Mark R Duffy

US Patent:

7672336, Mar 2, 2010

Filed:

Dec 1, 2006

Appl. No.:

11/565940

Inventors:

Shaun Jaikarran Bharrat - Manalapan NJ, US
Mark Duffy - Lexington MA, US
Ronald V. Grippo - Red Bank NJ, US
Shiping Li - Acton MA, US
John A. Perreault - Hopkinton MA, US
Jian Yang - Boxboro MA, US

Assignee:

Sonus Networks, Inc. - Westford MA

International Classification:

H04J 3/00

US Classification:

370476, 370484

Abstract:

Described are computer-based methods and apparatuses, including computer program products, for filtering and policing for defending against denial of service attacks on a network. A data packet is filtered by a multi-tiered filtering and transmission system. Data packets matching the first tier filter are discarded. Data packets matching the second tier filter are transmitted to an output module based on a criterion. Data packets in the third tier filter are hashed into bins and data packets matching an entry in the bin are transmitted to the output module based on a criterion for the bin. Data packets in the fourth tier transmission system are transmitted to the output module based on a criterion. Data packets that do not meet the criterion for transmission to the output module are transmitted to an attack identification module which analyzes the data packets to identify attacks.

US Patent:

20120158921, Jun 21, 2012

Filed:

Dec 20, 2010

Appl. No.:

12/973260

Inventors:

Tolga Asveren - Bordentown NJ, US
Mark Duffy - Lexington MA, US

International Classification:

G06F 15/177

US Classification:

709220

Abstract:

Systems and methods for user device registration are disclosed. In certain embodiments, at least a first edge device in a group of edge devices enters a mass-restart mode. The first edge device receives a request for registration from a user device and determines whether the user device is currently registered through the first edge device. The first edge device generates a notification associated with the user device if the user device is not currently registered through the first edge device. A second edge device in the group of edge devices receives the notification and determines whether the user device is currently registered through the second edge device based on the notification. Registration information about the user device is deleted from the second edge device if the user device is currently registered through the second edge device.

US Patent:

20120166656, Jun 28, 2012

Filed:

Dec 28, 2010

Appl. No.:

12/979850

Inventors:

Tolga Asveren - Bordentown NJ, US
Mark Duffy - Lexington MA, US
Nagesh Kumar Bollapalli - Bangalore, IN
Shambhu Dayal Rai - Bangalore, IN
Dilnawaj Ahmed - Bangalore, IN

International Classification:

G06F 15/16

US Classification:

709228

Abstract:

Methods and apparatuses, including computer program products, are described for establishing secure communications sessions between computing devices located behind network security devices. The method includes receiving, from a first client computing device, a request for a secure connection with a second client computing device, the request including a first transport protocol role and a first security protocol role associated with the first device. The method includes transmitting the request to the second device. The method includes receiving, from the second device, a response to the request including a second transport protocol role and a second security protocol role associated with the second device, transmitting the response to the first device, and establishing the secure connection between the first device and the second device, where the first and second security protocol roles are determined independently from the first and second transport protocol roles.