中科微点-全球专利检索

  1. Login
  2. Sign Up

Search Results

983 records (took 0.121 seconds)

    Global mapping to internal applications
    1.
    发明申请
    Global mapping to internal applications 有权

    公开(公告)号：US20250071120A1

    公开(公告)日：2025-02-27

    申请号：US18236454

    申请日：2023-08-22

    Applicant: Akamai Technologies, Inc.

    Inventor： David Tang

    IPC: H04L9/40 ,  H04L43/10 ,  H04L67/141

    Abstract: A service for automatic discovery of locations at which instances of an internal enterprise application are located. The service is configured to facilitate routing of connection requests directed to the internal enterprise application, which is hosted in distinct enterprise locations. The service works in association with a set of connectors that each have an associated Internet Protocol (IP) address (typically of a device to which the connector is coupled) at which it is reachable and through which a connection to an internal enterprise application instance can be proxied. Connections to the internal enterprise application are routable along a network path from a client to a given connector through a set of intermediary nodes. Using information collected from the connectors, the service performs a series of correlations to enable service provider mapping technologies to make both global and local traffic mapping decisions for these internal enterprise resources. In a variant embodiment wherein connectors can access the application across site-to-site connections, the system also leverages connector-to-origin latency data to facilitate a full path mapping solution.

    Zero trust network infrastructure with location service for routing connections via intermediary nodes
    2.
    发明申请
    Zero trust network infrastructure with location service for routing connections via intermediary nodes 有权

    公开(公告)号：US20250071091A1

    公开(公告)日：2025-02-27

    申请号：US18236439

    申请日：2023-08-22

    Applicant: Akamai Technologies, Inc.

    Inventor： Charles E. Gero ,  David Tang ,  Vishal Patel

    IPC: H04L9/40

    Abstract: A location service for automatic discovery of locations at which instances of an internal enterprise application are located. The location service is configured to facilitate routing of connection requests directed to the internal enterprise application, which typically is hosted in distinct enterprise locations. The service works in association with a set of connectors that each have an associated public Internet Protocol (IP) address (typically of a device to which the connector is coupled) at which it is reachable and through which a connection to an internal enterprise application instance can be proxied. Connections to the internal enterprise application are routable along a network path from a client to a given connector through a set of intermediary nodes. Using information collected from the connectors, the service performs a series of correlations (viz., finding matching connections and their corresponding public IP addresses) to enable service provider mapping technologies to make both global and local traffic mapping decisions for these internal enterprise resources.

    API SECURITY BASED ON INSPECTION OF OBFUSCATED REQUEST AND RESPONSE BODIES
    3.
    发明申请
    API SECURITY BASED ON INSPECTION OF OBFUSCATED REQUEST AND RESPONSE BODIES 有权

    公开(公告)号：US20250039219A1

    公开(公告)日：2025-01-30

    申请号：US18416730

    申请日：2024-01-18

    Applicant: Akamai Technologies, Inc.

    Inventor： Leonid Mirkis ,  Alex Marks-Bluth

    IPC: H04L9/40 ,  G06F9/54

    Abstract: Improved security inspections for API traffic are disclosed. A data obfuscation process is applied to structured data in a request or response body to obfuscate the content while retaining the structural aspects thereof. The resulting sanitized version of the structured data is sent for analysis. For example a machine learning component is trained on such sanitized data to develop a signature or model that detects anomalous interactions with the API. The retained structure contains signals useful for pattern recognition and anomaly detection. The signature or model is preferably developed for a specific API endpoint. Then, a detection engine can be deployed to assess subsequent API traffic for the API endpoint, with such subsequent live traffic being similarly obfuscated by the system before being assessed. The teachings hereof can be used to block attacks or other malicious activities directed against API endpoints.

    Edge network-based account protection service
    4.
    发明申请
    Edge network-based account protection service 有权

    公开(公告)号：US20240430297A1

    公开(公告)日：2024-12-26

    申请号：US18829516

    申请日：2024-09-10

    Applicant: Akamai Technologies, Inc.

    Inventor： John Summers ,  Robert Polansky ,  Darryl Nicholson ,  Scott Markwell

    IPC: H04L9/40 ,  H04L67/306

    Abstract: An account protection service to prevent user login or other protected endpoint request abuse. In one embodiment, the service collects user recognition data, preferably for each login attempt (e.g. data about the connection, session, and other relevant context), and it constructs a true user profile for each such user over time, preferably using the recognition data from successful logins. The profile evolves as additional recognition data is collected from successful logins. The profile is a model of what the user “looks like” to the system. For a subsequent login attempt, the system then calculates a true user score. This score represents how well the current user recognition data matches the model represented by the true user profile. The user recognition service is used to drive policy decisions and enforcement capabilities.

    Service platform with configurable electricity usage characteristics
    5.
    发明授权
    Service platform with configurable electricity usage characteristics 有权

    公开(公告)号：US12159170B2

    公开(公告)日：2024-12-03

    申请号：US17451620

    申请日：2021-10-20

    Applicant: Akamai Technologies, Inc.

    Inventor： Martin T. Flack ,  Michael Bishop ,  Stephen Ludin

    IPC: G06F9/48 ,  G06F1/18 ,  G06F1/3206 ,  G06F1/3234 ,  G06F9/50 ,  G06F11/34

    Abstract: A multi-tenant service platform provides network services, such as content delivery, edge compute, and/or media streaming, on behalf of, or directly for, a given tenant. The service platform offers a policy layer enabling each tenant to specify levels of acceptable performance degradation that the platform may incur so that the platform can use electricity with desirable characteristics to service client requests associated with that tenant. Service nodes in the platform (e.g., edge servers) enforce the policy layer at the time of a service request. Preferably, the ‘quality’ of the electricity is a measurement of source of the energy, e.g., whether it is sourced from high-carbon fossil fuels (low-quality) or low-carbon renewables (high-quality). If the desired quality of electricity cannot be achieved, the node can resort to using less electricity to handle the request, which is achieved in a variety of ways.

    Browser extensionless phish-proof multi-factor authentication (MFA)
    8.
    发明公开
    Browser extensionless phish-proof multi-factor authentication (MFA) 审中-公开

    公开(公告)号：US20240275778A1

    公开(公告)日：2024-08-15

    申请号：US18636468

    申请日：2024-04-16

    Applicant: Akamai Technologies, Inc.

    Inventor： Charles E. Gero

    IPC: H04L9/40

    CPC classification number: H04L63/083

    Abstract: A multi-factor authentication scheme uses an MFA authentication service and a browser extensionless phish-proof method to facilitate an MFA workflow. Phish-proof MFA verifies that the browser the user is in front of is actually visiting the authentic (real) site and not a phished site. This achieved by only allowing MFA to be initiated from a user trusted browser by verifying its authenticity through a signing operation using a key only it possesses, and then also verifying that the verified browser is visiting the authentic site. In a preferred embodiment, this latter check is carried out using an iframe postMessage owning domain check. In a variant embodiment, the browser is verified to be visiting the authentic site through an origin header check. By using the iframe-based or ORIGIN header-based check, the solution does not require a physical security key (such as a USB authenticator) or any browser extension or plug-in.

    Using the state of a request routing mechanism to inform attack detection and mitigation
    9.
    发明授权
    Using the state of a request routing mechanism to inform attack detection and mitigation 有权

    公开(公告)号：US12063245B2

    公开(公告)日：2024-08-13

    申请号：US16409517

    申请日：2019-05-10

    Applicant: Akamai Technologies Inc.

    Inventor： Richard E. Willey ,  Ruben E. Brown ,  Daniel E. Cooper

    IPC: H04L9/40 ,  H04L67/10

    CPC classification number: H04L63/1458 ,  H04L63/1416 ,  H04L67/10 ,  H04L2463/144

    Abstract: Among other things, this document describes systems, methods and apparatus for identifying and mitigating network attacks, particularly botnet attacks and other volumetric attacks. In some embodiments, a distributed computing platform provides client-facing service endpoints and a request routing mechanism (request router or RR) directing clients to a particular service endpoint or cluster thereof to obtain a service. The state of the RR at a given time is communicated to enforcement points in the system, which may be cluster equipment, service endpoints, or other components. When client traffic arrives at a particular enforcement point it is checked for consistency with the RR's directions, referred to as ‘mapping consistency’. This information is incorporated into decisions about how to handle the packets from the client.

    Fast, secure, and scalable data store at the edge for connecting network enabled devices
    10.
    发明授权
    Fast, secure, and scalable data store at the edge for connecting network enabled devices 有权

    公开(公告)号：US11997096B2

    公开(公告)日：2024-05-28

    申请号：US17323141

    申请日：2021-05-18

    Applicant: Akamai Technologies, Inc.

    Inventor： Mark M. Ingerman ,  Robert B. Bird

    IPC: H04L9/40 ,  H04L67/1095 ,  H04L67/1097

    CPC classification number: H04L63/102 ,  H04L63/0876 ,  H04L63/1433 ,  H04L63/20 ,  H04L67/1095 ,  H04L67/1097

    Abstract: A distributed computing system provides a distributed data store for network enabled devices at the edge. The distributed database is partitioned such that each node in the system has its own partition and some number of followers that replicate the data in the partition. The data in the partition is typically used in providing services to network enabled devices from the edge. The set of data for a particular network enabled device is owned by the node to which the network enabled device connects. Ownership of the data (and the data itself) may move around the distributed computing system to different nodes, e.g., for load balancing, fault-resilience, and/or due to device movement. Security/health checks are enforced at the edge as part of a process of transferring data ownership, thereby providing a mechanism to mitigate compromised or malfunctioning network enabled devices.

Patent Agency Ranking