Source: http://www.google.nl/patents/US8738605
Timestamp: 2018-01-22 12:17:20
Document Index: 629897122

Matched Legal Cases: ['art 2012', 'art 2012', 'art 2000', 'art 2009', 'art 2002', 'art 2002', 'art 2006', 'art 2008', 'art 2008', 'art 2008', 'art 2008', 'art 2011', 'art 2012']

Patent US8738605 - Systems for discovering sensitive information on computer networks - Google Patenten
One embodiment of a system of the present invention for discovering sensitive information on computer network includes means for discovering databases on a computer network, means for defining a pattern for a data discovery, means for discovering qualifying records by matching the pattern with field...http://www.google.nl/patents/US8738605?utm_source=gb-gplus-sharePatent US8738605 - Systems for discovering sensitive information on computer networks
Publicatienummer US8738605 B2
Aanvraagnummer US 13/436,751
Publicatiedatum 27 mei 2014
Aanvraagdatum 30 maart 2012
Prioriteitsdatum 30 maart 2012
Ook gepubliceerd als US20130262428
Publicatienummer 13436751, 436751, US 8738605 B2, US 8738605B2, US-B2-8738605, US8738605 B2, US8738605B2
Uitvinders Ganesh Devarajan, Todd Redfoot
Oorspronkelijke patenteigenaar Go Daddy Operating Company, LLC
Patentcitaties (91), Niet-patentcitaties (5), Classificaties (9), Juridische gebeurtenissen (2)
Systems for discovering sensitive information on computer networks
US 8738605 B2
Afbeeldingen(25)
a) means for discovering one or more databases on a computer network by running a network crawler configured to identify said one or more databases on said computer network,
b) means for adding said one or more databases discovered by said network crawler on said computer network to one or more electronic storage devices,
c) means for defining a pattern for a database data discovery,
d) means for discovering one or more qualifying records in said one or more databases by matching said pattern with field names or record values in said one or more databases,
e) means for adding said one or more qualifying records discovered by matching said pattern to said one or more electronic storage devices,
f) means for sending an electronic notification to a database administrator managing a qualifying database, wherein said qualifying database is a database containing said one or more qualifying records discovered by matching said pattern with field names or record values in said one or more databases, wherein said electronic notification contains a link to a web-based graphical user interface comprising a summary of said one or more qualifying records found on said qualifying database and a selector for assigning a status to said one or more qualifying records,
g) means for receiving a selection choice to said selector from said database administrator managing said qualifying database, wherein said selection choice identifies said status for said one or more qualifying records, and
h) means for updating said one or more electronic storage devices with said selection choice provided by said database administrator identifying said status for said one or more qualifying records.
i) means for determining whether said selection choice provided by said database administrator identifying said status for said one or more qualifying records passes automated validation.
i) means for determining whether said record values in said one or more qualifying records are encrypted.
i) means for determining a level of encryption of said record values in said one or more qualifying records.
This patent application is related to U.S. patent application Ser. No. 13/436,747 entitled “Methods for Discovering Sensitive Information on Computer Networks” concurrently filed herewith.
The present invention relates in general to discovering sensitive information on computer networks.
For Internet users and businesses alike, the Internet continues to be more and more valuable. People are increasingly using the Web for everyday tasks such as social networking, shopping, banking, paying bills, and consuming media and entertainment. E-commerce is growing, with businesses delivering more services and content across the Internet, communicating and collaborating online, and inventing new ways to connect with each other.
Websites may be created using HyperText Markup Language (HTML) to generate a standard set of tags that define how the webpages for the website are to be displayed. Users of the Internet may access content providers' websites using software known as an Internet browser, such as MICROSOFT INTERNET EXPLORER, MOZILLA FIREFOX, or GOOGLE CHROME. After the browser has located the desired webpage, it requests and receives information from the webpage, typically in the form of an HTML document, and then displays the webpage content for the user. The user then may view other webpages at the same website or move to an entirely different website using the browser.
Browsers are able to locate specific websites because each computer on the Internet has a unique Internet Protocol (IP) address. Presently, there are two standards for IP addresses. The older IP address standard, often called IP Version 4 (IPv4), is a 32-bit binary number, which is typically shown in dotted decimal notation, where four 8-bit bytes are separated by a dot from each other (e.g., 64.202.167.32). The notation is used to improve human readability. The newer IP address standard, often called IP Version 6 (IPv6) or Next Generation Internet Protocol (IPng), is a 128-bit binary number. The standard human readable notation for IPv6 addresses presents the address as eight 16-bit hexadecimal words, each separated by a colon (e.g., 2EDC:BA98:0332:0000:CF8A:000C:2154:7313).
An individual or entity's domain name is increasingly the anchor around which their online presence is maintained. For example, a company's website (www.companyname.com) and email system (john.doe@companyname.com) utilize the company's domain name as an integral part of their architecture. Similarly, many Internet users use their email address, and therefore their domain name, as a means of identification on social websites, which have proliferated in recent years. Social websites are social networking services that focus on building and verifying online social networks for communities of people who share interests and activities, or who are interested in exploring the interests and activities of others, and which necessitates the use of software. Most social websites are Internet based and provide a collection of various ways for users to interact, such as chat, messaging, email, video, voice chat, personal information sharing, image sharing, video sharing, file sharing, status updates, blogging, discussion groups, commentary, etc. The main types of social networking services are those which contain directories of some categories (such as former classmates), means to connect with friends (usually with self-description pages), and/or recommendation systems linked to trust. Popular methods now combine many of these, with FACEBOOK, TWITTER, YOUTUBE, LINKEDIN, MYSPACE, BEBO, PHOTOBUCKET, SNAPFISH, WINDOWS LIVE PHOTOS, WEBSHOTS, and FLICKR being but a few examples.
Such social websites often post their members' public webpages for all Internet users to view, without authentication or login. Conversely, members' private webpages may only be accessed and viewed by the member. The private webpages generally require member authentication and provide the member with tools to manage his public webpage, communicate with other members, and/or otherwise manage his social website membership.
There are many applications for an Internet user's digital identity, including authenticating the user before permitting access to a website. One method for such authentication includes the use of a URL. URL-based digital identity systems (such as OPENID) utilize a framework based on the concept that any individual or entity can identify themselves on the Internet with a URL provided by a Digital Identity Provider (e.g., johndoe.openid.com). The Digital Identity Provider maintains an Identity Server on which a Digital Identity Database (a database of provided digital identity URLs and the corresponding authentication passwords) is stored.
One of the problems facing companies is properly securing customer records and companies' own records. Applicant hereby proposes novel systems and methods for discovering sensitive information on computer networks.
FIG. 1 contains an SQL computer code demonstrating the best mode implementation of the present invention.
FIGS. 2 a-2 b contain a computer code demonstrating the best mode implementation of the present invention.
FIGS. 3 a-3 c contain a computer code demonstrating the best mode implementation of the present invention.
FIGS. 4 a-4 c contain a computer code demonstrating the best mode implementation of the present invention.
FIGS. 5 a-5 j contain a computer code demonstrating the best mode implementation of the present invention.
FIGS. 6-7 contain a screenshots demonstrating the best mode implementation of the present invention.
FIG. 8 is a flowchart illustrating an embodiment of a method of the present invention.
FIG. 9 is a flowchart illustrating an embodiment of a method of the present invention.
FIG. 10 is a block diagram illustrating an embodiment of means-plus-function system of the present invention.
FIG. 11 is a block diagram illustrating an embodiment of means-plus-function system of the present invention.
Often the news reports that some company got hacked and thousands of SSN or credit card numbers were stolen. Some of these data leaks are due to abandoned database servers. The database servers may get abandoned in a rapidly growing company, when project get scrapped or upgraded, when employee resigns, or when the database server inventory is poorly managed. Sometimes the abandoned databases hold some critical, private, sensitive, or propriety information like login credentials, credit card numbers, or Personal Information (PI). When a server is not actively managed, it may get behind with security patches and updates. When a poorly managed server falls in the hacker's hands, the company may loose its reputation and competitive advantage.
The approach used in the present invention envisions crawling the network from a central point and finding the list of computers running a database instance. After the database types and versions are identified for each computer, a custom code is run to determine if there is any sensitive information in the database. If any sensitive information is found, then it gets reported back to the central database. The custom code may differ depending on the database type and/or version.
The database servers to be checked for critical information are either coming from a predetermined list or by using a network crawler or prober to identify computers containing a database instance. Using a network crawler may identify more computers containing a database instance than a predetermined list.
The inventors anticipate that the invention will help (1) to identify the unaccounted servers that are running on the network holding sensitive data, (2) to identify no longer used servers on the network, (3) to determine if the sensitive data is in plain text or encrypted (and level of encryption), (4) to spot any computers running a database server without authorization (potential insider's threat), (5) to secure sensitive data, (6) to save money in the power consumption by retiring unused servers, (7) to save money in the software licensing costs by retiring unused servers, etc.
The system implementing the present invention may contain a network crawler (prober) and a database parser.
The network crawler (prober, mapper) is a device or a computer readable code executed on a device that goes through the selected or entire range of IP addresses used by the organization, e.g., 171.16.0.0/19 or 10.0.0.0/8, etc. It may employ ICMP pings and/or TCP connection requests. If a server responds, then it may gather a partial or the entire list of port numbers that are open on the server. The information about the network servers and/or ports may be saved into one or more electronic storage devices. Open port 1433 may indicate that a MSSQL database is running on the server, open port 1521 may indicate that an ORACLE database is running on the server, open port 3306 may indicate that a MySQL database is running on the server, etc.
The database parser runs a code or query on the found database server to determine the presence of the sensitive information on the server.
A sample computer code for implementing the present invention is shown FIGS. 1, 2 a-2 c, 3 a-3 c, 4 a-4 c, and 5 a-5 j.
An exemplary embodiment of a method of the present invention is shown in FIG. 8. The method comprises the steps of: discovering one or more databases on a computer network by running a network crawler configured to identify said one or more databases on said computer network (Step 805), adding said one or more databases discovered by said network crawler on said computer network to one or more electronic storage devices (Step 810), defining a pattern for a database data discovery (Step 815), discovering one or more qualifying records in said one or more databases by matching said pattern with field names and/or record values in said one or more databases (Step 820), adding said one or more qualifying records discovered by matching said pattern to said one or more electronic storage devices (Step 825), sending an electronic notification to a database administrator managing a qualifying database, wherein said qualifying database is a database containing said one or more qualifying records discovered by matching said pattern with field names and/or record values in said one or more databases, wherein said electronic notification contains a link to a web-based graphical user interface comprising a summary of said one or more qualifying records found on said qualifying database and a selector for assigning a status to said one or more qualifying records (Step 830), receiving a selection choice to said selector from said database administrator managing said qualifying database, wherein said selection choice identifies said status for said one or more qualifying records (Step 835), and updating said one or more electronic storage devices with said selection choice provided by said database administrator identifying said status for said one or more qualifying records (Step 840).
The network crawler loops through a set range of network addresses and identifies servers with databases. The electronic storage devices may include any database or a file storage configured to store the data created or utilized by the methods or systems of the present invention. The pattern for the database data discovery may include keywords and key-phrases, e.g., “email”, “credit card”, “user”, “login” or wildcard or standardized patterns (such as regular expressions), e.g., “%email%”, “*e*mail*”, “^4[0-9]{12}(?:[0-9]{3})?$” (for Visa credit cards, all Visa card numbers start with a 4, new cards have 16 digits, old cards have 13), “^5[1-5][0-9]{14}$” (for MasterCard), “^3[47][0-9]{13}$” (for American Express), “^3(?:0[0-5]1[68][0-9])[0-9]{11} $” (for Diners Club), “^6(?:011|5[0-9]{2})[0-9]{12} $” (for Discover), “^(?:2131|1800|35\d{3})\d{11}$” (for JCB), “\b[A-Z0-9._%-]+@[A-Z0-9.-]+\.[A-Z]{2,4}\b” (for email), etc.
The electronic notification sent to the database administrator may be an email message, a text message, a telephone call, a pager call, a facsimile, etc. The database administrator managing a particular database may be determined from the database or server permissions or from a precompiled list.
A sample embodiment of the web-based graphical user interface with the summary of the qualifying records is shown in FIGS. 6 and 7.
The selector for assigning the status to the qualifying records may be implemented as a list, a drop-down, a radio-button choice, a link list, etc. The selector may contain a variety of values, such as, “false positive” (the records were marked in error), “vendor” (the qualifying records are in a third-party database), “replication column” (the qualifying records are part of a replication column), “compliant” (the qualifying records are compliant with the company policies), “required” (the qualifying records may not be compliant, but are required to be present at the database at this time), “dropped” (the qualifying records or related columns were deleted or dropped), “dev” (the qualifying records are needed for development purposes), etc.
The web-based graphical user interface may contain additional fields (e.g., text field) for the database administrator to provide additional explanations for the qualifying records.
After the database administrator sets the status, the system may further determine if the selection choice provided by the database administrator passes automated validation. E.g., if the database administrator sets the status to “dropped”, the system may check if the qualifying records or related columns were actually dropped, etc.
The system may further determine whether the record values in the qualifying records are encrypted and/or what level of encryption is used. Encrypted records may be compliant with the company data storage policies.
The invention may be implemented on a variety of computer networks. This may include a LAN (Local Area Network), WLAN (Wireless Local Area Network), WAN (Wide Area Network), MAN (Metropolitan Area Network), a global network, etc. The Internet is a widely-used global computer network. The computer networks may support a variety of a network layer protocols, such as, DHCP (Dynamic Host Configuration Protocol), DVMRP (Distance Vector Multicast Routing Protocol), ICMP/ICMPv6 (Internet Control Message Protocol), IGMP (Internet Group Management Protocol), IP (Internet Protocol version 4), IPv6 (Internet Protocol version 6), MARS (Multicast Address Resolution Server), PIM and PIM-SM (Protocol Independent Multicast-Sparse Mode), RIP2 (Routing Information Protocol), RIPng for IPv6 (Routing Information Protocol for IPv6), RSVP (Resource ReSerVation setup Protocol), VRRP (Virtual Router Redundancy Protocol), etc. Further, the computer networks may support a variety of a transport layer protocols, such as, ISTP (Internet Signaling Transport Protocol), Mobile IP (Mobile IP Protocol), RUDP (Reliable UDP), TALI (Transport Adapter Layer Interface), TCP (Transmission Control Protocol), UDP (User Datagram Protocol), Van Jacobson (compressed TCP), XOT (X.25 over TCP), etc. In addition, the computer network may support a variety of an application layer protocols, such as, COPS (Common Open Policy Service), FANP (Flow Attribute Notification Protocol), Finger (User Information Protocol), FTP (File Transfer Protocol), HTTP (Hypertext Transfer Protocol), IMAP and IMAP4 (Internet Message Access Protocol, rev 4), IMPPpre (Instant Messaging Presence Protocol), IMPPmes (Instant Messaging Protocol), IPDC (IP Device Control), IRC (Internet Relay Chat Protocol), ISAKMP (Internet Message Access Protocol version 4rev1), ISP, NTP (Network Time Protocol), POP and POP3 (Post Office Protocol, version 3), Radius (Remote Authentication Dial In User Service), RLOGIN (Remote Login), RTSP (Real-time Streaming Protocol), SCTP (Stream Control Transmission Protocol), S-HTTP or HTTPS (Secure Hypertext Transfer Protocol), SLP (Service Location Protocol), SMTP (Simple Mail Transfer Protocol), SNMP (Simple Network Management Protocol), SOCKS (Socket Secure Server), TACACS+ (Terminal Access Controller Access Control System), TELNET (TCP/IP Terminal Emulation Protocol), TFTP (Trivial File Transfer Protocol), WCCP (Web Cache Coordination Protocol), X-Window (X Window), etc.
The communication links between the computers on the network may include telephone line, copper twisted pair, power-line, fiber-optic, cellular, satellite, dial-up, Ethernet, DSL, ISDN, T-1, DS-1, Wi-Fi, etc.
A variety of programming languages and scripts may be used to implement the present invention, such as, Java, JavaScript, Perl, PHP, ASP, ASP.NET, Visual J++, J#, C, C++, C#, Visual Basic, VB.Net, VBScript, SQL, etc.
The computers utilized in the present invention may run a variety of operating systems, such as, MICROSOFT WINDOWS, APPLE MAC OS X, UNIX, LINUX, GNU, BSD, FreeBSD, SUN SOLARIS, NOVELL NETWARE, OS/2, TPF, eCS (eComStation), VMS, Digital VMS, OpenVMS, AIX, z/OS, HP-UX, OS-400, etc. The computers utilized in the present invention can be based on a variety of hardware platforms, such as, x86, x64, INTEL, ITANIUM, IA64, AMD, SUN SPARC, IBM, HP, etc.
The databases discovered on the network or used on electronic storage devices in the present invention may include: CLARION, DBASE, ENTERPRISEDB, EXTREMEDB, FILEMAKER PRO, FIREBIRD, FRONTBASE, HELIX, SQLDB, IBM DB2, INFORMIX, INGRES, INTERBASE, MICROSOFT ACCESS, MICROSOFT SQL SERVER, MICROSOFT VISUAL FOXPRO, MSQL, MYSQL, OPENBASE, OPENOFFICE.ORG BASE, ORACLE, PANORAMA, PERVASIVE, POSTGRESQL, SQLBASE, SQLITE, SYBASE, TERADATA, UNISYS, and many others.
An alternative embodiment of a method of the present invention is shown in FIG. 9. The method comprises the steps of: identifying one or more qualifying records in one or more databases on a computer network by matching a pattern with field names and/or record values in said one or more databases (Step 905), and sending an electronic notification to a database administrator managing a qualifying database, wherein said qualifying database is a database containing said one or more qualifying records discovered by matching said pattern with field names and/or record values in said one or more databases (Step 910).
Referring to FIG. 10, an exemplary embodiment of the system of the present invention may include: means for discovering one or more databases on a computer network by running a network crawler configured to identify said one or more databases on said computer network (1005), means for adding said one or more databases discovered by said network crawler on said computer network to one or more electronic storage devices (1010), means for defining a pattern for a database data discovery (1015), means for discovering one or more qualifying records in said one or more databases by matching said pattern with field names and/or record values in said one or more databases (1020), means for adding said one or more qualifying records discovered by matching said pattern to said one or more electronic storage devices (1025), means for sending an electronic notification to a database administrator managing a qualifying database, wherein said qualifying database is a database containing said one or more qualifying records discovered by matching said pattern with field names and/or record values in said one or more databases, wherein said electronic notification contains a link to a web-based graphical user interface comprising a summary of said one or more qualifying records found on said qualifying database and a selector for assigning a status to said one or more qualifying records (1030), means for receiving a selection choice to said selector from said database administrator managing said qualifying database, wherein said selection choice identifies said status for said one or more qualifying records (1035), and means for updating said one or more electronic storage devices with said selection choice provided by said database administrator identifying said status for said one or more qualifying records (1040).
Referring to FIG. 11, an alternative exemplary embodiment system of the present invention may include: means for identifying one or more qualifying records in one or more databases on a computer network by matching a pattern with field names and/or record values in said one or more databases (1105), and means for sending an electronic notification to a database administrator managing a qualifying database, wherein said qualifying database is a database containing said one or more qualifying records discovered by matching said pattern with field names and/or record values in said one or more databases (1110).
The means of the embodiments disclosed in the present specification can be substituted with machines, apparatuses, and devices described or listed in this specification or equivalents thereof. As a non-limiting example, the means of the embodiments may be substituted with a computing device, a computer-readable code, a computer-executable code, or any combination thereof.
All embodiments of the present invention may further be limited and implemented with any and all limitations disclosed in this specification or in the documents incorporated in this patent application by reference.
Applicant does not consider any step, element, or limitation being required or essential. The methods and systems of the present invention may be implemented without some of the disclosed steps, elements, or limitations.
US5426594 2 april 1993 20 juni 1995 Motorola, Inc. Electronic greeting card store and communication system
US5774660 5 aug 1996 30 juni 1998 Resonate, Inc. World-wide-web server with delayed resource-binding for resource-based load balancing on a distributed resource multi-node network
US6003030 18 okt 1996 14 dec 1999 Intervu, Inc. System and method for optimized storage and retrieval of data on a distributed computer network
US6151631 15 okt 1998 21 nov 2000 Liquid Audio Inc. Territorial determination of remote computer location in a wide area network for conditional delivery of digitized products
US6263447 20 mei 1999 17 juli 2001 Equifax Inc. System and method for authentication of network users
US6393482 24 aug 1998 21 mei 2002 Lucent Technologies Inc. Inter-working function selection system in a network
US6400722 24 aug 1998 4 juni 2002 Lucent Technologies Inc. Optimum routing system
US6598077 5 dec 2000 22 juli 2003 Warp Solutions, Inc. System and method for dynamic content routing
US6625643 13 nov 1999 23 sept 2003 Akamai Technologies, Inc. System and method for resource management on a data network
US6629136 15 nov 1999 30 sept 2003 @ Security Broadband Corp. System and method for providing geographically-related content over a network
US6757740 31 maart 2000 29 juni 2004 Digital Envoy, Inc. Systems and methods for determining collecting and using geographic locations of internet users
US6829230 15 sept 2000 7 dec 2004 Telefonaktiebolaget Lm Ericsson (Publ) Routing in a packet switched network
US6996609 28 april 1997 7 feb 2006 G&H Nevada Tek Method and apparatus for accessing a wide area network
US7111072 13 sept 2000 19 sept 2006 Cosine Communications, Inc. Packet routing system and method
US7139840 14 juni 2002 21 nov 2006 Cisco Technology, Inc. Methods and apparatus for providing multiple server address translation
US7149892 6 juli 2001 12 dec 2006 Juniper Networks, Inc. Secure sockets layer proxy architecture
US7225248 3 feb 2005 29 mei 2007 Dj Inventions, Llc Integrated automation system with publisher interface
US7233978 1 juni 2001 19 juni 2007 Econnectix, Llc Method and apparatus for managing location information in a network separate from the data to which the location information pertains
US7359935 20 dec 2002 15 april 2008 Versata Development Group, Inc. Generating contextual user network session history in a dynamic content environment
US7373500 15 april 2003 13 mei 2008 Sun Microsystems, Inc. Secure network processing
US7382321 28 dec 2006 3 juni 2008 Hong Fu Jin Precision Industry (Shenzhen) Co., Ltd. Broadband antenna
US7506010 10 mei 2006 17 maart 2009 Pro Softnet Corporation Storing and retrieving computer data files using an encrypted network drive file system
US7590073 24 nov 2004 15 sept 2009 Siemens Aktiengesellschaft Method for registering a communications device, and an associated communications device and registration unit
US7644117 8 juli 2003 5 jan 2010 The Go Daddy Group, Inc. Turnkey reseller program for registering domain names
US7649854 16 mei 2005 19 jan 2010 Bea Systems, Inc. System and method for providing channels in application servers and transaction-based systems
US7805379 21 dec 2007 28 sept 2010 Amazon Technologies, Inc. Method and system for leasing or purchasing domain names
US20010001854 24 jan 2001 24 mei 2001 Silicon Stemcell, Llc Printed medium activated interactive communication
US20020035611 28 dec 2000 21 maart 2002 Dooley Thomas P. System and method for providing an information network on the internet
US20020042719 28 sept 2001 11 april 2002 Marc Chauchard Process for preparing a trademark application
US20020073235 11 dec 2000 13 juni 2002 Chen Steve X. System and method for content distillation
US20020087643 29 dec 2000 4 juli 2002 Parsons Eric W. Method and system for providing unified WAP alerts
US20020147790 9 april 2001 10 okt 2002 Snow Andrew J. System for presenting designated websites or content to specified users
US20020152224 2 maart 2002 17 okt 2002 Cliff Roth System and method for generating a recommendation guide for use with an EPG
US20030069991 9 okt 2001 10 april 2003 Brescia Paul T. Location-based address provision
US20030078894 27 aug 2002 24 april 2003 Masashi Kon Over-network resource distribution system and mutual authentication system
US20030078962 19 okt 2001 24 april 2003 Robert Fabbricatore Integrated communications system
US20030101278 10 sept 2002 29 mei 2003 J.J. Garcia-Luna-Aceves System and method for directing clients to optimal servers in computer networks
US20030229900 8 mei 2003 11 dec 2003 Richard Reisman Method and apparatus for browsing using multiple coordinated device sets
US20040039906 5 juni 2003 26 feb 2004 Makoto Oka Access authorization management system, relay server, access authorization management method, and computer program
US20040083307 27 okt 2002 29 april 2004 Mr. Sezen Uysal Apparatus and method for transparent selection of an internet server based on geographic location of a user
US20040186778 29 jan 2004 23 sept 2004 Margiloff William A. Systems and methods for selecting advertisements to be provided to users via a communication network
US20040210663 15 april 2003 21 okt 2004 Paul Phillips Object-aware transport-layer network processing engine
US20050105513 23 dec 2004 19 mei 2005 Alan Sullivan Systems and methods for direction of communication traffic
US20050114541 12 nov 2003 26 mei 2005 Andrei Ghetie Scalable and dynamic quality of service control
US20050134896 16 nov 2004 23 juni 2005 Canon Kabushiki Kaisha Data processing system, data processing method and apparatus, document printing system, client device, printing device, document printing method, and computer program
US20050228881 13 april 2004 13 okt 2005 Microsoft Corporation System and method for aggregating and extending parental controls auditing in a computer network
US20050239447 20 mei 2004 27 okt 2005 Microsoft Corporation Account creation via a mobile device
US20060047725 26 aug 2005 2 maart 2006 Bramson Steven J Opt-in directory of verified individual profiles
US20060126201 10 dec 2004 15 juni 2006 Arvind Jain System and method for scalable data distribution
US20060193333 24 feb 2004 31 aug 2006 Prolego Technologies Ltd. Topology aggregation for hierarchical routing
US20060198322 4 mei 2005 7 sept 2006 Susan Hares Method and apparatus for BGP peer prefix limits exchange with multi-level control
US20060206547 10 mei 2006 14 sept 2006 Raghavendra Kulkarni Storing and retrieving computer data files using an encrypted network drive file system
US20070038755 3 nov 2006 15 feb 2007 Alan Sullivan Systems and methods for direction of communication traffic
US20070094411 28 feb 2006 26 april 2007 Mark Mullane Network communications system and method
US20070180436 7 dec 2006 2 aug 2007 Franco Travostino Seamless Live Migration of Virtual Machines across Optical Networks
US20070198724 12 april 2007 23 aug 2007 Anthony Miologos, Esq. OPC server redirection manager
US20070283005 6 juni 2006 6 dec 2007 Beliles Robert P Dynamically responding to non-network events at a network device in a computer network
US20070291739 4 mei 2005 20 dec 2007 Sullivan Alan T Systems and Methods for Direction of Communication Traffic
US20080005312 28 juni 2006 3 jan 2008 Boss Gregory J Systems And Methods For Alerting Administrators About Suspect Communications
US20080019359 20 juli 2006 24 jan 2008 Sun Microsystems, Inc. Multiple virtual network stack instances using virtual network interface cards
US20080052384 15 sept 2006 28 feb 2008 Brett Marl Network administration tool
US20080059607 4 juli 2004 6 maart 2008 Eric Schneider Method, product, and apparatus for processing a data request
US20080071883 23 juli 2007 20 maart 2008 Eric Alterman Method and Apparatus for Proliferating Adoption of Web Components
US20080120617 16 nov 2006 22 mei 2008 Alexander Keller Systems and Methods for Constructing Change Plans from Component Interactions
US20080126232 28 nov 2006 29 mei 2008 Kevin Lee System and method for routing Internet transactions from within an organizational network
US20080201413 23 mei 2006 21 aug 2008 Sullivan Alan T Enhanced Features for Direction of Communication Traffic
US20080229430 14 maart 2008 18 sept 2008 Kargman James B Method for preventing prank orders for internet purchasing
US20080256553 25 juni 2008 16 okt 2008 William Cullen Dynamic Subscription and Message Routing on a Topic between Publishing Nodes and Subscribing Nodes
US20080270418 24 juli 2007 30 okt 2008 Te-Tsung Chen Method for registering a domain name and signing up with a search website using a computer network service provider on behalf of a user, and a modem
US20080282338 9 mei 2008 13 nov 2008 Beer Kevin J System and method for preventing the reception and transmission of malicious or objectionable content transmitted through a network
US20090007229 26 juni 2007 1 jan 2009 Novell, Inc. Time-based method for authorizing access to resources
US20090016522 30 nov 2005 15 jan 2009 Oscar Pablo Torres Monitoring service personnel
US20090042537 5 aug 2008 12 feb 2009 Clearwire Corporation Subscriber management system for a communication network
US20090048712 27 okt 2008 19 feb 2009 Instymeds Corporation Automatic prescription drug dispenser
US20090055506 31 okt 2007 26 feb 2009 Hudson Michael D Centralized selection of peers as media data sources in a dispersed peer network
US20090132487 21 nov 2007 21 mei 2009 Zvi Haim Lev System and method for video call based content retrieval, directory and web access services
US20090150527 10 dec 2007 11 juni 2009 Sun Microsystems, Inc. Method and system for reconfiguring a virtual network path
US20090157882 18 dec 2007 18 juni 2009 International Business Machines Corporation Network connection failover during application service interruption
US20090248595 31 maart 2008 1 okt 2009 Yumao Lu Name verification using machine learning
US20090272799 17 juli 2009 5 nov 2009 Douglas Brian Skor Method and Apparatus for Purchasing and Dispensing Products
US20090300407 29 mei 2008 3 dec 2009 Sandeep Kamath Systems and methods for load balancing via a plurality of virtual servers upon failover using metrics from a backup virtual server
US20100027420 31 juli 2008 4 feb 2010 Cisco Technology, Inc. Dynamic distribution of virtual machines in a communication network
US20100042487 11 aug 2009 18 feb 2010 Yosef Barazani Apparatus and Method of Monetizing Hyperlinks
US20100306122 29 mei 2009 2 dec 2010 Cisco Technology,Inc. System and Method for Providing an Electronic Literature Club in a Network Environment
US20110055249 25 sept 2009 3 maart 2011 The Go Daddy Group, Inc. Social website account authentication via search engine based domain name control validation
1 Feb. 7, 2014 response to Nov. 6, 2013 office action in related U.S. Appl. No. 13/436,747.
2 Nov. 6, 2013 office action in related U.S. Appl. No. 13/436,747.
3 Zenel, A General Purpose Proxy Filtering Mechanism Applied to the Mobile Environment, 1997.
4 Zenel, A General Purpose Proxy Filtering Mechanism Applied to the Mobile Environment, Wireless Network, vol. 5, Issue 5, Oct. 1999, pp. 391-409.
5 Zenel, A Proxy Based Filtering Mechanism for the Mobile Environment, Doctoral Thesis, Columbia University, 1998.
Classificatie in de VS 707/709, 707/694, 707/827, 707/722
Internationale classificatie G06F7/02, G06F17/30
Coöperatieve classificatie G06F17/30985, G06F17/30283, G06F17/30864
30 maart 2012 AS Assignment
Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:DEVARAJAN, GANESH;REDFOOT, TODD;REEL/FRAME:027967/0989
3 okt 2013 AS Assignment