Inventors list

Assignees list

Classification tree browser

Top 100 Inventors

Top 100 Assignees


Balay, CA

Rajesh Balay, Cupertino, CA US

Patent application numberDescriptionPublished
20100220741HETEROGENEOUS MEDIA PACKET BRIDGING - Methods and systems for bridging Ethernet frames transmitted over heterogeneous media channels are provided. According to one embodiment, multiple Ethernet frames encapsulated within multiple in-bound media transmissions having different media formats are received via a first set of multiple network interfaces of a network-computing device. The multiple in-bound media transmissions are relayed via a switch fabric of the network-computing device to a virtual bridge application running on a processing resource shared by the network interfaces and which acts as a single bridging domain for all Ethernet frames. The virtual bridge application encapsulates the multiple Ethernet frames within multiple out-bound media transmissions by performing media agnostic Ethernet bridging of the multiple Ethernet frames. The multiple Ethernet frames are transmitted by relaying, via the switch fabric, the out-bound media transmissions to a second set of the multiple network interfaces.09-02-2010
20110235649HETEROGENEOUS MEDIA PACKET BRIDGING - Methods and systems for bridging network packets transmitted over heterogeneous media channels are provided. According to one embodiment, a network-computing device comprises multiple network interfaces (netmods) and a shared processing resource. The shared processing resource executes a virtual bridging application representing a single bridging domain for all network packets received by the network-computing device. A translation data structure defines translations between a first framing media format and an intermediate format and between the intermediate format and a second framing media format. If the virtual bridging application determines a network packet is to be relayed between a netmod operable to receive network packets encapsulated within the first framing media format and a netmod operable to transmit network packets encapsulated within the second framing media format, then it uses the translation data structures to translate the network packet before relaying the network packet.09-29-2011

Patent applications by Rajesh Balay, Cupertino, CA US

Rajesh Balay, Los Altos, CA US

Patent application numberDescriptionPublished
20090190552FLEXIBLE MOBILE IP FOREIGN AGENT ARCHITECTURE FOR ENABLING CONVERGED SERVICES - A method and apparatus for flexible Mobile IP foreign agent architecture for enabling converged services are described herein. According to one embodiment of the invention, a packet is received over a circuit bound with a converged services domain of a network element. The converged services domain enables forwarding of wired and wireless traffic to a plurality of destination network elements. Upon determining that the circuit is capable of carrying Mobile Internet Protocol (IP) packets, the packet is processed according to an entry ma Mobile IP forwarding information base upon determining that the packet has a corresponding entry in the Mobile IP forwarding information base, and the packet is processed according to a different entry in an IP forwarding information base upon determining that the packet does not have an entry in the Mobile IP forwarding information base. Other methods and apparatuses are also described.07-30-2009
20110305235FLEXIBLE MOBILE IP FOREIGN AGENT ARCHITECTURE FOR ENABLING CONVERGED SERVICES - A method and apparatus for flexible Mobile IP foreign agent architecture for enabling converged services are described herein. According to one embodiment of the invention, a packet is received over a circuit bound with a converged services domain of a network element. The converged services domain enables forwarding of wired and wireless traffic to a plurality of destination network elements. Upon determining that the circuit is capable of carrying Mobile Internet Protocol (IP) packets, the packet is processed according to an entry in a Mobile IP forwarding information base upon determining that the packet has a corresponding entry in the Mobile IP forwarding information base, and the packet is processed according to a different entry in an IP forwarding information base upon determining that the packet does not have an entry in the Mobile IP forwarding information base. Other methods and apparatuses are also described.12-15-2011

Rajesh Balay, Sunnyvale, CA US

Patent application numberDescriptionPublished
20120099596METHODS AND SYSTEMS FOR A DISTRIBUTED PROVIDER EDGE - Methods and systems for a distributed provider edge are provided. According to one embodiment, a one-to-one association is formed between a Virtual Routing and Forwarding device (VRF) of a provider edge device (PE) of a service provider and a customer site. The VRF includes a routing information base (RIB) and a forwarding information base (FIB). A network interface module is instantiated within the VRF for each network interface employed, such as an intranet, extranet, Virtual Private Network (VPN) and/or Internet interface. A first packet is received at the PE via a first network interface. A first network interface module associated with the first network interface accesses the RIB to acquire routing information for the first packet. A second packet is received via a second network interface. A second network interface module associated with the second network interface accesses the RIB to acquire routing information for the second packet.04-26-2012

Rajesh I. Balay, San Jose, CA US

Patent application numberDescriptionPublished
20080317040MANAGING HIERARCHICALLY ORGANIZED SUBSCRIBER PROFILES - Apparatus are provided for managing hierarchically organized subscriber profiles. According to one embodiment, a router includes multiple virtual interfaces and a policy engine. The virtual interfaces define connections between the router and corresponding subscribers of a service provider. A first virtual interface is operable to receive packets from a first subscriber and to process the packets in accordance with a first-level profile identifier. The policy engine is coupled with the virtual interfaces and operable to de-reference subscriber profiles of the subscribers on behalf of the virtual interfaces based on a database of hierarchically organized profile identifiers. The database includes multiple lower-level profile identifiers, which explicitly define subscriber services, and multiple first-level profile identifiers, which define service contexts representing combinations of services available to subscribers when connected to the service provider by (i) explicitly defining the subscriber services or (ii) referring to one or more of the lower-level profile identifiers.12-25-2008
20080317231MANAGING HIERARCHICALLY ORGANIZED SUBSCRIBER PROFILES - Methods are provided for managing hierarchically organized subscriber profiles. According to one embodiment, subscriber services are modified without requiring a change to the subscriber's first-level profile identifier and without requiring the subscriber to reestablish a connection with the service provider. A database of hierarchically organized profile identifiers, including multiple lower-level profile identifiers, explicitly defining subscriber services, and multiple first-level profile identifiers, defining service contexts representing combinations of services available to subscribers by (i) explicitly defining the subscriber services or (ii) referring to one or more of the lower-level profile identifiers, are maintained within a virtual router operable within a telecommunications system of the service provider. Updated service profile information, representing a change to the subscriber's service context, is received. Responsive the updated service profile information, lower-level profile identifiers currently associated with the subscriber's first-level profile identifier are replaced with lower-level profile identifiers corresponding to the updated service profile information.12-25-2008
20080320553MANAGING HIERARCHICALLY ORGANIZED SUBSCRIBER PROFILES - Methods are provided for managing hierarchically organized subscriber profiles. According to one embodiment of the present invention, a subscriber connection is created with a virtual router operable within a telecommunications system of a service provider. A connection request is received from a subscriber of multiple subscribers of the service provider at a subscriber manager of the virtual router. The virtual router maintains a database of hierarchically organized profile identifiers, including multiple lower-level profile identifiers, which explicitly define subscriber services, and multiple first-level profile identifiers, which define service contexts representing combinations of services available to subscribers when connected by (i) explicitly defining the subscriber services or (ii) referring to one or more of the multiple lower-level profile identifiers. If the subscriber is successfully authenticated, a connection is created by creating and configuring a virtual interface within the virtual router for the subscriber connection based on the subscriber's first-level profile identifier.12-25-2008
20090007228MANAGING HIERARCHICALLY ORGANIZED SUBSCRIBER PROFILES - Apparatus are provided for managing hierarchically organized subscriber profiles. According to one embodiment, a router includes a subscriber manager, a database and a virtual interface. The subscriber manager is operable to receive a connection request from a subscriber of a service provider. The database has stored therein hierarchically organized profile identifiers, including multiple lower-level profile identifiers, which explicitly define subscriber services, and multiple first-level profile identifiers, which define service contexts representing combinations of services available to subscribers when connected to the service provider by (i) explicitly defining the subscriber services or (ii) referring to one or more of the plurality of lower-level profile identifiers. The virtual interface defines a subscriber connection between the router and the subscriber and is created and configured responsive to the connection request based on a first-level profile identifier that is associated with the subscriber.01-01-2009
20100142527Scalable IP-Services Enabled Multicast Forwarding with Efficient Resource Utilization - Methods and apparatus are provided for managing multicast Internet Protocol (IP) flows. According to one embodiment, a multicast IP flow is identified at an interface of a network device using information from a packet header. For any newly identified multicast IP flow, if flow-specific services are required, a new first transmit control block (TCB), which includes one or more attributes relating to flow-specific services required by the newly identified multicast IP flow, is created for the newly identified multicast IP flow. Otherwise, if flow-specific services are not required by the newly identified multicast IP flow, a default second TCB, which excludes any attributes relating to flow-specific services and which includes one or more attributes related to a virtual interface (VI) serving as an outbound interface (OIF) for the newly identified multicast IP flow, is used.06-10-2010
20110122872SCALABLE IP-SERVICES ENABLED MULTICAST FORWARDING WITH EFFICIENT RESOURCE UTILIZATION - Methods, apparatus and data structures are provided for managing multicast IP flows. According to one embodiment, a network switch module includes a memory and multiple processors partitioned among multiple virtual routers (VRs). Each VR maintains a data structure including information relating to multicast sessions handled by the VR and including a first pointer for each multicast session, a chain of blocks of second pointers and one or more TCBs. Each first pointer points to a chain of blocks of second pointers. Each second pointer corresponds to an OIF of the VR participating in the multicast session defined by the first pointer and defines how many times to replicate packets associated with the multicast session. The TCBs store control information relevant to processing or routing packets. Each second pointer points to a TCB, which identifies the OIF out which packets of the multicast session are transmitted from the VR.05-26-2011
20110235548MANAGING HIERARCHICALLY ORGANIZED SUBSCRIBER PROFILES - Methods are provided for managing hierarchically organized subscriber profiles. According to one embodiment, a policy engine of a VR defines services available to subscribers in terms of profile identifiers. A scalable subscriber profile database is established having a memory requirement dependent upon the number of available service contexts by hierarchically organizing profile identifiers as leaf profile identifiers, which explicitly define services, and intermediate profile identifiers, which indirectly represent services. The policy engine receives a first-level profile identifier and determines whether it is among those stored in the database. If not, then it obtains service profile information associated with the first-level profile identifier. If the first-level profile identifier is an intermediate profile identifier having leaf profile identifiers, then it further obtains them and associated profile information and stores this information in the database. The first-level profile identifier and the associated service profile information are also stored in the database.09-29-2011

Patent applications by Rajesh I. Balay, San Jose, CA US

Rajini Balay, Fremont, CA US

Patent application numberDescriptionPublished
20110030055Detecting Spoofing in Wireless Digital Networks - Detecting spoofing in a digital network. Packets of information in a digital network using a shared medium contain a unique identifier for the device originating the packet. An individual device may be transmitting, or receiving, but not both. If a device receives a packet containing its unique identifier as the origin address, that packet must have been transmitted by another device, and a spoofing alert is raised.02-03-2011
20110191827Detecting Unauthorized Router Access Points or Rogue APs in the Wired Network - Detecting rogue access points (APs) or rogue router APs on the wireless network. An authorized access point (AAP) on a network collects wired MAC addresses of wired devices in its subnet, and also collects BSSIDs of wireless devices operating in its vicinity. A rogue is detected by correlating the OUI portion of MAC addresses and BSSIDs after filtering out authorized OUIs.08-04-2011

Rajini I. Balay, Fremont, CA US

Patent application numberDescriptionPublished
20110107417Detecting AP MAC Spoofing - Detecting access point MAC spoofing in a wireless digital network. A sensor in a wireless digital network learns the MAC address and operating channel for at least one access point. If the sensor detects frames being sent to a MAC address on a channel other than the channel associated with that MAC address, then the access point associated with the MAC address is being spoofed. These frames may be association frames, or data frames. If the sensor is running as part of an access point the sensor also knows what clients are associated with the access point. If the sensor detects frames indicating association, such as data frames, sent to its MAC address, but the client is not associated with the access point, then the access point is being spoofed. Similarly, if the sensor receives frames on a channel other than that associated with the access point and receives traffic for the access point's MAC address, the access point is being spoofed. The sensor may be a separate device on the wireless network, or may be functionality included in one or more access points on the network.05-05-2011