Thomas J Cross, 491750 Tolleson Ct, Dunwoody, GA 30338

2011016, Jul 7, 2011

Jan 6, 2010

12/652973

Thomas J. Cross - Atlanta GA, US
David B. Dewey - Atlanta GA, US
Takehiro Takahashi - Atlanta GA, US

INTERNATIONAL BUSINESS MACHINES CORPORATION - Armonk NY

H04L 9/00
H04W 4/00
H04K 1/00

713168, 370328, 380270

A method and apparatus for establishing a wireless connection. A digital certificate having a second name is obtained by a processor unit in response to receiving a selection of a network using a first name broadcast by a wireless access point. A determination is made by the processor unit as to whether the digital certificate is valid. A determination is made by the processor unit as to whether the second name in the digital certificate matches the first name broadcast by the wireless access point. The processor unit establishes the wireless connection to the wireless access point in response to the digital certificate being valid and the second name in the digital certificate matching the first name broadcast by the wireless access point.

2021000, Jan 7, 2021

Sep 23, 2020

17/030173

- Sunnyvale CA, US
Kenneth Ammon - Leesburg VA, US
Thomas Cross - Atlanta GA, US
Michael C. Starr - Reston VA, US

Fortinet, Inc. - Sunnyvale CA

G06F 12/10
H04L 9/32
H04L 9/08

Systems and methods for a unified, cloud-managed platform for controlling enterprise network security are provided. According to one embodiment, a network of an enterprise is protected by a cloud-managed platform. An underlying architecture of the cloud-managed platform is abstracted by providing a portal through which modifications to security policies are expressed as business requirements of the enterprise. The security policies are automatically enforced regardless of location or endpoint. A policy digest, including information regarding the modifications and formatted according to a predefined format, generated and locally queued by the portal is retrieved. Security enforcement systems associated with the cloud-managed platform are configured to control communications to and from the network according to the security policies by generating API calls to the security enforcement systems and agents running on endpoints associated with the network are configured to control endpoint-to-endpoint connections according to the security policies based on the policy digest.

2019034, Nov 14, 2019

Jun 29, 2018

16/023388

- Herndon VA, US
Kenneth AMMON - Leesburg VA, US
Thomas CROSS - Atlanta GA, US

OPAQ Networks, Inc. - Herndon VA

H04L 29/06

A method for protecting an enterprise network includes, at a system that is remote from the enterprise network: controlling communications to and from the enterprise network according to a set of security policies; controlling endpoint to endpoint connections within the enterprise network according to the set of security policies; receiving a request for modifications to the set of policies; automatically generating a policy digest formatted according to a predefined format, the policy digest comprising the modifications, and storing the policy digest in the memory; retrieving the policy digest from the memory; generating one or more calls to one or more system components that control the communications to and from the enterprise network and the endpoint to endpoint connections based on the policy digest; and modifying control of the communications and the endpoint to endpoint connections based on the one or more calls.

2019006, Feb 28, 2019

Oct 30, 2018

16/174572

- New York NY, US
Thomas James CROSS - Atlanta GA, US
Scott Michael DAVIS - Wantagh NY, US
Qiu ZHANG - Scarsdale NY, US

H04L 29/06

A computer network security system includes a central controller in communication with software-based endpoint agents operating on individual host computers. The endpoint agents monitor new connection requests to and from their respective hosts, comparing the connections to cached rules obtained from the controller, and holding new connections while escalating requests for applicable rules and/or directives to the controller in real-time when no applicable rules are available in their caches. The endpoint agents can be configured to present a pop-up dialog requesting enhanced authentication credentials from a user on a host in response to a connection request from a restricted network-based application. The pop-up dialog enables enhanced or two-factor authentication functionality to be overlaid on any networked application regardless of the application's inherent authentication capability.

2016032, Nov 3, 2016

May 2, 2016

15/144702

- NEW YORK NY, US
Thomas James Cross - Atlanta GA, US
Scott Michael Davis - Wantagh NY, US
Qiu Zhang - Scarsdale NY, US

H04L 29/06

A computer network security system includes a central controller in communication with software-based endpoint agents operating on individual host computers. The endpoint agents monitor new connection requests to and from their respective hosts, comparing the connections to cached rules obtained from the controller, and holding new connections while escalating requests for applicable rules and/or directives to the controller in real-time when no applicable rules are available in their caches. The endpoint agents can be configured to present a pop-up dialog requesting enhanced authentication credentials from a user on a host in response to a connection request from a restricted network-based application. The pop-up dialog enables enhanced or two-factor authentication functionality to be overlaid on any networked application regardless of the application's inherent authentication capability.