公开(公告)号：US08813180B1

公开(公告)日：2014-08-19

申请号：US14061720

申请日：2013-10-23

申请人： Lee Chen ,  John Chiong ,  Dennis I. Oshiba

发明人： Lee Chen ,  John Chiong ,  Dennis I. Oshiba

IPC分类号： H04L29/06 ,  H04L29/08 ,  H04W12/00

CPC分类号： H04L63/0263 ,  G06F21/00 ,  G06F21/44 ,  H04L12/66 ,  H04L51/04 ,  H04L63/02 ,  H04L63/0227 ,  H04L63/0236 ,  H04L63/0245 ,  H04L63/0254 ,  H04L63/029 ,  H04L63/0407 ,  H04L63/08 ,  H04L63/10 ,  H04L63/102 ,  H04L63/105 ,  H04L63/164 ,  H04L63/168 ,  H04L63/20 ,  H04L63/30 ,  H04L65/1026 ,  H04L67/10 ,  H04L67/1004 ,  H04L67/104 ,  H04L67/141 ,  H04L67/22 ,  H04L67/306 ,  H04L67/42 ,  H04L69/28 ,  H04L69/329 ,  H04M1/72547 ,  H04W12/00

摘要： Applying a security policy to an application session, includes: recognizing the application session between a network and an application via a security gateway; determining by the security gateway a user identity of the application session using information about the application session; obtaining by the security gateway the security policy comprising network parameters mapped to the user identity; and applying the security policy to the application session by the security gateway. The user identity may be a network user identity or an application user identity recognized from packets of the application session. The security policy may comprise a network traffic policy mapped and/or a document access policy mapped to the user identity, where the network traffic policy is applied to the application session. The security gateway may further generate a security report concerning the application of the security policy to the application session.

摘要翻译： 将安全策略应用于应用程序会话包括：通过安全网关识别网络和应用程序之间的应用程序会话; 使用关于应用会话的信息由安全网关确定应用会话的用户身份; 由安全网关获取包括映射到用户身份的网络参数的安全策略; 并将安全策略应用于安全网关的应用会话。 用户身份可以是从应用会话的分组识别的网络用户身份或应用用户身份。 安全策略可以包括被映射的网络流量策略和/或映射到用户身份的文档访问策略，其中将网络流量策略应用于应用会话。 安全网关还可以生成关于安全策略应用于应用会话的安全报告。

公开(公告)号：US20110093522A1

公开(公告)日：2011-04-21

申请号：US12603471

申请日：2009-10-21

申请人： Lee Chen ,  John Chiong

发明人： Lee Chen ,  John Chiong

IPC分类号： G06F15/16

CPC分类号： H04L41/12 ,  H04L29/12066 ,  H04L61/1511 ,  H04L67/1002 ,  H04L67/1021 ,  H04L67/1036

摘要： A method and system to determine a web server based on geo-location information is disclosed. The system includes: a local DNS server coupled to a web client; a plurality of web servers; and a global load balancer coupled to the local DNS server. The global load balancer: receives a request for a web service sent by the web client, the request comprising local DNS server information; determines a geographic location for the local DNS server based on the local DNS server information; determines a web server from the plurality of web servers based on the requested web service; determines a geographic location for the determined web server; determines that the geographic location for the local DNS server matches the geographic location for the determined web server; selects the determined web server; and sends a response comprising information on the selected web server to the local DNS server.

摘要翻译： 公开了一种基于地理位置信息确定Web服务器的方法和系统。 该系统包括：耦合到web客户端的本地DNS服务器; 多个web服务器; 以及耦合到本地DNS服务器的全局负载平衡器。 全局负载平衡器：接收由Web客户端发送的Web服务的请求，该请求包括本地DNS服务器信息; 基于本地DNS服务器信息确定本地DNS服务器的地理位置; 基于所请求的web服务从多个web服务器确定web服务器; 确定所确定的web服务器的地理位置; 确定本地DNS服务器的地理位置与确定的Web服务器的地理位置相匹配; 选择确定的Web服务器; 并将包含所选web服务器上的信息的响应发送到本地DNS服务器。

公开(公告)号：US09960967B2

公开(公告)日：2018-05-01

申请号：US12603471

申请日：2009-10-21

申请人： Lee Chen ,  John Chiong

发明人： Lee Chen ,  John Chiong

IPC分类号： H04L12/24 ,  H04L29/12 ,  H04L29/08

CPC分类号： H04L41/12 ,  H04L29/12066 ,  H04L61/1511 ,  H04L67/1002 ,  H04L67/1021 ,  H04L67/1036

摘要： A method and system to determine a web server based on geo-location information is disclosed. The system includes: a local DNS server coupled to a web client; a plurality of web servers; and a global load balancer coupled to the local DNS server. The global load balancer: receives a request for a web service sent by the web client, the request comprising local DNS server information; determines a geographic location for the local DNS server based on the local DNS server information; determines a web server from the plurality of web servers based on the requested web service; determines a geographic location for the determined web server; determines that the geographic location for the local DNS server matches the geographic location for the determined web server; selects the determined web server; and sends a response comprising information on the selected web server to the local DNS server.

公开(公告)号：US09219751B1

公开(公告)日：2015-12-22

申请号：US13943642

申请日：2013-07-16

申请人： Lee Chen ,  John Chiong ,  Dennis Oshiba

发明人： Lee Chen ,  John Chiong ,  Dennis Oshiba

IPC分类号： H04L29/06 ,  H04L29/08 ,  H04L12/58 ,  H04M1/725 ,  G06F21/00

CPC分类号： H04L63/0263 ,  G06F21/00 ,  G06F21/44 ,  H04L12/66 ,  H04L51/04 ,  H04L63/02 ,  H04L63/0227 ,  H04L63/0236 ,  H04L63/0245 ,  H04L63/0254 ,  H04L63/029 ,  H04L63/0407 ,  H04L63/08 ,  H04L63/10 ,  H04L63/102 ,  H04L63/105 ,  H04L63/164 ,  H04L63/168 ,  H04L63/20 ,  H04L63/30 ,  H04L65/1026 ,  H04L67/10 ,  H04L67/1004 ,  H04L67/104 ,  H04L67/141 ,  H04L67/22 ,  H04L67/306 ,  H04L67/42 ,  H04L69/28 ,  H04L69/329 ,  H04M1/72547 ,  H04W12/00

摘要： Method for applying a security policy to an application session, includes: recognizing the application session between a network and an application via a security gateway; determining by the security gateway a user identity of the application session using information about the application session; obtaining by the security gateway the security policy comprising network parameters mapped to the user identity; and applying the security policy to the application session by the security gateway. The user identity may be a network user identity or an application user identity recognized from packets of the application session. The security policy may comprise a network traffic policy mapped and/or a document access policy mapped to the user identity, where the network traffic policy is applied to the application session. The security gateway may further generate a security report concerning the application of the security policy to the application session.

摘要翻译： 将安全策略应用于应用会话的方法包括：通过安全网关识别网络与应用之间的应用会话; 使用关于应用会话的信息由安全网关确定应用会话的用户身份; 由安全网关获取包括映射到用户身份的网络参数的安全策略; 并将安全策略应用于安全网关的应用会话。 用户身份可以是从应用会话的分组识别的网络用户身份或应用用户身份。 安全策略可以包括被映射的网络流量策略和/或映射到用户身份的文档访问策略，其中将网络流量策略应用于应用会话。 安全网关还可以生成关于安全策略应用于应用会话的安全报告。

公开(公告)号：US08782751B2

公开(公告)日：2014-07-15

申请号：US13423953

申请日：2012-03-19

申请人： Lee Chen ,  John Chiong ,  Yang Yu

发明人： Lee Chen ,  John Chiong ,  Yang Yu

IPC分类号： G06F21/57

CPC分类号： H04L63/08 ,  G11C7/24 ,  H04L63/107 ,  H04W12/06 ,  H04W12/08

摘要： Systems and methods of authenticating user access based on an access point to a secure data network include a secure data network having a plurality of a network access points serving as entry points for a user to access the secure data network using a user device. The user is associated with a user identity, each network access point with a network access point identity. The user uses a user device to send an access request, requesting access to the secure data network, to the network access point, which then sends an authentication request to an identity server. The identity server processes the authentication request, by validating the combination of the user identity and the network access point identity, and responds with an authentication response, granting or denying access, as communicated to the user device via an access response.

摘要翻译： 基于对安全数据网络的接入点认证用户接入的系统和方法包括具有多个网络接入点的安全数据网络，该网络接入点用作用户使用用户设备访问安全数据网络的入口点。 用户与用户身份相关联，每个网络接入点具有网络接入点身份。 用户使用用户设备向网络接入点发送访问安全数据网络的访问请求，网络接入点然后向认证服务器发送认证请求。 身份服务器通过验证用户身份和网络接入点身份的组合来处理身份验证请求，并通过访问响应传达给用户设备的认证响应，授予或拒绝访问进行响应。

公开(公告)号：US07552126B2

公开(公告)日：2009-06-23

申请号：US11446028

申请日：2006-06-02

申请人： Lee Chen ,  John Chiong ,  Phillip Kwan

发明人： Lee Chen ,  John Chiong ,  Phillip Kwan

IPC分类号： G06F17/30

CPC分类号： H04L63/10 ,  H04L63/1425

摘要： Systems and methods of managing access records of user access to a secure data network include an access record gateway and an access record datastore; the access record gateway being in communication with an access server of the secure data network; and the access record datastore being in communication with the access record gateway. The access record gateway acquires user access information, such as time information; records the user access information in at least one access record; and stores the at least one access record in the access record datastore. The access record gateway also acquires user access activity information, such as user access termination information, and updates previously recorded user access information with the user access activity information. The at least one access record includes a plurality of sub-records, selected from a list including a user information sub-record, a network information sub-record, and a time information sub-record. The system may include a security application in communication with the access record gateway to query for an access record satisfying the security query parameter(s).

摘要翻译： 管理对安全数据网络的用户访问的访问记录的系统和方法包括访问记录网关和访问记录数据存储; 所述接入记录网关与所述安全数据网络的接入服务器通信; 并且访问记录数据存储与访问记录网关通信。 接入记录网关获取用户接入信息，如时间信息; 将用户访问信息记录在至少一个访问记录中; 并将至少一个访问记录存储在访问记录数据存储中。 访问记录网关还获取诸如用户访问终止信息的用户访问活动信息，并且用用户访问活动信息更新先前记录的用户访问信息。 所述至少一个访问记录包括从包括用户信息子记录，网络信息子记录和时间信息子记录的列表中选择的多个子记录。 系统可以包括与访问记录网关通信的安全应用，以查询满足安全查询参数的访问记录。

公开(公告)号：US20150376797A1

公开(公告)日：2015-12-31

申请号：US14320058

申请日：2014-06-30

申请人： Lee Chen ,  Ying Zhang

发明人： Lee Chen ,  Ying Zhang

IPC分类号： C23F1/02 ,  C23F1/08 ,  H01J37/32 ,  C23F4/00

CPC分类号： C23F1/02 ,  C23F1/08 ,  C23F4/00 ,  C23G5/00 ,  H01J37/32862 ,  H01J2237/334

摘要： A method for anisotropically etching a feature in a Cu-containing layer includes providing a substrate having a Cu-containing layer and a patterned etch mask formed on the Cu-containing layer such that on exposed Cu-containing layer is exposed to processing through the patterned etch mask, passivating a first surface of the exposed Cu-containing layer, and inhibiting passivation of a second surface of the Cu-containing layer. A Cu compound is formed on said second surface of the Cu-containing layer, and the Cu compound is removed from the second surface of the Cu-containing layer to anisotropically etch a feature in the Cu-containing layer.

摘要翻译： 一种用于各向异性蚀刻含Cu层中的特征的方法包括提供具有含Cu层的基板和形成在含Cu层上的图案化蚀刻掩模，使得暴露的含Cu层暴露于通过图案化的处理 蚀刻掩模，钝化暴露的含Cu层的第一表面，并抑制含Cu层的第二表面的钝化。 在Cu含量层的第二表面上形成Cu化合物，并且从Cu含量层的第二表面除去Cu化合物以各向异性地蚀刻含Cu层中的特征。

公开(公告)号：US09112715B2

公开(公告)日：2015-08-18

申请号：US12765765

申请日：2010-04-22

申请人： Nitin Jain ,  Lee Chen ,  Earl Ferguson ,  Min Zhu

发明人： Nitin Jain ,  Lee Chen ,  Earl Ferguson ,  Min Zhu

IPC分类号： H04L12/18

CPC分类号： H04L12/1886

摘要： A routing system utilizes a layer 2 switch interconnecting several routers to intelligently forward multicast packets throughout an interne exchange carrying multicast content. The layer 2 switch performs protocol snooping to extract a lookup key that is based on network layer protocol information. The lookup key is uniquely formulated to support either shared or explicit source distribution trees. The lookup key is used to query a forwarding memory that returns an outgoing port index. The outgoing port index points to one or more outgoing ports that are eligible to receive the multicast packet. The outgoing ports are also connected to the neighboring device(s) that are designated to receive the multicast packet. The routing system also supports real time maintenance and updating of the forwarding memory based on the periodic exchange of control messages. The routing system is configured to support PIM routers operating in PIM SM or PIM SSM modes. However, the routing system can also support other multicast protocols and/or standards.

摘要翻译： 路由系统利用互连多个路由器的层2交换机在携带多播内容的内部交换机中智能地转发多播分组。 第二层交换机执行协议侦听，提取基于网络层协议信息的查找密钥。 查找密钥是独一无二的，用于支持共享或明确的源分发树。 查询键用于查询返回出站端口索引的转发内存。 出站端口索引指向一个或多个有资格接收组播数据包的输出端口。 输出端口也连接到被指定为接收多播分组的相邻设备。 路由系统还支持基于控制消息的周期性交换的转发存储器的实时维护和更新。 路由系统配置为支持以PIM SM或PIM SSM模式运行的PIM路由器。 然而，路由系统还可以支持其他多播协议和/或标准。

公开(公告)号：US09111727B2

公开(公告)日：2015-08-18

申请号：US13249560

申请日：2011-09-30

申请人： Jianping Zhao ,  Lee Chen ,  Merritt Funk ,  Toshihiko Iwao ,  Peter L.G. Ventzek

发明人： Jianping Zhao ,  Lee Chen ,  Merritt Funk ,  Toshihiko Iwao ,  Peter L.G. Ventzek

IPC分类号： C23C16/00 ,  C23F1/00 ,  H01L21/306 ,  H01J37/32

CPC分类号： H01J37/32256 ,  H01J37/32247 ,  H01J37/32935 ,  H01L22/00

摘要： The invention provides a plurality of resonator subsystems. The resonator subsystems can comprise one or more resonant cavities configured to couple electromagnetic (EM) energy in a desired EM wave mode to plasma by generating resonant microwave energy in a resonant cavity adjacent the plasma. The resonator subsystem can be coupled to a process chamber using one or more interface subsystems and can comprise one or more resonant cavities, and each resonant cavity can have a plurality of plasma tuning rods coupled thereto. Some of the plasma tuning rods can be configured to couple the EM-energy from one or more of the resonant cavities to the process space within the process chamber.

摘要翻译： 本发明提供了多个谐振器子系统。 谐振器子系统可以包括一个或多个谐振腔，其被配置为通过在与等离子体相邻的谐振腔中产生谐振微波能量将所期望的EM波模式中的电磁（EM）能量耦合到等离子体。 谐振器子系统可以使用一个或多个接口子系统耦合到处理室，并且可以包括一个或多个谐振腔，并且每个谐振腔可以具有耦合到其上的多个等离子体调谐棒。 一些等离子体调谐杆可被配置成将EM能量从一个或多个谐振腔耦合到处理室内的处理空间。

公开(公告)号：US20150156223A1

公开(公告)日：2015-06-04

申请号：US14094529

申请日：2013-12-02

申请人： Feilong Xu ,  Chih-Wei Chao ,  Lee Chen

发明人： Feilong Xu ,  Chih-Wei Chao ,  Lee Chen

IPC分类号： H04L29/06

CPC分类号： H04L65/105 ,  H04L65/1069 ,  H04L67/141

摘要： A system and method for providing a network proxy layer are disclosed. The network proxy layer may receive a connection establishment event for a client connection of an application session and send the client connection event to an application proxy for the application session, the application proxy being associated with an application of a server. Upon establishment of the client connection, the network proxy layer may receive one or more data packets from the client connection. The network proxy layer may further receive a connection establishment event for a server connection of the application session of the server, and receive one or more data packets from the server connection.

摘要翻译： 公开了一种用于提供网络代理层的系统和方法。 网络代理层可以接收用于应用会话的客户端连接的连接建立事件，并且将客户端连接事件发送到应用程序会话的应用代理，应用代理与服务器的应用相关联。 在建立客户端连接时，网络代理层可以从客户端连接接收一个或多个数据分组。 网络代理层还可以接收服务器应用会话的服务器连接的连接建立事件，并从服务器连接接收一个或多个数据包。