Ajay G Desai, 6617 Elsie Dr, Plainsboro, NJ 08536

7600230, Oct 6, 2009

Jul 6, 2004

10/885338

Ajay Desai - Redwood City CA, US
Ming Lei - Fremont CA, US
Fredric Goell - Foster City CA, US
Lawrence Jacobs - Redwood City CA, US

Oracle International Corporation - Redwood Shores CA

G06F 3/00
G06F 15/16
G06F 7/04

719311, 709228, 726 27

A system and method for managing security meta-data in a reverse proxy server. The reverse proxy caches data served by an origin server, and also stores security meta-data for authenticating a user and/or authorizing access to cached data. The security meta-data may include an ACL (Access Control List), access control token or descriptor, other access control information, user credentials, user privileges or roles, group membership, user aliases, etc. The reverse proxy may automatically receive access control information from the origin server when a request for data is forwarded to the origin server, or may explicitly request the information from the origin server or a security server. The reverse proxy receives and applies invalidation messages to invalidate stored security meta-data. Also, the reverse proxy acts in a stateful manner, with knowledge of the correlation between a given user and that user's session with the origin server.

8108939, Jan 31, 2012

May 29, 2003

10/449202

Gaurav Bhatia - Foster City CA, US
Arun Swaminathan - San Carlos CA, US
Ajay Desai - Redwood City CA, US

Oracle International Corporation - Redwood Shores CA

H04L 9/32
G06F 21/00

726 28, 726 4

One embodiment of the present invention provides a system that facilitates security-enabled content caching. The system operates by first receiving a request from a user at a cache server for restricted content, wherein the cache server stores content for an application server. Next, the system determines if the restricted content is located on the cache server. If so, the system determines if the user is authorized to access the restricted content. If the user is authorized to access the restricted content, the system provides the restricted content to the user from the cache server. Providing the restricted content from the cache server eliminates the time consuming operations involved in requesting and receiving the restricted content from the application server.

2005024, Nov 3, 2005

Apr 30, 2004

10/836917

Ajay Desai - Redwood City CA, US
Ming Lei - Fremont CA, US
Ric Goell - Foster City CA, US
Lawrence Jacobs - Redwood City CA, US

G06F007/00

707200000

One embodiment of the present invention provides a system that facilitates serving data from a cache server. The system operates upon receiving a request for the data at the cache server. The system first determines if the request requires access control, and also if the data is available in the cache. If the request requires access control and if the data is available in the cache, the system sends an authorization request to an origin server. Upon receiving a response from the origin server, the system determines if the response is an authorization. If so, the system sends the data to the requester.

2006002, Feb 2, 2006

Jul 6, 2004

10/885300

Ming Lei - Fremont CA, US
Ajay Desai - Redwood City CA, US
Fredric Goell - Foster City CA, US
Lawrence Jacobs - Redwood City CA, US

Oracle International Corporation - Redwood Shores CA

G06F 15/16

709227000, 709203000

A system and method for detecting and managing user session meta-data at a reverse proxy server. The reverse proxy server is logically located between one or more origin servers and any number of users. The reverse proxy server detects the establishment and tearing down of a user session, and any expiration associated with the user session. The reverse proxy server identifies the creation of a session from the pattern and/or content of communications between a user and an origin server, and associates the user (e.g., by username or user ID) with the session (e.g., session ID or cookie). A user session table may be populated with an entry for each observed session. Tear down of a session may be detected by identifying an explicit user logout or a session termination by the origin server.

2008029, Nov 27, 2008

Jun 14, 2007

11/763374

Thomas A. Ryan - Los Gatos CA, US
Gregg Elliott Zehr - Mountain View CA, US
Kenneth P. Kiraly - Menlo Park CA, US
John Lattyak - Los Gatos CA, US
Michael V. Rykov - Seattle WA, US
Girish Bansilal Bajaj - Bellevue WA, US
James C. Slezak - Seattle WA, US
Richard Moore - Seattle WA, US
Kevin R. Cheung - Seattle WA, US
Thomas M. J. Fruchterman - Seattle WA, US
Robert L. Goodwin - Mercer Island WA, US
Beryl Tomay - Newcastle WA, US
Ajay M. Desai - Bellevue WA, US
Tim Tan - Issaquah WA, US
Brandon J. Smith - Seattle WA, US
Bradley Jeffery Behm - Seattle WA, US
Brent Eric Wood - Sammamish WA, US
Xiaotian Guo - Redmond WA, US
Neil C. Roseman - Seattle WA, US
Jon Saxton - Brooklyn NY, US

H04M 1/00

4555562

An item-providing system supplies items to a user device for consumption at the user device via communication infrastructure. In one illustrative implementation, the communication infrastructure may rely, in part, on wireless communication. The device may correspond to a book reader device or other type of device.