In a method for generating a data unit conforming to a first communication protocol, a first field and a second field to be included in a preamble of the data unit are generated. The first field includes a first set of one or more information bits that indicate a duration of the data unit and is formatted such that the first field allows a receiver device that conforms to a second communication protocol to determine the duration of the data unit. The second field includes a second set of one or more information bits that indicate to a receiver device that conforms to the first communication protocol that the data unit conforms to the first communication protocol. The first field and the second field are modulated using a modulation scheme specified for a field corresponding to the first field and the second field, respectively, by the second communication protocol.

Physical layer frame format for WLAN

Certain embodiments provide means for managing automated access to computers, e.g., using SSH user keys and other kinds of trust relationships. Certain embodiments also provide for managing certificates, Kerberos credentials, and cryptographic keys. Certain embodiments provide for remediating legacy SSH key problems and for automating configuration of SSH keys, as well as for continuous monitoring.

Automated access, key, certificate, and credential management

Methods and associated systems are disclosed for providing secured data transmission over a data network. Data to be encrypted and encryption information may be sent to a security processor via a packet network so that the security processor may extract the encryption information and use it to encrypt the data. The encryption information may include flow information, security association and/or other cryptographic information, and/or one or more addresses associated with such information. The encryption information may consist of a tag in a header that is appended to packets to be encrypted before the packets are sent to the security processor. The packet and tag header may be encapsulated into an Ethernet packet and routed via an Ethernet connection to the security processor.

Tagging mechanism for data path security processing

A method for improving perception of electronic content from a computer network such as the Internet or an intranet Network latencies and the type of electronic content such as text, graphical images, animation, voice, video and other electronic content interact to influence user perception of the quality of information provided As network latency increases and becomes more variable, users typically become less satisfied The method dynamically adjusts the amount of electronic content presented to user based on a determined network latency The amount of electronic content is also adjusted progressively and underlying transport protocol such as Transmission Control Protocol (“TCP”) and User Datagram Protocol (“UDP”) are adaptively adjusted based on the type of electronic content requested (eg, TCP for text, UDP for graphical images, etc) The method may improve user perception of requested original electronic content by dynamically sending an amount of original electronic content based on a determined network latency Improved user perception of original electronic content may help attract and retain, students, customers, contributors, etc to an organization's electronic content site on a computer network (eg, a home page on the Internet or an intranet)

Methods for determining sendable information content based on a determined network latency

A method of offloading data intensive tasks from a processor, comprises, at a processor, preparing a TCP packet comprising a TCP header and a data payload, transmitting the TCP packet to a configurable logic device (CLD); and at the CLD, receiving the TCP packet, generating set of TCP segment packets containing, a copy of the TCP header, an incrementing segment sequence identifier, and a portion of the data payload, and transmitting the set of TCP segment packets on an external network interface.

High-speed CLD-based TCP segmentation offload

An apparatus for programming selected entries in an address filter table allows dynamic updating of address registers and eliminates the need to disable unmodified registers in arrangements including multiple registers or entries. The apparatus comprises an interface for receiving data frames from a remote station. A media access controller is provided with an address filter table capable of storing a plurality of entries. Each entry includes an address field for storing a predetermined target address, and an enable field for indicating whether or not the entry is valid. The media access controller is configured to receive each of the data frames from the interface. The media access controller examines the enable field of each entry in the address filter table to determine whether or not the entry is valid. The received data frames are then routed to a destination address based upon the target addresses stored in the address filter table. A device manager may be used for updating the entries in the address filter table.

Mechanism for run time programming of hardware resources with least interference with continued operation

The invention relates to a network interface system for interfacing a host system with a network. The network interface system includes a bus interface system, a media access control system, a memory system, and a security system. The security system is coupled to the memory system and is adapted to selectively perform security processing on incoming and outgoing data. For at least one of receive or transmit processing, the security system comprises one or more encryption pipelines and at least two sets of one or more authentication pipelines. The encryption pipelines are adapted to perform one or more encryption or decryption algorithms. The authentication pipelines are adapted to perform one or more authentication algorithms. The security system is configured to selectively process frames through the encryption pipelines and then through the two sets of authentication pipelines. The system toggles whereby successive frames alternate between the two sets of authentication pipelines.

Method to maximize hardware utilization in flow-thru IPsec processing

In one embodiment, a method comprises assigning a unique node number to each of a first plurality of nodes in a first partition of a system and a second plurality of nodes in a second partition of the system. A first memory address space spans first memory included in the first partition and a second memory address space spans second memory included in the second partition. The first memory address space and the second memory address space are generally logically distinct. The method further comprises programming a first address map in the first partition to map the first memory address space to node numbers, wherein the programming comprises mapping a first memory address range within the first memory address space to a first node number assigned to a first node of the second plurality of nodes in the second partition, whereby the first memory address range is mapped to the second partition.

Communicating between Partitions in a Statically Partitioned Multiprocessing System

A method and apparatus for the early termination or deletion of frame data that is being transmitted or is scheduled for transmission from one network station to another network station. A network interface in the transmitting network station is able to read and transmit frame data as a central processing unit in the transmitting network is writing frame data into memory. The network interface reads a descriptor associated with frame data to determine if the frame data, which is either being transmitted or is scheduled for transmission, has a termination field indicating that the frame data is to be deleted. A descriptor management unit in the network interface reads the termination field in the descriptor and determines whether the frame data is currently being sent or is scheduled for transmission. If the frame data is scheduled for transmission, then the frame data is flushed from the data memory of the transmitting network station. If the frame data is currently being sent, then an inverted frame check sequence is appended to the frame data by the network interface. The inverted frame check sequence ensures that the network interface in the network station receiving the frame data deletes the frame data from the network station's data memory.

Method and apparatus for early termination of frame data

A novel method of providing an external host processor with access to registers located in different clock domains. The method comprises the steps of translating host processor interface signals into internal register interface signals, and performing handshaking with the registers via the internal register interface. The handshaking includes supplying registers with a register access signal for enabling access to a selected register, and producing a register ready signal in response to the register access signal. Synchronization signals delayed with respect to the register ready signal may be used for synchronizing registers located in different clock domains with the processor interface.

Jeffrey Dwork

Papers

Mechanism for run time programming of hardware resources with least interference with continued operation

Method to maximize hardware utilization in flow-thru IPsec processing

Communicating between Partitions in a Statically Partitioned Multiprocessing System

Method and apparatus for early termination of frame data

Generic register interface for accessing registers located in different clock domains