Hewlett-packard Company

Skyhigh Networks, Inc.

Intel Corporation

Hewlett-packard Development Company, L.p.

Institute for the Development of Emerging Architectures, L.l.c.

Skyhigh Security LLC

Other

Hitachi, Ltd.

Oracle International Corporation

Cisco Technology, Inc.

Idea Corporation

Rajiv Gupta

Sekhar R Sarukkai

Kaushik Narayan

Alan Hersh Karp

Dejan Curcic

Michael S Schlansker

William S Worley, Jr

Frederic C Amerson

Prasad Raghavendra Somasamudram

Arindam Banerji

Sandeep Kumar

Vinod Kumar Kathail

Chia-Chiang Chao

Ernest Mak

Dale Calvin Morris

Jonathan Kent Ross

Harshvardhan P Sharangpani

Stephen G Burger

Robert Bruce Aglietti

B Ramakrishna Rau

James O Hays

Jesse Z Fang

David A Berson

Youfeng Wu

Koichi Yamada

Gary N Hammond

Tse-Yu Yeh

William R Bryg

Mircea Poplingher

Kent G Fielden

Venkatesh Krishnan

Dennis Brzezinski

Tomas G Rokicki

Rama Taraniganty

Glenn Mulvaney

Guillermo Rozas

Millind Mittal

Gadiel Seroussi

Ming C Hao

Robert M English

Marcelo Weinberger

Ralph Michael Kling

Naohiko Irie

Rajendra Kumar

Didier Rene Guzzoni

Peter Phaal

Michael Paul Corwin

Jerome C Huck

Richard J Carter

Carol Linda Thompson

Hans J Mulder

Judge K Arora

Yooichi Shintani

Yoshikazu Tanaka

Bantwal R Rau

Ho-Seop Kim

Jack D Mills

Prasad A Raje

Paul Grubbs

Tan Watanabe

Neri Merhav

Alexandre Bronstein

Stefan M Freudenberger

Ken Arora

Raghavendra Prasad

Joseph A Fisher

Ali Reza Adl-Tabatabai

Thomas Wylegala

Balasubramanian Kumar

Christopher M Guidroz

Joesp M Ferrandiz

Vijayanand Nagarajan

Gary N Hammon

Sekhar Sarukkal

A cloud service account management method identifies unauthorized or unmanaged accounts making administration console access or API access at a cloud computing service and triggers a work flow to place the accounts under management. In one embodiment, the user device is directed to a registration portal to provide access credentials of the unauthorized account. The loud service account management method uses the access credentials to retrieve a list of account users associated with the account. Once the accounts are made managed, the cloud service account management method can monitor the activities of the account, including all of the account users, and can apply compliance or security policies to the managed accounts.

Cloud service account management method

A method of assessing a risk level of an enterprise using cloud-based services from one or more cloud service providers includes assessing provider risk scores associated with the one or more cloud service providers; assessing cloud service usage behavior and pattern of the enterprise; and generating a risk score for the enterprise based on the provider risk scores and on the cloud service usage behavior and pattern of the enterprise. The risk score is indicative of the risk of the enterprise relating to the use of the cloud-based services from the one or more cloud service providers.

Cloud service usage risk assessment

A cloud service account management method identifies unauthorized or unmanaged accounts making administration console access or API access at a cloud computing service and triggers a work flow to place the accounts under management. In one embodiment, the user device is directed to a registration portal to provide credentials of the unauthorized account. Once the accounts are made managed, the cloud service account management method can monitor the activities of the accounts and can apply compliance or security policies to the managed accounts.

Cloud service account management

A cloud service usage assessment system analyzes network traffic from an enterprise data network and generates cloud service usage analytics for the enterprise. In some embodiments, the cloud service usage analytics may include cloud service usage risk assessment. The cloud service usage assessment system is advantageous applied to assess network security in view of an enterprise's adoption of multiple cloud based services.

Cloud service usage monitoring system

A network traffic monitoring system for redirecting network traffic between a client device and a cloud service includes a monitor proxy server configured as a network intermediary between the client device and the cloud service; and a published identity provider. The published identity provider is configured to receive a login request from a client device and to authenticate the client device at a federated identity provider. The published identity provider is configured to receive from the federated identity provider a redirect response including an identity assertion and a redirect web address to the cloud service. The published identity provider is configured to rewrite the redirect web address to the web address of the monitor proxy server. As a result, network traffic between the cloud service and the client device is routed through the monitor proxy server after user authentication using the published identity provider.

Network traffic monitoring system and method to redirect network traffic through a network intermediary

A method of assessing a risk level of an enterprise using cloud-based services from one or more cloud service providers includes assessing provider risk scores associated with the one or more cloud service providers and in view of darknet intelligence data; assessing cloud service usage behavior and pattern of the enterprise; and generating a risk score for the enterprise based on the provider risk scores and on the cloud service usage behavior and pattern of the enterprise. The risk score is indicative of the risk of the enterprise relating to the use of the cloud-based services from the one or more cloud service providers.

Cloud service usage risk assessment using darknet intelligence

A method implements searchable encryption of cloud stored data by appending tokenized keywords to an encrypted file destined for a cloud storage service. In some embodiments, the tokenized keywords are appended to the header of the encrypted file. Searching of cloud-stored encrypted files using the native search capability of the cloud storage service is then possible by performing the search using the tokenized keywords. In alternate embodiments of the present invention, a method enables searching of cloud stored encrypted file using a cloud search appliance.

Searchable encryption for cloud storage

Display screen with a graphical user interface for cloud usage analysis

Growing community of inventors

Los Altos, CA, United States of America

Rajiv Gupta