Steven W Dawson, 6519322 7Th Ave W, Lynnwood, WA 98036

6922696, Jul 26, 2005

Nov 9, 2000

09/711152

Patrick D. Lincoln - Woodside CA, US
Steven M. Dawson - Menlo Park CA, US
Pierangela Samarati - Brembio, IT
Sabrina De Capitani di Vimercati - Cologno Monzese, IT

SRI International - Menlo Park CA

G06F017/00

707101, 707 9, 707102, 712200, 713200

Despite advances in recent years in the area of mandatory access control in database systems, today's information repositories remain vulnerable to inference and data association attacks that can result in serious information leakage. Without support for coping against these attacks, sensitive information can be put at risk because of release of other (less sensitive) related information. The ability to protect information disclosure against such improper leakage would be of great benefit to governmental, public, and private institutions, which are, today more than ever, required to make portions of their data available for external release. In accordance with the invention, a solution to the problem of classifying information by enforcing explicit data classification as well as inference and association constraints is provided. We formulate the problem of determining a classification that ensures satisfaction of the constraints, while at the same time guaranteeing that information will not be unnecessarily overclassified.

7095444, Aug 22, 2006

Nov 6, 2000

09/707044

Patrick D. Lincoln - Woodside CA, US
David W. J. Stringer-Calvert - Sunnyvale CA, US
Steven M. Dawson - Menlo Park CA, US

SRI International - Menlo Park CA

H04N 7/12
H04N 11/02

3483901, 37524016, 37524014

A method and apparatus for deconstructing video into a hierarchical structure, distributing the deconstructed video and reconstructing the deconstructed video to form a video signal having characteristics that match the capabilities of a user device. The video stream may be deconstructed using a single dimension deconstruction or a multidimensional deconstruction.

7143444, Nov 28, 2006

Nov 28, 2001

09/996154

Phillip Andrew Porras - Cupertino CA, US
Magnus Almgren - Mountain View CA, US
Ulf E. Lindqvist - Mountain View CA, US
Steven Mark Dawson - Menlo Park CA, US

SRI International - Menlo Park CA

G06F 9/00

726 30, 726 25, 726 24, 726 11, 726 4

A method includes passing a request for data received by a first server process executing in a first server to a detection process that includes packing a subset of the data into an analysis format and passing the subset to an analysis process.

7177867, Feb 13, 2007

Sep 12, 2002

10/242285

David W. J. Stringer-Calvert - Santa Clara CA, US
Patrick D. Lincoln - Woodside CA, US
Steven M. Dawson - Menlo Park CA, US

SRI International - Menlo Park CA

G06F 17/30

707 9, 707 3, 707100

A scalable method and architecture for efficiently locating desired resources within a network containing a plurality of server nodes, each of which hosts or otherwise provides access to a subset of a global resource set. In one aspect of the invention, each of the server nodes are assigned membership in at least two sets, an “announce” set and a “request” set.

7403980, Jul 22, 2008

Apr 26, 2001

09/844693

David W. J. Stringer-Calvert - Sunnyvale CA, US
Steven Mark Dawson - Menlo Park CA, US
Patrick D. Lincoln - Woodside CA, US

SRI International - Menlo Park CA

G06F 15/173

709220, 709221, 709222, 709223, 709224, 709239, 709249, 709252

A groupware management system for collaborative groups is disclosed that is scalable to support large, dynamic, multiple, and other virtual VPNs. The system may introduce a graph (or hierarchical) structure to the VPN, providing multiple master nodes controlling membership in subsets of the collaborative group. Use of multiple master nodes in a graph-structured (or hierarchical) network topology often relaxes the need for a single, centralized, globally consistent view of VPN group membership, and enables distribution of the management burden among multiple master nodes. Membership in the VPN may be changed dynamically by the second master node for the member nodes of the second subset, without requiring the first master node to dynamically update its group membership records to reflect the change and in many cases without even having to notify the first master node (and vice versa), for example. In further embodiments, the use of multiple master nodes may increase the reliability and efficiency of VPNs, such as by enabling load balancing of master node tasks. Fail-over mechanisms may also be used to transparently re-route management tasks to an alternate master node especially in the case of failure of the current master node serving a given member node.

7724717, May 25, 2010

Jul 24, 2006

11/492399

Phillip Andrew Porras - Cupertino CA, US
Michael G. Corr - San Francisco CA, US
Steven Mark Dawson - Belmont CA, US
David Watt - Newark CA, US
David Manseau - Boulder Creek CA, US
John Peter Marcotullio - Morgan Hill CA, US

SRI International - Menlo Park CA

H04W 4/00

370338, 370332, 455410, 455411, 455423, 455425, 726 3, 726 4

In one embodiment, the present invention is a method and apparatus for wireless network security. In one embodiment, a method for securing a wireless computing network includes receiving a communication from an unidentified transmitter, identifying the transmitter in accordance with a fingerprint generated from one or more radio frequency signal characteristics extracted from the communication, and taking action in response to an identity of the transmitter.

8249028, Aug 21, 2012

Jul 24, 2006

11/492398

Phillip Andrew Porras - Cupertino CA, US
Michael G. Corr - San Francisco CA, US
Steven Mark Dawson - Belmont CA, US
David Watt - Newark CA, US
David Manseau - Boulder Creek CA, US
John Peter Marcotullio - Morgan Hill CA, US

SRI International - Menlo Park CA

H04B 7/216

370335, 370328, 455411, 455425, 455 6711, 455423

In one embodiment, the present invention is a method and apparatus for identifying wireless transmitters. In one embodiment, a method for identifying a transmitter in a wireless computing network includes extracting one or more radio frequency signal characteristics from a communication from the transmitter and generating a fingerprint of the transmitter in accordance at least one of the extracted radio frequency signal characteristics.

2002005, May 9, 2002

Mar 19, 2001

09/812223

Patrick Lincoln - Woodside CA, US
Steven Dawson - Menlo Park CA, US

SRI International

G06F015/16

709/247000, 709/219000

Client-transparent methods and apparatus are taught for compressing and transmitting requested network server data and uncompressing this data on client browsers. A network request for a file from a typical client specifies a list of acceptable encoding schemes. In response, the file is compressed using a substantially lossless encoding format or codes that is one of the acceptable encoding schemes listed. In some embodiments, compression is performed dynamically in response to requests. A particular content delivery server may be chosen to handle each network request for a file at least partly based upon one or more criteria indicating a relative quality of connectivity between the selected server and the requesting client. Compression is performed as a further element of a content delivery business service, and may be performed either dynamically or statically and in either a centralized or distributed manner. A proxy-server may be used to intercept and automatically modify client requests, in order to facilitate compression, transmittal, and decompression of network data to requesting clients in a client-transparent manner.