Vormetric, Inc.

Drkumo Inc.

Avaya Inc.

Avaya Technology LLC

Diamond Multimedia Systems, Inc.

Idlogiq Inc.

Duc N Pham

Tien Le Nguyen

Pu Paul Zhang

Mingchen Lo

Nam D Pham

Kelly D X Nguyen

Vu Tuan Phan

Tri Ngoc Truong

Ha Thi Thu Bui

Bao Huynh Duong

Kelly Dao Xuan Nguyen

Anvay Arvind Rane

Anvay Arvid Rane

Nom Pham

A networked computer system providing an automated control system that enables a sensor client to securely communicate with a heterogeneous set of unique sensors. The system enables autonomous secure identification of specific sensors capable of system inter-operation. Recognized sensors are autonomously paired and the connection secured using a password unique to the sensor and autonomously managed by the system. Measurement data is source encrypted using a well-defined public key, thereby providing data security that extends uninterrupted from the sensor itself to an appropriately authorized subsystem of the control system.

Autonomous control and secure communications system and methods for sensors

A sensor communications system provides for the secure transfer of sensor measurement data from sensor devices to a remote, network connected server system. The sensor devices include processor to encrypt a sensor measurement data stream using the public key of an asymmetric key pair and to transmit the encrypted sensor measurement data stream through the local network interface. The remote server system includes a network gateway and a compute server with the compute server being couplable to the network gateway and an authorization server storing the private key of the asymmetric key pair. The compute server operates to decrypt the encrypted sensor measurement data stream using the private key and to process the decrypted sensor measurement data stream for presentation a user of the remote server system.

Network transport independent encrypted sensor data transport system and methods

A method of securely serializing product units to provide a trusted basis for the recording of transaction events reflecting distribution actions within and between supply chain participant vendors. The method involves receiving vendor data including vendor public data descriptive of a given product unit, generating a unique serial number to be securely associated with the given product unit, the unique serial number including a public serial number and a unique nonce, generating a cryptographic hash of the unique serial number and the vendor public data, generating a cryptographic signature of the cryptographic hash using a predetermined private key, and returning marking data including the public serial number.

Computerized apparatus for secure serialization of supply chain product units

Methods for secure serialization of supply chain product units

A server appliance self-adaptively configures to the operating parameters of a communications network to enable remote configuration control exclusively via the communications network. The server appliance includes a host computer system including a network interface controller and an operating system, executable by the host computer system, that is configurable by a defined set of network values for transmitting and receiving data packets through the network interface controller without network configuration conflicts. A control program, executable by the host computer system in conjunction with the operating system, determines, on initial start-up and specifically with respect to the communications network, an initial set of network values to configure the operating system. The control program is subsequently responsive to a first broadcast data packet containing network configuration parameters that are used to determine and apply a second set of network values to configure the operating system, which are then applied as the operating configuration of the operating system with respect to the network.

System and method of network independent remote configuration of internet server appliance

A data server platform includes a security file system layer interposed between the platform operating system kernel and file system. The secure file system layer is structured to implement a file access control function that selectively constrains data transfer operations initiated through the operating system kernel by an application program to transfer file data through the file system with respect to a persistent data store. A file access controller, implemented independent of the operating system kernel, is coupled to the security file system layer and supports the file access control function by defining permitted file data transfers through the file system. Management of the file access controller separate from the data server platform ensures that any security breach of the platform operating system kernel cannot compromise the function of the security file system layer.

Secure file system server architecture and methods

Network data files are secure through the operation of an infrastructure gateway-based network file access appliance. Network file data, corresponding to network pocket payload data, are further reduced to a sequence of data blocks that are secured through any combination of block encryption, compression, and digital signatures. File meta-data, including encryption, compression and block-level digital signatures are persistently stored with the file data, either in-band in the file as stored or out-of-band key as a separately stored file or file policy record. File meta-data is recovered with accesses of the file data to support bidirectional encryption and compression and to detect tampering with the file data by comparison against block-level digital signatures.

Logical access block processing protocol for transparent secure file storage

A network gateway processor architecture including a scalable array of compute processors that function to convert inbound data packets to outbound data packets, an ingress processor coupleable to a first network to receive the inbound data packets and coupled to provide the inbound data packets to the compute processors, and an egress processor coupleable to a second network and coupled to the compute processors to collect and forward the outbound data packets to the second network. The ingress processor distributes inbound data packets to the compute processors based on a least load value selected from current load values determined for the respective compute processors of the scalable array. The current load values represent estimated processing completion times for the respective compute processors of the scalable array of compute processors. Preferably, the current load values are dynamically derived with respect to the size of the inbound data packets and the performance of the respective compute processors.

Load balanced scalable network gateway processor architecture

A network file access appliance operates as a secure portal for network file access operations between client computer systems and network storage resources. The file access appliance terminates network file access transactions, identified by packet information including client system, mount point, and file request identifiers, between client systems and mount points supported by the access controller. A policy parser determines, based on the packet information, to selectively initiate network file access transactions between the access controller and network storage resources to enable completion of selected network file access transactions directed from the clients to the network file access appliance. The network file access transactions directed to the network storage resources are modified counterparts of policy selected client network file access transactions modified to reference mapped network storage resource mount points and support the secure transfer and storage of network file data.

Secure network file access controller implementing access control and auditing

A secure network file access appliance supports the secure access and transfer of data between the file system of a client computer system and a network data store. An agent provided on the client computer system and monitored by the secure network file access appliance ensures authentication of the client computer system with respect to file system requests issued to the network data store. The secure network file access appliance is provided in the network infrastructure between the client computer system and network data store to apply qualifying access policies and selectively pass through to file system requests. The secure network file access appliance maintains an encryption key store and associates encryption keys with corresponding filesystem files to encrypt and decrypt file data as transferred to and read from the network data store through the secure network file access appliance.

Secure network file access control system

A kit in accordance with the invention is disclosed that allows for simultaneous connectivity of a variety of SCSI devices to a SCSI card via a SCSI bus. Such SCSI devices include internal narrow, internal wide, external narrow, and external wide devices. A kit in accordance with the invention includes a terminator-adapter. The terminator-adapter includes a first wide connector, a second narrow connector, and a wide bus including an upper and lower bus. The upper bus is coupled to the wide connector and is first and second connector as well as a soft terminator. By enabling the soft terminator, the terminator-adapter behaves as a wide bus terminator. By disabling the soft terminator, the terminator-adapter behaves as a wide-to-narrow adapter. A kit in accordance with the invention may further include a wide cable and a SCSI card. In various embodiments, the SCSI card includes a wide internal connector and a narrow internal connector.

Growing community of inventors

Cupertino, CA, United States of America

Duc N Pham