Mohan Padmapriya Parthasarathy, 5621618 Rosario Ave, Cupertino, CA 95014

2005022, Oct 13, 2005

Mar 11, 2005

11/077491

Vijay Devarapalli - Santa Clara CA, US
Basavaraj Patil - Coppell TX, US
Mohan Parthasarathy - Sunnyvale CA, US
Hannu Flinck - Helsinki, FI
Meghana Sahasrabudhe - San Jose CA, US

H04L001/00

709228000, 709238000, 370219000

A method of communication that includes sending a first message from user equipment to a server, requesting a home agent and/or a home address. The method also includes authenticating the user equipment and providing the home agent and/or home address only when the user equipment is authenticated. Also, a communication system, a server, and user equipment that are configured to implement the method.

2012031, Dec 13, 2012

Jun 7, 2011

13/155271

Mohan Parthasarathy - Cupertino CA, US
Joshua V. Graessley - San Jose CA, US

APPLE INC. - Cupertino CA

G06F 17/30

707805, 707E1703

In the described embodiments, while executing a DNS resolver, a processing subsystem in an electronic device with a set of network interfaces receives a scoped request from an application to determine an IP address for a domain name. Generally, a DNS query generated from a scoped request is to be transmitted only on network interfaces specified in the scoped request, whereas a DNS query generated from a non-scoped request can be transmitted on any of the network interfaces. The processing subsystem then generates a DNS query from the scoped request and transmits the DNS query on the specified network interfaces. Upon receiving a response to the DNS query, the processing subsystem stores a record of the response in a scoped portion of a DNS resolution cache that is used only for storing responses to scoped requests. The DNS resolution cache also comprises a non-scoped portion that is used only for storing responses to non-scoped requests.

2021035, Nov 18, 2021

Jul 26, 2021

17/385809

- Palo Alto CA, US
Anirban Sengupta - Saratoga CA, US
Mohan Parthasarathy - Cupertino CA, US
Allwyn Sequeira - Saratoga CA, US
Serge Maskalik - Los Gatos CA, US
Rick Lund - Livermore CA, US

H04L 12/803
H04L 12/707
H04L 12/721
H04L 29/08
H04L 12/911

Some embodiments provide a novel method for load balancing data messages that are sent by a source compute node (SCN) to one or more different groups of destination compute nodes (DCNs). In some embodiments, the method deploys a load balancer in the source compute node's egress datapath. This load balancer receives each data message sent from the source compute node, and determines whether the data message is addressed to one of the DCN groups for which the load balancer spreads the data traffic to balance the load across (e.g., data traffic directed to) the DCNs in the group. When the received data message is not addressed to one of the load balanced DCN groups, the load balancer forwards the received data message to its addressed destination. On the other hand, when the received data message is addressed to one of load balancer's DCN groups, the load balancer identifies a DCN in the addressed DCN group that should receive the data message, and directs the data message to the identified DCN. To direct the data message to the identified DCN, the load balancer in some embodiments changes the destination address (e.g., the destination IP address, destination port, destination MAC address, etc.) in the data message from the address of the identified DCN group to the address (e.g., the destination IP address) of the identified DCN.

2021031, Oct 7, 2021

Jun 21, 2021

17/353775

- Palo Alto CA, US
Jayant Jain - Cupertino CA, US
Mohan Parthasarathy - Cupertino CA, US
Anirban Sengupta - Saratoga CA, US

H04L 12/24
H04L 29/08

A method is provided that uses a consistent hashing technique to dispatch incoming packets in a stable system prior to adding of a node. The method uses a hash table and assigns hash buckets in the table to each network node. A set of fields in each incoming packet is hashed and is used to identify the corresponding hash bucket. The packets are then dispatched to the network nodes based on the nodes' hash buckets. During an observation period, the method identifies the ongoing sessions by creating a bit vector table that is used to identify the old and new sessions during a re-dispatching period. The method uses the consistent hashing method and the probabilistic method dispatch the incoming packets such that each packet that belongs to an old session is dispatched to the same old node that has been processing the other packets of the session.

2021027, Sep 2, 2021

May 15, 2021

17/321423

- Palo Alto CA, US
Anirban Sengupta - Saratoga CA, US
Mohan Parthasarathy - Cupertino CA, US
Xinhua Hong - Milpitas CA, US

H04L 29/06
H04L 29/08
H04L 12/26

A novel method for stateful packet classification that uses hardware resources for performing stateless lookups and software resources for performing stateful connection flow handshaking is provided. To classify an incoming packet from a network, some embodiments perform stateless look up operations for the incoming packet in hardware and forward the result of the stateless look up to the software. The software in turn uses the result of the stateless look up to perform the stateful connection flow handshaking and to determine the result of the stateful packet classification.

2021005, Feb 18, 2021

Aug 14, 2019

16/540969

- Houston TX, US
MOHAN PARTHASARATHY - Santa Clara CA, US
BRIJESH NAMBIAR - Santa Clara CA, US
MIN-YI SHEN - Santa Clara CA, US
VISWESH ANANTHAKRISHNAN - Santa Clara CA, US

H04L 29/06

Systems and methods are provided for managing false positives in a network anomaly detection system. The methods may include receiving a plurality of anomaly reports; extracting fields, and values for the fields, from each of the anomaly reports; grouping the anomaly reports into a plurality of groups according to association rule learning, wherein each group is defined by a respective rule; for each group, creating a cluster based on common values for the fields; and marking each cluster as a possible false positive anomaly cluster.

2020033, Oct 22, 2020

Jun 30, 2020

16/916300

- Palo Alto CA, US
Jayant Jain - Cupertino CA, US
Mohan Parthasarathy - Cupertino CA, US
Anirban Sengupta - Saratoga CA, US

H04L 12/24
H04L 29/08

A method is provided that uses a consistent hashing technique to dispatch incoming packets in a stable system prior to adding of a node. The method uses a hash table and assigns hash buckets in the table to each network node. A set of fields in each incoming packet is hashed and is used to identify the corresponding hash bucket. The packets are then dispatched to the network nodes based on the nodes' hash buckets. During an observation period, the method identifies the ongoing sessions by creating a bit vector table that is used to identify the old and new sessions during a re-dispatching period. The method uses the consistent hashing method and the probabilistic method dispatch the incoming packets such that each packet that belongs to an old session is dispatched to the same old node that has been processing the other packets of the session.

2020027, Sep 3, 2020

May 15, 2020

16/875965

- Houston TX, US
Mohan Parthasarathy - Cupertino CA, US
Prasad Palkar - Sunnyvale CA, US

G06F 21/62
G06F 21/60

A computerized method involves obfuscating one or more segments of data that is part of a flow prior to analysis of the flow for malware. Each of the one or more obfuscated data corresponds to one or more anonymized data. Thereafter, an identifier is generated for each of the one or more anonymized data, and each identifier is substituted for its corresponding anonymized data. The anonymized data and its corresponding identifiers are separately maintained from the stored flow.