Lionic Corporation

Other

Industrial Technology Research Institute

Kingston Digital, Inc.

Sumwintek Corp.

Broad Web Corporation

Shi-Ming Zhao

Shih-Wei Chien

Nen-Fu Huang

Ben Wei Chen

Kuo-Cheng Lu

Kuo-Hua Yuan

Chin-Tang Yen

Jui-Hsien Chien

Shiao-Ting Wu

Chih-Jen Chang

Meng-Hong Chen

Ding-Bing Lin

Chao-Hsiung Tseng

A method and system for use with a public cloud network is disclosed, wherein the public cloud network includes at least one private cloud server and at least one smart client device in communication therewith. The method and system comprise setting up the at least one private cloud server and the at least one smart client device in a client server relationship. The at least one private cloud server includes a message box associated therewith. The first message box is located in the public network. The at least one smart client includes a second message box associated therewith. The second message box is located on the public network. The method includes passing session based message information between the at least one private cloud server and the at least one smart client device via the first message box and the second message box in a secure manner. The session base information is authenticated by the private cloud server and the at least one smart client device. The smart client device and the private cloud server can then communicate with each other after the session based information is authenticated.

Private cloud server and client architecture without utilizing a routing server

According to one embodiment of the present invention, a dipole antenna capable of supporting multi-band communications, includes a first portion of the antenna in a folded structure, a second portion of the antenna that includes a first coupling pad and a second coupling pad physically separated by a distance, and a current path along the first portion of the antenna and the second portion of the antenna, wherein a first portion of the current path that includes the first coupling pad and the second coupling pad is configured to introduce a slow wave effect if electric current flows through the first portion of the current path.

Dipole antenna capable of supporting multi-band communications

Methods and systems for processing multiple levels of data in system security approaches are disclosed. In one embodiment, a first set and a second set of resources are selected to iteratively and independently reverse multiple levels of format conversions on the payload portions of a data unit from a first file and a data unit from a second file, respectively. The first file and the second file are associated with a first transport connection and a second transport connection, respectively. Upon completion of the aforementioned reversal operations, the payload portions of a first reversed data unit and a second reversed data unit, which correspond to the data unit of the first file and the data unit of the second file, respectively, are inspected for suspicious patterns prior to any aggregation of the data units of the first file or the second file.

Multiple-level data processing system

A method and system for ensuring system security is disclosed. Based on the content of the data units the method and system monitor, the method and system retrieve the states and the dependency relationships among these states that are representative of unwanted patterns. The method and system store the states and the dependency relationships mentioned above in different types of memories according to the frequency of accessing the states. The frequency is calculated by comparing a number of test data patterns with the states in a sequence specified by the dependency relationships. The method and system further identify a set of suspected data units by comparing the data units with the retrieved states in a sequence specified by the retrieved dependency relationships, wherein the content of the set of the suspected data units collectively matches any of the unwanted patterns.

System security approaches utilizing a hierarchical memory system

A method and system for ensuring system security is disclosed. The method and system split a regular expression that corresponds to a number of patterns into sub-expressions. The dependency relationships among the finite automata that correspond to the sub-expressions are maintained. Then, as data units are put through these finite automata in a sequence that is based on the dependency relationships, suspected data units are identified. The suspected data units are the ones containing content that collectively matches one or more of the aforementioned patterns. Identification of the suspected data units is based on the merged results of the finite automata. Depending on the result of identifying the suspected data units, different actions are performed.

System security approaches using sub-expression automata

A method and system for ensuring system security is disclosed. The method and system utilize a first processing unit to split a regular expression that corresponds to a number of patterns into sub-expressions and maintain the dependency relationships among the finite automata that correspond to the sub-expressions. Then, the method and system utilize a second processing unit to move the data units through these finite automata in a sequence that is based on the dependency relationships to identify the suspected data units. The suspected data units are the ones containing content that collectively matches one or more of the aforementioned patterns. Identification of the suspected data units is based on the merged results of the finite automata.

System security approaches using multiple processing units

A method and system that ensures system security is disclosed. Specifically, the method and system formulate a finite automaton that corresponds to a number of patterns. Then, as data units are put through the finite automaton, suspected data units are identified. The suspected data units are the ones containing content that collectively matches one or more of the aforementioned patterns. To identify the suspected data units, the dependency relationships among various states in the finite automaton that have been compressed are relied upon. Depending on the result of identifying the suspected data units, different actions are performed.

System security approaches using state tables

An IP routing lookup scheme and system for a multi-gigabit switching router which can reach 3 memory accesses in the worst case using memory size less than 512 KB is disclosed. The invention can compress a routing table with 40,000 routing entries into a forwarding table of 450&#x2013;470 Kbytes. According to the present invention, a segmentation table storage device stores a next hop or a pointer for looking up a next hop for an incoming packet having prefix length less than or equal to 16 bits. The Next Hop Array storage device is for storing the next hops for a packet having prefix length larger than 16 bits and offset length less than or equal to 3 bits. A Compressed Next Hop Array storage device is encoded and decoded according to a Code Word Array storage device. The Compressed Next Hop Array storage device stores next hops for the incoming packet having prefix length larger than 16 bits and offset length larger than 3 bits. Thus, in the worst case, an output port for a route prefix can be found in 3 memory accesses.

IP routing lookup scheme and system for multi-gigabit switching routers

A flexible and high-performance packet classification algorithm. The algorithm includes converting the original rule database into rule mapping table format for storage. The method of producing the rule mapping table includes partitioning an input key into a plurality of sub-keys, and sequentially comparing various grouping combinations of each sub-key with the same sub-key field of each rule. Finally, the results are stored in the rule mapping table using a bit-map method. This invention provides a packet classification algorithm that support a plurality of rule databases or sub-tables such that the co-existence of a plurality of rule databases each having a different length and width in the same search engine is permitted. In addition, the design can provide actual improvements (higher speed, smaller volume occupation) and flexibility (possible coexistent of different rule databases). Moreover, the search method can be used as a general-purpose search engine in the design of network processor or in any situation when rapid search is necessary. The search method can serve even as a replacement technology for CAM.

Flexible and high-performance packet classification algorithm

The method for providing a &ldquo;Don't Care&rdquo; bit to improve the speed of information matching in a digital information processing system. After the match information is input, it will be divided into multiple sub-bit-streams and then input to a correspondent selector for obtaining the content of a selected memory bank. The output of each selector is forwarded to the product module to compute an unencoded match result. Finally, the priority encoder receives the unencoded match result and performs priority encoding to generate an encoded match result and a match flag. If the match flag is positive, it indicates that there is a hit in the rule table for the match information. Thus, the match result serves as an index for looking up an information table.

Growing community of inventors

Taipei, Taiwan

Shi-Ming Zhao