Robert A Silverman

US Patent:

6411715, Jun 25, 2002

Filed:

Nov 10, 1998

Appl. No.:

09/188963

Inventors:

Moses Liskov - Waltham MA
Robert Silverman - Chelmsford MA
Ari Juels - Cambridge MA

Assignee:

RSA Security, Inc. - Bedford MA

International Classification:

H04L 908

US Classification:

380277, 380 28, 380 30, 380286, 380 1, 713171

Abstract:

Methods and apparatus are disclosed for demonstrating that a public/private key pair is cryptographically strong without revealing information sufficient to compromise the private key. A key pair can be shown to be cryptographically strong by demonstrating that its modulus N is the product of two relatively large prime numbers. In addition, a key pair can be shown to be cryptographically strong by demonstrating that N is cryptographically strong against Pollard factoring attacks, Williams factoring attacks, Bach-Shallit factoring attacks, and weighted difference of squares factoring attacks.

US Patent:

6711137, Mar 23, 2004

Filed:

Mar 12, 1999

Appl. No.:

09/267843

Inventors:

Fredrick K. P. Klassen - Vancouver, CA
Robert M. Silverman - Westfield NJ

Assignee:

International Business Machines Corporation - Armonk NY

International Classification:

H04L 1226

US Classification:

370252, 709223

Abstract:

A communications network is evaluated by selectively sending and receiving a plurality of network evaluation signals through the network. Responsive to these evaluation signals, selective network evaluation parameters are determined and stored. Responsive to these parameters, the response time and throughput characteristics of the network are determined by means of algebraic and queuing theory derivations. Network response time analysis determines the apparent bandwidth, utilization, internal message size, queue factor, and device latency. Throughput analysis defines, calculates, and uses hop count, duplex, throughput and multi-server factors. Service level and capacity planning provides comprehensive âwhat-ifâ network planning facilities, including calculation of the change in network traffic before network response time service level is compromised; calculation of the additional file load capacity of the network; and determination of tuning recommendations for recommended window size for file transfer to fill remaining capacity.

US Patent:

6804624, Oct 12, 2004

Filed:

May 16, 2002

Appl. No.:

10/147769

Inventors:

Robert M. Silverman - Westfield NJ

Assignee:

International Business Machines Corporation - Armonk NY

International Classification:

G06F 935

US Classification:

702159, 702188, 702189

Abstract:

A system and method for determining the physical location of a target device. Using communications network trace route and pinging commands, the distances of three test devices of known locations to the target device are determined; and responsive to those distances, the location of the target device is determined by triangulation. Based upon location, the target device may be blocked from a communications network or connected to a particular server.

US Patent:

6885641, Apr 26, 2005

Filed:

Dec 1, 1999

Appl. No.:

09/452403

Inventors:

Ken Chan - Vancouver, CA
Fredrick K. P. Klassen - Coquitilam, CA
Robert M. Silverman - Westfield NJ, US

Assignee:

International Business Machines Corporation - Armonk NY

International Classification:

H04L012/24

US Classification:

370252

Abstract:

Analysis of networks and testing and analyzing intelligent, network connected devices. An instantaneous network utilization value is assigned for the worst surviving ping instance of between 90% and 99% (determined proportionately from the ratio of dropped test samples to surviving test samples), and then used to solve for average network message size and average utilization of the network. A plurality transactions of different types are transmitted across the network to intelligent end systems and the results mathematically evaluated to determine the portion of the total response time contributed by the network and by the end processors; the utilization of the end processor processing subsystems and of the end processor I/O subsystems; and the utilization of the end system as a whole; and of the network and end processors considered as a unitary entity. Steps include determining utilization of the network when test packets are dropped by the network; utilization of intelligent processor and other devices attached to the network when test transactions are dropped, and when not dropped; and response time for remote processes at both the network and processor level.

US Patent:

6996064, Feb 7, 2006

Filed:

Dec 21, 2000

Appl. No.:

09/746183

Inventors:

Fredrick K. P. Klassen - Coquitilam, CA
Robert M. Silverman - Westfield NJ, US

Assignee:

International Business Machines Corporation - Armonk NY

International Classification:

H04L 1/00

US Classification:

370238, 370252

Abstract:

To evaluate a communications network, a plurality of network evaluation signals, or probative test packets, are selectively sent and received through the network. Responsive to these evaluation signals, network evaluation parameters are determined and stored. Queuing theory analysis, responsive to these parameters, determines the response time and throughput characteristics, including streaming utilization of the network.

US Patent:

7107619, Sep 12, 2006

Filed:

Aug 31, 2001

Appl. No.:

09/945172

Inventors:

Robert M. Silverman - Westfield NJ, US

Assignee:

International Business Machines Corporation - Armonk NY

International Classification:

G06F 17/30
G06F 11/00

US Classification:

726 27, 726 23, 726 22

Abstract:

Challenge-response and probative methods together or independent of each other enable detection of devices participating in denial of service (DOS) and distributed DOS (DDOS) attacks upon a network resource, and upon identification of devices participating in attacks, minimize the effect of the attack and/or minimize the ability of the device to continue its attack by placing the attacking devices in a state of reduced or denied service.

US Patent:

7116639, Oct 3, 2006

Filed:

Dec 21, 2000

Appl. No.:

09/746179

Inventors:

Fredrick K. P. Klassen - Coquitilam, CA
Robert M. Silverman - Westfield NJ, US

Assignee:

International Business Machines Corporation - Armonk NY

International Classification:

H04L 12/26

US Classification:

370252, 370517, 709224

Abstract:

To evaluate a communications network, a plurality of network evaluation signals, or probative test packets, are selectively sent and received through the network. Responsive to these evaluation signals, network evaluation parameters are determined and stored. Queuing theory analysis, responsive to these parameters, determines the response time and throughput characteristics, including discrete capacity, utilization and performance, of the network. Calculation of the value of the network's discrete utilization involves the measurement of the network's average delay waiting for service, measurement of the network's standard deviation of delay waiting for service, calculation of discrete utilization from the ratio of these observed values, and then refinement of that calculation by proportionate factoring in instances of dropped samples as cases of one hundred percent utilization to arrive at a final figure for percent of network discrete utilization.

US Patent:

7274663, Sep 25, 2007

Filed:

Dec 15, 2003

Appl. No.:

10/737553

Inventors:

Robert M. Silverman - Westfield NJ, US

Assignee:

International Business Machines Corporation - Armonk NY

International Classification:

H04L 12/26

US Classification:

370230, 370252

Abstract:

A system for determining network characteristics includes a processor including a packet generation component and a packet evaluation component. The packet generation component generates send test packets for communication into the network. The packet evaluation component is responsive to receive test packets for determining network speed and utilization; upon detecting that the network streaming utilization is not significantly high, evaluates the test packet sequences for a first discard pattern representing actual discard red rate; and upon detecting that the network streaming utilization is significantly high, evaluates the test packet sequences for a second discard pattern representing effective discard yellow rate and effective non-discard green rate.