Patents by Inventor Pekka Niemi

Pekka Niemi has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).

  • Patent number: 11695736
    Abstract: A system for processing data is disclosed that includes a first processor configured to operate one or more algorithms to identify a user identity as a function of user metadata and to provide access to a predetermined network resource using a cloud-based explicit proxy as a function of the user identity and one or more service requests, the first processor configured to operate one or more algorithms to detect a change in the one or more service requests and wherein access to the predetermined network resources using the cloud-based explicit proxy is modified as a function of the detected change in the one or more service requests.
    Type: Grant
    Filed: March 12, 2021
    Date of Patent: July 4, 2023
    Assignee: FORCEPOINT LLC
    Inventors: Olli-Pekka Niemi, Ville Mattila
  • Patent number: 11418542
    Abstract: A system for providing network data processing, comprising a processor operating one of more algorithms that are configured to interface with one or more clients to receive a client hello data message. A transport layer security extension extraction system operating on the processor and configured to extract an extension from the client hello data message. A transport layer security extension identification system operating on the processor and configured to process the extension from the client hello data message and to identify a data networking session using the extension.
    Type: Grant
    Filed: January 23, 2020
    Date of Patent: August 16, 2022
    Assignee: FORCEPOINT LLC
    Inventors: Jenny Anniina Heino, Tuomo Syvanne, Welf Christian Jalio, Olli-Pekka Niemi
  • Publication number: 20220103527
    Abstract: A system for processing data is disclosed that includes a first processor configured to operate one or more algorithms to identify a user identity as a function of user metadata and to provide access to a predetermined network resource using a cloud-based explicit proxy as a function of the user identity and one or more service requests, the first processor configured to operate one or more algorithms to detect a change in the one or more service requests and wherein access to the predetermined network resources using the cloud-based explicit proxy is modified as a function of the detected change in the one or more service requests.
    Type: Application
    Filed: March 12, 2021
    Publication date: March 31, 2022
    Applicant: Forcepoint LLC
    Inventors: Olli-Pekka Niemi, Ville Mattila
  • Publication number: 20220103526
    Abstract: A system for processing data that includes a first processor configured to operate one or more algorithms to provide a proxy for each of a plurality of external network communications segments and internal network communications segments associated with a specific use, the first processor configured to operate one or more algorithms to provide a firewall agent that performs firewall processing for each of the plurality of external network communications segments and the internal network communications segments and wherein the explicit proxy is installed using a proxy auto configuration file that is associated with the firewall agent.
    Type: Application
    Filed: March 3, 2021
    Publication date: March 31, 2022
    Applicant: Forcepoint LLC
    Inventors: Olli-Pekka Niemi, Ville K. Mattila
  • Publication number: 20210234895
    Abstract: A system for providing network data processing, comprising a processor operating one of more algorithms that are configured to interface with one or more clients to receive a client hello data message. A transport layer security extension extraction system operating on the processor and configured to extract an extension from the client hello data message. A transport layer security extension identification system operating on the processor and configured to process the extension from the client hello data message and to identify a data networking session using the extension.
    Type: Application
    Filed: January 23, 2020
    Publication date: July 29, 2021
    Applicant: Forcepoint LLC
    Inventors: Jenny Anniina Heino, Tuomo Syvanne, Welf Christian Jalio, Olli-Pekka Niemi
  • Patent number: 11070533
    Abstract: A method, system, and computer-usable medium are disclosed for: (i) determining if a server response from a server received at a security device and intended for a client includes original encryption key information for encrypting identifying information associated with the server; (ii) if the server response includes original encryption key information for encrypting identifying information associated with the server, determining if a network policy provides for decryption of identifying information associated with the server; and (iii) if the network policy provides for decryption of identifying information associated with the server, replacing the original encryption key information with modified encryption key information associated with the security device and communicating the server response to the client with the modified encryption key information associated with the security device.
    Type: Grant
    Filed: October 10, 2019
    Date of Patent: July 20, 2021
    Assignee: Forcepoint LLC
    Inventors: Olli-Pekka Niemi, Andrew Mortensen, Valtteri Rahkonen
  • Publication number: 20210112040
    Abstract: A method, system, and computer-usable medium are disclosed for: (i) determining if a server response from a server received at a security device and intended for a client includes original encryption key information for encrypting identifying information associated with the server; (ii) if the server response includes original encryption key information for encrypting identifying information associated with the server, determining if a network policy provides for decryption of identifying information associated with the server; and (iii) if the network policy provides for decryption of identifying information associated with the server, replacing the original encryption key information with modified encryption key information associated with the security device and communicating the server response to the client with the modified encryption key information associated with the security device.
    Type: Application
    Filed: October 10, 2019
    Publication date: April 15, 2021
    Applicant: Forcepoint LLC
    Inventors: Olli-Pekka NIEMI, Andrew MORTENSEN, Valtteri RAHKONEN
  • Publication number: 20210051132
    Abstract: A system for controlling a network, comprising a plurality of host computers configured to communicate over the network. A plurality of server computers configured to provide services to the plurality of host computers. An address allocator operating on one or more processors and configured to implement one or more algorithms that cause a range of addresses to be assigned to each of the server computers, wherein each of the host computers receives one of the addresses for use as part of a service request from the host computer to the server computer.
    Type: Application
    Filed: August 16, 2019
    Publication date: February 18, 2021
    Applicant: Forcepoint LLC
    Inventors: Lawrence B. Huston, III, David James Usher, Olli-Pekka Niemi
  • Patent number: 10834131
    Abstract: A method, system, and computer-usable medium are disclosed for (a) responsive to communication of a client handshake from a client to a server for establishing encrypted communications between the client and the server: (i) holding open, by an intermediate verification system interfaced between the server and the client, the client handshake; and (ii) opening a connection between the intermediate verification system and the server via which the intermediate verification system issues a server verification handshake to the server; (b) responsive to issuance of the server verification handshake to the server, receiving a server certificate associated with the server by the intermediate verification system; (c) responsive to receipt of the server certificate, processing, by the intermediate verification system, the server certificate to determine an identity of the server; and (d) rendering, by the intermediate verification system, a security policy decision regarding traffic between the server and client based
    Type: Grant
    Filed: November 28, 2017
    Date of Patent: November 10, 2020
    Assignee: Forcepoint LLC
    Inventors: Tuomo Syvänne, Olli-Pekka Niemi, Valtteri Rahkonen
  • Patent number: 10805420
    Abstract: A method, system, and computer-usable medium are disclosed for network acceleration, comprising: responsive to receiving at an acceleration device a stream of one or more datagrams from a sending endpoint device within a first local area network of the acceleration device, the stream for transmission to a receiving endpoint device within a second local area network coupled to the first local area network by a wide area network: communicating by the acceleration device to the sending endpoint device a respective acknowledgement to each of the one or more datagrams; and transmitting by the acceleration device the one or more datagrams via multiple communication links of the wide area network to a second acceleration device within the second local area network and coupled to the receiving endpoint device.
    Type: Grant
    Filed: November 29, 2017
    Date of Patent: October 13, 2020
    Assignee: Forcepoint LLC
    Inventors: Tuomo Syvänne, Olli-Pekka Niemi, Valtteri Rahkonen, Ville Mattila
  • Publication number: 20200092264
    Abstract: A method, system, and computer-usable medium are disclosed for, responsive to receipt at a security device of a connection request from a client to a server receiving a message from the client to the server, extracting from a memory associated with the client a secret for performing decryption of application messages communicated from the server to the client, and using the secret to decrypt the application messages to perform at least one of monitoring and inspection of the application messages as decrypted in accordance with a security policy, while allowing the client and the server to maintain an end-to-end connection without intermediate termination at the security device.
    Type: Application
    Filed: September 17, 2018
    Publication date: March 19, 2020
    Applicant: Forcepoint LLC
    Inventors: Valtteri RAHKONEN, Kurt NATVIG, Olli-Pekka NIEMI, Mike GREEN
  • Publication number: 20190166160
    Abstract: A method, system, and computer-usable medium are disclosed for (a) responsive to communication of a client handshake from a client to a server for establishing encrypted communications between the client and the server: (i) holding open, by an intermediate verification system interfaced between the server and the client, the client handshake; and (ii) opening a connection between the intermediate verification system and the server via which the intermediate verification system issues a server verification handshake to the server; (b) responsive to issuance of the server verification handshake to the server, receiving a server certificate associated with the server by the intermediate verification system; (c) responsive to receipt of the server certificate, processing, by the intermediate verification system, the server certificate to determine an identity of the server; and (d) rendering, by the intermediate verification system, a security policy decision regarding traffic between the server and client based
    Type: Application
    Filed: November 28, 2017
    Publication date: May 30, 2019
    Applicant: Forcepoint LLC
    Inventors: Tuomo SYVÄNNE, Olli-Pekka NIEMI, Valtteri RAHKONEN
  • Publication number: 20190166220
    Abstract: A method, system, and computer-usable medium are disclosed for network acceleration, comprising: responsive to receiving at an acceleration device a stream of one or more datagrams from a sending endpoint device within a first local area network of the acceleration device, the stream for transmission to a receiving endpoint device within a second local area network coupled to the first local area network by a wide area network: communicating by the acceleration device to the sending endpoint device a respective acknowledgement to each of the one or more datagrams; and transmitting by the acceleration device the one or more datagrams via multiple communication links of the wide area network to a second acceleration device within the second local area network and coupled to the receiving endpoint device.
    Type: Application
    Filed: November 29, 2017
    Publication date: May 30, 2019
    Applicant: Forcepoint LLC
    Inventors: Tuomo SYVÄNNE, Olli-Pekka NIEMI, Valtteri RAHKONEN, Ville MATTILA
  • Patent number: 8544388
    Abstract: An arrangement for supporting a shell (1) into the barrel of a breech-loading weapon, the arrangement comprising a support piece (4) provided with a rim flange (15) and to be fastened to the tail of the shell (1), the support piece being fastened in connection with the tail of the shell (1) with one or more adhesive materials. In addition, a method of fastening a support piece (4) to a shell (1).
    Type: Grant
    Filed: January 30, 2009
    Date of Patent: October 1, 2013
    Assignee: Patria Land Systems Oy
    Inventors: Kari Reunamäki, Pekka Niemi
  • Patent number: 8430030
    Abstract: The invention relates to an arrangement for supporting a shell into the barrel of a breech-loading weapon. The arrangement comprises a support piece (6) that is provided with an edge flange (7) and is to be fastened to a tail of the shell. The support piece further comprises a firing mechanism for firing the actual primer of the shell. The arrangement further comprises a connecting means (8) between the support piece (6) and the shell tail (4), the connecting means being arranged to fasten to the shell and to the support piece (6) and thus to fasten the support piece with a mechanical connection to the shell tail (4). The connecting means (8) comprises at least one shank part (9) having a first end and a second end, the first end of the shank part being arranged to fasten to the connecting means (8) and the second end to the shell tail (4).
    Type: Grant
    Filed: January 30, 2009
    Date of Patent: April 30, 2013
    Assignee: Patria Land Systems Oy
    Inventors: Jussi Kautto, Mauri Kuru, Pekka Niemi, Jukka Tiainen, Samppa Astikainen, Seppo Mahla
  • Patent number: 8387508
    Abstract: The invention relates to a support member for supporting a shell into the barrel of a breech-loading weapon, and a method. The support member (6) comprises means for fastening a support element (8) to at least one fin (5) belonging to the tail end (4) of a shell (1). The means comprise at least one fastening piece (10), which comprises: at least one first fastening surface (14a), which may be arranged substantially parallel with a side of the fin (5), and which fastening piece (10) may be supported to the support element (8); at least one second fastening surface (14b), which second fastening surface (14b) is movably arranged so that the second fastening surface (14b) is movable in relation to the first fastening surface (14a) in a direction transverse to the longitudinal axis (L) of the shell (1); and means for pressing the fastening surfaces (14a, 14b) against the sides of the fin (5) arranged between them so as to provide friction locking between the fastening piece (10) and the fin (5).
    Type: Grant
    Filed: January 30, 2009
    Date of Patent: March 5, 2013
    Assignee: Patria Land Systems Oy
    Inventors: Pekka Niemi, Jussi Kautto, Seppo Hakari
  • Publication number: 20100294159
    Abstract: The invention relates to an arrangement for supporting a shell (1) into a barrel (2) of a breech-loading weapon, the arrangement comprising a rim-flanged support element (6) attachable to a shell tail (4). The arrangement is characterized in that the arrangement comprises a propelling charge element (12) comprising a propelling charge (14) and a primer (13), the element having a threading (15a) suited for the shell tail allowing the support element (6) to be fastened to the shell tail by threading the propelling charge element (6) into the tail of the shell (1) through the support element (6). The invention further relates to a method of supporting a shell into a barrel of a breech-loading weapon.
    Type: Application
    Filed: January 30, 2009
    Publication date: November 25, 2010
    Inventors: Pekka Niemi, Esa Koivula
  • Publication number: 20100288153
    Abstract: An arrangement for supporting a shell (1) into the barrel of a breech-loading weapon, the arrangement comprising a support piece (4) provided with a rim flange (15) and to be fastened to the tail of the shell (1), the support piece being fastened in connection with the tail of the shell (1) with one or more adhesive materials. In addition, a method of fastening a support piece (4) to a shell (1).
    Type: Application
    Filed: January 30, 2009
    Publication date: November 18, 2010
    Applicant: PATRIA LAND & ARMAMENT OY
    Inventors: Kari Reunämaki, Pekka Niemi
  • Publication number: 20100288150
    Abstract: The invention relates to an arrangement for supporting a shell into the barrel of a breech-loading weapon. The arrangement comprises a support piece (6) that is provided with an edge flange (7) and is to be fastened to a tail of the shell. The support piece further comprises a firing mechanism for firing the actual primer of the shell. The arrangement further comprises a connecting means (8) between the support piece (6) and the shell tail (4), the connecting means being arranged to fasten to the shell and to the support piece (6) and thus to fasten the support piece with a mechanical connection to the shell tail (4). The connecting means (8) comprises at least one shank part (9) having a first end and a second end, the first end of the shank part being arranged to fasten to the connecting means (8) and the second end to the shell tail (4).
    Type: Application
    Filed: January 30, 2009
    Publication date: November 18, 2010
    Applicant: Patria Land & Armament Oy
    Inventors: Jussi Kautto, Mauri Kuru, Pekka Niemi, Jukka Tiainen, Samppa Astikainen, Seppo Mahla
  • Publication number: 20100269722
    Abstract: The invention relates to a support member for supporting a shell into the barrel of a breech-loading weapon, and a method. The support member (6) comprises means for fastening a support element (8) to at least one fin (5) belonging to the tail end (4) of a shell (1). The means comprise at least one fastening piece (10), which comprises: at least one first fastening surface (14a), which may be arranged substantially parallel with a side of the fin (5), and which fastening piece (10) may be supported to the support element (8); at least one second fastening surface (14b), which second fastening surface (14b) is movably arranged so that the second fastening surface (14b) is movable in relation to the first fastening surface (14a) in a direction transverse to the longitudinal axis (L) of the shell (1); and means for pressing the fastening surfaces (14a, 14b) against the sides of the fin (5) arranged between them so as to provide friction locking between the fastening piece (10) and the fin (5).
    Type: Application
    Filed: January 30, 2009
    Publication date: October 28, 2010
    Applicant: Patria Land & Armament Oy
    Inventors: Pekka Niemi, Jussi Kautto, Seppo Hakari