Patents by Inventor Prakash Umasankar Mukkara
Prakash Umasankar Mukkara has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).
-
Patent number: 10263987Abstract: Techniques for sharing virtual machine (VM) resources are provided. A relative location for a resource within a VM is created; the relative location dynamically resolves to a particular physical location when a principal requests access to the resource at runtime. The principal is located outside an environment associated with the VM. Authentication and access restrictions are dynamically enforced against the requests made by the principal before a connection is permitted between the principal and the resource (the resource located within the environment of the VM).Type: GrantFiled: June 16, 2016Date of Patent: April 16, 2019Assignee: Micro Focus Software Inc.Inventors: Lloyd Leon Burch, Prakash Umasankar Mukkara, Douglas Garry Earl
-
Patent number: 9787659Abstract: Techniques for secure access management to virtual environments are provided. A user authenticates to a portal for purposes of establishing a virtual machine (VM). The portal interacts with a cloud server and an identity server to authenticate the user, to acquire an Internet Protocol (IP) address and port number for the VM, and to obtain a secure token. The user then interacts with a secure socket layer virtual private network (SSL VPN) server to establish a SSL VPN session with the VM. The SSL VPN server also authenticates the token through the identity server and acquires dynamic policies to enforce during the SSL VPN session between the user and the VM (the VM managed by the cloud server).Type: GrantFiled: March 16, 2015Date of Patent: October 10, 2017Assignee: Micro Focus Software Inc.Inventors: Lloyd Leon Burch, Prakash Umasankar Mukkara, Douglas Garry Earl
-
Publication number: 20160352738Abstract: Techniques for sharing virtual machine (VM) resources are provided. A relative location for a resource within a VM is created; the relative location dynamically resolves to a particular physical location when a principal requests access to the resource at runtime. The principal is located outside an environment associated with the VM. Authentication and access restrictions are dynamically enforced against the requests made by the principal before a connection is permitted between the principal and the resource (the resource located within the environment of the VM).Type: ApplicationFiled: June 16, 2016Publication date: December 1, 2016Inventors: Lloyd Leon Burch, Prakash Umasankar Mukkara, Douglas Garry Earl
-
Patent number: 9380062Abstract: Techniques for sharing virtual machine (VM) resources are provided. A relative location for a resource within a VM is created; the relative location dynamically resolves to a particular physical location when a principal requests access to the resource at runtime. The principal is located outside an environment associated with the VM. Authentication and access restrictions are dynamically enforced against the requests made by the principal before a connection is permitted between the principal and the resource (the resource located within the environment of the VM).Type: GrantFiled: August 26, 2014Date of Patent: June 28, 2016Assignee: Novell, Inc.Inventors: Lloyd Leon Burch, Prakash Umasankar Mukkara, Douglas Garry Earl
-
Publication number: 20150200928Abstract: Techniques for secure access management to virtual environments are provided. A user authenticates to a portal for purposes of establishing a virtual machine (VM). The portal interacts with a cloud server and an identity server to authenticate the user, to acquire an Internet Protocol (IP) address and port number for the VM, and to obtain a secure token. The user then interacts with a secure socket layer virtual private network (SSL VPN) server to establish a SSL VPN session with the VM. The SSL VPN server also authenticates the token through the identity server and acquires dynamic policies to enforce during the SSL VPN session between the user and the VM (the VM managed by the cloud server).Type: ApplicationFiled: March 16, 2015Publication date: July 16, 2015Inventors: Lloyd Leon Burch, Prakash Umasankar Mukkara, Douglas Garry Earl
-
Patent number: 8984621Abstract: Techniques for secure access management to virtual environments are provided. A user authenticates to a portal for purposes of establishing a virtual machine (VM). The portal interacts with a cloud server and an identity server to authenticate the user, to acquire an Internet Protocol (IP) address and port number for the VM, and to obtain a secure token. The user then interacts with a secure socket layer virtual private network (SSL VPN) server to establish a SSL VPN session with the VM. The SSL VPN server also authenticates the token through the identity server and acquires dynamic policies to enforce during the SSL VPN session between the user and the VM (the VM managed by the cloud server).Type: GrantFiled: February 27, 2010Date of Patent: March 17, 2015Assignee: Novell, Inc.Inventors: Lloyd Leon Burch, Prakash Umasankar Mukkara, Douglas Garry Earl
-
Publication number: 20140366096Abstract: Techniques for sharing virtual machine (VM) resources are provided. A relative location for a resource within a VM is created; the relative location dynamically resolves to a particular physical location when a principal requests access to the resource at runtime. The principal is located outside an environment associated with the VM. Authentication and access restrictions are dynamically enforced against the requests made by the principal before a connection is permitted between the principal and the resource (the resource located within the environment of the VM).Type: ApplicationFiled: August 26, 2014Publication date: December 11, 2014Inventors: Lloyd Leon Burch, Prakash Umasankar Mukkara, Douglas Garry Earl
-
Patent number: 8831993Abstract: Techniques for sharing virtual machine (VM) resources are provided. A relative location for a resource within a VM is created; the relative location dynamically resolves to a particular physical location when a principal requests access to the resource at runtime. The principal is located outside an environment associated with the VM. Authentication and access restrictions are dynamically enforced against the requests made by the principal before a connection is permitted between the principal and the resource (the resource located within the environment of the VM).Type: GrantFiled: March 19, 2010Date of Patent: September 9, 2014Assignee: Novell, Inc.Inventors: Lloyd Leon Burch, Prakash Umasankar Mukkara, Douglas Garry Earl
-
Patent number: 8799640Abstract: Techniques for managing a secure communication session are provided. A non-browser application utilizes a browser to establish a secure communication session with a server. The session cookie set in the browser is mapped by the server to a secret token that is supplied via the browser to the non-browser application. The browser is then closed and the secure communication session between the server and the non-browser application continues unabated via the secret token.Type: GrantFiled: February 27, 2010Date of Patent: August 5, 2014Assignee: Novell, Inc.Inventors: Prakash Umasankar Mukkara, Lloyd Leon Burch
-
Patent number: 8738897Abstract: Techniques for identity techniques for single sign-on functionality for secure communications over insecure networks are provided. A principal achieves single sign-on access to a server via a client by initially authenticating to third-party authentication service. Next, a credentialing service supplies a randomly generated credential to the client and the server unbeknownst to the principal. The principal is then equipped to engage in secure communicates over an insecure network using the credential that is managed by services of the client to authenticate to services of the server in a fashion that the principal is unaware of.Type: GrantFiled: October 12, 2007Date of Patent: May 27, 2014Assignee: Apple Inc.Inventor: Prakash Umasankar Mukkara
-
Patent number: 8683574Abstract: Techniques for identity-based Peer-to-Peer (P2P) Virtual Private Networks (VPN's) are provided. First and second principals authenticate to a trusted third party. The first principal subsequently requests a P2P VPN with the second principal. The second principal is contacted on behalf of the first principal and permission is acquired. The first and second principals are then sent commands to directly establish a P2P VPN communication session with one another.Type: GrantFiled: December 15, 2008Date of Patent: March 25, 2014Assignee: Novell, Inc.Inventors: Prakash Umasankar Mukkara, Lloyd Leon Burch
-
Patent number: 8544070Abstract: Techniques for non-repudiation of storage in cloud or shared storage environments are provided. A unique signature is generated within a cloud or shared storage environment for each file of the storage tenant that accesses the cloud or shared storage environment. Each signature is stored as part of the file system and every time a file is accessed that signature is verified. When a file is updated, the signature is updated as well to reflect the file update.Type: GrantFiled: May 16, 2011Date of Patent: September 24, 2013Assignee: Novell, Inc.Inventors: Prakash Umasankar Mukkara, Lloyd Leon Burch, Douglas Garry Earl
-
Patent number: 8474009Abstract: Apparatus, systems, and methods may operate to authenticate a desktop client to an identity service (IS), to receive a request, from an application, at the IS via the desktop client for a virtual service internet protocol (IP) address associated with a service. The IS may operate to build a routing token that includes an original physical IP address associated with the service when a policy associated with the IS permits access to the service by a user identity associated with the desktop client. After the routing token is validated, the application may be connected to the service via the desktop client. The application may comprise an e-mail application or a remote control application, such as a virtual network computing (VNC) application. Additional apparatus, systems, and methods are disclosed.Type: GrantFiled: May 26, 2010Date of Patent: June 25, 2013Assignee: Novell, Inc.Inventors: Lloyd Leon Burch, Prakash Umasankar Mukkara, Douglas Garry Earl
-
Patent number: 8468347Abstract: Apparatus, systems, and methods may operate to establish a secure communications tunnel between a server node and a client node, and to receive user requests from the client node at the server node via the secure communications tunnel. The user requests may be received in conjunction with a device verification token derived from nonces generated by the server node and transmitted to the client node as part of keep-alive response messages. The nonces may change according to a period of time established by the server node. Additional apparatus, systems, and methods are disclosed.Type: GrantFiled: February 19, 2009Date of Patent: June 18, 2013Assignee: EMC CorporationInventors: Prakash Umasankar Mukkara, Ajith Kumar, Subbaraju Uppalapati, Vishnu Vardhan, Sureshkumar Thangavel
-
Publication number: 20120297183Abstract: Techniques for non-repudiation of storage in cloud or shared storage environments are provided. A unique signature is generated within a cloud or shared storage environment for each file of the storage tenant that accesses the cloud or shared storage environment. Each signature is stored as part of the file system and every time a file is accessed that signature is verified. When a file is updated, the signature is updated as well to reflect the file update.Type: ApplicationFiled: May 16, 2011Publication date: November 22, 2012Inventors: Prakash Umasankar Mukkara, Lloyd Leon Burch, Douglas Garry Earl
-
Patent number: 8301876Abstract: Techniques for secure network communication are provided. Credentials for a user along with a transparently generated secret are sent to a resource that the user desires to establish a secure communication session with. After successful authentication of the user, an initial sequence number for a first transaction of the session is set on a client of the user. Thereafter, with each transaction of the session the client supplies a new and unique sequence number to a server of the resource and uses the secret to encode and validate that transaction. The server of the resource does not permit any transaction that includes an invalid or previously used sequence number.Type: GrantFiled: May 16, 2008Date of Patent: October 30, 2012Assignee: EMC CorporationInventors: Lloyd Leon Burch, Prakash Umasankar Mukkara, Robert Skousen Stilmar, Douglas Garry Earl
-
Publication number: 20110296486Abstract: Apparatus, systems, and methods may operate to authenticate a desktop client to an identity service (IS), to receive a request, from an application, at the IS via the desktop client for a virtual service internet protocol (IP) address associated with a service. The IS may operate to build a routing token that includes an original physical IP address associated with the service when a policy associated with the IS permits access to the service by a user identity associated with the desktop client. After the routing token is validated, the application may be connected to the service via the desktop client. The application may comprise an e-mail application or a remote control application, such as a virtual network computing (VNC) application. Additional apparatus, systems, and methods are disclosed.Type: ApplicationFiled: May 26, 2010Publication date: December 1, 2011Inventors: Lloyd Leon Burch, Prakash Umasankar Mukkara, Douglas Garry Earl
-
Publication number: 20110231840Abstract: Techniques for sharing virtual machine (VM) resources are provided. A relative location for a resource within a VM is created; the relative location dynamically resolves to a particular physical location when a principal requests access to the resource at runtime. The principal is located outside an environment associated with the VM. Authentication and access restrictions are dynamically enforced against the requests made by the principal before a connection is permitted between the principal and the resource (the resource located within the environment of the VM).Type: ApplicationFiled: March 19, 2010Publication date: September 22, 2011Inventors: Lloyd Leon Burch, Prakash Umasankar Mukkara, Douglas Garry Earl
-
Publication number: 20110213956Abstract: Techniques for managing a secure communication session are provided. A non-browser application utilizes a browser to establish a secure communication session with a server. The session cookie set in the browser is mapped by the server to a secret token that is supplied via the browser to the non-browser application. The browser is then closed and the secure communication session between the server and the non-browser application continues unabated via the secret token.Type: ApplicationFiled: February 27, 2010Publication date: September 1, 2011Inventors: Prakash Umasankar Mukkara, Lloyd Leon Burch
-
Publication number: 20110214176Abstract: Techniques for secure access management to virtual environments are provided. A user authenticates to a portal for purposes of establishing a virtual machine (VM). The portal interacts with a cloud server and an identity server to authenticate the user, to acquire an Internet Protocol (IP) address and port number for the VM, and to obtain a secure token. The user then interacts with a secure socket layer virtual private network (SSL VPN) server to establish a SSL VPN session with the VM. The SSL VPN server also authenticates the token through the identity server and acquires dynamic policies to enforce during the SSL VPN session between the user and the VM (the VM managed by the cloud server).Type: ApplicationFiled: February 27, 2010Publication date: September 1, 2011Inventors: Lloyd Leon Burch, Prakash Umasankar Mukkara, Douglas Garry Earl