Probabilistically expedited secure connections via connection parameter reuse
    2.
    发明授权
    Probabilistically expedited secure connections via connection parameter reuse 有权
    通过连接参数重用概率加速安全连接

    公开(公告)号:US09231951B2

    公开(公告)日:2016-01-05

    申请号:US14076057

    申请日:2013-11-08

    申请人: Google Inc.

    IPC分类号: H04L29/06

    摘要: Methods for probabilistically expediting secure connections via connection parameter reuse are provided. In one aspect, a method includes determining whether a client had previously established a secure connection with a hostname. The method also includes obtaining a source identifier used by the client to establish the previous secure connection when it is determined that the client previously established the previous secure connection with the hostname. The method also includes sending a request to the hostname for a new secure connection based on the obtained source identifier. Systems and machine-readable media are also provided.

    摘要翻译: 提供了通过连接参数重用来概率加速安全连接的方法。 一方面,一种方法包括确定客户端之前是否已经建立了与主机名的安全连接。 该方法还包括当确定客户端先前已建立与主机名的先前安全连接时,获得客户端使用的源标识符建立先前的安全连接。 该方法还包括基于获得的源标识符向新的安全连接的主机名发送请求。 还提供系统和机器可读介质。

    Communication protocol for multiplexing data streams over UDP

    公开(公告)号:US10187312B2

    公开(公告)日:2019-01-22

    申请号:US15097250

    申请日:2016-04-12

    申请人: Google Inc.

    摘要: Aspects of the subject technology relate to a method for identifying a data stream. In some implementations, the method can include steps for generating a first globally-unique identifier (GUID), associating the first GUID with a first data stream comprising a first plurality of data packets and sending each of the first plurality of data packets to a remote device. In certain aspects, the method can also include steps for receiving a second plurality of data packets from the remote device, wherein each of the second plurality of data packets comprises a second GUID and comparing the second GUID with the first GUID to determine if the second plurality of data packets is associated with the first data stream. Systems and machine-readable media are also provided.

    Probabilistically expedited secure connections via connection parameter reuse

    公开(公告)号:US09930038B1

    公开(公告)日:2018-03-27

    申请号:US14952888

    申请日:2015-11-25

    申请人: Google Inc.

    IPC分类号: H04L29/06

    摘要: Methods for probabilistically expediting secure connections via connection parameter reuse are provided. In one aspect, a method includes determining whether a client had previously established a secure connection with a hostname. The method also includes obtaining a source identifier used by the client to establish the previous secure connection when it is determined that the client previously established the previous secure connection with the hostname. The method also includes sending a request to the hostname for a new secure connection based on the obtained source identifier. Systems and machine-readable media are also provided.

    Compression of cryptographic chaining certificates
    5.
    发明授权
    Compression of cryptographic chaining certificates 有权
    加密加密证书的压缩

    公开(公告)号:US09544153B1

    公开(公告)日:2017-01-10

    申请号:US14070397

    申请日:2013-11-01

    申请人: Google Inc.

    IPC分类号: H04L9/32 H04L29/06 H04L9/00

    摘要: A method, system and computer-readable medium for establishing secure connections using compressed cryptographic chaining certificates, the method including receiving a first compact representation corresponding to a certificate for validating a first entity at a second entity, retrieving a local list of one or more compact representations corresponding to one or more certificates locally available to the second entity, comparing the first compact representation to the one or more compact representations within the local list, determining if the first compact representation matches at least one of the one or more compact representations, retrieving the certificate corresponding to the at least one of the one or more compact representations if the first compact representation matches the at least one of the one or more compact representations and validating the first entity using the retrieved certificate corresponding to the at least one of the one or more compact representations.

    摘要翻译: 一种用于使用压缩加密链接证书建立安全连接的方法,系统和计算机可读介质,所述方法包括:接收对应于证书的第一紧凑表示,用于验证第二实体处的第一实体,检索一个或多个紧凑的本地列表 对应于本地可用于第二实体的一个或多个证书的表示,将第一紧凑表示与本地列表中的一个或多个紧凑表示进行比较,确定第一紧凑表示是否匹配一个或多个紧凑表示中的至少一个,检索 所述证书对应于所述一个或多个紧凑表示中的所述至少一个紧凑表示,如果所述第一紧凑表示符合所述一个或多个紧凑表示中的所述至少一个紧凑表示,并且使用所检索到的证书对应于所述一个或多个紧凑表示中的至少一个 或更紧凑的表示。

    Mitigation of optimistic acknowledgement attacks in a computer protocol
    6.
    发明授权
    Mitigation of optimistic acknowledgement attacks in a computer protocol 有权
    缓解计算机协议中的乐观认知攻击

    公开(公告)号:US09357002B1

    公开(公告)日:2016-05-31

    申请号:US13858873

    申请日:2013-04-08

    申请人: Google Inc.

    IPC分类号: G06F15/16 H04L29/08

    摘要: A method for verifying receipt of data packets, including generating a plurality of data packets, wherein each of the plurality of data packets comprises entropy information, transmitting one or more of the plurality of data packets to a receiver, receiving a first hash from the receiver, wherein the first hash is based on the entropy information of the one or more of the plurality of data packets and validating the first hash to determine if the receiver received the one or more of the plurality of data packets. Systems and computer-readable media are also provided.

    摘要翻译: 一种用于验证数据分组的接收的方法,包括生成多个数据分组,其中所述多个数据分组中的每一个包括熵信息,将多个数据分组中的一个或多个传送到接收机,从接收机接收第一散列 其中所述第一散列是基于所述多个数据分组中的一个或多个数据分组的熵信息并且验证所述第一散列以确定所述接收机是否接收到所述多个数据分组中的一个或多个。 还提供系统和计算机可读介质。

    Low latency server-side redirection of UDP-based transport protocols traversing a client-side NAT firewall

    公开(公告)号:US10129216B2

    公开(公告)日:2018-11-13

    申请号:US15475044

    申请日:2017-03-30

    申请人: Google Inc.

    摘要: Systems, methods, and machine-readable media for low latency server-side redirection of User Datagram Protocol (UDP)-based transport protocols traversing a client-side Network Address Translation (NAT) are provided. A request may be sent from a client for a data resource to a first server. The data resource may be received from a second server that has not been previously connected to the client. Receiving the data resource from the second server may be facilitated by the first server through redirecting the request to the second server and providing for the second server to connect to the client and directly respond to the request. The first server may lack at least one of the requested data resource or resources for providing the requested data resource.

    Resolving a host expression to an internet protocol address

    公开(公告)号:US10007726B2

    公开(公告)日:2018-06-26

    申请号:US14042375

    申请日:2013-09-30

    申请人: Google Inc.

    摘要: Systems and methods for resolving a request associated with a host expression to an Internet Protocol (IP) address are provided. In some aspects, a request for content from a content server is transmitted from a client computing device. The request is associated with a host expression of the content server. A message including the requested content and an indication of an Internet Protocol (IP) address set of a DNS resolution of the host expression of the content server is received in response to the request. The requested content includes text or an image. The IP address set of the DNS resolution of the host expression of the content server is stored in a local memory of the client computing device. The IP address set is stored for resolution of future requests associated with the host expression of the content server locally at the client computing device.

    Rapid establishment of a connection from multiple address locations

    公开(公告)号:US09860324B1

    公开(公告)日:2018-01-02

    申请号:US14566671

    申请日:2014-12-10

    申请人: Google Inc.

    IPC分类号: H04L29/08

    CPC分类号: H04L67/141 H04L63/0823

    摘要: A first computing device receives a first token with a first request for data from a second computing device located at a first network address, the first token being associated with a second network addresses previously associated with the second computing device during previous communications with the first computing device. The first computing device determines that the first token is not associated with the first network address, and generates a second token for the computing device. The second token is associated with the first network address and the second network address. The first computing device then provides the second token to the computing device for use in establishing future network communications from the first network address and from the second network address.

    Generating profiling data
    10.
    发明授权
    Generating profiling data 有权
    生成分析数据

    公开(公告)号:US08943479B1

    公开(公告)日:2015-01-27

    申请号:US14461296

    申请日:2014-08-15

    申请人: Google Inc.

    IPC分类号: G06F9/44 G06F11/34 G06F11/36

    摘要: Systems and methods for generating profiling data include monitoring the execution of a task on a thread of a program. Profiling data may be generated that includes metrics regarding the execution of the task. A profiling data aggregation service may aggregate generated profiling data from a plurality of devices that execute the program.

    摘要翻译: 用于生成分析数据的系统和方法包括监视程序线程上的任务的执行。 可以生成包括关于任务的执行的指标的分析数据。 分析数据聚合服务可以聚合来自执行程序的多个设备的生成的分析数据。