John W Jerrim, 7080 Fletcher St, Kennebunk, ME 04043

7512980, Mar 31, 2009

May 26, 2005

10/908809

John A. Copeland - Atlanta GA, US
John Jerrim - Gainesville GA, US

Lancope, Inc. - Alpharetta GA

G06F 11/30

726 23, 726 22, 726 25, 726 26, 713151, 709203, 709224, 709227, 705 51

A flow-based intrusion detection system for detecting intrusions in computer communication networks. Data packets representing communications between hosts in a computer-to-computer communication network are processed and assigned to various client/server flows. Statistics are collected for each flow. Then, the flow statistics are analyzed to determine if the flow appears to be legitimate traffic or possible suspicious activity. A concern index value is assigned to each flow that appears suspicious. By assigning a value to each flow that appears suspicious and adding that value to the total concern index of the responsible host, it is possible to identify hosts that are engaged in intrusion activity. When the concern index value of a host exceeds a preset alarm value, an alert is issued and appropriate action can be taken.

7644151, Jan 5, 2010

Mar 25, 2002

10/106298

John Jerrim - Duluth GA, US
John A. Copeland - Atlanta GA, US

Lancope, Inc. - Alpharetta GA

G06F 15/173

709224, 709223, 709225, 709227, 709212, 713154, 725 25, 726 22, 726 23, 726 25

A zone locking system detects unauthorized network usage internal to a firewall. The system determines unauthorized network usage by classifying internal hosts inside a firewall into zones. Certain specified zones are unauthorized to initiate client communications with other selected zones. However, zone override services can be designated for each associated internal zone, and thus, authorizing selected network services. An alarm or other appropriate action is taken upon the detection of unauthorized network usage.

7895326, Feb 22, 2011

Dec 1, 2009

12/628892

John Jerrim - Gainesville GA, US

Lancope, Inc. - Atlanta GA

G06F 15/173

709224, 709225, 726 22, 726 26

A zone locking system detects unauthorized network usage internal to a firewall. The system determines unauthorized network usage by classifying internal hosts inside a firewall into zones. Certain specified zones are unauthorized to initiate client communications with other selected zones. However, zone override services can be designated for each associated internal zone, and thus, authorizing selected network services. An alarm or other appropriate action is taken upon the detection of unauthorized network usage.

2014005, Feb 27, 2014

Aug 26, 2013

14/010016

JOHN JERRIM - GAINESVILLE GA, US

DAMBALLA, INC. - Atlanta GA

H04L 29/08

709224

A system and method comprising: receiving network flow data; identifying a peer to peer network flow within the network flow data comparing the peer to peer network flow to a known peer to peer application flow; labeling the peer to peer network flow as the known peer to peer application flow when the peer to peer network flow matches the known peer to peer application flow; and creating a data set to be associated with the labeled peer to flow.

4327416, Apr 27, 1982

Apr 16, 1980

6/140954

John W. Jerrim - Lilburn GA

Sangamo Weston, Inc. - Norcross GA

G01R 3306

364481

In a solid state current, power or energy meter having a Hall element magnetically coupled to line current, a system for compensating the Hall voltage for its dependence on temperature comprises a read only memory (ROM) containing experimentally obtained temperature compensation data. The temperature of the Hall element is measured by a thermistor to develop a temperature dependent voltage. In one embodiment, the Hall element voltage and temperature dependent voltage are digitalized and supplied to address the ROM to generate a temperature compensated Hall voltage. In a second embodiment, the ROM is addressed by only the temperature dependent voltage to generate a correction voltage that is added to the Hall element voltage for temperature compensation.

4567588, Jan 28, 1986

Mar 23, 1984

6/592667

John W. Jerrim - Lilburn GA

Sangamo Weston, Inc. - Norcross GA

H04J 1300

370 18

A plurality of transmitters synchronized to a common clock each transmit a data signal spread by a common bipolar pseudo-random code having a different assigned code sequence shift. A receiver, synchronized to the clock, discriminates the signals transmitted by a predetermined transmitter from signals transmitted by the others by generating a first pseudo-random code that is a replica of the common bipolar pseudo-random code and has a code sequence shift corresponding to that of the predetermined transmitter, and a second bipolar pseudo-random code that is a replica of the common bipolar pseudo-random code and has an unassigned code sequence shift. The difference between the first and second bipolar pseudo-random code sequences, which is a trinary code sequence, is cross-correlated with the incoming signals. The cross-correlation despreads only the signal having the predetermined code sequence shift. Each receiver includes a number of correlation detectors offset from each other by a fraction of a code chip, together with decision circuitry to identify cross-correlation peaks.

4335447, Jun 15, 1982

Feb 5, 1980

6/118830

John W. Jerrim - Lilburn GA

Sangamo Weston, Inc. - Atlanta GA

G11C 1100
G11C 700

364900

A demand recorder includes a microprocessor for receiving data pulses representative of measured events and formats the incoming data into demand intervals. After a predetermined number of demand intervals, called a collection period, the microprocessor transfers the data for more permanent storage to a solid state memory which may be removed for remote processing. The system has battery carryover during a power outage, but the microprocessor prevents data transfers to the solid state memory. At the end of a collection period in which a power outage occurred, the microprocessor transfers the current data to a secondary portion of random access memory. For subsequent demand intervals until power is restored and including any thermal recovery periods, the processor formats event data by assigning index numbers for demand intervals in order of occurrence and stores data only for those demand intervals in which power consumption was actually measured. After the system has returned to normal operation, the data temporarily stored in secondary RAM is transferred to the solid state memory and the data in primary RAM which is stored in compacted format is re-constructed into normal storage format in RAM with all intervals during which no event data was detected being zero-filled. As data is taken from primary RAM, converted into the original format and transferred to secondary RAM for storage in the solid state memory, the remaining data in primary RAM is advanced in memory, similar to the operation of a stack memory, so that as much space as possible is made available for data storage in the event of a subsequent power outage prior to the time all of the data in primary RAM is converted and stored in the solid state memory.

4653076, Mar 24, 1987

Mar 23, 1984

6/592668

John W. Jerrim - Lilburn GA
Lawrence B. Horwitz - Alpharetta GA

Sangamo Weston, Inc. - Norcross GA

H04L 702

375115

A direct sequence spread spectrum transmitter and receiver can be synchronized when the timing reference frequency is less than or equal to the data sampling rate and the ratio of the data sampling rate to the timing reference is an integer by combining two, four or eight consecutive data samples to yield one data sample point. By combining these data samples, an optimum data sample point may be determined while receiving an alternating sign preamble by comparing the magnitudes of all possible summations and selecting the sample which gives a maximum output. If each sample is assigned to its own synchronization point, then synchronization may be accomplished by locking to the time that gives the maximum output.