Distributed network security system and a hardware processor...

Details Distributed network security system and a hardware processor... Distributed network security system and a hardware processor...

2004-02-20

2008-08-19

Nguyen, Hanh (Department: 2616)

Information security

Access control or authentication

Network

C726S014000, C709S229000, C370S389000

Reexamination Certificate

active

07415723

ABSTRACT:
An architecture provides capabilities to transport and process Internet Protocol (IP) packets from Layer2through transport protocol layer and may also provide packet inspection through Layer7. A set of engines may perform pass-through packet classification, policy processing and/or security processing enabling packet streaming through the architecture at nearly the full line rate. A scheduler schedules packets to packet processors for processing. An internal memory or local session database cache stores a session information database for a certain number of active sessions. The session information that is not in the internal memory is stored and retrieved to/from an additional memory. An application running on an initiator or target can in certain instantiations register a region of memory, which is made available to its peer(s) for access directly without substantial host intervention through RDMA data transfer. A security system is also disclosed that enables a new way of implementing security capabilities inside enterprise networks in a distributed manner using a protocol processing hardware with appropriate security features.

REFERENCES:
patent: 5968176 (1999-10-01), Nessett et al.
patent: 6304973 (2001-10-01), Williams
patent: 6675200 (2004-01-01), Cheriton et al.
patent: 6839346 (2005-01-01), Kametani
patent: 6986061 (2006-01-01), Kunzinger
patent: 7024479 (2006-04-01), Shah et al.
patent: 7047561 (2006-05-01), Lee
patent: 7076803 (2006-07-01), Bruton et al.
patent: 7113995 (2006-09-01), Beukema et al.
patent: 7124198 (2006-10-01), Pinkerton
patent: 7171484 (2007-01-01), Krause et al.
patent: 7234003 (2007-06-01), Zaumen et al.
patent: 2001/0051994 (2001-12-01), Serizawa et al.
patent: 2002/0085562 (2002-07-01), Hufferd et al.
patent: 2002/0141585 (2002-10-01), Carr
patent: 2003/0005331 (2003-01-01), Williams
patent: 2003/0009432 (2003-01-01), Sugahara et al.
patent: 2003/0043794 (2003-03-01), Cayton et al.
patent: 2003/0046474 (2003-03-01), Craddock et al.
patent: 2003/0050990 (2003-03-01), Craddock et al.
patent: 2003/0061296 (2003-03-01), Craddock et al.
patent: 2003/0097518 (2003-05-01), Kohn et al.
patent: 2003/0131228 (2003-07-01), Twomey
patent: 2003/0145230 (2003-07-01), Chiu et al.
patent: 2003/0223361 (2003-12-01), Hussain et al.
patent: 2004/0098600 (2004-05-01), Eldeeb
patent: 2004/0165588 (2004-08-01), Pandya
patent: 2006/0031568 (2006-02-01), Eydelman et al.
RDMA Consortium website at : http://www.rdmaconsortium.org.
Paper entitled The Case for RDMA by Jim Pinkerton dated May 29, 2002.
PCT International Search Report and Written Opinion of the International Searching Authority mailed on Jul. 13, 2007 regarding PCT/US2005/43469 filed on Dec. 2, 2005, (10 pgs.).
PCT International Search Report and Written Opinion of the International Searching Authority mailed Sep. 6, 2005 regarding PCT/US2005/05159 filed on Feb. 18, 2005, (8 pgs.).
Storage Networking Industry Association (SNIA), The Emerging FCIP Standard Area Network Connectivity Across TCP/IP Networks, Jun. 2001 (7 pgs.) cited in ISR for PCT/US05/43469.
Recio, R., An RDMA Protocol Specification (Version 1.0), Oct. 2002, pp. 4 and 46 cited in ISR for PCT/US05/43469 (60 pgs.).
Office action mailed from the USPTO Jun. 20, 2007 in U.S. Appl. No. 11/004,742, (12 pgs.).
Office action mailed from the USPTO Mar. 30, 2007 in U.S. Appl. No. 10/459,350, (10 pgs.).
Office action mailed from the USPTO May 4, 2007 in U.S. Appl. No. 10/458,844, (20 pgs.).
Restriction Requirement mailed from the USPTO Mar. 26, 2007 in U.S. Appl. No. 10/459,019, (5 pgs.).
Restriction Requirement mailed from the USPTO Jun. 28, 2007 in U.S. Appl. No. 10/458,855, (9 pgs.).
Restriction Requirement mailed from the USPTO Apr. 3, 2007 in U.S. Appl. No. 10/459,297, (5 pgs.).
PCT International Preliminary Report on Patentability and Written Opinion of the International Searching Authority mailed on Aug. 9, 2007 regarding PCT/US2005/43469 filed Dec. 2, 2005, (8 pgs.).
Office Action mailed from the USPTO Aug. 15, 2007 in U.S. Appl. No. 10/458,855, (20 pgs.).
Notice of Allowance mailed from the USPTO Apr. 13, 2007 in U.S. Appl. No. 10/459,349 (8 pgs.).
PCT International Search Report mailed on Sep. 6, 2005 regarding PCT/US05/05159 filed Feb. 18, 2005. (3 pgs.).
PCT Written Opinion of the International Searching Authority mailed on Sep. 6, 2005 regarding PCT/US05/05159 filed on Feb. 18, 2005. (5 pgs.).

Affiliated with

Also associated with

Rating

Distributed network security system and a hardware processor... does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Distributed network security system and a hardware processor..., we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Distributed network security system and a hardware processor... will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-4005794