Vmware, Inc.

Omnissa, LLC

Samsung Electronics Co., Ltd.

Walmart Apollo, LLC

Amit Kumar Yadav

Craig Farley Newell

Suman Aluvala

Puran Chand

Sanjay Patil

Rohit Pradeep Shetty

Arjun Kochhar

Pavan Rajkumar Rangain

Leung Tao Kwok

Aman Srivastava

Nitesh Jain

Shree Harsha Shedigumme

Ali Mohsin

Sharath Chandra Chavva

Nischit Shetty

Sanjay Satagopan

Ujwal Naik

Soorya Rajasoorya

Raghavan Velappan

Nachiketa Das

Nikhil Mehta

Divyanshu Chuchra

Nidhi Aggarwal

Raghavendra Holla

Ryan Turner

Amit Kumar Pundir

Suresh Kumar KrishnanKutty Vettukuzhyparambhil

Pavan Kumar Dusi

Dev Kumar

Abhishek Kumar Maurya

Disclosed are various approaches for verifying the compliance of a TLS session with TLs policies. Traffic between an application and a destination server can be routed through a TLS gateway. The TLS gateway can inspect TLS handshake messages for compliance with TLS policies.

TLS policy enforcement at a tunnel gateway

Disclosed are various examples for securing enterprise resources using a virtual private network. At least one computing device that can authenticate a client device for a virtual private network (VPN) connection based on a first device identifier received from the client device and a second device identifier received from a remote management service. The at least one computing device can determine that a network event associated with the client device has been observed and execute a machine learning routine to identify a pattern of access for the client device. A network access anomaly is determined in response to a network interaction of the client device deviating from the pattern of access for the client device. A remedial action is performed based on an anomaly type associated with the network access anomaly.

Dynamic variance mechanism for securing enterprise resources using a virtual private network

Disclosed are various embodiments for providing split-tunneled network connectivity on a per-application basis. A DNS query is received from a locally hosted DNS resolver. A first recursive DNS query is sent to an external DNS server and a second recursive DNS query is sent to an internal DNS server. A first recursive DNS response is then received from the external DNS server and a second recursive DNS response is received from the external DNS server. A response is then provided to the DNS query.

Transparently proxying connections based on hostnames

The technology disclosed herein enables packet handling based on user information included in packet headers. In a particular embodiment, a method provides, in a gateway to a network environment, establishing a first connection with a first connection endpoint outside of the network environment. The first connection is established based on authentication of user information received from the first connection endpoint. The method further provides adding the user information to a packet header of one or more first packets carrying a request to establish a second connection between the gateway and a second connection endpoint within the network environment. Also, the method provides transferring the one or more first packets towards the second connection endpoint.

Packet handling based on user information included in packet headers by a network gateway

The system and method described herein provide an order fulfillment database system. The order fulfillment database system may provide a high throughput speed, high availability, redundancy, and scalability. The order fulfillment database system supports very fast transaction times for atomicity, consistency, isolation, and durability (ACID) transactions. Order services instances at a primary cluster provide in-memory databases that service segments of the persistent database and are associated with different order fulfillment entities. A routing manager routes database messages to the appropriate order services instance. A secondary cluster of order services instances provides redundancy. A retry procedure preserves the integrity of the database transactions based on a current operational state of the primary order services instances.

High throughput order fullfillment database system

Disclosed are various approaches for facilitating single sign-on (SSO) for third-party services that are accessible through messages (e.g., email) received by a user. A user can receive a message that includes an embedded URL or link that opens in a third-party service that requires authentication. Instead of requiring the user to enter authentication credentials for accessing the third-party service, a tunnel service can be used to intercept requests for authentication and redirect the requests to an identity manager that can issue a SSO token following an authentication of the user and device. Upon supplying the third-party service with the SSO token, the user can access the content associated with the third-party service without entering authentication credentials.

Single sign on (SSO) capability for services accessed through messages

Disclosed are various examples for securing enterprise resources using a virtual private network. A client device can send a first unique device identifier for the client device to a remote management service upon enrollment. When a virtual private network application is first executed, the client device can send a second unique device identifier to the remote management service, where the remote management service is configured to store the second unique device identifier in association with the first unique universal identifier. During subsequent executions of the virtual private network application, the virtual private network service can authenticate the client device by comparing the first unique device identifier and the second unique device identifier to a device identifier received from the remote management service. A machine learning routine can be employed to identify anomalies as the virtual private network application is executed.

The technology disclosed herein enables packet handling based on user information included in packet headers. In a particular embodiment, a method provides, in a gateway to a network environment, establishing a first connection with a first connection endpoint outside of the network environment. The method further provides identifying first user information associated with the first connection and adding the first user information to a packet header of one or more first packets associated with the first connection. Also, the method provides transferring the one or more first packets into the network environment.

Disclosed are various embodiments for providing split-tunneled network connectivity on a per-application basis. A request to make a universal datagram protocol (UDP) connection to a remote host specified by an internet protocol (IP) address in the request is received from a network driver. A hostname lookup table is queried to determine a hostname associated with the IP address for the remote host. A policy is identified based on the hostname associated with the IP address for the remote host. Then, the UDP connection is routed based on the policy.

Per-application split-tunneled UDP proxy

An apparatus and method are provided for compressing a three-dimensional (3D) object image represented by point cloud data. The method includes positioning the 3D object image into a plurality of equi-sized cubes for compression; determining 3D local coordinates in each of the plurality of equi-sized cubes and a cube index for each point of the 3D object image positioned in the plurality of equi-sized cubes; generating two-dimensional (2D) image data based on the 3D local coordinates and the cube indexes; and storing the 2D image data in a memory. The 2D image data includes at least one of 2D geometry data, 2D meta data, or 2D color data.

Method and apparatus for processing three dimensional object image using point cloud data

Disclosed are various embodiments for providing split-tunneled network connectivity on a per-application basis. A request to make a connection, such as a transmission control protocol (TCP) or a universal datagram protocol (UDP) connection, to a remote host specified by an internet protocol (IP) address in the request is received from a network driver. A hostname lookup table is queried to determine a hostname associated with the IP address for the remote host. A policy is identified based on the hostname associated with the IP address for the remote host. Then, the connection is routed based on the policy.

Per-application split-tunneled proxy

A portal application can receive a listing of available applications in response to a request sent to a management server. The listing can include a plurality of attributes for each available application, such as the requirements for using the features of each application or a dependency upon another application. Based on the plurality of attributes received, the portal application can determine that a first application requires installation of a second application in order for the first application to provide additional functionality. The portal application can display icons corresponding to the available applications and display one or more UI elements, indicating that the first application requires installation of the second application. The portal application can also push the second application to the device and assist in installing and initializing the second application on the device.

Growing community of inventors

Bengaluru, India

Amit Kumar Yadav