|
Match
|
Document |
Document Title |
|
|
7620979 |
Supporting mobile internet protocol in a correspondent node firewall
A method, system and device for protecting a network node by an access blocking function, such as a correspondent node firewall, are disclosed. The access blocking function protects either a first...
|
|
|
7620719 |
Method and system for providing secure access to private networks
Improved approaches for providing secure remote access to resources maintained on private networks are disclosed. According to one aspect, predetermined elements, such as applets, can be modified...
|
|
|
7617531 |
Inferencing data types of message components
A security gateway receives messages and extracts components thereof, typically in the form of field name-value pairs. The security gateway determines a data type of the values for individual field...
|
|
|
7613111 |
Methods, systems, and computer program products for dynamic blocking an unblocking of media over packet resources
Methods, systems, and computer program products for dynamically blocking and unblocking media over packet resources includes, at a first media gateway controller that controls a first media over...
|
|
|
7607166 |
Secure manufacturing devices in a switched Ethernet network
A method and apparatus for providing security to factory automation devices in a switched Ethernet network. Traffic between factory automation devices and an Ethernet switch is limited to packets...
|
|
|
7607008 |
Authentication broker service
A user is authenticated for a relying computing entity (e.g., an enterprise) through an authentication broker service, wherein a trust relationship exists between the relying computing entity and...
|
|
|
7606843 |
System and method for customizing the storage and management of device data in a networked environment
A system and method for customizing the storage of data according to data attributes are provided. A user is provided with a graphical user interface for generating data archive profiles. The data...
|
|
|
7603494 |
Home networking resource management
In a particular embodiment, the disclosure is directed to a method of configuring a computer coupled to a residential gateway. The method includes executing resource sharing software on the...
|
|
|
7603469 |
Provisioning aggregated services in a distributed computing environment
Methods, systems, and computer program products are disclosed for provisioning software resources used with aggregated web services. The disclosed techniques enable heterogeneous identity systems...
|
|
|
7596806 |
VPN and firewall integrated system
The present invention provides an integrated VPN/firewall system that uses bath hardware (firmware) and software to optimize the efficiency of both VPN and firewall functions. The hardware portions...
|
|
|
7591009 |
Policy rule management support method and policy rule management support apparatus
When a system configuration is changed, a policy rule that should be modified as a result of the configuration change is modified without fail. A policy management apparatus 1 comprises a...
|
|
|
7590849 |
Method and control program for operating a communication terminal for packet-oriented data transmission
In order to operate a communication terminal for packet-oriented data transmission, at least one piece of status information is stored, for a communication terminal, in a memory unit associated...
|
|
|
7590733 |
Dynamic address assignment for access control on DHCP networks
Systems and methods of managing security on a computer network are disclosed. The computer network includes a restricted subnet and a less-restricted subnet. Access to the restricted subnet is...
|
|
|
7590245 |
Anonymous communicating over interconnected networks
A method and system for concealing from an outside observer the source and destination of information transmitted over computer network. Two types of data packets are defined: content packets that...
|
|
|
7581249 |
Distributed intrusion response system
A system and method to respond to intrusions detected on a network system including attached functions and a network infrastructure. The system includes means for receiving from an intrusion...
|
|
|
7581247 |
Network address translation gateway for networks using non-translatable port addresses
A network address translation gateway provides normal network translation for IP datagrams traveling from a local area network using local IP addresses to an external network, but suspends source...
|
|
|
7581093 |
Hitless manual cryptographic key refresh in secure packet networks
In a hitless manual cryptographic key refresh scheme, a state machine may be independently maintained at each network node. The state machine may include a first state, a second state, and a third...
|
|
|
7577837 |
Method and apparatus for encrypted unicast group communication
A process for managing encrypted group communication according to a single security association (SA) for network traffic from a sender includes receiving a request for an encrypted communication...
|
|
|
7574595 |
Transparent session initiated protocol
Method and apparatus employing transparent session initiation protocol (SIP) technique for communication especially between a user device in one domain and an application/service provide in an...
|
|
|
7568041 |
Methods and apparatus for selecting a media proxy
In a packet based (typically IP) network, network address translation is frequently used to overcome the problem of dwindling address spaces. However, network address translation prevents the...
|
|
|
7568039 |
Method for providing and utilizing a network trusted context
A method for establishing a connection between a data server and a middleware server is disclosed. The method includes defining a plurality of trust attributes corresponding to a trusted context...
|
|
|
7568022 |
Automated display of an information technology system configuration
An Information Technology (IT) system display method and computer program product. A description is provided of a configuration of devices, network segments, and vertical connectors relating to an...
|
|
|
7562389 |
Method and system for network security
In accordance with one embodiment of the present invention, a method includes receiving a packet at a physical interface of a network security gateway. The packet is tagged with a first VLAN...
|
|
|
7561692 |
Method of authenticating mobile terminal
A method for authenticating a mobile terminal in a wireless network is disclosed. The method includes transmitting a request for authenticating the mobile terminal in that wireless network...
|
|
|
7558796 |
Determining origins of queries for a database intrusion detection system
A database intrusion detection system (DIDS) monitors database queries to detect anomalous queries that might by symptomatic of a code injection attack on the database. A proxy server intercepts...
|
|
|
7549162 |
Methods of providing security for data distributions in a data network and related devices, networks, and computer program products
Methods of operating a data network including a first network device and a second network device may be provided. In particular, data for distribution from the first network device to the second...
|
|
|
7549160 |
Method and system for authenticated access to internet protocol (IP) multicast traffic
A method and system for authenticated access to multicast traffic receives a request for a user to join a multicast channel. Access privileges of the user to the multicast channel are...
|
|
|
7546632 |
Methods and apparatus to configure a network device via an authentication protocol
A system supplies configuration information, via an EAP protocol, to a remote device trying to access the network. An authentication server performs an authentication exchange by receiving, from a...
|
|
|
7546629 |
System and methodology for security policy arbitration
A system providing methods for a device to apply a security policy required for connection to a network is described. In response to receipt of a request from a device for connection to a...
|
|
|
7540024 |
Security features for portable computing environment
The described systems, methods and data structures are directed to a portable computing environment. A communication link is established between a portable device and a host device. The portable...
|
|
|
7539863 |
Remote services for portable computing environment
The described systems, methods and data structures are directed to a portable computing environment. A communication link is established between a portable device and a host device. The portable...
|
|
|
7539858 |
Packet encryption substituting device, method thereof, and program recording medium
When a packet is received from a counterpart apparatus 3 connected to the Internet 2 , it is determined by a decryption determination part 16 whether to decrypt or bypass the received packet...
|
|
|
7536715 |
Distributed firewall system and method
A system and method for restricting packet transfer to a computer across a network, wherein the computer includes a network interface device coupled to the network and wherein the network interface...
|
|
|
7536476 |
Method for performing tree based ACL lookups
A method for performing a lookup of a packet against an access control list. In one example, the method includes receiving an access control list, partioning said list into two or more...
|
|
|
7530112 |
Method and apparatus for providing network security using role-based access control
A method and apparatus for providing network security using role-based access control is disclosed. A network device implementing such a method can include, for example, an access control list....
|
|
|
7530101 |
Method and system for managing network access device using a smart card
A method of operating via a smart card an access gateway between a local area network and a wide area network under the control of a management system includes the steps of providing in the smart...
|
|
|
7529924 |
Method and apparatus for aligning ciphered data
A data processing device includes a crypto unit having an alignment buffer for providing data to transmit buffer elements of a media switch fabric in multiples of a predetermined number of bytes....
|
|
|
7526808 |
Method and system for actively defending a wireless LAN against attacks
A wireless network security system including a system data store capable of storing network default and configuration data, a wireless transmitter and a system processor. The system processor...
|
|
|
7526798 |
System and method for credential delegation using identity assertion
Run-as credentials delegation using identity assertion is presented. A server receives a request from a client that includes the client's user identifier and password. The server authenticates the...
|
|
|
7526797 |
System and method for processing callback requests included in web-based procedure calls through a firewall
A method of processing callback requests included in web procedure calls through a firewall is discussed. A requesting device contacts a receiving device and requests the performance of a...
|
|
|
7526792 |
Integration of policy compliance enforcement and device authentication
Methods and apparatuses for integration of authentication and policy compliance enforcement. An enforcement agent may reside on a device. If an access assignment is provided to the device in...
|
|
|
7526789 |
System for the transmission of audiovisual signals between source nodes and destination nodes
A system for the transmission of audiovisual signals between at least one source node and at least one destination node comprises: at least one central switch to which at least one source node is...
|
|
|
7523494 |
Determining blocking measures for processing communication traffic anomalies
Communication traffic is processed by detecting an anomaly in the communication traffic. A first blocking measure A is applied to the anomalous traffic that stops the anomalous traffic. A second...
|
|
|
7523492 |
Secure gateway with proxy service capability servers for service level agreement checking
The present invention describes a gateway in an Open Service Access (OSA) network where Service Level Agreement (LSA) checks are performed by a Framework ( 15 ) on a Central Gateway node ( 1 ). A...
|
|
|
7523491 |
System, apparatus, and method for accessing mobile servers
A mobile terminal operating within a firewall protected mobile domain provides mobile server functionality to requesting entities outside of the protected domain. Links to content contained within,...
|
|
|
7523301 |
Inferring content sensitivity from partial content matching
Monitored content is analyzed to determine full and partial matches to previously classified content. Monitored content matching previously classified public content is classified as public, even...
|
|
|
7519991 |
Method and apparatus for incrementally deploying ingress filtering on the internet
Ingress filtering has been adopted by the IETF as a methodology for preventing denial of service congestive attacks that spoof the source address in packets that are addressed to host server...
|
|
|
7519827 |
Provisioning and use of security tokens to enable automated test equipment
Automated test equipment (ATE) is provided with a plurality of hardware components, at least two of which provide a common test feature. The ATE is also provided with program code to access a...
|
|
|
7519816 |
Portable computing environment solution
The described systems, methods and data structures are directed to a portable computing environment. A communication link is established between a portable device and a host device. The portable...
|
|
|
7519178 |
Method, system and apparatus for ensuring a uniform distribution in key generation
A method, system and apparatus are described for ensuring a uniform random distribution of keys generated for cryptography. These generated keys, are depicted utilizing a trusted third party, or...
|