公开(公告)号：US20220407883A1

公开(公告)日：2022-12-22

申请号：US17711031

申请日：2022-04-01

Applicant: SUPREETH HOSUR NAGESH RAO ,  NAVINDRA YADAV ,  RAVI SANKURATRI ,  ALOK LALIT WADHWA ,  ARIA RAHADIAN ,  BRADY SCHULMAN ,  RAVI SHANKER PRASAD ,  VASIL DOCHKOV YORDANOV ,  YIWEI WANG ,  ZHIWEN ZHANG ,  UDAYAN JOSHI ,  SOUMYADEEP CHOUDHURY ,  MUHAMMADA FURQAN ,  DANESH IRANI

Inventor： SUPREETH HOSUR NAGESH RAO ,  NAVINDRA YADAV ,  RAVI SANKURATRI ,  ALOK LALIT WADHWA ,  ARIA RAHADIAN ,  BRADY SCHULMAN ,  RAVI SHANKER PRASAD ,  VASIL DOCHKOV YORDANOV ,  YIWEI WANG ,  ZHIWEN ZHANG ,  UDAYAN JOSHI ,  SOUMYADEEP CHOUDHURY ,  MUHAMMADA FURQAN ,  DANESH IRANI

IPC: H04L9/40

Abstract: In one aspect, a computerized method for locating one or more shadow vulnerable datastores for cloud-platform datastores includes the step of identifying a cloned data store of an original datastore in a cloud database instance. It includes the step of determining that the cloned datastore comprises a shadow vulnerable datastore. It includes the step of defining a security posture of the cloned datastore. It includes the step of publishing a digitized data clone security differential report comprising the security posture and one or more remediations to fix security posture issues.

公开(公告)号：US20220269792A1

公开(公告)日：2022-08-25

申请号：US17205966

申请日：2021-03-18

Applicant: SUPREETH HOSUR NAGESH RAO ,  NAVINDRA YADAV ,  RAVI SANKURATRI ,  ALOK LALIT WADHWA ,  ARIA RAHADIAN ,  BHARATHWAJ SANKARA VISWANATHAN ,  BRADY SCHULMAN ,  MATTHEW FINN ,  PAUL JOHN LESIAK ,  RAVI SHANKER PRASAD ,  VASIL DOCHKOV YORDANOV ,  YIWEI WANG ,  ZHIWEN ZHANG

Inventor： SUPREETH HOSUR NAGESH RAO ,  NAVINDRA YADAV ,  RAVI SANKURATRI ,  ALOK LALIT WADHWA ,  ARIA RAHADIAN ,  BHARATHWAJ SANKARA VISWANATHAN ,  BRADY SCHULMAN ,  MATTHEW FINN ,  PAUL JOHN LESIAK ,  RAVI SHANKER PRASAD ,  VASIL DOCHKOV YORDANOV ,  YIWEI WANG ,  ZHIWEN ZHANG

IPC: G06F21/57 ,  G06F21/60

Abstract: A computerized method for implementing risk discovery with a set of unified security and privacy policies, includes the step of discovering a set of data and a set of data accesses within an enterprise computing system. The method includes the step of classifying the set of discovered data and the set of data accesses with an identification that shows which of the data assets are important or critical for the enterprise. The method includes the step of determining which of the set of discovered data and the set of data accesses have or are associated with sensitive information. The method includes the step of placing the set of discovered data and the set of data accesses that are associated with sensitive information into a set of discovered information about the infrastructure. The method includes the step of determining which of the set of discovered data and the set of data accesses are relevant in the context of a specified governmental data privacy regulation. The method includes the step of placing the set of discovered data and the set of data accesses that are relevant in the context of a specified governmental data privacy regulation into a set of discovered information about the infrastructure. The method includes the step of, with the set of discovered information about the infrastructure, mapping the set of discovered information about the infrastructure to a set of deterministic dimensions.

公开(公告)号：US09112710B2

公开(公告)日：2015-08-18

申请号：US13251701

申请日：2011-10-03

Applicant: Jeffrey D. Taft ,  Navindra Yadav

Inventor： Jeffrey D. Taft ,  Navindra Yadav

IPC: H04L12/28 ,  H04L12/18 ,  H04L12/933 ,  H04L12/931 ,  H04L12/761

CPC classification number: H04L12/1863 ,  H04L12/1836 ,  H04L12/185 ,  H04L45/16 ,  H04L49/15 ,  H04L49/35 ,  H04L67/125 ,  H04L69/22

Abstract: A method is provided in one example embodiment and includes receiving phasor measurement unit (PMU) data in a first transmission; converting the first transmission into a multicast transmission; and multicasting the PMU data to a multicast group address, which identifies a plurality of subscribers. In more specific implementations, the converting of the first transmission into the multicast transmission occurs at a first-hop router in relation to a PMU source that sent the first transmission. In some cases, the first transmission is a unicast transmission sent from a network element, which includes a PMU sensor.

Abstract translation: 在一个示例实施例中提供了一种方法，并且包括在第一传输中接收相量测量单元（PMU）数据; 将第一传输转换成多播传输; 以及将所述PMU数据组播到识别多个订户的多播组地址。 在更具体的实现中，将第一传输转换为组播传输发生在相对于发送第一传输的PMU源的第一跳路由器处。 在一些情况下，第一传输是从包括PMU传感器的网元发送的单播传输。

公开(公告)号：US08990892B2

公开(公告)日：2015-03-24

申请号：US13176857

申请日：2011-07-06

Applicant: Navindra Yadav ,  Atul Mahamuni ,  Jonathan Hui ,  Alec Woo

Inventor： Navindra Yadav ,  Atul Mahamuni ,  Jonathan Hui ,  Alec Woo

IPC: H04L29/06 ,  H04W12/06

CPC classification number: H04L63/0884 ,  H04W12/06

Abstract: Techniques are provided for adaptive routing of authentication packets in a network, such as a wireless mesh network. At an authenticated device in the network, an authentication packet is received over the network from a device that is seeking authentication. The authentication packet is encapsulated for transmission in Layer 3 packets over an Internet Protocol (IP) tunnel to an authenticator device associated in the network. Similarly, for an authentication packet encapsulated in Layer 3 packets from the authenticator device over the IP tunnel, the authentication packet is decapsulated from the Layer 3 packets and transmitted over the network to the device seeking authentication.

Abstract translation: 提供技术用于网络中的认证分组的自适应路由选择，例如无线网状网络。 在网络中的认证设备上，通过网络从正在寻求认证的设备接收认证报文。 认证分组被封装以通过到网络中相关联的认证设备的因特网协议（IP）隧道在三层分组中传输。 类似地，对于通过IP隧道从认证设备封装在三层报文中的认证报文，认证报文从三层报文中解封装，并通过网络发送到寻求认证的设备。

公开(公告)号：US08959607B2

公开(公告)日：2015-02-17

申请号：US13196960

申请日：2011-08-03

Applicant: Navindra Yadav ,  Atul Mahamuni ,  Jonathan Hui ,  Wei Hong ,  Alec Woo

Inventor： Navindra Yadav ,  Atul Mahamuni ,  Jonathan Hui ,  Wei Hong ,  Alec Woo

IPC: H04L9/32 ,  H04L9/08 ,  H04L29/06 ,  H04W12/04 ,  H04W12/06 ,  H04W84/18

CPC classification number: H04L9/0819 ,  H04L9/0827 ,  H04L9/0833 ,  H04L9/088 ,  H04L9/0891 ,  H04L9/14 ,  H04L9/321 ,  H04L9/3273 ,  H04L63/065 ,  H04L63/068 ,  H04L63/0823 ,  H04L63/12 ,  H04L2209/24 ,  H04L2463/061 ,  H04W12/04 ,  H04W12/06 ,  H04W12/10 ,  H04W84/18

Abstract: According to one embodiment, techniques are provided to enable secure communication among devices in a mesh network using a group temporal key. An authenticator device associated with a mesh network stores a pairwise master key for each of a plurality of devices in a mesh network upon authentication of the respective devices. Using the pairwise master key, the authenticator device initiates a handshake procedure with a particular device in the mesh network to mutually derive a pairwise temporal key from the pairwise master key. The authenticator device encrypts and signs a group temporal key using the pairwise temporal key for the particular device and sends the group temporal key encrypted and signed with the pairwise temporal key to the particular device.

Abstract translation: 根据一个实施例，提供了使用组时间密钥来实现网状网络中的设备之间的安全通信的技术。 与网状网络相关联的认证装置在对各个装置进行认证时，为网状网络中的多个装置中的每一个存储成对的主密钥。 使用成对主密钥，认证器设备发起与网状网络中的特定设备的握手过程，以从成对主密钥互相导出成对的时间密钥。 认证器设备使用特定设备的成对时间密钥加密和签署组时间密钥，并将具有成对时间密钥加密和签名的组时间密钥发送到特定设备。

公开(公告)号：US08705528B2

公开(公告)日：2014-04-22

申请号：US13455822

申请日：2012-04-25

Applicant: Navindra Yadav ,  James Rivers ,  Gnanaprakasam Pandian ,  Pauline Shuen ,  Scott Emery

Inventor： Navindra Yadav ,  James Rivers ,  Gnanaprakasam Pandian ,  Pauline Shuen ,  Scott Emery

IPC: H04L12/56 ,  H04L12/54 ,  H04L12/18

CPC classification number: H04L12/56 ,  H04L12/1868 ,  H04L12/1886 ,  H04L45/16

Abstract: In one embodiment, a subnet-scoped multicast packet is received on an interface of a forwarding device that is connected to a host device of a subnet of a forwarding domain. The received subnet-scoped multicast packet is transmitted from one or more other interfaces of the forwarding device that are connected to one or more other host devices of the subnet. The received subnet-scoped multicast packet is also encapsulated with an additional header. The encapsulated subnet-scoped multicast packet is forwarded from the forwarding device to an intermediate router which routes the encapsulated subnet-scoped multicast packet to one or more other forwarding devices configured to decapsulate the encapsulated subnet-scoped multicast packet and transmit the decapsulated subnet-scoped multicast packet to one or more connected host devices of an additional portion of the subnet.

Abstract translation: 在一个实施例中，在连接到转发域的子网的主机设备的转发设备的接口上接收子网范围的组播分组。 接收到的子网范围的组播数据包是从连接到子网的一个或多个其他主机设备的转发设备的一个或多个其他接口传送的。 接收到的子网范围的组播数据包也封装了一个额外的头。 封装的子网范围组播数据包从转发设备转发到中间路由器，路由器将封装的子网范围组播数据包路由到一个或多个其他转发设备，该转发设备配置为对封装的子网范围组播数据包进行解封装，并发送解封装的子网范围 组播分组到子网的附加部分的一个或多个连接的主机设备。

公开(公告)号：US08675601B2

公开(公告)日：2014-03-18

申请号：US12781120

申请日：2010-05-17

Applicant: Patrice Calhoun ,  Abhijit Choudhury ,  Rohit Suri ,  Sudhir Jain ,  Ranganatha Marathe ,  Bhanu Gopalasetty ,  Navindra Yadav ,  Sreenivasulu Mondem

Inventor： Patrice Calhoun ,  Abhijit Choudhury ,  Rohit Suri ,  Sudhir Jain ,  Ranganatha Marathe ,  Bhanu Gopalasetty ,  Navindra Yadav ,  Sreenivasulu Mondem

IPC: H04W4/00

CPC classification number: H04W76/12 ,  H04W36/0016 ,  H04W36/10

Abstract: Techniques are provided to enable a support for guest access of devices in a network. At a controller apparatus in a first mobility sub-domain of a network comprising a plurality of mobility sub-domains, a request message containing a request for guest network access for a device is received from a first access switch in the first mobility sub-domain. The controller apparatus forwards the request message to a guest controller. At a tunneling endpoint apparatus in the first mobility sub-domain, a tunnel is established to the guest controller to carry traffic between the device and the guest controller. Traffic for the device passes in a tunnel between the first access switch and the tunneling endpoint apparatus in the first mobility sub-domain, through the tunneling endpoint apparatus in the first mobility sub-domain and in the tunnel between the routing apparatus in the first mobility sub-domain and the guest controller.

Abstract translation: 提供技术以支持对网络中设备的访客访问。 在包括多个移动性子域的网络的第一移动性子域中的控制器装置处，从第一移动性子域中的第一接入交换机接收到包含用于设备的访客网络接入请求的请求消息 。 控制器装置将请求消息转发给客人控制器。 在第一移动子域中的隧道终端设备处，建立到客户控制器的隧道，以在设备和客户控制器之间携带业务。 该设备的业务通过第一移动性子域中的第一接入交换机和隧道终端设备之间的隧道，通过第一移动性子域中的隧道终端设备和第一移动性子域中的路由设备之间的隧道 子域和访客控制器。

公开(公告)号：US08644137B2

公开(公告)日：2014-02-04

申请号：US11353312

申请日：2006-02-13

Applicant: Robert Andrews ,  Navindra Yadav ,  Shree Murthy ,  Gnanaprakasam Pandian ,  Murali Duvvury ,  Sudhakar Padavala

Inventor： Robert Andrews ,  Navindra Yadav ,  Shree Murthy ,  Gnanaprakasam Pandian ,  Murali Duvvury ,  Sudhakar Padavala

IPC: H04L12/26

CPC classification number: H04L45/18 ,  H04L45/00 ,  H04L45/02 ,  H04L45/22

Abstract: Method and system for providing dynamic configuration of link redundancy in data network based on detection of dynamic changes in the network topology including the steps of detecting data network topology, determining a number of data paths from a node in the data network topology to each of a respective pair of peer nodes coupled to the node by a corresponding interface, determining a data path in the data network topology between the peer nodes, calculating a set of nodes reachable via each interface coupled to the node and the respective peer node in the data network topology, and comparing the set of calculated nodes is provided.

Abstract translation: 基于检测网络拓扑中的动态变化来提供数据网络中的链路冗余的动态配置的方法和系统，包括检测数据网络拓扑，确定从数据网络拓扑中的节点到数据网络拓扑中的每一个的数据路径 相应的一对对等节点通过对应的接口耦合到节点，确定对等节点之间的数据网络拓扑中的数据路径，计算经由耦合到该节点的每个接口和数据网络中的相应对等节点可到达的一组节点 提供拓扑结构，并比较计算出的节点集。

公开(公告)号：US08542681B2

公开(公告)日：2013-09-24

申请号：US12883531

申请日：2010-09-16

Applicant: Robert Andrews ,  Navindra Yadav ,  Shree Murthy ,  Gnanaprakasam Pandian

Inventor： Robert Andrews ,  Navindra Yadav ,  Shree Murthy ,  Gnanaprakasam Pandian

IPC: H04L12/28

CPC classification number: H04L12/4675 ,  H04L12/4695 ,  H04L41/0816

Abstract: Method and system for providing dynamic network data traffic monitoring including monitoring a data network, detecting a change in the data network, initiating a span session based on the detected change in the data network, and dynamically modifying network configuration based on the detected change in the data network is disclosed.

Abstract translation: 用于提供动态网络数据流量监控的方法和系统，包括监视数据网络，检测数据网络的变化，基于检测到的数据网络的变化启动跨度会话，以及基于检测到的数据网络中的变化动态地修改网络配置 数据网络被公开。

公开(公告)号：US20130042301A1

公开(公告)日：2013-02-14

申请号：US13206012

申请日：2011-08-09

Applicant: Atul Mahamuni ,  Navindra Yadav ,  Jonathan Hui ,  Alec Woo ,  Wei Hong

Inventor： Atul Mahamuni ,  Navindra Yadav ,  Jonathan Hui ,  Alec Woo ,  Wei Hong

IPC: G06F21/20

CPC classification number: H04W12/06 ,  Y02D70/142 ,  Y02D70/144 ,  Y02D70/146 ,  Y02D70/22

Abstract: Techniques are provided for the controlled scheduling of the authentication of devices in a lossy network, such as a mesh network. An authenticator device that is configured to authenticate devices in a lossy network receives an authentication start message from a particular device to be authenticated. The authenticator device determines a schedule for engaging in an authentication procedure for the particular device based on an indication of current network utilization.

Abstract translation: 提供技术用于有损网络（例如网状网络）中的设备的认证的受控调度。 被配置为对有损网络中的设备进行认证的认证设备从特定设备接收认证开始消息以进行认证。 认证器设备基于当前网络利用率的指示来确定用于参与特定设备的认证过程的调度。