Brian Michael Witten, 59308 Oxford Pl NE, Atlanta, GA 30307

2019025, Aug 15, 2019

Jun 28, 2018

16/021950

- Mountain View CA, US
Daniel Marino - Los Angeles CA, US
Susanta K. Nanda - San Jose CA, US
Saurabh Shintre - Sunnyvale CA, US
Brian T. Witten - Hermosa Beach CA, US
Ronald A. Frederick - Mountain View CA, US
Qing Li - Cupertino CA, US

H04L 29/06
G06F 21/62

Decrypting network traffic on a middlebox device using a trusted execution environment (TEE). In one embodiment, a method may include loading a kernel application inside the TEE, loading a logic application outside the TEE, intercepting, by the logic application, encrypted network traffic, forwarding, from the logic application to the kernel application, the encrypted network traffic, decrypting, at the kernel application, the encrypted network traffic, inspecting, at the kernel application, the decrypted network traffic according to a sensitivity policy to determine whether the decrypted network traffic includes sensitive data, forwarding, from the kernel application to the logic application, filtered decrypted network traffic that excludes the sensitive data, processing, at the logic application, the filtered decrypted network traffic, forwarding, from the logic application to the kernel application, the filtered decrypted network traffic after the processing by the logic application, and forwarding, from the kernel application, the encrypted network traffic.

2015023, Aug 20, 2015

Feb 14, 2014

14/181410

- Mountain View CA, US
Brian Witten - Hermosa Beach CA, US
Bruce McCorkendale - Manhattan Beach CA, US

Symantec Corporation - Mountain View CA

G06F 21/62
H04L 29/06

A computer-implemented method for authenticating an application is described. In one embodiment, a software package is received and the software package may be authorized based at least in part on an evaluation of the software package. Upon authorizing the software package, a signature file is embedded in a directory of the software package. A request to use a privileged service provided by a service provider is received from a client. In some embodiments, the request includes a custom class loader, the custom class loader being configured to construct a proxy object as an interface to the privileged service.