Jason D Preston

US Patent:

7068646, Jun 27, 2006

Filed:

Jul 11, 2001

Appl. No.:

09/903822

Inventors:

Richard E. Fangman - Pflugerville TX, US
Jason D. Preston - Austin TX, US

Assignee:

Voxpath Networks, Inc. - Austin TX

International Classification:

H04L 12/66

US Classification:

370352, 370356

Abstract:

System and method for IP telephony including internal and external call sessions. The system includes at least one IP telephone (IPT), a Service Gateway (SG), and a Media Gateway Controller (MGC). The SG receives a Call Setup request, including a source IP address and a destination telephone number. A first Media Gateway is selected based on the source IP address. A second Media Gateway is selected based on the destination telephone number. A public IP address of the first Media Gateway is compared to a public IP address of the second Media Gateway, and if the same, respective private IP addresses of the first and second Media Gateway are selected for Call Setup. If different, the respective public IP addresses of the first and second Media Gateway are selected for Call Setup. Thus, the system and method distinguish between external and internal call sessions and route the IP traffic accordingly.

US Patent:

7068647, Jun 27, 2006

Filed:

Jul 11, 2001

Appl. No.:

09/903836

Inventors:

Richard E. Fangman - Pflugerville TX, US
Jason D. Preston - Austin TX, US

Assignee:

Voxpath Networks, Inc. - Austin TX

International Classification:

H04L 12/66

US Classification:

370352, 370389, 370465, 370401

Abstract:

System and method for routing packets for IP telephony. The system includes an IP telephone (IPT) and a Service Gateway (SG) coupled via a network. The SG receives a data packet from the IPT, including a private source IP address (SIPA), source port number (SPN), and destination information for an IP device, performs network address persistent port translation (NAPPT) on the data packet, and sends it to the IP device. NAPPT changes the private SIA to a public SIA, leaving the SPN unchanged. The SG receives a data packet from the IP device, including a public destination IP address (DIPA, i. e. , said public SIPA), a destination port number (DPN, i. e. , said SPN), and source information, NAPPTs the data packet, using the public DIPA and the DPN to identify the IPT, changing the public DIPA to the private SIPA, leaving the DPN unchanged, and sends the data packet to the IPT.

US Patent:

8024802, Sep 20, 2011

Filed:

Jul 30, 2008

Appl. No.:

12/182262

Inventors:

Jason D. Preston - Austin TX, US

Assignee:

Hewlett-Packard Development Company, L.P. - Houston TX

International Classification:

G06F 11/00

US Classification:

726 22, 726 23

Abstract:

Methods and systems are provided for using state ranges for processing regular expressions in intrusion-prevention systems. In an embodiment, in an intrusion-prevention system for examining network traffic and identifying therein the presence of signature data patterns, a state-transition table is provided. The state-transition table is representative of a predetermined data pattern, and includes states each having one or more egress events defining transitions to other states. A subject is received for evaluation for the presence of the predetermined data pattern. While using the state-transition table for said evaluation, the presence of a first egress event of a first state is detected in the subject, resulting in a transition from the first state to a second state. A second-state range in the subject is calculated, and the second-state range is searched for the presence of at least one of the second state's egress events.

US Patent:

8307440, Nov 6, 2012

Filed:

Jul 31, 2008

Appl. No.:

12/183394

Inventors:

Rodney S. Canion - West Lake Hills TX, US
Jason D. Preston - Austin TX, US

Assignee:

Hewlett-Packard Development Company, L.P. - Houston TX

International Classification:

H04L 29/06

US Classification:

726 23

Abstract:

A system includes a plurality of deep packet inspection engines for performing deep packet inspection on packets in a network. The deep packet inspection engines share at least some state. One of the deep packet inspection engines is assigned responsibility for writing data to the shared state. For one of the deep packet inspection engines to write data to the shared state, the deep packet inspection write provides a write request to the assigned “writer” deep packet inspection engine, which queues the request on a write queue. The writer deep packet inspection engine may queue multiple write requests from multiple deep packet inspection engines. The writer deep packet inspection engine dequeues the write requests and processes them serially, thereby avoiding the need to manage contention using locks.

US Patent:

8347384, Jan 1, 2013

Filed:

Jul 29, 2008

Appl. No.:

12/181400

Inventors:

Jason D. Preston - Austin TX, US

Assignee:

Hewlett-Packard Development Company, L.P. - Houston TX

International Classification:

H04L 29/06

US Classification:

726 23

Abstract:

Methods and systems are provided for using incremental operation for processing regular expressions in intrusion-prevention systems. In an embodiment, a state-transition table is provided, said table representative of a predetermined data pattern, and including states each having one or more egress events defining transitions to other states. A first portion of a subject is received, where the subject is to be evaluated for the presence of the predetermined data pattern. While using the state-transition table for said evaluation, a first state is transitioned into, after which it is determined that a set of restart information should be saved for the first state, said determination including identifying a tail to save from an end of the first portion of the subject. The restart information is saved, along with at least the identified tail.

US Patent:

8363647, Jan 29, 2013

Filed:

Jul 11, 2001

Appl. No.:

09/903838

Inventors:

Richard E. Fangman - Round Rock TX, US
Jason D. Preston - Austin TX, US
Kenneth Ryon - Leander TX, US

Assignee:

Voxpath Networks, Inc. - Austin TX

International Classification:

H04L 12/66

US Classification:

370354, 370352, 370389, 370401, 370466

Abstract:

System and method for IP telephony. The system includes an IP telephone (IPT) and a Service Gateway (SG). The SG receives an identifier, e. g. , a vendor class identifier, included in a DHCP discover message from the IP telephone and determines if the identifier is valid. If so, the SG issues a DHCP offer comprising DHCP lease information to the IP telephone, including a range of port numbers assigned to the IP telephone based on the identifier, where the range of port numbers comprises ports which are not reserved for use by other IP protocols. The DHCP lease information includes information indicating operational software for the IP telephone which the IP telephone executes to enable IP communications. The SG mediates IP communications between the IP telephone and an IP device, where the IP telephone uses at least a subset of the range of port numbers to send or receive IP communications.

US Patent:

8448249, May 21, 2013

Filed:

Jul 29, 2008

Appl. No.:

12/181511

Inventors:

Jason D. Preston - Austin TX, US

Assignee:

Hewlett-Packard Development Company, L.P. - Houston TX

International Classification:

G06F 12/14
G06F 15/177
G08B 23/00

US Classification:

726 24, 709223, 713187, 713188, 713189, 726 25

Abstract:

Methods and systems are provided for using lambda transitions for processing regular expressions in intrusion-prevention systems. In an embodiment, a state-transition table is provided, said table being representative of a predetermined data pattern, and including states having egress events defining transitions to other states. A subject is received for evaluation for the presence of the predetermined data pattern. While using the state-transition table for said evaluation, a first state is transitioned into, the first state having an egress event defining a transition to a second state, a state count corresponding to a number of times the first state has been transitioned into, a state-count threshold, and a state-count condition. After transitioning into the first state, the state count is incremented. Responsive to determining that the state-count condition is satisfied by comparing the incremented state count with the state-count threshold, the transition to the second state is taken.

US Patent:

20020141390, Oct 3, 2002

Filed:

Jul 11, 2001

Appl. No.:

09/903837

Inventors:

Richard Fangman - Pflugerville TX, US
Jason Preston - Austin TX, US

International Classification:

H04L012/66

US Classification:

370/352000, 370/401000

Abstract:

System and method for IP telephony. The system includes at least one IP telephone (IPT), a Service Gateway (SG), and a Media Gateway Controller (MGC). After the IPT is activated, the SG performs client DHCP lease negotiation with the IPT, using an identifier of the IPT to assign a range of ports to the IPT, and providing DHCP lease information, which is stored on the SG and the IPT. Operational software is downloaded from a TFTP server and executed by the IPT for initialization. The MGC registers the IPT, which then performs IP communications using one or more ports in the range of assigned ports, where the SG receives packets, performs NAPPT on source/destination IP addresses in the packet header for outgoing/incoming calls, while leaving port information unchanged, and sends the packets on to their destination, where the IPT is uniquely identified using a public IP address and port number.