcel Mordechay Yung ,  Mario Baldi

IPC分类号： G06F7/04 ,  G06F9/00 ,  G06F15/173 ,  G06F7/00 ,  H04L9/00 ,  H04K1/00 ,  H04L9/10 ,  H04L9/16 ,  H04L12/22 ,  H04L12/56

CPC分类号： H04L69/16 ,  G06F21/14 ,  H04L47/10 ,  H04L47/193 ,  H04L47/27 ,  H04L47/283 ,  H04L63/0227 ,  H04L63/10 ,  H04L69/161 ,  H04L69/163 ,  Y10S707/99939

摘要： This invention discloses a method and system for communication that consist of an end station and a network interface, such that, the network interface is capable of determining the authenticity of the program used by the end station to generate and send data packets. The method is based on using a hidden program that was obfuscated and encrypted within the program that is used to generate and send data packets from the end station. The hidden program is being updated dynamically and it includes the functionality for generating a pseudo random sequence of security signals. Only the network interface knows how the pseudo random sequence of security signals were generated, and therefore, the network interface is able to check the validity of the pseudo random sequence of security signals, and thereby, verify the authenticity of the programs used to generate and send data packets. The method further comprises of means for coordinating the initialization of the end station and network interface.

摘要翻译： 本发明公开了一种由终端站和网络接口组成的通信方法和系统，使得网络接口能够确定终端站使用的程序的真实性来生成和发送数据包。 该方法基于使用在程序内进行模糊和加密的隐藏程序，该程序用于从终端站生成和发送数据包。 隐藏的程序正在动态更新，它包括用于生成安全信号的伪随机序列的功能。 只有网络接口知道如何产生安全信号的伪随机序列，因此，网络接口能够检查安全信号的伪随机序列的有效性，从而验证用于生成和 发送数据包。 该方法还包括用于协调终端站和网络接口的初始化的装置。

公开(公告)号：US20090010152A1

公开(公告)日：2009-01-08

申请号：US12283324

申请日：2008-09-11

申请人： Yoram Ofek ,  Mario Baldi

发明人： Yoram Ofek ,  Mario Baldi

IPC分类号： H04L12/24 ,  H04J3/00

CPC分类号： H04L47/56 ,  H04L47/50 ,  H04L49/254 ,  H04L49/35

摘要： An input interface system for mapping data packets, each comprising a header portion and a payload portion, from at least one source to at least one destination. An interface method and system between asynchronous data packet flows and synchronized switching systems, which utilize a global common time reference. The synchronized switching systems utilize a time frame switching method based on predefined switching schedules that are responsive to a global common time reference, where the global common time reference is divided into a plurality of contiguous periodic time frames. The asynchronous data packet flows are routed according to information contained in the packets' header. The interface method and system maps the header information of the asynchronous data packet flows to respective time frames that match the predefined switching schedule over the synchronized switching system. The interface system can aggregate multiple asynchronous data packet flows into a single pre-defined switching schedule over the synchronized switching system.

摘要翻译： 一种用于将数据分组映射的输入接口系统，每个数据分组包括从至少一个源到至少一个目的地的报头部分和有效载荷部分。 异步数据包流和同步交换系统之间的接口方法和系统，利用全局公用时间参考。 同步交换系统利用基于响应于全局公共时间参考的预定义交换时间表的时间帧切换方法，其中全局公共时间基准被分成多个连续周期时间帧。 异步数据包流根据包头中的信息进行路由。 接口方法和系统将异步数据分组流的报头信息映射到与同步交换系统上的预定切换调度相匹配的各个时间帧。 接口系统可以通过同步交换系统将多个异步数据包流聚合成单个预定义的交换调度。

公开(公告)号：US07426206B1

公开(公告)日：2008-09-16

申请号：US09535831

申请日：2000-03-28

申请人： Yoram Ofek ,  Mario Baldi

发明人： Yoram Ofek ,  Mario Baldi

IPC分类号： H04L12/28

CPC分类号： H04L47/10 ,  H04J3/0644 ,  H04J3/0685 ,  H04L12/6418 ,  H04L29/06 ,  H04L47/22 ,  H04L47/28 ,  H04L69/28

摘要： An interface method and system between asynchronous data packet flows and synchronized switching systems, which utilize a global common time reference. The synchronized switching systems utilize a time frame switching method based on predefined switching schedules that are responsive to a global common time reference, where the global common time reference is divided into a plurality of contiguous periodic time frames. The asynchronous data packet flows are routed according to information contained in the packets' header. The interface method and system maps the header information of the asynchronous data packet flows to respective time frames that match the predefined switching schedule over the synchronized switching system. The interface system can aggregate multiple asynchronous data packet flows into a single pre-defined switching schedule over the synchronized switching system.

摘要翻译： 异步数据包流和同步交换系统之间的接口方法和系统，利用全局公用时间参考。 同步交换系统利用基于响应于全局公共时间参考的预定义交换时间表的时间帧切换方法，其中全局公共时间基准被分成多个连续周期时间帧。 异步数据包流根据包头中的信息进行路由。 接口方法和系统将异步数据分组流的报头信息映射到与同步交换系统上的预定切换调度相匹配的各个时间帧。 接口系统可以通过同步交换系统将多个异步数据包流聚合成单个预定义的交换调度。

公开(公告)号：US07177308B2

公开(公告)日：2007-02-13

申请号：US09961076

申请日：2001-09-21

申请人： Yoram Ofek ,  Mario Baldi

发明人： Yoram Ofek ,  Mario Baldi

IPC分类号： H04L12/50

CPC分类号： H04L47/10 ,  H04J3/0644 ,  H04J3/0685 ,  H04J2203/0082 ,  H04J2203/0083 ,  H04L12/6418 ,  H04L29/06 ,  H04L47/22 ,  H04L47/28 ,  H04L47/283 ,  H04L49/254 ,  H04L49/30 ,  H04L49/3009 ,  H04L49/3063 ,  H04L49/55 ,  H04L69/28 ,  H04L2012/5624 ,  H04L2012/5674 ,  H04Q11/0062 ,  H04Q11/0478 ,  H04Q2011/0033 ,  H04Q2011/0045

摘要： A time frame switching method and system of data units that utilize a common time reference, which is divided into a plurality of contiguous periodic time frames. The system is designed to operate with time frames, which have a plurality of predefined time durations. The plurality of data units that are contained in each of the time frames are forwarded in a pipelined manner through the network switches. The system operates with high-speed wavelength division multiplexing (WDM) links, i.e., with multiple lambdas, having a plurality of transmission capacities. The outcome of this method is called fractional lambda switching with a plurality of time frame durations.

摘要翻译： 时间帧切换方法和利用公共时间基准的数据单元的系统，其被划分为多个连续的周期时间帧。 该系统设计为具有多个预定义的持续时间的时间帧进行操作。 在每个时间帧中包含的多个数据单元通过网络交换机以流水线方式转发。 该系统利用具有多个传输容量的高速波分多路复用（WDM）链路，即具有多个lambdas的方式工作。 该方法的结果称为具有多个时间帧持续时间的分数λ切换。

公开(公告)号：US06982979B2

公开(公告)日：2006-01-03

申请号：US09960206

申请日：2001-09-21

申请人： Yoram Ofek ,  Mario Baldi

发明人： Yoram Ofek ,  Mario Baldi

IPC分类号： H04L12/28

CPC分类号： H04Q11/0478 ,  H04J3/0644 ,  H04J3/0685 ,  H04J2203/0082 ,  H04J2203/0083 ,  H04L12/6418 ,  H04L29/06 ,  H04L47/10 ,  H04L47/22 ,  H04L47/283 ,  H04L49/254 ,  H04L49/30 ,  H04L49/3009 ,  H04L49/3063 ,  H04L49/55 ,  H04L69/28 ,  H04L2012/5624 ,  H04L2012/5674 ,  H04Q11/0062 ,  H04Q2011/0033 ,  H04Q2011/0045

摘要： A time frame switching method and system of data units that utilize a time frame labels and a common time reference (CTR), which is divided into a plurality of contiguous periodic time frames. The system is designed to operate with high-speed wavelength division multiplexing (WDM) links. The plurality of data units that are contained in each of the time frames are forwarded in a pipelined manner through the network switches, and can be switched from any incoming WDM channel to any subset of outgoing WDM channels responsive to the time frame labels and the common time reference. The combination of time frame labels and CTR can be further used for protection when a failure occurs.

公开(公告)号：US07398398B2

公开(公告)日：2008-07-08

申请号：US10218830

申请日：2002-08-14

申请人： Yoram Ofek ,  Mario Baldi

发明人： Yoram Ofek ,  Mario Baldi

IPC分类号： H04L9/00 ,  H04L9/32 ,  G06F7/04 ,  G06F17/30 ,  G06F9/00 ,  G06F15/16 ,  G06K9/00

CPC分类号： H04L69/16 ,  G06F21/14 ,  H04L47/10 ,  H04L47/193 ,  H04L47/27 ,  H04L47/283 ,  H04L63/0227 ,  H04L63/10 ,  H04L69/161 ,  H04L69/163 ,  Y10S707/99939

摘要： An authenticated and metered flow control method provides a network interface with the capability to determine the authenticity of programs used to generate and send data packets, thereby ensuring that users who send data packets are well behaved. The method is based on using a hidden program that was obfuscated into the program used for generating and sending data packets. More specifically, the hidden program generates a pseudo random sequence of security signals that are included in the sequence of data packets that are sent from the user to the network interface. Only the network interface knows how the pseudo random sequence of security signals was generated, and therefore, the network interface is able to check the validity of the pseudo random sequence of security signals, and thereby verify the authenticity of the programs used to generate and send data packets.

摘要翻译： 经过认证和计量的流量控制方法为网络接口提供了确定用于生成和发送数据包的程序的真实性的能力，从而确保发送数据包的用户行为良好。 该方法基于使用被隐藏到用于生成和发送数据分组的程序中的隐藏程序。 更具体地，隐藏程序产生包含在从用户发送到网络接口的数据分组序列中的安全信号的伪随机序列。 只有网络接口知道如何产生安全信号的伪随机序列，因此，网络接口能够检查安全信号的伪随机序列的有效性，从而验证用于生成和发送的程序的真实性 数据包。

公开(公告)号：US07801132B2

公开(公告)日：2010-09-21

申请号：US12283324

申请日：2008-09-11

申请人： Yoram Ofek ,  Mario Baldi

发明人： Yoram Ofek ,  Mario Baldi

IPC分类号： H04L12/28

CPC分类号： H04L47/56 ,  H04L47/50 ,  H04L49/254 ,  H04L49/35

摘要： An input interface system for mapping data packets, each comprising a header portion and a payload portion, from at least one source to at least one destination. An interface method and system between asynchronous data packet flows and synchronized switching systems, which utilize a global common time reference. The synchronized switching systems utilize a time frame switching method based on predefined switching schedules that are responsive to a global common time reference, where the global common time reference is divided into a plurality of contiguous periodic time frames. The asynchronous data packet flows are routed according to information contained in the packets' header. The interface method and system maps the header information of the asynchronous data packet flows to respective time frames that match the predefined switching schedule over the synchronized switching system. The interface system can aggregate multiple asynchronous data packet flows into a single pre-defined switching schedule over the synchronized switching system.

摘要翻译： 一种用于将数据分组映射的输入接口系统，每个数据分组包括从至少一个源到至少一个目的地的报头部分和有效载荷部分。 异步数据包流和同步交换系统之间的接口方法和系统，利用全局公用时间参考。 同步交换系统利用基于响应于全局公共时间参考的预定义交换时间表的时间帧切换方法，其中全局公共时间基准被分成多个连续周期时间帧。 异步数据包流根据包头中的信息进行路由。 接口方法和系统将异步数据分组流的报头信息映射到与同步交换系统上的预定切换调度相匹配的各个时间帧。 接口系统可以通过同步交换系统将多个异步数据包流聚合成单个预定义的交换调度。

公开(公告)号：US07509687B2

公开(公告)日：2009-03-24

申请号：US10691277

申请日：2003-10-22

申请人： Yoram Ofek ,  Mario Baldi

发明人： Yoram Ofek ,  Mario Baldi

IPC分类号： G06F7/04 ,  G06F17/30 ,  G06F15/16 ,  G06K9/00 ,  H03M1/68 ,  H04K1/00 ,  H04L9/00 ,  H04L9/32 ,  H04N7/16

CPC分类号： H04L63/02 ,  G06F21/14 ,  G06F21/31 ,  H04L63/10 ,  H04L63/12

摘要： The objective of this invention is to provide continuous remote authenticated operations for ensuring proper content processing and management in remote untrusted computing environment. The method is based on using a program that was hidden within the content protection program at the remote untrusted computing environment, e.g., an end station. The hidden program can be updated dynamically and it includes an inseparable and interlocked functionality for generating a pseudo random sequence of security signals. Only the media server that sends the content knows how the pseudo-random sequence of security signals were generated; therefore, the media server is able to check the validity of the security signals, and thereby, verify the authenticity of the programs used to process content at the remote untrusted computing environment. If the verification operation fails, the media server will stop the transmission of content to the remote untrusted computing environment.

摘要翻译： 本发明的目的是提供连续的远程验证操作，以确保在远程不受信任的计算环境中适当的内容处理和管理。 该方法基于使用隐藏在远程不可信计算环境（例如终端站）内的内容保护程序中的程序。 隐藏的程序可以动态更新，它包括一个不可分割和互锁的功能，用于生成安全信号的伪随机序列。 只有发送内容的媒体服务器才知道如何生成安全信号的伪随机序列; 因此，媒体服务器能够检查安全信号的有效性，从而验证用于在远程不受信任的计算环境下处理内容的程序的真实性。 如果验证操作失败，则媒体服务器将停止将内容传输到远程不受信任的计算环境。

公开(公告)号：US07307989B2

公开(公告)日：2007-12-11

申请号：US10390500

申请日：2003-03-17

申请人： Yoram Ofek ,  Mario Baldi

发明人： Yoram Ofek ,  Mario Baldi

IPC分类号： H04L12/28

CPC分类号： H04L69/16 ,  G06F21/14 ,  H04L47/10 ,  H04L47/193 ,  H04L47/27 ,  H04L47/283 ,  H04L63/0227 ,  H04L63/10 ,  H04L69/161 ,  H04L69/163 ,  Y10S707/99939

摘要： This invention relates generally to a method and apparatus for timely forwarding, discarding, and delivering data packets over the network and to their destination nodes and the optimization of data transfer throughput through the network. The timely forwarding and discarding are possible thanks to the standard global common time reference (CTR) that is known as UTC (Coordinated Universal Time). UTC is available from GPS (Global Positioning System), Galileo, and GLONASS (Global Navigation Satellite System). Data transfer throughput optimization is pursued by taking advantage of the timely forwarding and discarding properties to improve the data packets transfer flow control mechanisms, such as the sliding window re-sizing algorithm implemented by the widely deployed Transmission Control Protocol (TCP).

摘要翻译： 本发明一般涉及一种通过网络及其目的地节点及时转发，丢弃和传送数据分组并通过网络优化数据传输吞吐量的方法和装置。 由于标准的全球通用时间参考（CTR）被称为UTC（协调世界时）），可以及时进行转发和丢弃。 UTC可从GPS（全球定位系统），伽利略和GLONASS（全球导航卫星系统）获得。 通过利用及时的转发和丢弃属性来改进数据传输流量控制机制，如广泛部署的传输控制协议（TCP）实现的滑动窗口重新调整算法，实现数据传输吞吐量优化。