Determination of Spoofing of a Unique Machine Identifier
    2.
    发明申请
    Determination of Spoofing of a Unique Machine Identifier 有权
    确定唯一机器标识符的欺骗

    公开(公告)号:US20140359763A1

    公开(公告)日:2014-12-04

    申请号:US14372517

    申请日:2012-01-31

    IPC分类号: H04L29/06 H04L12/26

    摘要: In one embodiment, an edge network device may monitor a network service that is provided at a network service device. Information related to the monitored network service may be temporarily stored at the edge network device and transmitted to a remote network device. In one embodiment, an administrative device may compare current extracted information with stored historical information to determine if a unique machine identifier of an end user device has been spoofed.

    摘要翻译: 在一个实施例中,边缘网络设备可以监视在网络服务设备处提供的网络服务。 与所监视的网络服务相关的信息可以临时存储在边缘网络设备处并被发送到远程网络设备。 在一个实施例中,管理设备可以将当前提取的信息与存储的历史信息进行比较,以确定最终用户设备的唯一机器标识符是否已被欺骗。

    TRANSMISSION OF CONFIGURATION TO A DEVICE FOR PROVISIONING IN A NETWORK
    3.
    发明申请
    TRANSMISSION OF CONFIGURATION TO A DEVICE FOR PROVISIONING IN A NETWORK 审中-公开
    将配置传输到用于在网络中提供的设备

    公开(公告)号:US20130031227A1

    公开(公告)日:2013-01-31

    申请号:US13191852

    申请日:2011-07-27

    IPC分类号: G06F15/177

    摘要: A method is provided that includes receiving a communication from a trusted device indicating that a device to be provisioned has been added to the network; obtaining identifying information of the device to be provisioned; accessing a stored configuration for the device based on the identifying information; and transmitting the configuration to the device for provisioning. Alternatively, a computer-readable medium is provided that stores instructions to perform a method to transmit a discovery communication to a trusted device, receive a communication originating at an administrative device including a configuration; and provision the device via reboot with the configuration. Alternatively, an apparatus is provided including a table of provisioning configurations, the table including a configuration for a device to be provisioned in a network and a provisioning module to retrieve the configuration of the device stored in the table of provisioning configurations based on identifying information received from a discovery communication.

    摘要翻译: 提供了一种方法,包括从可信设备接收指示要被供应的设备已被添加到网络的通信; 获取要提供的设备的识别信息; 基于识别信息访问设备的存储配置; 以及将配置发送到所述设备供配置。 或者,提供了一种计算机可读介质,其存储执行将发现通信发送到可信设备的方法的指令,接收源自包括配置的管理设备的通信; 并通过重新启动配置设备。 或者,提供了一种装置,其包括供应配置表,该表包括用于在网络中提供的设备的配置,以及供应模块,用于基于接收到的识别信息来检索存储在供应配置表中的设备的配置 从发现沟通。

    Method and system for monitoring network health
    4.
    发明授权
    Method and system for monitoring network health 有权
    监测网络健康的方法和系统

    公开(公告)号:US07634682B2

    公开(公告)日:2009-12-15

    申请号:US11590038

    申请日:2006-10-30

    IPC分类号: G06F11/00

    摘要: A method and system for monitoring a characteristic relating to real-time network health are described. The method includes detecting a functionality attribute of a service application accessed with a server of the network. Networking devices of the network are interrogated in relation to an operational status thereof. The real-time network health characteristic is inferred from the functionality attribute and/or the operational status detected.

    摘要翻译: 描述了一种用于监视与实时网络健康有关的特征的方法和系统。 该方法包括检测由网络的服务器访问的服务应用的功能属性。 网络的网络设备相对于其操作状态进行询问。 从功能属性和/或检测到的操作状态推断实时网络健康特性。

    Method and system for monitoring network health
    5.
    发明申请
    Method and system for monitoring network health 有权
    监测网络健康的方法和系统

    公开(公告)号:US20080155327A1

    公开(公告)日:2008-06-26

    申请号:US11590038

    申请日:2006-10-30

    IPC分类号: G06F11/00

    摘要: A method and system for monitoring a characteristic relating to real-time network health are described. The method includes detecting a functionality attribute of a service application accessed with a server of the network. Networking devices of the network are interrogated in relation to an operational status thereof. The real-time network health characteristic is inferred from the functionality attribute and/or the operational status detected.

    摘要翻译: 描述了一种用于监视与实时网络健康有关的特征的方法和系统。 该方法包括检测由网络的服务器访问的服务应用的功能属性。 网络的网络设备相对于其操作状态进行询问。 从功能属性和/或检测到的操作状态推断实时网络健康特性。

    PUBLIC KEY GENERATION UTILIZING MEDIA ACCESS CONTROL ADDRESS
    6.
    发明申请
    PUBLIC KEY GENERATION UTILIZING MEDIA ACCESS CONTROL ADDRESS 有权
    公共密钥生成利用媒体访问控制地址

    公开(公告)号:US20140068252A1

    公开(公告)日:2014-03-06

    申请号:US13600318

    申请日:2012-08-31

    IPC分类号: H04L9/32 H04L9/08

    摘要: In some embodiments, in a registration process where a user device is registering for access to a network, a public/private key pair may be generated based on a media access control (MAC) address of a user device. The generated public/private key pair may be transmitted to the user device for future access to the network. In some embodiments, where a user device is requesting access to a network, a MAC address embedded in a public key may be utilized to determine whether access to the network should be granted.

    摘要翻译: 在一些实施例中,在用户设备注册访问网络的注册过程中,可以基于用户设备的媒体访问控制(MAC)地址来生成公钥/私钥对。 生成的公钥/私钥对可以被发送到用户设备以便将来访问网络。 在一些实施例中,在用户设备请求访问网络的情况下,可以利用嵌入在公共密钥中的MAC地址来确定是否应该授予对网络的接入。

    SECURITY ACTIONS BASED ON CLIENT IDENTITY DATABASES
    7.
    发明申请
    SECURITY ACTIONS BASED ON CLIENT IDENTITY DATABASES 有权
    基于客户身份数据库的安全行动

    公开(公告)号:US20130191901A1

    公开(公告)日:2013-07-25

    申请号:US13356742

    申请日:2012-01-24

    申请人: Chuck A. Black

    发明人: Chuck A. Black

    IPC分类号: G06F21/20

    CPC分类号: H04L63/0876 H04L63/1466

    摘要: Example embodiments disclosed herein relate to authentication based on Media Access Control (MAC) addresses. A network security device receives one or more client identity databases from one or more edge network devices. The client identity databases include MAC addresses of clients and secondary identification information for each of the clients. The network security device determines that a client device has been connected to one of the edge devices. A security action is performed based on whether the MAC address and respective secondary identification information of one of the clients matches the MAC address and respective secondary identification information of the connected client device.

    摘要翻译: 本文公开的示例性实施例涉及基于媒体访问控制(MAC)地址的认证。 网络安全设备从一个或多个边缘网络设备接收一个或多个客户端标识数据库。 客户端身份数据库包括客户端的MAC地址和每个客户端的辅助标识信息。 网络安全设备确定客户端设备已经连接到其中一个边缘设备。 基于MAC地址和其中一个客户端的相应次要标识信息是否与所连接的客户端设备的MAC地址和相应的辅助标识信息匹配来执行安全动作。

    NETWORK EDGE SWITCH CONFIGURATION BASED ON CONNECTION PROFILE
    8.
    发明申请
    NETWORK EDGE SWITCH CONFIGURATION BASED ON CONNECTION PROFILE 有权
    基于连接轮廓的网络边缘开关配置

    公开(公告)号:US20130028136A1

    公开(公告)日:2013-01-31

    申请号:US13619542

    申请日:2012-09-14

    IPC分类号: H04L12/28

    摘要: Connection profiles are created and stored. The connection profiles are for connections for sources to connect to a network. The connection profiles identify network attributes for the connections and each connection profile includes a status of available or subscribed. A connection profile is assigned to a requested connection for a source. The network attributes for the assigned connection are sent to an edge switch for the source to configure the edge switch to accept traffic for the source.

    摘要翻译: 创建和存储连接配置文件。 连接配置文件用于连接到网络的源的连接。 连接配置文件识别连接的网络属性,并且每个连接配置文件包括可用或订阅的状态。 连接配置文件被分配给源的请求连接。 分配的连接的网络属性被发送到源的边缘交换机,以配置边缘交换机以接受源的流量。

    NETWORK CONNECTION MANAGEMENT USING CONNECTION PROFILES
    9.
    发明申请
    NETWORK CONNECTION MANAGEMENT USING CONNECTION PROFILES 有权
    使用连接配置文件进行网络连接管理

    公开(公告)号:US20100192075A1

    公开(公告)日:2010-07-29

    申请号:US12359544

    申请日:2009-01-26

    IPC分类号: G06F15/16 G06F17/30 G06F3/048

    摘要: Connections for sources to connect to a network are managed by storing connection profiles identifying network attributes for the connections. Each connection profile includes a status of available or subscribed. Requests for connections are received. If a stored connection profile is available that matches the request, the connection for the matching connection profile is assigned to the source.

    摘要翻译: 用于连接到网络的源的连接通过存储连接配置来管理,该连接配置文件标识连接的网络属性。 每个连接配置文件包括可用或订阅的状态。 接收到连接请求。 如果存储的连接配置文件可用于匹配该请求,则将匹配连接配置文件的连接分配给源。

    Detection of a relative location of a network device using a multicast
packet processed only by hubs
    10.
    发明授权
    Detection of a relative location of a network device using a multicast packet processed only by hubs 失效
    使用仅由集线器处理的组播包来检测网络设备的相对位置

    公开(公告)号:US5421024A

    公开(公告)日:1995-05-30

    申请号:US114116

    申请日:1993-08-30

    IPC分类号: H04L12/56 G06F13/00

    CPC分类号: H04L45/26 H04L45/02 H04L45/36

    摘要: Within a network, which includes hubs and bridges, the relative location of a first device with respect to a subset of hubs on the network is determined. In response to an instruction, the first device broadcasts a multicast packet. The multicast packet crosses bridges and is processed only by hubs. When a hub receives the multicast packet from the first device, the hub records a first port of the hub over which the second device received the multicast packet. The subset of hubs may then be interrogated to determine over which port of each of the subset of hubs the multicast packet was received.

    摘要翻译: 在包括集线器和网桥的网络内,确定第一设备相对于网络上的集线器子集的相对位置。 响应于指令,第一设备广播组播分组。 组播数据包跨桥,仅由集线器处理。 当集线器从第一设备接收到多播分组时,集线器记录第二设备接收到多播分组的集线器的第一端口。 然后可以询问集线器的子集,以确定接收到多播分组的集线器的每个子集的哪一个端口。