Benjamin John Kus, 45268 Bryant Ave, Alameda, CA 94501

2010033, Dec 30, 2010

Sep 14, 2010

12/881668

Dennis Sidney GOODROW - Santa Rosa CA, US
Peter Benjamin LOER - Oakland CA, US
Jeremy Scott SPIEGEL - San Francisco CA, US
Gregory Mitchell TOTO - Piedmont CA, US
Benjamin John KUS - Alameda CA, US
Jonathan Shih-Shuo FAN - Oakland CA, US

G06F 15/173

709223

Visibility and control are provided for a variety of different assets as found in a particular networked environment, such as, for example an enterprise network environment. Visibility and control of properties of assets are achieved by way of native agents, pseudo-agents that provide visibility and control of properties of assets of external systems by inspecting and applying changes into such assets, and bridges that provide visibility of other external data sources that cannot be controlled. A technique is provided that brings such visibility and control into a unified view that can be displayed in front of a console operator, for example. The controllable assets may be managed directly from the unified view at the console.

2011006, Mar 17, 2011

Sep 14, 2010

12/881995

Dennis Sidney GOODROW - Santa Rosa CA, US
Peter Benjamin Loer - Oakland CA, US
Christopher Jacob Loer - San Francisco CA, US
Jonathan Shih-Shuo Fan - Oakland CA, US
Gregory Mitchell Toto - Piedmont CA, US
Amrit Tsering Williams - Alamo CA, US
John Edward Firebaugh - San Francisco CA, US
Jeremy Scott Spiegel - San Francisco CA, US
Jesse Ward-Karet - San Francisco CA, US
Benjamin John Kus - Alameda CA, US

G06F 15/173
G06F 3/01
G06F 11/07
H04L 9/00

713150, 709238, 715736, 714 42, 714E11023

A policy-driven communication and management infrastructure may include components such as Agent, Server and Console, policy messages, and Relays to deliver security and system management to networked devices. An Agent resides on a Client, acting as a universal policy engine for delivering multiple management services. Relays, Clients additionally configured to each behave as though they were a root Server, Relaying information to and from other Clients, permit Clients to interact with the root Server through the Relay, enabling information exchange between Client and Server. Such information exchange allows Clients to gather information, such as new policy messages, from the Server, to pass status messages to the Server and to register their network address so that they can be readily located. Automatic Relay selection enables Clients and Relays to select their own parent Relays, thus allowing Clients and Relays to discover new routing paths through the network without administrator input.

2011010, May 5, 2011

Nov 1, 2010

12/917344

James B. Evans - Orinda CA, US
Jonathan S. Fan - Oakland CA, US
Dennis S. Goodrow - Santa Rosa CA, US
Benjamin J. Kus - Alameda CA, US
Peter B. Loer - Oakland CA, US
Jason E. Mealins - San Francisco CA, US
Gregory M. Toto - Piedmont CA, US
Amrit T. Williams - Alamo CA, US

International Business Machines Corporation - Armonk NY

G06F 9/455

718 1

A client hypervisor comprises a virtual agent that runs outside of a system OS and that allows device management independent of the OS and user. The virtual agent is tied to a device and not a specific instance of the OS. Such client hypervisors expose new functionality to ease managing systems. Some of these capabilities come from the persistence and privileges outside the OS. In some embodiments of the invention, this new management functionality is exposed to allow device management via new virtualization concepts, such as multiple VMs per system, VM replacement, snapshot/rollback, etc.

2011016, Jul 7, 2011

Mar 15, 2011

13/048700

James B. Evans - Orinda CA, US
Jonathan S. Fan - Oakland CA, US
Dennis S. Goodrow - Santa Rosa CA, US
Benjamin J. Kus - Alameda CA, US
Peter B. Loer - Oakland CA, US
Jason E. Mealins - San Francisco CA, US
Gregory M. Toto - Piedmont CA, US
Amrit T. Williams - Alamo CA, US

INTERNATIONAL BUSINESS MACHINES CORPORATION - Armonk NY

G06F 9/455
G06F 21/00

726 1, 718 1, 726 26

A client hypervisor comprises a virtual agent that runs outside of a system OS and that allows device management independent of the OS and user. The virtual agent is tied to a device and not a specific instance of the OS. Such client hypervisors expose new functionality to ease managing systems. Some of these capabilities come from the persistence and privileges outside the OS. In some embodiments of the invention, this new management functionality is exposed to allow device management via new virtualization concepts, such as multiple VMs per system, VM replacement, snapshot/rollback, etc.

2011016, Jul 7, 2011

Mar 15, 2011

13/048712

James B. Evans - Orinda CA, US
Jonathan S. Fan - Oakland CA, US
Dennis S. Goodrow - Santa Rosa CA, US
Benjamin J. Kus - Alameda CA, US
Peter B. Loer - Oakland CA, US
Jason E. Mealins - San Francisco CA, US
Gregory M. Toto - Piedmont CA, US
Amrit T. Williams - Alamo CA, US

INTERNATIONAL BUSINESS MACHINES CORPORATION - Armonk NY

G06F 9/455
G06F 21/00

726 1

A client hypervisor comprises a virtual agent that runs outside of a system OS and that allows device management independent of the OS and user. The virtual agent is tied to a device and not a specific instance of the OS. Such client hypervisors expose new functionality to ease managing systems. Some of these capabilities come from the persistence and privileges outside the OS. In some embodiments of the invention, this new management functionality is exposed to allow device management via new virtualization concepts, such as multiple VMs per system, VM replacement, snapshot/rollback, etc.

2020006, Feb 27, 2020

Aug 27, 2019

16/553144

- Redwood City CA, US
Varun Parmar - Los Altos CA, US
Benjamin John Kus - Alameda CA, US
Hieu Minh Nguyen - Redwood City CA, US
John Huffaker - San Francisco CA, US

Box, Inc. - Redwood City CA

G06F 16/25
G06F 16/28

Methods, systems and computer program products for managing content objects in a content management system. A metadata template is assigned to a content object of the content management system. Extensible metadata pertaining to the content object is allocated in accordance with the assigned metadata template. Various operations over the content object result in population of the allocated extensible metadata. When the content object is subjected to a workflow, the execution flow and/or the form of responses associated with execution of the workflow are informed by the populated extensible metadata. A single content object can take on an association with multiple sets of extensible metadata and each set of extensible metadata can take on association with a respective workflow.

2018021, Jul 26, 2018

Jan 24, 2017

15/413519

- Redwood City CA, US
Kechen Huang - San Francisco CA, US
Nakul Chander - San Francisco CA, US
Anil Chaurasia - San Francisco CA, US
Benjamin Kus - San Francisco CA, US

H04L 29/06

Techniques are described for separating subdomains as part of a secure login process. For example the subdomains can correspond to an enterprise user or personal user accounts, or both. The login process involves responding to a login request with an assertion, such as for example a redirect based assertion, that includes an encrypted data structure with account and user information necessary for identification of the corresponding subdomain. The encrypted data structure includes browser-, IP address, and user-specific information to thwart a cross-site request forgery (CSRF) security vulnerability, among other things.

2017009, Mar 30, 2017

Sep 27, 2016

15/277451

- Berkeley CA, US
Nakul Chander - Redwood City CA, US
Adelbert Chang - Cupertino CA, US
Jonathan Shih-Shuo Fan - Berkeley CA, US
Divya Jain - San Jose CA, US
Lev Kantorovskiy - Mountain View CA, US
Benjamin John Kus - Alameda CA, US
Justin Peng - Mountain View CA, US

H04L 29/06

Systems and corresponding computer-implemented methods for context-based rule evaluation in an electronic data storage system are described. A request to perform an operation with respect to a resource is received from a client device, with the request including various attributes associated with the client device. At least one set of rules applicable to the operation is identified. The rules can be formed from a combination of primitives arranged to dynamically evaluate attributes associated with the resource and attributes associated with the client device. Based on the evaluation of the rule set(s), an action is identified to be performed with respect to the resource.