Palo Alto Networks, Inc.

Auradine, Inc.

Lei Chang

Leonid Burakovsky

Sachin Verma

Jesse C Shu

Sidong Li

Subramani Ganesh

Patrick Xu

Philip Kwan

Liang Li

Chang Li

Nicholas Cabi

Saptadeep Pal

Minglei Wang

Lin Wang

De Vu

Pulikeshi Ramanath

Sridhar Chirravuri

I-Chun Chen

Robert Ashley

Chunqing Cai

Sameer Kumar

Santosh Narayankhedkar

Aditya Batra

Techniques for mobile user identity and/or SIM-based IoT identity and application identity based security enforcement in service provider networks (e.g., service provider networks for mobile subscribers) are disclosed. In some embodiments, a system/process/computer program product for mobile user identity and/or SIM-based IOT identity and application identity based security enforcement in service provider networks includes monitoring network traffic on a service provider network at a security platform to identify a subscriber identity for a new session; determining an application identifier for user traffic associated with the new session at the security platform; and determining a security policy to apply at the security platform to the new session based on the subscriber identity and the application identifier.

Mobile user identity and/or sim-based IoT identity and application identity based security enforcement in service provider networks

A first firmware source code portion corresponding to an immutable firmware portion of specific firmware to be deployed with embedded devices is identified. A second different firmware source code portion corresponding to a mutable firmware portion of the specific firmware to be deployed with the embedded devices is identified. The first firmware source code portion is used to generate the immutable firmware portion of the specific firmware. The second firmware source code portion is used to generate the mutable firmware portion of the specific firmware. The immutable firmware portion of the specific firmware is caused to be installed in fixed storage drives of an embedded device in the embedded devices. The mutable firmware portion of the specific firmware is caused to be installed in swappable storage drives of the same embedded device.

Separate firmware to fixed and removable storages

A secure communications and configuration system for digital currency mining systems provides two levels of digital signatures for communications between digital currency mining systems and a central management server where general communications are signed using software generated keys and sensitive communications are signed using an on-board encryption chip. The central management server verifies an initial registration message from a digital currency mining system and send initial configuration data to the digital currency mining system automatically.

Trusted platform module cryptocurrency miner with secure zero touch provisioning capability

A local buffer is integrated with a witness generator and a proof generator on a cryptographic processor and is separate from host memory accessed by a host processor operating with the cryptographic processor in a proving computing system. The witness generator: receives, from software program running on the host processor, compiled code of a zero-knowledge-proof (ZKP) program and specific input to the ZKP program; executes the ZKP program by way of executing the compiled code; records specific output generated from the ZKP program with the specific input, intermediate variable values, and the specific input, as a specific witness of executing the ZKP program; stores the specific witness in the local buffer. The proof generator: receives, from the software program running on the host processor, a proving key; accesses the specific witness in the local buffer; generates a specific zero-knowledge proof for executing the ZKP program with the specific input.

End-to-end hardware acceleration for ZKP from witness generation to proof generation

An asset management method is provided. The asset management method includes establishing a network connection between a cryptomining asset and an asset management server. The asset management method includes generating a digital token, wherein the digital token includes an identifier assigned to the cryptomining asset by a cryptomining asset provider. The asset management method includes transmitting, to the asset management server and via the network connection, the digital token. The asset management method includes receiving, from the asset management server, a message corresponding to the identifier, wherein the message includes a configuration of a cryptomining task. The asset management method includes loading the configuration in the cryptomining asset. Another asset management method and a cryptomining asset are also provided.

Automated pool configuration provisioning

Techniques for reduction and acceleration of a deterministic finite automaton (DFA) are disclosed. In some embodiments, a system, process, and/or computer program product for reduction and acceleration of a DFA includes receiving an input value; performing a reduced deterministic finite automaton lookup using a lookup key, wherein the lookup key comprises a current state and the input value; and determining a next state based on the lookup key.

Reduction and acceleration of a deterministic finite automaton

Techniques for enhanced Software-Defined Wide Area Network (SD-WAN) path quality measurement and selection are disclosed. In some embodiments, a system/method/computer program product for enhanced SD-WAN path quality measurement and selection includes periodically performing a network path measurement for each of a plurality of network paths at a Software-Defined Wide Area Network (SD-WAN) interface; updating a version if the network path measurement exceeds a threshold for one or more of the plurality of network paths; and selecting one of the plurality of network paths for a session based on the version according to an application policy.

Enhanced SD-WAN path quality measurement and selection

Techniques for providing security for Cellular Internet of Things (CIoT) in mobile networks (e.g., service provider networks for mobile subscribers) are disclosed. In some embodiments, a system/process/computer program product for enhanced security for CIoT in mobile networks in accordance with some embodiments includes monitoring network traffic on a service provider network at a security platform to identify a subscriber identity for a new session, in which the session is associated with a CIoT device; determining an application identifier for user traffic associated with the new session at the security platform; and determining a security policy to apply at the security platform to the new session based on the subscriber identity and the application identifier.

Security for cellular internet of things in mobile networks based on subscriber identity and application identifier

Growing community of inventors

San Jose, CA, United States of America

Lei Chang