Netskope, Inc.

Other

James S Robinson

Damian C Chung

Lamont Orange

Vadon Willis

John Khotsyphom

A policy-controlled access security system for managing access security to electronic agents in cloud based multi-tenant systems includes a client device, a mid-link server, and a web server. A local application running on the client device requests access to an electronic agent of a remote application of the web server. Policies are determined for controlled access to the electronic agent. A token for the electronic agent is correlated with a plurality of tokens for identifying a user application associated with the token. The remote application is compared with the user application. A non-compliance of the set of policies is identified by determining enabling of one or more AI devices by the plurality of end users. The set of policies are modified based on the non-compliance and the functionality associated with the electronic agent and the plurality of privileges are updated for the end user based on the modified policies.

Artificial intelligence (AI) devices control based on policies

The present disclosure provides an electronic inspection method and system comprising user endpoints, end-link servers belonging to a tenant, and a mid-link server. The mid-link server connects the user endpoints with an end-link server through tunnels. The mid-link server models an interaction in the tunnels using a model of an application layer. The mid-link server receives communication from the user endpoints through the tunnels, differentiates between a data object, and stores the data object based on a plurality of policies and context developed. The mid-link analyzes the model and the data object in the tunnels and determines the context according to a policy. The mid-link server performs the electronic inspection between a plurality of end-link servers and a plurality of user endpoints by inspecting the data object from the plurality of tunnels.

Mid-link forensic system for remote application environment

A policy-based security system for establishing a secure session from client devices to a web server includes a policy component with policies, a client device with a local application to select a cloud service, and a mid-link server. A set of policies is determined based on parameters and a tag of a shared content between the client device and the web server for the cloud service. The set of policies selectively direct traffic to the mid-link server based on the tag, and the set of policies specify a direct link between the client device and the web server if the client device satisfies security standards or a secure tunnel between the client device and the mid-link server for the secure session based on the client device does not satisfy the security standards. The secure session establishes the secure session for the cloud service and for providing the shared content.

Policy-based secure communication session using direct link and digitally segregated secure tunnels

A policy-controlled communication system including a plurality of client devices establishing a secure session with remote instances on a web server using a protocol. The system includes a policy component with a set of policies customized based on parameters. The policies specify configuration settings of encryption protocols for content security on a client device. A local application on the client device selects a cloud service. A mid-link server includes a security developer to determine an encryption link to deliver the cloud service to the client device and a linker to select a session protocol for establishing the secure session between the client device and the web server based on the set of policies. The policies are modified when the encryption link does not meet the set of policies. The router establishes via the encryption link the secure session based on the session protocol and the modified policies.

Selection of session protocol based on policies

A policy-controlled authorization system including a local application on a client device, a policy component including a plurality of policies, and a mid-link server, coupled to the client device is provided. A request for access to a service using a token is provided by the local application. A correlator correlates the token with the plurality of tokens for identifying a policy from the plurality of policies associated with the token. A token inspector authorizes the token for accessing the service based on the correlation. Based on the authorization, either the token is authorized for access to the service via the remote application, or the token is blocked when unauthorized to prevent access to the service. Confidence scores are assigned to each token based on their categories, compliance with the policies, and a threat level. The confidence scores indicate need to re-authorize the tokens and/or disable them temporarily.

Policy-controlled token authorization

A policy-based browser system for managing browser extensions used to access functionalities on a web browser in a cloud-based multi-tenant system. The policy-based browser system includes a client device, a web server configured to provide the functionality of the browser extension on a web browser of the client device, and a mid-link server. The network traffic from the client device is monitored to identify traffic patterns, risk is determined associated with the browser extension based on the traffic patterns, and a correlation of the browser extension with a plurality of browser extensions. A policy for the browser extension is identified based on the risk. The policies specify access to the browser extensions based on the risk associated with the browser extensions. The browser extensions are categorized based on the policies and the risk. An authorization corresponding to the browser extension is determined based on the policy.

Browser extension identification and isolation

A policy-based security system for establishing a secure session from client devices to a web server includes a policy component with policies, a client device with a local application to select a cloud service, and a mid-link server. A set of policies from the policies is determined. An encryption link specified for the set of policies and the cloud service is determined. A set of session protocols is selected to establish the secure session between the client device and the web server based on the set of policies. It is determined whether the client device satisfies security standards of one or more session protocols from the set and based on the determination, either a direct link is selected to establish the secure session using a session protocol from the set or a secure tunnel between the client device and the mid-link server and a corresponding tunnel protocol is selected.

Secure communication session using encryption protocols and digitally segregated secure tunnels

A policy-controlled access security system for managing access security to electronic agents in cloud based multi-tenant systems includes a client device, a mid-link server, and a web server. A local application running on the client device requests for access to an electronic agent of a remote application of the web server. Policies are determined corresponding to the electronic agent for controlled access to the electronic agent. A token for the electronic agent is correlated with a plurality of tokens for identifying a user application associated with the token. The remote application corresponding to the token from the request is compared with the user application. Based on the comparison an authorization is determined by the mid-link server corresponding to the token for accessing the electronic agent. The policies are enforced on the client device and the access to the electronic agent is provided based on the policies via the web server.

Electronic agent scribe and communication protections

A policy-controlled authorization system for managing tokens used to access services in a cloud based multi-tenant system. The policy-controlled authorization system includes a local application that executes on a client device, a policy component including a plurality of policies, and a mid-link server, coupled to the client device. A request for access to a service on a remote application running on a remote instance of a web server is provided by the local application. A token is required to access the service. A correlator correlates the token with the plurality of tokens for identifying a policy from the plurality of policies associated with the token. A token inspector authorizes the token for accessing the service based on the correlation. Based on the authorization, either the token is authorized for access to the service via the remote application, or the token is blocked when unauthorized to prevent access to the service.

Authorization token confidence system

A policy-controlled communication system including a plurality of client devices establishing a secure session with remote instances on a web server using a protocol. The system includes a policy component with a set of policies customized based on parameters. The policies specify configuration settings of encryption protocols for content security on a client device. The parameters include connection, application, source, destination, data classification, type, user groups, encryption type, and/or performance. A local application selects a cloud service. A mid-link server includes a router to provision the set of policies, a security developer to determine an encryption link to deliver the cloud service to the client device and a linker to select a session protocol for establishing the secure session between the client device and the web server based on the set of policies. The router establishes via the encryption link the secure session based on the selected session protocol.

Session protocol update or upgrade web traffic

Baseball headwear

Locker bank

Auto body doll

The present invention relates to an improvement in marine cranes. An additional controllable variable lifting capability is operably connected to the load line of a marine crane, which may be motion compensated, to provide a safe initial lift of the cargo from a supply vessel. The additional lifting capability may be used alone or in concert with the drawworks to make the initial portion of the cargo lift. A variation of the improvement may be used in mooring of vessels adjacent a marine installation.

Growing community of inventors

Indianapolis, IN, United States of America

James S Robinson