1. An exercise device comprising:
a first frame;
a second frame that is pivotally connected to the first frame, the second frame being movable relative to the first frame between a storage position and an operating position; and
a latching mechanism that selectively holds the second frame in the storage position, the latching mechanism comprising:
a seat associated with the first frame, the seat having a seat engagement surface;
a seat engagement member associated with the second frame and which may be selectively positioned on the seat engagement surface to hold the second frame in the storage position; and
a lever that selectively rotates the seat engagement member off of the seat to allow the second frame to move from the storage position to the operating position.
2. The exercise device of claim 1, wherein the seat engagement surface faces in a generally upward direction.
3. The exercise device of claim 1, wherein the seat engagement member has a first end mounted on a rod and a second end that extends generally radially away from the rod.
4. The exercise device of claim 3, wherein the second end of the seat engagement member has a wheel mounted thereon.
5. The exercise device of claim 3, wherein the rod has a longitudinal axis and is rotatably connected to the second frame such that the rod is rotatable about the longitudinal axis.
6. The exercise device of claim 5, wherein the longitudinal axis of the rod is generally parallel to a longitudinal axis of the second frame.
7. The exercise device of claim 5, wherein the second frame moves between the storage position and the operating position about an axis that is generally perpendicular to the longitudinal axis of the rod.
8. The exercise device of claim 3, wherein the lever is connected to the rod.
9. The exercise device of claim 8, wherein the lever and the seat engagement member are disposed adjacent opposing ends of the rod.
10. The exercise device of claim 3, wherein the rod extends along a substantial length of the second frame.
11. The exercise device of claim 1, wherein the seat engagement member is movable between a first angular position and a second angular position, wherein the seat engagement member is positioned on the seat engagement surface in the first angular position and is off of the seat engagement surface in the second angular position.
12. The exercise device of claim 11, wherein the seat engagement member is biased toward the first angular position.
13. The exercise device of claim 11, wherein the seat has a seat guide surface that maintains the seat engagement member in the second angular position when the second frame is moved toward the operating position.
14. The exercise device of claim 1, further comprising a gas spring connected between the first frame and the second frame to urge the second frame toward the storage position.
15. The exercise device of claim 1, wherein the exercise device comprises a treadmill and the second frame comprises a treadbase upon which a user may ambulate when the treadbase is in the operating position.
16. A treadmill comprising:
a frame having a base frame that rests on a support surface and a generally upright frame that extends generally upwardly from the base frame;
a treadbase having a first end and a second end, the treadbase being pivotally connected to the frame and movable between an operating position in which the first end of the treadbase is positioned toward the support surface and a storage position in which the first end of the treadbase is positioned toward the upright structure of the frame; and
a latching mechanism that selectively holds the treadbase in the storage position, the latching mechanism comprising:
a seat secured to the frame, the seat having a seat engagement surface;
a rod having a longitudinal axis, the rod being rotatably connected to the treadbase such that the rod can rotate about its longitudinal axis;
a seat engagement member connected to the rod, wherein the seat engagement member moves between a first position and a second position as the rod is rotated about its longitudinal axis, wherein the seat engagement member engages the seat engagement surface on the seat when the seat engagement member is in the first position, thereby selectively maintaining the treadbase in the storage position, and wherein the engagement member does not engage the seat engagement surface on the seat when the seat engagement member is in the second position, thereby allowing the treadbase to move to the operating position; and
a lever connected to the rod, wherein the lever is movable in first and second opposing directions, wherein movement of the lever in the second direction causes the seat engagement member to move to the second position and out of engagement with the seat engagement surface.
17. The exercise device of claim 16, wherein the seat engagement member has a first end mounted on the rod and a second end that extends generally radially away from the rod, wherein the second end of the seat engagement member has a wheel mounted thereon.
18. The exercise device of claim 16, wherein the treadbase has a longitudinal axis that is generally parallel to the longitudinal axis of the rod.
19. The exercise device of claim 16, wherein the lever is connected to the rod adjacent the first end of the treadbase and the seat engagement member is connected to the rod adjacent the second end of the treadbase.
20. The treadmill of claim 16, wherein the seat comprises a seat guide surface that guides the movement of the seat engagement member as the treadbase is moved from the storage position to the operating position and which maintains the seat engagement member in the second position when the treadbase is not in the storage position.
The claims below are in addition to those above.
All refrences to claim(s) which appear below refer to the numbering after this setence.
1. A system for TCP SYN cookie validation at a host server comprising:
a session SYN packet receiver for receiving a session SYN packet;
a transition cookie generator operating to generate a transition cookie with the use of a transition cookie secret key, the transition cookie comprising a time value representing the actual time, wherein the transition cookie generator generates the transition cookie secret key based on data obtained from the received session SYN packet, the data obtained from the SYN packet including at least one of a source IP address of an IP header, a destination port, a source port, and a sequence number of a TCP header in the received session SYN packet, wherein the transition cookie generator concatenates the obtained data from the session SYN packet to generate a first data item of the generator and the transition cookie generator uses a first hash function to generate the transition cookie secret key from the first data item of the generator;
a session SYNACK packet sender for sending the transition cookie in response to the received session SYN packet;
a session ACK packet receiver for receiving a session ACK packet, the session ACK packet including a candidate transition cookie; and
a transition cookie validator, for determining whether the candidate transition cookie in the received session ACK packet comprises a time value representing a time within a predetermined time interval from the time the session ACK packet is received, wherein the transition cookie validator generates a candidate transition cookie secret key based on data obtained from the received session ACK packet, the data obtained from the ACK packet including at least one of a source IP address of the IP header, a destination port, and a source port, wherein the transition cookie validator concatenates the obtained data from the session ACK packet to generate a first data item of the validator and the transition cookie validator uses the first or another hash function to generate the candidate transition cookie secret key from the first data item of the validator,
wherein at least one of:
the transition cookie generator uses a secret key offset to select one or more bits of data from the first data item of the generator in order to generate a second data item of the generator, and
the transition cookie validator uses a candidate secret key offset to select one or more bits of data from the first data item of the validator in order to generate a second data item of the validator.
2. The system according to claim 1, in which the transition cookie validator determines that the received session ACK packet is valid if the candidate transition cookie in the received session ACK packet comprises a time value representing a time within a predetermined time interval from the time the session ACK packet is received.
3. The system according to claim 1, in which the predetermined time interval is in the range of one to six seconds.
4. The system according to claim 1, in which the predetermined time interval is three seconds.
5. The system according to claim 1, in which the generating of the transition cookie includes the use of random data.
6. The system according to claim 1, in which the generating of the transition cookie includes the use of data obtained from the session SYN packet.
7. A system for TCP SYN cookie validation at a host server comprising:
a session SYN packet receiver for receiving a session SYN packet;
a transition cookie generator operating to generate a transition cookie with the use of a transition cookie secret key, the transition cookie comprising a time value representing the actual time, wherein the transition cookie generator generates the transition cookie by (i) generating an encrypted data element of the generator by applying a cryptographic method on the transition cookie secret key and a transition cookie data element, (ii) performing an unsigned binary addition on the encrypted data element of the generator and a sequence number of a TCP header in the received session SYN packet, and (iii) storing the result in the transition cookie;
a session SYNACK packet sender for sending the transition cookie in response to the received session SYN packet;
a session ACK packet receiver for receiving a session ACK packet, the session ACK packet including a candidate transition cookie; and
a transition cookie validator, for determining whether the candidate transition cookie in the received session ACK packet comprises a time value representing a time within a predetermined time interval from the time the session ACK packet is received.
8. The system according to claim 7, wherein the transition cookie data element comprises data based on at least one of: a selective ACK, an MSS index, and a 32-bit current time of day indicated by a clock.
9. A system for TCP SYN cookie validation at a host server comprising:
a session SYN packet receiver for receiving a session SYN packet;
a transition cookie generator operating to generate a transition cookie with the use of a transition cookie secret key, the transition cookie comprising a time value representing the actual time;
a session SYNACK packet sender for sending the transition cookie in response to the received session SYN packet;
a session ACK packet receiver for receiving a session ACK packet, the session ACK packet including a candidate transition cookie; and
a transition cookie validator, for determining whether the candidate transition cookie in the received session ACK packet comprises a time value representing a time within a predetermined time interval from the time the session ACK packet is received, wherein the transition cookie validator generates:
a candidate sequence number such that a sequence number of a TCP header in the received session ACK packet equals the sum of the candidate sequence number and a value of 1,
a candidate encrypted data element such that the result of performing an unsigned binary addition of the candidate encrypted data element and a candidate sequence number equals the candidate transition cookie, and
a candidate transition cookie data element by applying a cryptographic method on a candidate transition cookie secret key and the candidate encrypted data element.
10. The system according to claim 9, wherein the transition cookie validator validates the candidate transition cookie data element by adjusting the candidate transition cookie data element to generate, and determining if the adjusted candidate transition cookie data element is within a predetermined time margin of a modified current time.
11. A method for validating a TCP cookie at a host, the method comprising:
receiving a first session packet;
acquiring a transition cookie secret key based on data obtained from the received first session packet;
generating a transition cookie using the transition cookie secret key;
sending a second session packet including the transition cookie;
receiving a third session packet including a candidate transition cookie;
acquiring a candidate transition cookie secret key based on data obtained from the received third session packet; and
validating the candidate transition cookie using the candidate transition cookie secret key.
12. The method of claim 11, wherein the data obtained from the received first session packet includes:
at least one of a source IP address, a destination port, a source port, or a sequence number of a TCP header.
13. The method of claim 11, wherein acquiring the transition cookie secret key further comprises:
concatenating the data obtained from the received first session packet;
forming a first secret key transition data item based on the concatenation; and
generating the transition cookie secret key from the first secret key transition data item.
14. The method of claim 13, wherein generating the transition cookie secret key from the first secret key transition data item comprises using a hash function.
15. The method of claim 13, wherein acquiring the transition cookie secret key further comprises:
selecting one or more bits of data from the first secret key transition data item using a secret key offset;
forming a second secret key transition data item based on the selected one or more bits; and
generating the transition cookie secret key from the first secret key transition data item and the second secret key transition data item.
16. The method of claim 11, wherein the data obtained from the received third session packet includes at least one of a source IP address, a destination port, or a source port.
17. The method of claim 11, wherein acquiring the candidate transition cookie secret key further comprises:
concatenating data obtained from the received third session packet;
forming a first secret key candidate data item based on the concatenation; and
generating the candidate transition cookie secret key from the first secret key candidate data item of the validation.
18. The method of claim 17, wherein acquiring the candidate transition cookie secret key further comprises:
using a hash function to generate the candidate transition cookie secret key from the first secret key candidate data item.
19. The method of claim 17, further comprising:
determining that the received third session packet is valid if the candidate transition cookie in the received third session packet comprises a time value representing a time within a predetermined time interval from the time the third session packet is received.
20. A method for validating a TCP cookie at a host, the method comprising:
receiving a first session packet;
generating a transition cookie by applying a cryptographic method on a transition cookie secret key and a transition cookie data element;
sending a second session packet including the transition cookie in response to the received first session packet;
receiving a third session packet including a candidate transition cookie; and
validating the candidate transition cookie by determining whether the candidate transition cookie comprises a time value representing a time within a predetermined time interval from a time that the third session packet is received.
21. The method of claim 20, wherein generating the transition cookie further comprises:
generating an encrypted data element based on the application of the cryptographic method;
performing an unsigned binary addition on the encrypted data element and a sequence number of a TCP header in the received first session packet; and
storing a result of the unsigned binary addition in the transition cookie.
22. The method of claim 20, comprising acquiring the transition cookie data element based on at least one of a one-bit data item, an MSS index, or a 32-bit current time of day indicated by a clock.
23. A method for validating a TCP cookie at a host, the method comprising:
receiving a first session packet;
generating a transition cookie using a transition cookie secret key;
sending a second session packet including the transition cookie in response to the received first session packet;
receiving a third session packet including a candidate transition cookie; and
validating the candidate transition cookie by applying a cryptographic method on a candidate transition cookie secret key.
24. The method of claim 23, wherein validating the candidate transition cookie further comprises:
generating a candidate sequence number such that a sequence number of a TCP header in the received third session packet equals the sum of the candidate sequence number and a value of 1;
generating a candidate encrypted data element such that a result of performing an unsigned binary addition of the candidate encrypted data element and the candidate sequence number equals the candidate transition cookie; and
generating a candidate transition cookie data element by applying the cryptographic method on the candidate transition cookie secret key and the candidate encrypted data element.
25. The method of claim 24, further comprising:
adjusting the candidate transition cookie data element; and
validating the candidate transition cookie data element by determining if the adjusted candidate transition cookie data element is within a predetermined time margin of a modified current time.
26. A host for validating a TCP cookie, comprising:
a memory device storing instructions; and
a processor that, when executing the instructions, configures the host to:
receive a first session packet;
acquire a transition cookie secret key based on data obtained from the received first session packet;
generate a transition cookie using the transition cookie secret key;
send a second session packet including the transition cookie;
receive a third session packet including a candidate transition cookie;
acquire a candidate transition cookie secret key based on data obtained from the received third session packet; and
validate the candidate transition cookie using the candidate transition cookie secret key.
27. A host for validating a TCP cookie, comprising:
a memory storing instructions; and
a processor, that when executing the instructions, configures the host to:
receive a first session packet;
generate a transition cookie by applying a cryptographic method on a transition cookie secret key and a transition cookie data element;
send a second session packet including the transition cookie;
receive a third session packet including a candidate transition cookie; and
validate the candidate transition cookie by determining whether the candidate transition cookie comprises a time value representing a time within a predetermined time interval from the time the third session packet is received.
28. A host for validating a TCP cookie, the host comprising:
a memory storing instructions; and
a processor that, when executing the instructions, configures the host to:
receive a first session packet;
generate a transition cookie using a transition cookie secret key;
send a second session packet including the transition cookie;
receive a third session packet including a candidate transition cookie; and
validate the candidate transition cookie by applying a cryptographic method on a candidate transition cookie secret key.
29. A non-transitory computer-readable medium storing instructions that, when executed, cause a computing device to perform a method for validating a TCP cookie, the method comprising:
receiving a first session packet;
acquiring a transition cookie secret key based on data obtained from the received first session packet;
generating a transition cookie using the transition cookie secret key;
sending a second session packet including the transition cookie;
receiving a third session packet including a candidate transition cookie;
acquiring a candidate transition cookie secret key based on data obtained from the received third session packet;
validating the candidate transition cookie using the candidate transition cookie secret key.
30. A non-transitory computer-readable medium storing instructions that, when executed, cause a computing device to perform a method for validating a TCP cookie, the method comprising:
receiving a first session packet;
generating a transition cookie by applying a cryptographic method on a transition cookie secret key and a transition cookie data element;
sending a second session packet including the transition cookie in response to the received first session packet;
receiving a third session packet including a candidate transition cookie; and
validating the candidate transition cookie by determining whether the candidate transition cookie comprises a time value representing a time within a predetermined time interval from the time the third session packet is received.
31. A non-transitory computer-readable medium storing instructions that, when executed, cause a computing device to perform a method for validating a TCP cookie, the method comprising:
receiving a first session packet;
generating a transition cookie using a transition cookie secret key;
sending a second session packet including the transition cookie in response to the received first session packet;
receiving a third session packet including a candidate transition cookie; and
validating the candidate transition cookie by applying a cryptographic method on a candidate transition cookie secret key.