International Business Machines Corporation

Cisco Technology, Inc.

Sun Microsystems, Inc.

Barracuda Networks, Inc.

Actona Technologies Ltd.

Sookasa Inc.

Attune Networks Ltd.

Viola Networks Ltd

Technion Research & Development Foundation Limited

Israel Cidon

Moshe Sidi

Inder Sarat Gopal

Raphael J Rom

Asaf Cidon

Lior Gavish

Roch A Guerin

Vita Bortnikov

Idan Zach

Asad Khamisy

Shahar Glixman

Etai Lev Ran

Daniel Kaminsky

Leonidas Georgiadis

Amit Narayan Gupta

Marc Adam Kaplan

Kenneth Harvey Potter, Jr

Shay Kutten

John G Dudley

Jeffrey Haskell Derby

Yoram Ofek

Christoph L Schuba

Israel Zvi Ben-Shaul

John E Drake, Jr

Etai Lev-Ran

James P Janniello

Ilan Kessler

Elizabeth A Hervatic

Allan K Edwards

Clifford James Buckley

Avinoam Kolodny

Danit Ben Kiki

Andrew E Slater

Israel Ben Shaul

Yuval Y Shavitt

Theodore E Tedijanto

Prabandham Madan Gopal

Shetty Chandrashekhar

Barak Srour

Phanindra Jujjavarapu

Chandrashekhar Shetty

Lior Z Horn

Benny Zangiri

Shlomit Botton-Dascal

Benny Rachlevski-Reich

Man-Tung Tony Hsiao

Yair Harel

Gopal Madan Prabandham

Chee-Seng Chow

David William Davenport

Chandra Paul Immanuel

Richard M Doney

Francis R Koperda

Arie Kazatcker

Israel Ben-Shaul

Itai Lev-Ran

Oren Unger

Roee Mitrani

Lior Horn

Uri Keidar

Rachel A Bodner

Theodore Ernest Tedijanto

Isask'har Walter

Elizabeth Anne Hervatic

John Ellis Drake

Kenneth Harvey Potter

An approach is proposed that contemplates systems, methods, and computer-readable storage mediums to support receiving, from a computerized system, a first encrypted file entity key and signed access metadata, wherein the first encrypted file entity key is created by encrypting a file entity key using a first encryption key, the signed access metadata is signed by the file entity key and the encrypted file entity is created by encrypting a file entity using the file entity key. The approach then determines whether to facilitate the decryption of the encrypted file entity by the computerized system and sends a second encrypted file entity key to the computerized system if it is determined to facilitate the decryption. The approach prevents the computerized system to decrypt the encrypted file entity if it is determined not to facilitate the decryption of the encrypted file entity by the computerized system.

Distributed encryption and access control scheme in a cloud environment

Non-transitory computer readable medium that may store instructions that once executed by a computer may cause a computer to receive or generate multiple security questions, receive multiple security answers that were provided by an entity in response to the multiple security questions, receive or generate redundant information and calculate the passphrase by applying an error correction process on the redundant information and the multiple security answers; wherein the error correction process is configured to correct up to a predefined number of erroneous security answers.

Robust restoration of passphrases from partial information

A method for enabling access to a data resource, which is held on a file server () on a first local area network (LAN) (), by a client () on a second LAN (). A proxy receiver () on the second LAN () intercepts a request for the data resource submitted by the client () and transmits a message via a wide area network (WAN) () to a proxy transmitter () on the first LAN (), requesting the data resource. The proxy transmitter () retrieves a replica of the data resource from the file server () and conveys the replica of the data resource over the WAN () to the proxy receiver (), which serves the replica of the data resource from the proxy receiver () to the client () over the second LAN ().

Virtual file-sharing network

System, computer readable medium and method for decryption. The method may include receiving, by a third computerized system and from a fourth computerized system, a first encrypted file entity key and signed access metadata. The first encrypted file entity key is created by encrypting a file entity key by a first computerized system using an encryption key of a second computerized system. The signed access metadata is signed by the file entity key. The encrypted file entity is created by encrypting a file entity by the first computerized system using the file entity key. Sending, by the third computerized system, the signed access metadata and the first encrypted file entity key to the second computerized system. Receiving a response from the second computerized system. Determining, based on the response from the second computerized system, whether to facilitate a decryption of the encrypted file entity by the fourth computerized entity.

A system, computer readable medium and a method for encrypting a file, the method may include retrieving the file from a storage service; segmenting the file into multiple file segments; calculating a file segment signature for each of the multiple file segments to provide multiple file segment signatures; encrypting each of the multiple file segments to provide multiple encrypted file segments by using encryption keys that are in response to the multiple file segment signatures; wherein the multiple encrypted file segments form an encrypted file; and sending the multiple encrypted file segments to the storage service.

Encrypting files within a cloud computing environment

A method for file management, the method may include: calculating, by a management server that is located within a cloud computing environment, signatures of multiple files that are stored at multiple storage entities; and finding, by the management server, groups of similar files out of the multiple files, wherein the finding is in response to similarities between signatures of the multiple files; wherein the multiple storage entities comprise at least a first storage entity that is managed by a first management entity and a second storage entity that is managed by a second management entity that differs from the first management entity.

System, method and computer readable medium for file management

A method for testing a communication network includes transmitting a flow of test packets over a path through the network. The flow includes a series of bursts of the test packets separated by intervals having an interval duration, each burst comprising a sequence of the test packets and having a burst duration less than the interval duration. Arrival characteristics of the test packets in the flow are measured at a receiving end of the path. The arrival characteristics include at least one of a packet loss characteristic, a packet delay characteristic, and a packet jitter characteristic. A quality defect in the network is detected based on the measured arrival characteristics.

Sampling test of network performance

Network testing is conducted using a pair of traffic agents that acts as sender and receiver endpoints. The sending traffic agent generates and transmits a stream of packet batches, each batch being composed of high and low priority packets in a predetermined sending order. The receiving traffic agent analyzes the order of packet arrival in the stream relative to the sending order, and returns results to a traffic control module. Path speed and the priority classification of the traffic are parameters used to configure the tests. The tests are typically run periodically under different load conditions in order to evaluate the effects of other traffic being concurrently transiting the network.

Quality of service testing of communications networks

Double-proxy remote data access system

A method for testing of a communication network, using a plurality of traffic agents coupled to communicate via the network. The method includes transmitting a sequence of data packets via the network from a first one of the traffic agents to a second one of the traffic agents and recording arrival characteristics of the packets in the sequence, responsive to receiving the packets at the second traffic agent. The arrival characteristics of different packets in the sequence are compared so as to determine a measure of variability in transmission of the packets via the network.

Analysis of network performance

A method is disclosed for reducing network traffic. At a sender, a data chunk is identified for transmission to a receiver, which is connected to the sender over a communication link. The sender computes a signature of the data chunk and determines whether the data chunk has been previously transmitted by looking up the signature in a sender index table. The sender index table associates the signatures of previously transmitted data chunks with unique index values. A message is transmitted to the receiver, where if the data chunk has previously been transmitted then the message includes an index value from the sender index table that is associated with the signature of the data chunk. At the receiver, the data chunk is located in a receiver cache that stores the previously transmitted data chunks by looking up the index value included in the message in a receiver index table. The receiver index table associates the unique index values with the locations in the receiver cache of the previously transmitted data chunks.

Method and apparatus for reducing network traffic over low bandwidth links

A method for testing a communication network includes transmitting at least one unidirectional flow over a path through the network, and measuring arrival characteristics of the least one unidirectional flow at a receiving end of the path. The arrival characteristics include at least one of a packet throughput characteristic, a packet delay characteristic, a packet loss characteristic, a packet jitter characteristic and a packet misordering characteristic. A bidirectional flow is transmitted over the path from both ends of the path simultaneously, and the arrival characteristics of the bidirectional flow are measured at least at one of the ends. The arrival characteristics of the unidirectional and bidirectional flows are compared in order to detect a fault in the path.

Duplex mismatch testing

A technique for centralized and differentiated content and application delivery system allows content providers to directly control the delivery of content based on regional and temporal preferences, client identity and content priority. A scalable system is provided in an extensible framework for edge services, employing a combination of a flexible profile definition language and an open edge server architecture in order to add new and unforeseen services on demand. In one or more edge servers content providers are allocated dedicated resources, which are not affected by the demand or the delivery characteristics of other content providers. Each content provider can differentiate different local delivery resources within its global allocation. Since the per-site resources are guaranteed, intra-site differentiation can be guaranteed. Administrative resources are provided to dynamically adjust service policies of the edge servers.

Differentiated content and application delivery via internet

Growing community of inventors

Haifa, Israel

Israel Cidon