Lisa L Guo, 55Los Altos, CA

8612606, Dec 17, 2013

Oct 12, 2010

12/902682

Manjunath Jagannatharao - San Jose CA, US
Sachin Bansal - Fremont CA, US
Lisa Guo - Los Altos CA, US
Nagendra K S - Bangalore, IN

Juniper Networks, Inc. - Sunnyvale CA

G06F 15/16
G06F 15/173

709227, 709225

A method may include detecting a presence of a first server device; communicating, with the first server device, to obtain information associated with the first server device; sending, to a second server device, a request for authentication services, where the request includes the information associated with the first server device; receiving, from the second server device, a notification that the first server device has been authenticated, where the notification includes a session threshold; and establishing, based on the notification, a session with the first server device by associating the first server device with a virtual local area network (VLAN), where the associating permits network traffic to be received from or sent to the first server device via the VLAN, and where the network node uses the session threshold received from the second server device, instead of a threshold associated with the VLAN, to determine a duration permitted for the session.

2014004, Feb 6, 2014

Oct 8, 2013

14/048420

- Tokyo, JP
Lisa Guo - Saratoga CA, US

Access Co., Ltd. - Tokyo

H04L 29/06

726 3

A method and system for preventing replay attacks on secure data transactions. A replay attack occurs when an unauthorized user intercepts a secure data transaction between a device and a central system and uses the intercepted data to gain access to the central system. One method for preventing such replay attacks is the use of a unique session identification number that is generated for each secure data transaction request. A replay attack is defeated using intercepted data since the unique session identification number is valid only for a completed session and may not be reused. When a device is connected to a server using either wireless or land-line connection, the device requests a session identification number from the server. The server generates and signals to the device a unique session identification number which the device then transmits back to the server along with a request for a secure data transaction. Upon verification of the correct unique session identification number, the server implements the requested data transaction. Termination of the requested transaction by the device signals the termination of the current secure data transaction. A new unique session identification number must be requested and issued in like fashion for any additional secure data transactions. The method and system offer the advantage of use with multiple available servers, in contrast to present methods which require that a device to communicate with a given server. Further, the present method offers reduced operation time since there is a single coupling/uncoupling for each data transaction.

8555062, Oct 8, 2013

Mar 26, 2001

09/818082

Najeeb Abdulrahiman - Fremont CA, US
Lisa Guo - Saratoga CA, US

ACCESS Co., Ltd. - Tokyo

H04L 9/32

713168

A system and method for preventing replay attacks on secure data transactions are provided. The method aspect of the invention comprises establishing a communicating coupling with an authorized device, receiving a signal from the device requesting a session identification number, generating the session identification number and communicating the session identification number to the device, receiving a signal from the device that comprises a request for secure data transmission and includes the session identification number and coupling the device communicatively to implement the secure data transaction provided the request is authorized based on the session identification number.

2021001, Jan 14, 2021

Aug 2, 2019

16/530083

- Menlo Park CA, US
Raymond Ng - Palo Alto CA, US
Jianlong Zhong - Menlo Park CA, US
Lisa Guo - Los Altos CA, US

G06F 9/50

The present disclosure relates to systems, non-transitory computer-readable media, and methods of a process management system that improves memory management and resource utilization on host devices that utilize a pre-fork worker process model (e.g., uWSGI). For example, the process management system can utilize the memory consumption of the host device to determine how many worker processes to terminate as well as which worker processes to terminate. In addition, the process management system can utilize adaptive respawning to determine when to respawn each of the terminated worker processes.

2020008, Mar 12, 2020

Sep 5, 2019

16/562292

- San Francisco CA, US
Daniel Bilen - San Francisco CA, US
Sergey Gitlin - San Francisco CA, US
James Lee - San Mateo CA, US
Lisa Guo - San Francisco CA, US
Qing Feng - San Francisco CA, US
Songyan Hou - San Francisco CA, US
Ximing Chen - San Francisco CA, US
Atul Kakkur - San Francisco CA, US

G06F 16/9537
H04L 29/08
G06F 16/9538

A network system for managing a network-based service (e.g., an on-demand transport service) is configured to pre-compute, based on historical data, a plurality of service metrics that are maintained in a searchable database. In response to user interaction with a user application to view available service options, the user application can cause session data indicating start and service locations to be transmitted to the network system. In response, the network system can translate the start and service locations to a first and second search keys, respectively. The search keys can be used to query the database for the relevant service metric for the session. The network system can transmit the relevant service metric to the user device to enable the user device to display information relating to the session (e.g., a price for requesting the network-based service) that is based at least in part on the relevant service metric.

2017018, Jun 29, 2017

Mar 10, 2017

15/455904

- Sunnyvale CA, US
Sachin BANSAL - Fremont CA, US
Lisa GUO - Los Altos CA, US
Nagendra K S - Bangalore, IN

H04L 29/06

A method may include detecting a presence of a first server device; communicating, with the first server device, to obtain information associated with the first server device; sending, to a second server device, a request for authentication services, where the request includes the information associated with the first server device; receiving, from the second server device, a notification that the first server device has been authenticated, where the notification includes a session threshold; and establishing, based on the notification, a session with the first server device by associating the first server device with a virtual local area network (VLAN), where the associating permits network traffic to be received from or sent to the first server device via the VLAN, and where the network node uses the session threshold received from the second server device, instead of a threshold associated with the VLAN, to determine a duration permitted for the session.

2016021, Jul 28, 2016

Apr 6, 2016

15/092354

- Menlo Park CA, US
Lisa Guo - Los Altos CA, US

H04L 12/723
H04L 29/12
H04L 12/26

A method of operating a content distribution system with a server controlled routing mechanism is disclosed. The method includes: collecting prefix entries from an autonomous system; receiving a content request to send a particular digital content to a prefix; generating, at a host server, an opaque label based on the autonomous system for an Internet protocol (IP) packet of the digital content when the prefix is listed in the prefix entries collected from the autonomous systems; and forwarding the IP packet out of an egress interface of a network equipment, the egress interface associated with the opaque label.

2014031, Oct 16, 2014

Apr 16, 2013

13/863602

- Melno Park CA, US
Lisa Guo - Los Altos CA, US

Facebook - Menlo Park CA

H04L 12/723

709244

A method of operating a content distribution system with a server controlled routing mechanism is disclosed. The method includes: collecting prefix entries from an autonomous system; receiving a content request to send a particular digital content to a prefix; generating, at a host server, an opaque label based on the autonomous system for an Internet protocol (IP) packet of the digital content when the prefix is listed in the prefix entries collected from the autonomous systems; and forwarding the IP packet out of an egress interface of a network equipment, the egress interface associated with the opaque label.