In a method for generating a data unit conforming to a first communication protocol, a first field and a second field to be included in a preamble of the data unit are generated. The first field includes a first set of one or more information bits that indicate a duration of the data unit and is formatted such that the first field allows a receiver device that conforms to a second communication protocol to determine the duration of the data unit. The second field includes a second set of one or more information bits that indicate to a receiver device that conforms to the first communication protocol that the data unit conforms to the first communication protocol. The first field and the second field are modulated using a modulation scheme specified for a field corresponding to the first field and the second field, respectively, by the second communication protocol.

Physical layer frame format for WLAN

Certain embodiments provide means for managing automated access to computers, e.g., using SSH user keys and other kinds of trust relationships. Certain embodiments also provide for managing certificates, Kerberos credentials, and cryptographic keys. Certain embodiments provide for remediating legacy SSH key problems and for automating configuration of SSH keys, as well as for continuous monitoring.

Automated access, key, certificate, and credential management

Methods and associated systems are disclosed for providing secured data transmission over a data network. Data to be encrypted and encryption information may be sent to a security processor via a packet network so that the security processor may extract the encryption information and use it to encrypt the data. The encryption information may include flow information, security association and/or other cryptographic information, and/or one or more addresses associated with such information. The encryption information may consist of a tag in a header that is appended to packets to be encrypted before the packets are sent to the security processor. The packet and tag header may be encapsulated into an Ethernet packet and routed via an Ethernet connection to the security processor.

Tagging mechanism for data path security processing

A method for improving perception of electronic content from a computer network such as the Internet or an intranet Network latencies and the type of electronic content such as text, graphical images, animation, voice, video and other electronic content interact to influence user perception of the quality of information provided As network latency increases and becomes more variable, users typically become less satisfied The method dynamically adjusts the amount of electronic content presented to user based on a determined network latency The amount of electronic content is also adjusted progressively and underlying transport protocol such as Transmission Control Protocol (“TCP”) and User Datagram Protocol (“UDP”) are adaptively adjusted based on the type of electronic content requested (eg, TCP for text, UDP for graphical images, etc) The method may improve user perception of requested original electronic content by dynamically sending an amount of original electronic content based on a determined network latency Improved user perception of original electronic content may help attract and retain, students, customers, contributors, etc to an organization's electronic content site on a computer network (eg, a home page on the Internet or an intranet)

Methods for determining sendable information content based on a determined network latency

A method of offloading data intensive tasks from a processor, comprises, at a processor, preparing a TCP packet comprising a TCP header and a data payload, transmitting the TCP packet to a configurable logic device (CLD); and at the CLD, receiving the TCP packet, generating set of TCP segment packets containing, a copy of the TCP header, an incrementing segment sequence identifier, and a portion of the data payload, and transmitting the set of TCP segment packets on an external network interface.

High-speed CLD-based TCP segmentation offload

A novel method of reading descriptors by a network interface is provided in a computer system having a host CPU and a memory containing descriptors arranged in a list. The method includes reading at least two descriptors in a single PCI bus transaction. The network interface comprises a PCI interface for providing connection to the system via a PCI bus, and descriptor management logic for reading descriptors from the memory via the PCI interface. The descriptor management logic is configured for reading more than one descriptor in a single PCI read transaction. After reading a first descriptor, the descriptor management logic reads a second descriptor following the first descriptor regardless of whether the second descriptor is owned by the network interface or the host CPU. The network interface performs a read operation to read a message buffer associated with the second descriptor if this descriptor is owned by the network interface. However, no reading of this message buffer is performed if the second descriptor is owned by the host CPU.

Descriptor burst read-ahead

The present invention coordinates access to at least one data register between a peripheral device and a host system. The peripheral device accesses the at least one data register to update the data register with new register data and operates on a peripheral device clock. The host system accesses the at least one data register to read the register data stored within the at least one register via a bus interface that operates on a bus clock. The at least one data register is within a statistics module that operates on an independent clock. The present invention includes a handshaking mechanism for synchronization between the peripheral device clock and the independent clock when the peripheral device has new register data for updating the at least one register. In addition, the present invention includes a handshaking mechanism for synchronization between the bus clock and the independent clock when the host system requests access to the at least one data register to read the register data stored within the at least one register via the bus interface. Furthermore, the present invention includes a handshaking mechanism when the host system requests access to read the register data stored within the at least one register via the bus interface at the same time that the peripheral device has new register data for updating the at least one register.

Using an independent clock to coordinate access to registers by a peripheral device and a host system

Netzwerkschnittstellensystem (2) zur Verbindung eines Host-Systems (6) mit einem Netzwerk (8), um von dem Host-System (6) abgehende Daten dem Netzwerk (8) zuzufuhren und um aus dem Netzwerk (8) eingehende Daten dem Host-System (6) zuzufuhren, wobei das Netzwerkschnittstellensystem (2) umfasst: ein Bus-Schnittstellensystem (4), das ausgebildet ist, mit einem Host-Bus (106) in dem Host-System (6) verbunden zu werden und um Daten zwischen dem Netzwerksystem (8) und dem Host-System (6) auszutauschen; ein Mediumzugriffssteuerungssystem (10), das ausgebildet ist, mit dem Netzwerk (8) verbunden zu werden und um Daten zwischen dem Netzwerkschnittstellensystem (2) und dem Netzwerk (8) auszutauschen; ein Speichersystem (12), das mit dem Bus-Schnittstellensystem (4) und dem Mediumzugriffssteuerungssystem (10) verbunden ist, wobei das Speichersystem (12) ausgebildet ist, eingehende und abgehende Daten, die zwischen dem Netzwerk (8) und dem Host-System (6) ausgetauscht werden, zu speichern; ein Sicherheitssystem (14), das mit dem Speichersystem (12) verbunden ist, wobei das Sicherheitssystem (14) ausgebildet ist,...

Zwei parallele Maschinen für Hochgeschwindigkeitssende-IPSEC-Verarbeitung

A novel method of providing alternate access to a storage element for holding a data element in a network interface. The storage element is accessed via a first access path when the network interface operates with a first type of software, and via a second access path when a second type of software is used. The first access path is allocated in response to a first address signal identifying a first register required by the first type of software to hold the data element. The second access path is allocated in response to a second address signal identifying a second register required by the second type of software to hold the data element.

Jeffrey Dwork

Papers

Descriptor burst read-ahead

Using an independent clock to coordinate access to registers by a peripheral device and a host system

Zwei parallele Maschinen für Hochgeschwindigkeitssende-IPSEC-Verarbeitung

Alternate Register Mapping