System for packet filtering of data packets at a computer network
interface
    1.
    发明授权
    System for packet filtering of data packets at a computer network interface 失效
    用于在计算机网络接口处对数据分组进行分组过滤的系统

    公开(公告)号:US5878231A

    公开(公告)日:1999-03-02

    申请号:US795374

    申请日:1997-02-04

    CPC分类号: H04L63/0236

    摘要: A system for screening data packets transmitted between a network to be protected, such as a private network, and another network, such as a public network. The system includes a dedicated computer with multiple (specifically, three) types of network ports: one connected to each of the private and public networks, and one connected to a proxy network that contains a predetermined number of the hosts and services, some of which may mirror a subset of those found on the private network. The proxy network is isolated from the private network, so it cannot be used as a jumping off point for intruders. Packets received at the screen (either into or out of a host in the private network) are filtered based upon their contents, state information and other criteria, including their source and destination, and actions are taken by the screen depending upon the determination of the filtering phase. The packets may be allowed through, with or without alteration of their data, IP (internet protocol) address, etc., or they may be dropped, with or without an error message generated to the sender of the packet. Packets may be sent with or without alteration to a host on the proxy network that performs some or all of the functions of the intended destination host as specified by a given packet. The passing through of packets without the addition of any network address pertaining to the screening system allows the screening system to function without being identifiable by such an address, and therefore it is more difficult to target as an IP entity, e.g. by intruders.

    摘要翻译: 一种用于筛选在诸如专用网络的被保护网络之间传送的数据分组和诸如公共网络的另一网络之间的数据分组的系统。 该系统包括具有多个(具体为三个)类型的网络端口的专用计算机:一个连接到每个私有和公共网络,以及一个连接到代理网络,其包含预定数量的主机和服务,其中一些 可能会反映在专用网络中发现的一个子集。 代理网络与专用网络隔离,因此不能作为入侵者的跳点使用。 根据其内容,状态信息和其他标准(包括其源和目的地),屏幕上接收到的数据包(进入或离开专用网络中的主机)被过滤,并且屏幕采取行动,这取决于 过滤阶段。 可以允许数据包通过或不改变其数据,IP(因特网协议)地址等,或者可以丢弃具有或不发送到分组的发送者的错误消息。 可以向代理网络上的主机发送或不进行分组,该主机执行由给定分组指定的预期目的地主机的一些或全部功能。 通过分组而不添加与筛选系统相关的任何网络地址,允许筛选系统在不被该地址识别的情况下起作用,因此更难以将其定位为IP实体。 由入侵者

    Radio transceiver having shared modulation and demodulation mixer
circuits
    2.
    发明授权
    Radio transceiver having shared modulation and demodulation mixer circuits 失效
    具有共享调制和解调混频器电路的无线电收发器

    公开(公告)号:US5590413A

    公开(公告)日:1996-12-31

    申请号:US181329

    申请日:1994-01-14

    CPC分类号: H04B1/403 H04B1/26 H04B1/30

    摘要: A radio transceiver including an antenna for transmitting and receiving radio signals, a reception section for selecting a received carrier signal, a transmission amplifier section for amplifying signals to be broadcast, a mixer, coupled between the reception section and the transmission section, a variable frequency generator for generating local frequencies for the mixer, and a first (synphase) quadrature demodulating channel and a second (square) channel demodulating channel. The mixer includes a first switch, a first double balanced (DB) mixer, intermediate frequency (IF) filter, IF amplifier, power divider, and a second DB mixer. These components are used during both transmission and reception by the radio transceiver.

    摘要翻译: 一种无线电收发器,包括用于发送和接收无线电信号的天线,用于选择接收到的载波信号的接收部分,用于放大要广播的信号的发送放大器部分,耦合在接收部分和发送部分之间的混合器,可变频率 用于产生用于混频器的本地频率的发生器,以及第一(同相)正交解调信道和第二(正方形)信道解调信道。 混频器包括第一开关,第一双平衡(DB)混频器,中频(IF)滤波器,IF放大器,功率分配器和第二DB混频器。 这些组件在无线电收发器的发送和接收期间都被使用。

    System for packet filtering of data packet at a computer network
interface
    3.
    发明授权
    System for packet filtering of data packet at a computer network interface 失效
    在计算机网络接口上对数据包进行数据包过滤的系统

    公开(公告)号:US5884025A

    公开(公告)日:1999-03-16

    申请号:US795373

    申请日:1997-02-04

    CPC分类号: H04L63/0236

    摘要: A system for screening data packets transmitted between a network to be protected, such as a private network, and another network, such as a public network. The system includes a dedicated computer with multiple (specifically, three) types of network ports: one connected to each of the private and public networks, and one connected to a proxy network that contains a predetermined number of the hosts and services, some of which may mirror a subset of those found on the private network. The proxy network is isolated from the private network, so it cannot be used as a jumping off point for intruders. Packets received at the screen (either into or out of a host in the private network) are filtered based upon their contents, state information and other criteria, including their source and destination, and actions are taken by the screen depending upon the determination of the filtering phase. The packets may be allowed through, with or without alteration of their data, IP (internet protocol) address, etc., or they may be dropped, with or without an error message generated to the sender of the packet. Packets may be sent with or without alteration to a host on the proxy network that performs some or all of the functions of the intended destination host as specified by a given packet. The passing through of packets without the addition of any network address pertaining to the screening system allows the screening system to function without being identifiable by such an address, and therefore it is more difficult to target as an IP entity, e.g. by intruders.

    摘要翻译: 一种用于筛选在诸如专用网络的被保护网络之间传送的数据分组和诸如公共网络的另一网络之间的数据分组的系统。 该系统包括具有多个(具体为三个)类型的网络端口的专用计算机:一个连接到每个私有和公共网络,以及一个连接到代理网络,其包含预定数量的主机和服务,其中一些 可能会反映在专用网络中发现的一个子集。 代理网络与专用网络隔离,因此不能作为入侵者的跳点使用。 根据其内容,状态信息和其他标准(包括其源和目的地),屏幕上接收到的数据包(进入或离开专用网络中的主机)被过滤,并且屏幕采取行动,这取决于 过滤阶段。 可以允许数据包通过或不改变其数据,IP(因特网协议)地址等,或者可以丢弃具有或不发送到分组的发送者的错误消息。 可以向代理网络上的主机发送或不进行分组,该主机执行由给定分组指定的预期目的地主机的一些或全部功能。 通过分组而不添加与筛选系统相关的任何网络地址,允许筛选系统在不被该地址识别的情况下起作用,因此更难以将其定位为IP实体。 由入侵者

    System for packet filtering of data packets at a computer network
interface

    公开(公告)号:US5802320A

    公开(公告)日:1998-09-01

    申请号:US444351

    申请日:1995-05-18

    CPC分类号: H04L63/0236

    摘要: A system for screening data packets transmitted between a network to be protected, such as a private network, and another network, such as a public network. The system includes a dedicated computer with multiple (specifically, three) types of network ports: one connected to each of the private and public networks, and one connected to a proxy network that contains a predetermined number of the hosts and services, some of which may mirror a subset of those found on the private network. The proxy network is isolated from the private network, so it cannot be used as a jumping off point for intruders. Packets received at the screen (either into or out of a host in the private network) are filtered based upon their contents, state information and other criteria, including their source and destination, and actions are taken by the screen depending upon the determination of the filtering phase. The packets may be allowed through, with or without alteration of their data, IP (internet protocol) address, etc., or they may be dropped, with or without an error message generated to the sender of the packet. Packets may be sent with or without alteration to a host on the proxy network that performs some or all of the functions of the intended destination host as specified by a given packet. The passing through of packets without the addition of any network address pertaining to the screening system allows the screening system to function without being identifiable by such an address, and therefore it is more difficult to target as an IP entity, e.g. by intruders.

    Laser printer output director
    5.
    发明授权
    Laser printer output director 失效
    激光打印机输出主管

    公开(公告)号:US5644685A

    公开(公告)日:1997-07-01

    申请号:US349924

    申请日:1994-12-06

    申请人: Geoffrey G. Baehr

    发明人: Geoffrey G. Baehr

    摘要: In the present invention, a microprocessor controls a moveable output hopper with multiple paper slots attached to a laser printer. Print jobs of different users are directed to separate open slots by user name or other identifier corresponding to a particular user. A small LCD panel for each slot displays an identifier representing the user whose job is currently using the output slot. Incoming print data to the laser printer is monitored for a banner page. The user name or identifier is then extracted from the banner page, and if the current job is for a new user, the trays are moved and the print job is output to the first unused tray. A user name or identifier corresponding to the printed output is also displayed on an LCD panel corresponding to a particular tray. If all trays are full, print jobs are sent to a tray designated as the default/shared tray.

    摘要翻译: 在本发明中,微处理器控制具有连接到激光打印机的多个纸槽的可移动输出料斗。 不同用户的打印作业通过用户名或对应于特定用户的其他标识来分开开放时隙。 每个插槽的小型LCD面板显示一个表示其作业正在使用输出插槽的用户的标识符。 监控到打印机的打印数据到横幅页面。 然后从横幅页面中提取用户名或标识符,如果当前作业是针对新用户的,则移动纸盘,并将打印作业输出到第一个未使用的纸盘。 对应于打印输出的用户名或标识符也显示在对应于特定纸盘的LCD面板上。 如果所有纸盘已满,打印作业将发送到指定为默认/共享纸盘的纸盘。