Bitglass, Inc.

Arcot Systems, Inc.

Fineground Networks

Cisco Technology, Inc.

Ca, Inc.

Balas Natarajan Kausik

Anoop Kumar Bhattacharjya

Anurag Kahol

Janardhanan Jawahar

Geoffrey R Hird

Sanguthevar Rajasekaran

Siva Saran Kumar Kollipara

Rammohan Varadarajan

Daren A Race

An intermediate device enforces security rules on cloud data accesses. Network traffic between a client application and a cloud application is routed to the intermediate device. The intermediate device tags data that is stored in the cloud application in order to track the data and encrypts the data including the tags such that the intermediate device can only decrypt the encrypted data and tags in one or more trusted zones. The cloud application stores the encrypted data. When a data request is received by the intermediate device, the intermediate device uses a set of rules to decide whether the requesting user is allowed access to the data from the cloud application.

Stateful access control of data

A proxy server receives a synchronization request from an application program resident on a user device. The proxy server determines that the user device requires removal of application program data and synchronizes the application program resident on the user device with a null account that is associated with application program.

Secure application access system

A proxy system is installed on a computing device that is in the network path between the device and the Internet. The proxy system, residing on the computing device, decrypts and inspects all traffic going in and out of the computing device.

Secure low-latency trapdoor proxy

A proxy server enforces security rules on data accesses. Network traffic between a client application and a cloud application is routed to the proxy. The proxy tags data that is stored in the cloud applications in order to track the data. When a data request is received by the proxy, the proxy uses a set of rules to decide whether the requesting user is allowed access to the data from the cloud application.

Verifying user device access rights for application data requests

A proxy server mitigates security risks of user credentials sent across a network in clear text. The proxy server encrypts user credentials within a client application request destined for an application server. The proxy server forwards the client application request to the application server. The application server sends the encrypted user credentials to the proxy server where the proxy server decrypts the user credentials and authenticates the user credentials with an authentication server.

Secure user credential access system

A proxy server creates an index of keywords, receives an encrypted record, decrypts the received encrypted record as decrypted data and, when a keyword in the index is encountered in the decrypted data, associates in the index an encrypted record location identifier with the encountered keyword. The proxy server receives a search query and uses the keyword index to retrieve encrypted records from the server. The encrypted records are decrypted and sent as search results in response to the search query.

A proxy server creates an index of keywords, receives at least a portion of a file, and, when a keyword in the index is encountered in the at least a portion of the file as the at least a portion of the file is being encrypted, associates in the index an encrypted record location identifier with the encountered keyword. The proxy server receives a search query and uses the keyword index to retrieve encrypted records from the server. The encrypted records are decrypted and sent as search results in response to the search query.

An exemplary method performed by a proxy server located between a content server and a client browser for reducing effects of network latency therebetween comprises intercepting a request from the client browser for a resource at the content server, obtaining a response by the content server to the request, determining that the response would, if unmodified, require a plurality of communications between the content server and the client browser in the absence of the proxy server, modifying the response to reduce a network latency associated with the plurality of communications for accessing information located externally to the response, and transmitting the modified response to the client browser for use thereby.

Growing community of inventors

Los Gatos, CA, United States of America

Balas Natarajan Kausik