Source: http://www.google.com/patents/US7840902?dq=assignee:+google
Timestamp: 2016-05-31 18:17:34
Document Index: 475310312

Matched Legal Cases: ['art 700', 'art 800', 'arts 700', 'arts 700', 'arts 700', 'arts 700', 'arts 700']

Patent US7840902 - Method and an apparatus for automatic creation of secure connections between ... - Google PatentsSearch Images Maps Play YouTube News Gmail Drive More »Sign inPatentsThe present invention provides a method and an apparatus for automatic creation of secure connections between segmented resource farms in a utility computing environment. According to one embodiment, farms are automatically created using visual representations of the farms as a specification. A shared...http://www.google.com/patents/US7840902?utm_source=gb-gplus-sharePatent US7840902 - Method and an apparatus for automatic creation of secure connections between segmented resource farms in a utility computing environmentAdvanced Patent SearchPublication numberUS7840902 B2Publication typeGrantApplication numberUS 11/260,511Publication dateNov 23, 2010Priority dateOct 26, 2005Fee statusPaidAlso published asUS20070094370Publication number11260511, 260511, US 7840902 B2, US 7840902B2, US-B2-7840902, US7840902 B2, US7840902B2InventorsDavid Andrew Graves, Philip John DayOriginal AssigneeHewlett-Packard Development Company, L.P.Export CitationBiBTeX, EndNote, RefManPatent Citations (49), Referenced by (2), Classifications (10), Legal Events (3) External Links: USPTO, USPTO Assignment, EspacenetMethod and an apparatus for automatic creation of secure connections between segmented resource farms in a utility computing environment
US 7840902 B2Abstract
The present invention provides a method and an apparatus for automatic creation of secure connections between segmented resource farms in a utility computing environment. According to one embodiment, farms are automatically created using visual representations of the farms as a specification. A shared subnet is created as the basis of a secure connection, visual representations of one or more farms are associated with the shared subnet to form the secure connection between the one or more farms.
Embodiments of the present invention relate to designing farms of information systems resources. More specifically, embodiments of the present invention relate to automatic creation of secure connections between farms in a utility computing environment.
Companies have data centers with information system's resources, such as servers, storage devices, firewalls, routers, network backbones, etc., that are used for executing applications. Typically, farms of resources are created by deploying resources to the farms for executing a particular type of application or suite of applications, such as an application or applications for a billing department. Application designers design conventional farms manually, which is difficult, time consuming, and prone to error.
FIG. 1 is a diagram of a conventional farm. The conventional farm 100 includes networking subnets 105 and computational servers 110 that are used to execute different parts of an application. The different parts of the application may be what are commonly known as “layers” of an application. For example, an application may have a web access layer 120, a presentation layer 130, an application layer 140, among other things. Different administrators are typically responsible for the different parts of the farm. For example, a first administrator may be responsible for the part of the farm that executes the web access layer 120, a second administrator may be responsible for the part of the farm that executes the presentation layer 130 and a third administrator may be responsible for the part of the farm that executes the application layer 140. However, with conventional farms 100, all three of the administrators have access to all parts of the farm. Continuing the example, the first, second and third administrators would have access to all parts of the conventional farm 100 regardless of which layer 120, 130, 140 of the application executes on a part of the conventional farm 100.
The present invention provides a method and an apparatus for automatic creation of secure connections between segmented resource farms in a utility computing environment. According to one embodiment, the automatic creation of farms using visual representations of the farms as a specification is enabled. Further, the creation of a shared subnet as the basis of a secure connection is enabled. Additionally, the association of visual representations of farms with the shared subnet to form the secure connection between the farms is enabled.
According to one embodiment, a development tool is provided for creating visual representations of farms and visual representations of secure connections between the farms. The development tool provides a way to design farms that is easy, that is efficient, and that reduces the probability of errors in the design, as will become more evident, according to one embodiment.
Resources can be any component that is hardware, software, firmware, or combination thereof that can be used by a data center to provide services rendered by an application, as will become more evident. For example, the resources can be computational servers, firewalls, load balancers, data backup devices, arrays of data storage disks, network appliances, Virtual Local Area Networks (VLANS), and network interface cards (NICs), among other things.
A “farm” can be created from one or more resources. For example, resources can be automatically deployed from a pool of resources to create a farm. For example, a farm can include various resources, such as a network backbone, firewalls, a cluster of servers and storage devices. The network backbone allows the farm to communicate with the rest of the resources associated with a data center. Applications can be installed and executed on the clusters of servers. Data that the applications create or use can be stored on the storage devices. The firewalls can be used for protecting the applications on the clusters and the data on storage devices. The resources associated with a farm are typically networked together using a network map.
Therefore, according to rules of good security, administrators only know about and have access to those resources that they need to know about and have access to. This is commonly referred to as “minimum privilege,” which reduces the likelihood of illegal activities by any administrator. According to embodiments of the present invention, the principle of minimum privilege is used since administrators only have access to the farms that they are responsible for or that they have been granted access to as will become more evident.
According to another embodiment, secure connections are used for providing secure communications between farms. For example, two farms 210, 220 may communicate over a secure connection where one end 214 of the connection is associated with one of the farms 210 and another end 222 of the secure connection is associated with the other farm 220. At one end 214 of the secure connection communications can exit a farm 210 and at the other end 222 of the secure connection communications can enter another farm 220. Similarly, communications can flow in the other direction. For example, communications can exit farm 220 at the end 222 of a secure connection and enter farm 210 at the other end 214 of the same secure connection. Secure connections and flow of communications can also be provided between farms 220 and 230.
According to one embodiment of the present invention, the same identifier can be associated with the two ends of a secure connection. For example, the same subnet name, such as “subnet1,” can be used to identify the two ends of a secure connection. Similarly, the same subnet name “subnet2” can be used to identify the two ends of another secure connection, as will become more evident.
According to another embodiment, a list of administrators that can access farms (referred to herein as an “access list”) is associated with a secure connection between the farms. According to yet another embodiment, each secure connection end has exactly one access list. Continuing the example, administrator David can allow administrator Cheryl to design farms that may connect to farm 210 at the end 214 of the secure connection associated with farm 210. Therefore, the access list for the connection end 214 in farm 210 would include David, the administrator of farm 220, and Cheryl, who has been authorized by David to access the subnet at the connection end 214. Similarly, administrator Cheryl can allow administrator David to design farms that may connect to farm 220 at the other end 222 of the same secure connection. Therefore the access list for the connection end 222 in farm 220 would include Cheryl, the administrator of farm 220, and David, who has been authorized by Cheryl to access the subnet at the connection end 222.
According to one embodiment, a user interface associated with a development tool can be used for configuring access lists. For example, a user interface can include a field for entering a subnet name associated with the secure connection and a drop down menu (referred to as the “access list menu”) for selecting which administrators will be granted access to the secure connection. Continuing the example of one end 214 of the secure connection associated with farm 210. In this case, David may enter “subnet1” into the subnet name field, select Cheryl from the drop down menu.
Although the embodiments have been described with regards to establishing a secure connection with access lists that are the same for both ends of the secure connection, access lists that are symmetrical shall be considered to be the same. For example, David is the administrator for farm 210 and Cheryl is the administrator for farm 220. If the access list for the end 214 of secure connection associated with farm 210 only specifies Cheryl and the access list for the other end 222 of the secure connection associated with farm 220 only specifies David, then the access lists are symmetrical since David is the administrator of farm 210 and Cheryl is the administrator of farm 220. Such symmetrical access lists are considered to be the “same,” according to embodiments of the present invention.
FIGS. 3A and 3B depict visual representations of farms and visual representations of secure connections between the farms, according to embodiments of the present invention. The visual representations of the farms include visual representations of resources associated with the farms. For example, the visual representation of farm 300A depicted in FIG. 3A includes visual representations of resources “pubsubnet1,” “webfirewall,” “webnet,” “web1,” “subnet1.” FIG. 3B depicts a visual representation of farm 300B with visual representations of resources “subnet1,” “appfirewall,” “appnet,” “app1,” and “subnet2.” The visual representation “pubsubnet1” represents an external network such as the Internet or an external network backbone.
Further, the visual representations of farms include visual representations of how the resources should be interconnected. For example, the visual representation of farm 300A as depicted in FIG. 3A includes a visual representation indicating that “pubsubnet1” is connected to “webfirewall,” that “webfirewall,” is connected to “webnet,” and that “webnet,” is connected to “web1,” and that “web1” is connected to “subnet1.”
FIGS. 3A and 3B also depict visual representations of secure connections, according to one embodiment. For example, the visual representation of “subnet1” depicted on FIG. 3A represents one end of a secure connection. The visual representation of “subnet1” depicted on FIG. 3B represents the other end of the same secure connection, as will become more evident. The visual representation of “subnet2” depicted on FIG. 3B represents one end of another secure connection, as will become more evident. According to one embodiment, the visual representations of resources are icons.
The ends of a secure connection can be depicted as the ends of a tunnel, according to one embodiment. More specifically, FIGS. 3A and 3B depicts an end of a tunnel for “subnet1” and FIG. 3B depicts the other end of the tunnel for “subnet1.” FIG. 3B additionally depicts one end of a tunnel for “subnet2.”
According to one embodiment, referring to FIG. 3A, communications can flow from the network backbone as represented by “pubsubnet1” through farm 300A to “subnet1” at the bottom of farm 300A, to the top of “subnet1” at the top of farm 300B (referring to FIG. 3B), through farm 300B and out “subnet2.” Similarly, communications can flow in the other direction starting with “subnet2,” (referring to FIG. 3B) through “subnet1” (referring to FIG. 3B and 3A) and ultimately out “pubsubnet1” (referring to FIG. 3A).
As already described herein, the same virtual local area network (VLAN) or subnet can be used for the farms. In this case, visual representations of secure connections between two farms would indicate that the visual representations of the farms and the associated secure connections should be used to create the two farms on the same VLAN or subnet. For example, FIG. 3A depicts one end of a secure connection “subnet1” and FIG. 3B depicts the other end of the same secure connection for “subnet1,” thus indicating that farm 300A and farm 300B can access the same network subnet, named “subnet1.”
As already stated herein, frequently conventional farms are created manually. Further, there are prior art visual rendering tools for creating visual representations of farms. However, according to embodiments of the present invention, an enhanced development tool allows visual representations of farms than can be securely connected, for example, by introducing a secure connecting subnet with associated access control provided by access lists as described herein. The enhanced development tool, provided by embodiments of the present invention, significantly reduces the amount of time and money to create farms, among other things.
Further, the user interface can be used to create visual representations of connections between the resources. The user interface can be used to indicate how the user wanted the resources associated with the farm to be connected. More specifically referring to FIG. 3A, the user can click on one resource, such as “webfirewall,” and then click on another resource, such as “pubsubnet1,” to indicate that the two resources “webfirewall” and “pubsubnet1” should be connected.
A farm editor 410 creates visual representations of farms, according to one embodiment. For example, the farm editor 410 can receive information indicating the user wanted to associate resources “pubsubnet1,” “webfirewall,” “webnet,” “web1,” and “subnet1” with a farm 300A (FIG. 3A) and information indicating how the user wanted the resources connected. The farm editor 410 can use the received information to create a visual representation of farm 300A, as depicted in FIG. 3A. Similar processing can be used to create visual representation of a farm 300B as depicted in FIG. 3B.
The development tool 400 can also be used to create visual representations of secure connections between the visual representations of the farms. For example, a user interface can be used to specify a visual representation of a secure connection, for example, by dragging and dropping a tunnel icon (FIG. 3A) onto a screen associated with the user interface. The user interface can also receive a name, such as “subnet1,” that the user wants to associate with the visual representation of the secure connection, which is the tunnel icon in this case. The user interface can also be used to specify the gateway, where the subnet is allocated from, the mask, and the internet protocol, as already described herein.
A designer uses a connection definer 420 to create visual representations of ends of a secure connection, according to one embodiment. For example, the connection definer 420 can receive information indicating that the user (e.g., designer) caused the tunnel icon to be dragged and dropped onto a screen. Further, the connection definer 420 can receive information indicating that the user associated the name “subnet1” (FIG. 3A) with the visual representation of the secure connection, such as the tunnel icon for “subnet1.” The connection definer 420 uses the received information to create the visual representations of the secure connection as represented by the tunnel icons “subnet1” depicted on FIG. 3A or FIG. 3B.
As already stated, a “farm” can be created from one or more resources. A utility controller can automatically deploy one or more resources from a pool of resources to create a farm. For example, a utility controller can receive a specification of the visual representations of farms and visual representations of secure connections. The utility controller can use the visual representations of the farms associated with the specification to determine how to automatically create the farms. Further, the utility controller can use the visual representations of secure connections associated with the specification to determine how to securely connect the farms.
More specifically, the farm creator 450 can use the visual representations of farms and of secure connections, such as those depicted in FIGS. 2, 3A and 3B, to determine how to create farms. For example, a utility controller can use the visual representations depicted in FIG. 3A to determine that resources (as represented “pubsubnet1,” “webfirewall,” “webnet,” “web1”) are to be assigned to farm 300A and to determine that “pubsubnet1” is connected to “webfirewall,” that “webfirewall” is connected to “webnet,” that “webnet” is connected to “web1,” and “web1” is connected to “subnet1.” The farm creator 450 can use similar processing to create farm 300B using the visual representations (“subnet1,” “appfirewall,” “appnet,” “app1”, “subnet2”) depicted in FIG. 3B.
The connection creator 460 can use a visual representation of a secure connection, such as the ends of the secure connection “subnet1” where one end of the secure connection “subnet1” is depicted on FIG. 3A and the other end of the secure connection “subnet1” is depicted on FIG. 3B.
The connection associator 470 associated with the utility controller 450 uses identifiers, such as subnet name “subnet1,” associated with secure connections to determine what farms are to be securely connected to each other, as already described herein, according to one embodiment. For example, the connection associator 470 can determine the shared subnet “subnet1” is associated with both the visual representations of farm 300A and 300B and therefore the shared subnet “subnet1” should be used to form the secure connection between farm 300A and 300B.
As already stated, a utility controller, the resources that the utility controller provisions to create farms, applications that execute on the farms, etc. are elements of a data center. FIG. 5 is a block diagram of an exemplary utility computing environment, according to embodiments of the present invention. A data center, also known as a utility computing environment (UCE) 500 is shown bounded by a virtual security boundary 550. Boundary 550 is shown here only to help illuminate the concepts presented herein. Typical UCE 500 comprises an operations center local area network (LAN) 505, a data center UC LAN 501 and resource pools 506. According to one embodiment, resource pools 506 are an example of resource pool 210. It is noted here that, by their very nature, UCEs are flexible in their composition, comprising any number and type of devices and systems. It is this flexibility from which they derive their usefulness. The specific architecture illustrated in FIG. 5, therefore, is not meant to limit the application of embodiments of the present invention to any particular provisionable network architecture.
According to one embodiment, visual representations of farms can be reused. For example, when an application designer creates a visual representation of a farm, that visual representation can be stored in a repository (also commonly referred to as a “library”). More specifically, the application designer can create visual representations of farms that can be used for any layer or any part of a layer associated with an application, as described herein. At a later point in time, if an application designer needs to build an application system, the application designer can search the repository to see if there are any visual representations of farms that the application designer can use.
As is well known in the art, mirroring devices, such as storage devices, can be used as a part of maintaining data stored on a storage device, as well as a part of disaster recovery and improving reliability. According to one embodiment, visual representations of farms can be mirrored. According to one embodiment, two farms that are mirror images of each other are the same, as will become evident.
FIG. 7 depicts a flowchart 700 for providing a development tool for creating visual representations of farms that enables securely connecting the farms, according to embodiments of the present invention. Further, FIG. 8 depicts a flowchart 800 of a method for automatic creation of secure connections between segmented resource farms in a utility computing environment, according to embodiments of the present invention. Although specific steps are disclosed in flowcharts 700, 800, such steps are exemplary. That is, embodiments of the present invention are well suited to performing various other steps or variations of the steps recited in flowcharts 700, 800. It is appreciated that the steps in flowcharts 700, 800 may be performed in an order different than presented, and that not all of the steps in flowcharts 700, 800 may be performed. All of, or a portion of, the embodiments described by flowcharts 700, 800 can be implemented using computer-readable and computer-executable instructions which reside, for example, in computer-usable media of a computer system or like device.
The application developer can enter the visual representation of the farms into the development tool 400 for example using a user interface, as described herein. A farm editor 410 receives the information that the application developer entered and creates visual representations of farms, according to one embodiment. For example, referring to FIGS. 3A and 3B, the farm editor 410 can receive information indicating the application designer wanted to associate resources “pubsubnet1,” “webfirewall,” “webnet,” “web1,” and “subnet1” with a farm 300A (FIG. 3A) and information indicating how the user wanted the resources connected. The farm editor 410 can use the received information to create a visual representation of farm 300A, as depicted in FIG. 3A. Similar processing can be used to create visual representation of a farm 300B as depicted in FIG. 3B.
In step 730, a visual representation of a secure connection, according to one embodiment. For example, the application designer uses a connection definer 420 to create visual representations of ends of a secure connection, according to one embodiment. For example, the connection definer 420 can receive information indicating that the application designer caused the tunnel icon to be dragged and dropped onto a screen associated with the development tool 400. Further, the connection definer 420 can receive information indicating that the application designer associated the name “subnet1” (FIG. 3A) with the visual representation of the secure connection, such as the tunnel icon for “subnet1.” The connection definer 420 uses the received information to create the visual representations of the secure connection as represented by the tunnel icons “subnet1” depicted on FIG. 3A or FIG. 3B.
More specifically, the farm creator 450 can use the visual representations of farms, such as those depicted in FIGS. 2, 3A and 3B, to determine how to create farms. For example, a utility controller can use the visual representations depicted in FIG. 3A to determine that resources (as represented “pubsubnet1,” “webfirewall,” “webnet,” “web1”) are to be assigned to farm 300A and to determine that “pubsubnet1” is connected to “webfirewall,” that “webfirewall” is connected to “webnet,” that “webnet” is connected to “web1,” and “web1” is connected to “subnet1.” The farm creator 450 can use similar processing to create farm 300B using the visual representations (“subnet1,” “appfirewall,” “appnet,” “app1”) depicted in FIG. 3B.
In step 830, the creation of a shared subnet as the basis of a secure connection is enabled, according to one embodiment. For example, the connection creator 460 can use a visual representation of a secure connection, such as the ends of the secure connection “subnet1” to create the shared subnet “subnet1” where one end of the secure connection “subnet1” is depicted on FIG. 3A and the other end of the secure connection “subnet1” is depicted on FIG. 3B.
In step 840, the association of visual representations of farms with the shared subnet to form the secure connection between the farms is enabled, according to embodiments of the present invention. For example, the connection associator 470 associated with the utility controller 450 uses identifiers, such as subnet name “subnet1,” associated with secure connections to determine what farms are to be securely connected to each other, as already described herein, according to one embodiment. For example, the connection associator 470 can determine the shared subnet “subnet1” is associated with both the visual representations of farm 300A and 300B and therefore the shared subnet “subnet1” should be used to form the secure connection between farm 300A and 300B.
Although there are prior art development tools for creating visual representations of farms, these prior art development tools require additional devices that add cost and network resources that decrease performance in order for a utility controller to securely connect the farms. For example, prior art solutions require expensive encryption devices in order to securely connect farms. In contrast, embodiments of the present invention provide secure connections using a shared subnet which provides optimal performance and reduced cost.
Patent CitationsCited PatentFiling datePublication dateApplicantTitleUS5394522 *Sep 13, 1993Feb 28, 1995International Business Machines CorporationSelecting and locating graphical icon objects to define and configure the workstations in data processing networksUS5751965 *Mar 21, 1996May 12, 1998Cabletron System, Inc.Network connection status monitor and displayUS5768519 *Jan 18, 1996Jun 16, 1998Microsoft CorporationMethod and apparatus for merging user accounts from a source security domain into a target security domainUS5821937 *Aug 12, 1996Oct 13, 1998Netsuite Development, L.P.Computer method for updating a network designUS5831610 *Feb 23, 1996Nov 3, 1998Netsuite Development L.P.Designing networksUS6009466 *Oct 31, 1997Dec 28, 1999International Business Machines CorporationNetwork management system for enabling a user to configure a network of storage devices via a graphical user interfaceUS6054987 *May 29, 1998Apr 25, 2000Hewlett-Packard CompanyMethod of dynamically creating nodal views of a managed networkUS6078990 *Feb 6, 1998Jun 20, 2000Ncr CorporationVolume set configuration using a single operational viewUS6167052 *Apr 27, 1998Dec 26, 2000Vpnx.Com, Inc.Establishing connectivity in networksUS6271845 *Mar 10, 2000Aug 7, 2001Hewlett Packard CompanyMethod and structure for dynamically drilling down through a health monitoring map to determine the health status and cause of health problems associated with network objects of a managed network environmentUS6314460 *Oct 30, 1998Nov 6, 2001International Business Machines CorporationMethod and apparatus for analyzing a storage network based on incomplete information from multiple respective controllersUS6654803 *Jun 30, 1999Nov 25, 2003Nortel Networks LimitedMulti-panel route monitoring graphical user interface, system and methodUS6681232 *May 22, 2001Jan 20, 2004Yipes Enterprise Services, Inc.Operations and provisioning systems for service level management in an extended-area data communications networkUS6697087 *May 5, 1999Feb 24, 2004Microsoft CorporationUpdating diagrams of dynamic representational Models of dynamic systemsUS6839747 *Jun 30, 1999Jan 4, 2005Emc CorporationUser interface for managing storage in a storage system coupled to a networkUS6839878 *May 8, 2000Jan 4, 2005International Business Machines CorporationMechanism for displaying content using control structure for authoring systemsUS6903755 *Dec 21, 1999Jun 7, 2005John T. PugaczewskiNetwork management system and graphical user interfaceUS6952208 *Jun 22, 2001Oct 4, 2005Sanavigator, Inc.Method for displaying supersets of node groups in a networkUS7039870 *Feb 6, 2002May 2, 2006Hitachi, Ltd.Method for connecting computer systemsUS7093005 *May 22, 2001Aug 15, 2006Terraspring, Inc.Graphical editor for defining and creating a computer systemUS7107534 *Mar 24, 1999Sep 12, 2006Adaptec, Inc.Storage area network administrationUS7310666 *Jun 29, 2001Dec 18, 2007International Business Machines CorporationMethod and system for restricting and enhancing topology displays for multi-customer logical networks within a network management systemUS20020002606 *Mar 6, 1998Jan 3, 2002David H. JaffeMethod and system for managing storage devices over a networkUS20020052941 *May 22, 2001May 2, 2002Martin PattersonGraphical editor for defining and creating a computer systemUS20020103884 *Feb 18, 1999Aug 1, 2002Martin DuursmaApparatus and method for determining a program neighborhood for a client node in a client-server networkUS20020103889 *Jun 19, 2001Aug 1, 2002Thomas MarksonVirtual storage layer approach for dynamically associating computer storage with processing hostsUS20020135610 *Aug 3, 2001Sep 26, 2002Hitachi, Ltd.Visualization of multi-layer network topologyUS20020138572 *Nov 30, 2001Sep 26, 2002Delany Shawn P.Determining a user's groupsUS20030009547 *Jun 29, 2001Jan 9, 2003International Business Machines CorporationMethod and system for restricting and enhancing topology displays for multi-customer logical networks within a network management systemUS20030028624 *Jul 6, 2001Feb 6, 2003Taqi HasanNetwork management systemUS20030085914 *Feb 6, 2002May 8, 2003Nobumitsu TakaokaMethod for connecting computer systemsUS20030093509 *Oct 5, 2001May 15, 2003Li Raymond M.Storage area network methods and apparatus with coordinated updating of topology representationUS20030103077 *Dec 3, 2001Jun 5, 2003Lucent Technologies Inc.Method and apparatus for managing and representing elements in a networkUS20030131108 *Jan 10, 2002Jul 10, 2003Hitachi, Ltd.SAN Infrastructure on demand service systemUS20030154279 *Mar 26, 2001Aug 14, 2003Ashar AzizSymbolic definition of a computer systemUS20030172145 *Feb 27, 2003Sep 11, 2003Nguyen John V.System and method for designing, developing and implementing internet service provider architecturesUS20030234808 *Apr 22, 2003Dec 25, 2003Secure Resolutions, Inc.Software administration in an application service provider scenario via configuration directivesUS20040093397 *Oct 28, 2003May 13, 2004Chiroglazov Anatoli G.Isolated working chamber associated with a secure inter-company collaboration environmentUS20040098391 *Jun 20, 2003May 20, 2004Robertson William H.Method and system for facilitating electronic circuit and chip design using remotely located resourcesUS20040143658 *Jan 17, 2003Jul 22, 2004Chris NewtonMethod and apparatus for permitting visualizing network dataUS20040184412 *Mar 17, 2003Sep 23, 2004Stephenson Bryan CraigSystem and method for subnet configuration and selectionUS20050018668 *Jul 24, 2003Jan 27, 2005Cheriton David R.Method and apparatus for processing duplicate packetsUS20050044502 *Aug 19, 2003Feb 24, 2005Fu Jennifer JieArrangements and methods for visually indicating network element properties of a communication networkUS20050097440 *Nov 3, 2004May 5, 2005Richard LuskMethod and system for collaborationUS20050138413 *Dec 11, 2003Jun 23, 2005Richard LippmannNetwork security planning architectureUS20060015935 *Sep 22, 2005Jan 19, 2006Microsoft CorporationMethod for providing user authentication/authorization and distributed firewall utilizing sameUS20060048075 *Aug 2, 2004Mar 2, 2006International Business Machines CorporationTear-away topology viewsUS20060090136 *Oct 1, 2004Apr 27, 2006Microsoft CorporationMethods and apparatus for implementing a virtualized computer systemUS20070094371 *Oct 26, 2005Apr 26, 2007Graves David AMethod and an apparatus for creating visual representations of farms that enables connecting farms securely* Cited by examinerReferenced byCiting PatentFiling datePublication dateApplicantTitleUS9043704 *Mar 23, 2007May 26, 2015Infovista SaMethod for configuring displets for an interactive platform for analyzing a computer network performanceUS20090307596 *Mar 23, 2007Dec 10, 2009Allot Jean-FrancoisMethod for configuring displets for an interactive platform for analyzing a computer network performance* Cited by examinerClassifications U.S. Classification715/741, 715/734, 709/220, 715/733International ClassificationG06F15/177, G06F3/00Cooperative ClassificationH04L63/20, H04L63/0209European ClassificationH04L63/20, H04L63/02ALegal EventsDateCodeEventDescriptionFeb 13, 2006ASAssignmentOwner name: HEWLETT-PACKARD DEVELOPMENT COMPANY, L.P., TEXASFree format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:GRAVES, DAVID ANDREW;DAY, PHILIP JOHN;REEL/FRAME:017256/0921;SIGNING DATES FROM 20060124 TO 20060213Apr 28, 2014FPAYFee paymentYear of fee payment: 4Nov 9, 2015ASAssignmentOwner name: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP, TEXASFree format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:HEWLETT-PACKARD DEVELOPMENT COMPANY, L.P.;REEL/FRAME:037079/0001Effective date: 20151027RotateOriginal ImageGoogle Home - Sitemap - USPTO Bulk Downloads - Privacy Policy - Terms of Service - About Google Patents - Send FeedbackData provided by IFI CLAIMS Patent Services