Other

Equifax Inc.

Netskope, Inc.

Cinrx Pharma, LLC

Cindome Pharma, LLC

Apple Inc.

Juniper Networks, Inc.

Openwave Systems Inc.

Piyush V Patel

Rajkumar Bondugula

Jon Isaacsohn

Catherine Pearce

Jason Eggleston

Jason Hofmann

Lonhyn T Jasinskyj

Samiyuru Geethanjana Senarathne Menik Hitihami Mudiyanselage

Krishna Narayanaswamy

Ryan Rowat Klems

David A Chen

Oleg Murat Smolsky

Yousuf Ajmerwala

Ronald A La Motte

Ligaj Pradhan

Vishwanath U Shenoy

Jonathan Isaacsohn

Deuterated domperidone compositions, methods of synthesis, methods of use, and dosing formulations providing beneficial safety and other effects.

Deuterated domperidone compositions, methods, and preparation

A cloud-based network security system that includes a packet tap and exposes a synthetic packet stream representing the bidirectional data between enterprise client devices and cloud hosted services is disclosed. The security system intercepts packets of communication sessions and uploads a copy of the packets to cloud storage. A proxy of the security system derives session keys for the communication session and uploads the session keys to the cloud storage. An enterprise stitcher obtains the packets from the cloud storage, stitches the packets together in sequential order, and modifies the Layer 3 and Layer 4 headers to generate synthetic packet streams representing the communication sessions. The stitcher may decrypt the packets or provide the session key with the synthetic packet stream. The stitcher provides the synthetic packet streams to enterprise packet analysis systems for storage, auditing, analysis, and the like.

Cloud packet tap

An Internet Protocol (IP) address assignment method in a cloud-based multi-tenant system for assigning unique IP addresses to a plurality of client devices of a plurality of users. Network traffic including a data request from a client device to a cloud provider via an ingress tunnel is monitored by a mid-link server. A user of the client device is identified from the data request. A policy is identified based on the tenant of the user and a plurality of applications for the client device. An IP address is assigned to the client device of the user based on the policy. Each client device is assigned a unique IP address. The network traffic egresses via an egress tunnel from the mid-link server. The data request is routed from the client device to the cloud provider using the IP address of the client device.

Policy-based IP address allocation

A cloud network for delivering local content to a user at a user location. The cloud network includes a client device comprising a local application, a mid-link server and a cloud provider. The mid-link server receives from the client device a request for local data from the user at the user location. The user has provided the request for the local data from the user location without a data center. A sub-data center for the user location is identified and assigned an Internet Protocol (IP) address for the user location. The sub-data center is a data center nearest to the user location. Each data center has IP addresses for different locations to deliver the local content to the respective IP address for the location. The request is routed to the sub-data center which is used to provide the local data to the user by the cloud provider.

Conditional egress IP for delivery of localized content

Systems and methods for secure resource management are provided. A secure resource management system receives from a client computing system associated with a resource provider a query for classifying a resource user associated with the resource provider. The secure resource management system determining a set of resource abuser criteria for classifying the resource user as a resource abuser. The secure resource management system determines that the resource user is a resource abuser or a potential resource abuser based on the set of resource abuser criteria and a resource transaction history associated with the resource user. Based on determining that the resource user is a resource abuser or a potential resource abuser, the secure resource management system generates and transmits a response to the query to the client computing system. The response can be used to restrict or deny access to the resource by the resource user.

Secure resource management to prevent resource abuse

In some aspects, systems and methods for efficiently clustering a large-scale dataset for improving the construction and training of machine-learning models, such as neural network models, are provided. A dataset used for training a neural network model configured can be clustered into a first set of clusters and a second set of clusters. The neural network model can be constructed with a number of nodes in a hidden layer that is based on the number of clusters in the first set of clusters. The neural network can be trained based on training samples selected from the second set of clusters. In some aspects, the trained neural network model can be utilized to satisfy risk assessment queries to compute output risk indicators for target entities. The output risk indicator can be used to control access to one or more interactive computing environments by the target entities.

Clustering techniques for machine learning models

In some aspects, a computing system can control access of a user computing device to a resource. The computing system can obtain an access request submitted by a user computing device. The computing system can verify permission information in the access request to determine that the access request is valid. If the access request is valid, the computing system submits an authentication request to request an authentication system to authenticate the user and obtains authentication results generated by the authentication system. The computing system further provides, based on the authentication results, an access control decision for the access request.

Secure online access control to prevent identification information misuse

Techniques allow an intermediate (IM) device to transparently intercept and dynamically modify signaling messages being exchanged by a client and a server when negotiating setup and delivery of a multimedia stream from a streaming server. The techniques also allow an IM device to dynamically convert the real-time multimedia stream from a first transport layer protocol to a second transport layer protocol, and the reverse, based on the particular topology of the network including the presence and location of any security devices that may block the multimedia stream. The IM device may be configured to dynamically modify messages intercepted between the client and the server to change a transport layer protocol indicated by the messages from the Transmission Control Protocol (TCP) to the User Datagram Protocol (UDP), and the reverse, and convert a UDP data stream to TCP packets and inject the TCP packets into an established TCP session.

Media stream transport conversion within an intermediate network device

Techniques for collecting data via a display page are disclosed. A data entry field that does not display a current value associated with the data entry field is provided in the display page. A display field configured to display at least a portion of the current value associated with the data entry field is included in the display page selectively, e.g., at a time when a display criteria is satisfied.

Form-field mask for sensitive data

A method and apparatus for providing hypermedia content maintained remotely on a network to a wireless device without a browser are described. A Short Message Service (SMS) request for Internet-based content is received from the wireless device at a proxy server, via an SMS Center (SMSC). The SMS request is transmitted to the SMSC on a wireless network. The proxy server transcodes the SMS request from a character set of the SMSC to a character set of an application and extracts a keyword from the trancoded request. The proxy server maintains a mapping of keywords to URLs. The proxy server looks up the extracted keyword in the keyword-to-URL mapping to identify the URL of an application associated with the keyword. The proxy server constructs an HTTP POST operation containing the keyword and the URL, and submits the HTTP POST operation to the application over a wireline network such as the Internet. Upon receiving an HTTP response containing the requested content from the application in response to the POST operation, the proxy server extracts the content from the HTTP response. The proxy server then translates the content from the content-type used by the application to the content-type used by the SMSC and transcodes the content from the character set used by the application to the character set used by the SMSC. The proxy server then sends the translated and transcoded content in an SMS response to the SMSC, for subsequent delivery to wireless device as an SMS message.

Growing community of inventors

Midland, TX, United States of America

Piyush V Patel