Limelight Networks, Inc.

Netskope, Inc.

Jason Lee Wolfe

Joseph DePalo

Michael M Gordon

Bradley B Harvell

Ofir Ehrlich

Ofer Gadish

Gil Shai

Leonid Fainberg

Jason Hofmann

Tomer Altman

Dima Potekhin

Peter Coppola

John M Scharber

A key management system for providing encryption of a disk in a client device is provided. The system comprises a trusted platform module (TPM) having a first fragment of a key, a remote storage having a second fragment of the key, and a processing unit to partially boot instructions relating to booting of the client device, send a request for validation to the TPM, receive the first fragment of the key from the TPM on successful validation, request for the second fragment of the key with credentials to access the remote storage. The credentials and a network of the request are verified, the second fragment of the key is transmitted on successful validation. The first fragment and the second fragment of the key are combined to generate an encryption key for booting the client device. The first fragment of the key and the second fragment of the key are rotatable.

Key management system for disk encryption

A key management system for providing encryption of a disk in a client device is provided. The system comprises a trusted platform module (TPM) having a first fragment of a key, a remote storage having a second fragment of the key, and a processing unit to partially boot instructions relating to the booting of the client device, send a request for validation of the instructions to the TPM, receive the first fragment of a key from the TPM if the validation is successful, send a request for the second fragment of the key along with credentials to access the remote storage. The remote storage verifies the credentials and a network through which the request is received and transmits the second fragment if the verification is successful. The processing unit then combines the first fragment and second fragment of the key to generate an encryption key which is used to complete the booting.

Disk encryption key management for booting of a device

Methods, systems and computer program products for delivering content objects over the Internet are disclosed. Use of a packet size digest allows for look-up of known or discovered maximum packet sizes for network paths to various receiving systems by servers within one or more points of presence of a content delivery network, such that the packet size information can be advantageously re-used by the multiple servers to reduce delays associated with lost packets and time spent determining a path maximum packet size or maximum transmission unit by each of the multiple servers within the point of presence as they transmit content objects over the Internet.

Dynamic/shared PMTU cache

A system and method for accelerating web page delivery is disclosed in one embodiment. Web content requests are made to an edge server of a first point of presence (POP) of a content delivery network (CDN). The web content has embedded resource links. The first POP can rewrite the embedded resource links to route requests for the embedded resource links to any POP in the CDN or even the origin server. In some embodiments, the first POP can decide if the first POP and/or another POP referenced in a rewritten embedded resource link should cache and/or accelerate the resource referenced in the embedded resource link.

Inter point of presence split architecture

Systems and methods for content delivery control in a cooperative delivery system are disclosed. A rules repository stores control parameters. A content delivery network is configured to receive a request for a content object from an end-user system; receive from the rules repository a control parameter where the control parameter provides information about delivery and/or caching the content object; insert a string into a uniform resource identifier (URI) or response header for the content object; and transmit the response to or through a terminal network. The terminal network receives the response; identifies the string; identifies the control parameter; and processes delivery or storage of the content object based on the control parameter.

Delivery control for cooperative delivery systems

Techniques for modifying the performance of a transport layer protocol in response to a request for content are disclosed. A connection can be established between a content distribution server and an end user computer according to preconfigured parameters. When a request for content is received over the connection, the content distribution server can determine one or more parameters relating to the performance of the connection using information from the request. The content distribution server can modify the connection at the transport layer according to the one or more parameters. Thereafter, the transport layer can manage delivery of the requested content to the end user computer in accordance with the modified parameters. In various embodiments, the content distribution server includes a modified TCP protocol stack which adjusts timing, pacing, and buffer allocation associated with a connection in response to requests from an application-layer data source.

Conditional protocol control

In one embodiment, a system for adapting the interoperation of nodes in an information processing system is disclosed. The system includes a protocol handler, a protocol attribute information store and a protocol attribute selector. The protocol handler manages a first connection and a second connection over the network using a protocol. The protocol attribute information store holds a plurality of attributes. The protocol attribute selector evaluates first information related to a first connection, utilizes the protocol attribute information store to determine first protocol attributes corresponding to the first connection, and communicates the first attributes for the first connection to the protocol handler. Additionally, the protocol attribute selector evaluates second information related to a second connection, utilizes the protocol attribute information store to determine second attributes corresponding to the second connection, and communicates the second attributes for the second connection the protocol handler. The protocol handler uses first attributes for the first connection and second attributes for the second connection.

Growing community of inventors

Gilbert, AZ, United States of America

Jason Lee Wolfe