Akamai Technologies, Inc.

Massachusetts Institute of Technology

Erik L Nygren

Martin K Lohner

Nathaniel A Kushman

Abhijit Dixit

Silvina Z Hanono Wachman

Todd Mitton

Stephen L Ludin

Philip A Lisiecki

John A Dilley

Michael Yurovitsky

Sudhin Mishra

Karl-Eliv J Hallin

Joshua Hunt

David Lawrence Brock

Sanjay Emani Sarma

Daniel W Engels

Joseph T Foley

Kai-Yeung Sai

Michael Yurovitsky Deceased

A tool that allows a CDN customer, partner, or other authorized entity to create a DNS canonical name (CNAME) on the content delivery network without having to contact the content delivery network service provider directly.

Provisioning tool for a content delivery network (CDN)

According to certain non-limiting embodiments disclosed herein, the functionality of a server is extended with a mechanism for identifying connections with clients that have exhibited attack characteristics (for example, characteristics indicating a DoS attack), and for transitioning internal ownership of those connections such that server resources consumed by the connection are reduced, while keeping the connection open. The connection thus moves from a state of relatively high resource use to a state of relatively low server resource use. According to certain non-limiting embodiments disclosed herein, the functionality of a server is extended by enabling the server to determine that any of a client and a connection exhibits one or more attack characteristics (e.g., based on at least one of client attributes, connection attributes, and client behavior during the connection, or otherwise). As a result of the determination, the server changes its treatment of the connection.

Server with queuing layer mechanism for changing treatment of client connections

Systems and methods for reducing server resources associated with a client connection

Server with mechanism for changing treatment of client connections determined to be related to attacks

Provisioning tool for use in a distributed computer network

According to certain non-limiting embodiments disclosed herein, the functionality of a server is extended with a mechanism for identifying connections with clients that have exhibited attack characteristics (for example, characteristics indicating a DoS attack), and for transitioning internal ownership of those connections such that server resources consumed by the connection are reduced, while keeping the connection open. The connection thus moves from a state of relatively high resource use to a state of relatively low server resource use, and the server is able to free resources such as memory and processing cycles previously allocated to the connection. In some cases, the server maintains the connection for at least some time and uses it to keep the client occupied so that it cannot launch&#x2014;or has fewer resources to launch&#x2014;further attacks, and possibly to gather information about the attacking client.

Server with mechanism for reducing internal resources associated with a selected client connection

The present invention describes a tool that allows a CDN customer, partner, or other authorized entity to create a DNS canonical name (CNAME) on the content delivery network without having to contact the content delivery network service provider directly.

Provisioning tool for a distributed computer network

An object name system (ONS) for locating one or more servers associated with an Electronic Product Code (EPC) is described. The system utilizes translation format strings to translate an EPC to an EPC domain prefix. The ONS server matches the EPC number to the address of a second server which has extensive information about the product. The second server recognizes the incoming EPC's as belonging to a particular object or service.

Object name system

Growing community of inventors

Cambridge, MA, United States of America

Erik L Nygren