Seiko Epson Corporation

Digital Guardian LLC

Wai Tung Yim

Chia-Hsin Li

Niranjan Koduri

Emanoel Daryoush

Shreemathi Atreya

Steve Nelson

Provided herein are systems and methods for defining and securely sharing objects for use in preventing data breach or exfiltration. Memory may be configured to store a plurality of objects for use in preventing data breach or exfiltration. A validation engine can validate the objects, incorporate into each object an object identifier and a signature, and generate a subset of the objects for use by a first user. The validation engine can store, in the memory, the plurality of objects as a superset of objects corresponding to the generated subset. An evaluation engine may, responsive to identifying that one or more object identifiers and signatures in a received set of objects belong to the subset corresponding to the stored superset, verify whether any object in the received set has been tampered with.

Systems and methods for defining and securely sharing objects in preventing data breach or exfiltration

A method, which may be implemented by an apparatus and/or computer program(s), for a data relay server comprises receiving a request to relay data for a videoconference between a videoconference server protected by a firewall and N videoconference clients not protected by the firewall, wherein N&#x2267;1; creating a connection pool in response to the request to relay the data for the videoconference comprising accepting a plurality of first connections from the videoconference server; accepting a plurality of second connections from each of the N videoconference clients after creating the connection pool; associating each of the second connections from each of the N videoconference clients with a different one of the first connections in the connection pool; and relaying the data for the videoconference between the videoconference server and the N videoconference clients over the first and second connections.

Videoconference data relay server

A firewall protects an Ethernet network from a first larger network, e.g., the Internet. A first server on the Ethernet network stores an encrypted private key, decrypts the private key using a passphrase, and communicates with clients on the first network using the private key. A second server on the Ethernet network determines whether an intrusion has occurred from the first network into the first server and provides the passphrase to the first server only when no intrusion has occurred from the first network into the first server. The invention can be realized in apparatuses, methods, and/or instruction sets.

Private key protection for secure servers

A videoconferencing method having corresponding apparatus and computer programs comprises receiving exchanging audiovisual data for a videoconference with a videoconference server; identifying a physical location of a videoconference client; and either sending an indicator of the location to the server, which obtains physical location video data for the location comprising satellite photographs of the location and sends the data to other videoconference clients, or obtaining the data and sending the data to the server, which sends the data to other videoconference clients in the videoconference.

Providing satellite images of videoconference participant locations

A communication protocol stack for enabling multimedia communication between communicating devices where multiple port communication data is tunneled through a single TCP port is provided. The communication protocol stack includes, at an application level, the capability to identify whether received communication data is for a communication port. If the received communication data is for the communication port, then the communication protocol stack includes the ability to forward identification data regarding the received communication data to a table in advance of forwarding the received communication data to a driver level of the communication protocol stack. A method, computer readable medium, and a system for tunneling port traffic through a single HTTP port are also provided.

Method and apparatus for tunneling data through a single port

Methods and systems for tunneling data associated with a packet based multimedia communication standard are provided. The method includes intercepting a library call associated with the multimedia communication standard in a modified TCP/IP stack and registering identification data associated with the library call. A modified Transmission Control Protocol/Internet Protocol (TCP/IP) header is appended over a pre-existing header of a data packet related to the identification data. The method also provides for transmitting the data packet having the TCP/IP header through a firewall. The TCP/IP header includes a TCP SEQ number and a TCP ACK number to provide a stateful connection.

Method and apparatus for tunneling data using a single simulated stateful TCP connection

A communication protocol, and a method and system of communication exchange between systems over a communication network includes establishing a connection between a first system and a second system. Data is formatted by the first system into an IP datagram with an IP header and one of a TCP and a UDP header. A connectionless TCP/IP header is constructed to add to the formatted data. The connectionless TCP/IP header includes a pre-defined identifying value in a designated field, and a checksum to validate that a connectionless TCP/IP header has been identified. The formatted data having the connectionless TCP/IP header is transmitted from the first system to the second system, and the pre-defined identifying value in the designated field is verified to identify the connectionless TCP/IP header. The connectionless TCP/IP header is then removed from the IP datagram, and the IP datagram is processed.

Growing community of inventors

San Jose, CA, United States of America

Wai Tung Yim