Patents Assigned to Barracuda Networks, Inc.
  • Patent number: 10171582
    Abstract: A new approach is proposed that contemplates systems and methods to support file synchronization between a local host and a cloud storage via one or more local content appliances (CAs), wherein each content appliance is a storage device/host configured to locally maintain documents and files previously downloaded from the cloud storage. First, a client agent at the local host discovers and connects to the CA that manage its files locally. To access a file/document that is not cached on its local host, the client agent requests and receives the file from the CA instead of downloading it directly from the cloud storage. When parts of the file are updated locally by the client, the client agent is configured to transmit the updated file to the CA, wherein the updated file is considered as having been fully committed from the client's perspective. The CA then synchronizes with and uploads the revised file to the cloud storage and/or other CAs in the background.
    Type: Grant
    Filed: February 1, 2016
    Date of Patent: January 1, 2019
    Assignee: Barracuda Networks, Inc.
    Inventors: Jason Dictos, Aaron Kluck
  • Patent number: 10083307
    Abstract: An approach is proposed that contemplates systems, methods, and computer-readable storage mediums to support receiving, from a computerized system, a first encrypted file entity key and signed access metadata, wherein the first encrypted file entity key is created by encrypting a file entity key using a first encryption key, the signed access metadata is signed by the file entity key and the encrypted file entity is created by encrypting a file entity using the file entity key. The approach then determines whether to facilitate the decryption of the encrypted file entity by the computerized system and sends a second encrypted file entity key to the computerized system if it is determined to facilitate the decryption. The approach prevents the computerized system to decrypt the encrypted file entity if it is determined not to facilitate the decryption of the encrypted file entity by the computerized system.
    Type: Grant
    Filed: May 5, 2016
    Date of Patent: September 25, 2018
    Assignee: Barracuda Networks, Inc.
    Inventors: Asaf Cidon, Israel Cidon, Lior Gavish, Prabandham Madan Gopal, Chandrashekhar Shetty
  • Patent number: 10050795
    Abstract: Non-transitory computer readable medium that may store instructions that once executed by a computer may cause a computer to receive or generate multiple security questions, receive multiple security answers that were provided by an entity in response to the multiple security questions, receive or generate redundant information and calculate the passphrase by applying an error correction process on the redundant information and the multiple security answers; wherein the error correction process is configured to correct up to a predefined number of erroneous security answers.
    Type: Grant
    Filed: March 23, 2016
    Date of Patent: August 14, 2018
    Assignee: Barracuda Networks, Inc.
    Inventors: Israel Cidon, Asaf Cidon, Lior Gavish
  • Patent number: 10044677
    Abstract: An approach is proposed that contemplates system and method to configure firewall rules of a VPN gateway of a protected network so that users of devices in the protected network can access Internet securely via a captive network. First, the proposed approach enables the VPN gateway to probe the captive network with an HTTP request to discover a captive portal of the captive network. After the captive portal is discovered, one or more firewall rules of the VPN gateway are added so that network traffic from the devices in the protected network are redirected to the captive portal for authentication. Once the users are authenticated and a VPN tunnel is established between the VPN gateway and a remote VPN tunnel terminal, the firewall rules previously added are removed from the VPN gateway and all network traffic from the devices in the protected network are routed over the VPN tunnel.
    Type: Grant
    Filed: July 28, 2016
    Date of Patent: August 7, 2018
    Assignee: Barracuda Networks, Inc.
    Inventors: William J. Black, Marco Miska, Gean Han
  • Patent number: 9680818
    Abstract: A new approach is proposed that contemplates systems and methods to support bulk authentication of an appliance associated with a user to all cloud-based services the appliance intends to access in one transaction instead of authenticating the appliance against each of the services individually. First, the appliance generates and transmits to an authentication service cluster an authentication request that includes its identification and authentication credentials in order to access to a plurality of services. Upon receiving the authentication request, the authentication service cluster authenticates the appliance for all of the services to be accessed based on the information in the authentication request. Once the appliance is authenticated, the authentication service cluster then retrieves entitlement information of the services to be accessed by the appliance, and identifies the service clusters/nodes that the appliance will connect to for the services with the fastest response time.
    Type: Grant
    Filed: September 18, 2015
    Date of Patent: June 13, 2017
    Assignee: Barracuda Network, Inc.
    Inventors: Fleming Shi, Luo Wang
  • Patent number: 9195668
    Abstract: A file shard store includes high performance encoding and compaction circuits. An apparatus and its method of operation avoids duplicate storage of file fragments. A plurality of tables control write operations into a plurality of log segments. Shard keys are transferred to uniquely identify fragments of files which may have been previously stored and associated with one or more of client subscribers. An apparatus comprises a plurality of location/subscription tables, a shard transfer circuit, a storage control circuit, an append-to-log circuit coupled to a large storage array, and a log segment compactor circuit.
    Type: Grant
    Filed: June 18, 2013
    Date of Patent: November 24, 2015
    Assignee: Barracuda Networks, Inc.
    Inventor: Josef Sipek
  • Patent number: 9021017
    Abstract: When each new device or service is installed into a network, a hyper-server reads a configuration description provided by the new device or service and adapts to provide a user interface for configuring its capabilities. A first server gathers descriptions of available commands and parameters from many diverse devices and services. A second server presents an administrator or operator with a control panel for one or many client devices. The panel presentation changes with respect to the devices or services selected. The hyper-server registers the capabilities of each device or service and transfers the commands and parameter settings to the appropriate device or service under configuration control.
    Type: Grant
    Filed: September 3, 2011
    Date of Patent: April 28, 2015
    Assignee: Barracuda Networks, Inc.
    Inventor: Jeremy Paul Bowers
  • Patent number: 8849836
    Abstract: An apparatus, system, and method for measuring the similarity of binary objects is disclosed. The method determines at least one pattern signature in an Nth binary object, accessing a location in a similarity store which has object identifiers for each of the previous N?1 binary objects which contain the corresponding pattern, and writing the object identifier of the Nth binary object at that same location in the similarity store. Reporting the number of locations in similarity store which contain the object identifiers of two apparently diverse binary objects is a measure of similarity to each other.
    Type: Grant
    Filed: November 20, 2012
    Date of Patent: September 30, 2014
    Assignee: Barracuda Networks, Inc.
    Inventors: Zachary Levow, Kevin Chang
  • Patent number: 8843612
    Abstract: Domain Name Service (DNS) requests are used as the reporting vehicle for ensuring that security-related information can be transferred from a network. As one possibility, a central facility for a security provider may maintain a data collection capability that is based upon receiving the DNS requests containing the information being reported. In an email application, if a data block is embedded within or attached to an email message, an algorithm is applied to the data block to generate an indicator that is specifically related to the contents of the data block. As one possibility, the algorithm may generate a hash that provides a “digital fingerprint” having a reasonable likelihood that the hash is unique to the data block. By embedding the hash within a DNS request, the request becomes a report that the data block has been accessed.
    Type: Grant
    Filed: November 2, 2009
    Date of Patent: September 23, 2014
    Assignee: Barracuda Networks, Inc.
    Inventors: Zachary Levow, Joseph Wilson Evans
  • Patent number: 8838965
    Abstract: Secure Remote Support Automation Process wherein a remote support server receives a support task request and schedules a predefined task to a predefined actor who also has a predefined escalation policy and notifies the support actor of the scheduled task along with a key, a key seed, or a credential to use in authentication. The method enabling privileged access to an Internet security appliance using public/private key pairs through a firewall and network address translation by a support server and an assigned support task actor.
    Type: Grant
    Filed: August 23, 2007
    Date of Patent: September 16, 2014
    Assignee: Barracuda Networks, Inc.
    Inventors: Zachary Levow, Andrew Konstantinov
  • Publication number: 20140258720
    Abstract: A new approach is proposed that contemplates systems and methods to support encryption and decryption of files including data and source code associated with a software application running in a virtual environment on a per-file basis outside of a kernel of an operating system. The proposed approach utilizes metadata of the files associated with the software application to determine the files to be encrypted and decrypted and to monitor various properties of the files including the sizes of the unencrypted files for accurate reporting of information about the files. Under such an approach, the source code of the applications are encrypted and decrypted transparently at the file level without modifying or altering any of the source code of the application, the kernel and libraries of the operating system, and/or any components which are proprietary to the virtual environment.
    Type: Application
    Filed: March 11, 2014
    Publication date: September 11, 2014
    Applicant: Barracuda Networks, Inc.
    Inventors: William BLACK, Kelly PRICE
  • Patent number: 8831030
    Abstract: A transmission apparatus operation method for optimizing a virtual private network operates by defragmenting and de-duplicating transfer of variable sized blocks. A large data object is converted to a plurality of data paragraphs by a fingerprinting method. Each data paragraph is cached and hashed. The hashes are transmitted to at least one satellite apparatus. Only data paragraphs which were not previously cached at each satellite are transferred.
    Type: Grant
    Filed: August 6, 2013
    Date of Patent: September 9, 2014
    Assignee: Barracuda Networks, Inc.
    Inventors: Subrahmanyam Ongole, Sridhar Srinivasan
  • Publication number: 20140248912
    Abstract: A new approach is proposed that contemplates systems and methods to support providing a mobile device associated with a user a plurality of file segments retrieved based on the location of the mobile device. Under the approach, when the user arrives at a location, a remote file/copy server receives a location indicia of the mobile device independent of and separated from a request for an electronic document by the mobile device. The remote server determines a geo-fenced area based on the location indicia of the mobile device, searches for and retrieves from a database one or more geo-tagged file segments that match the location of the mobile device.
    Type: Application
    Filed: February 28, 2014
    Publication date: September 4, 2014
    Applicant: Barracuda Networks, Inc.
    Inventor: Lindsay Snider
  • Publication number: 20140236892
    Abstract: A new approach is proposed that contemplates systems and methods to support backing up only portions of data associated with a virtual machine that have been changed since the last backup of the data was performed. During a backup process, the proposed approach looks for a journal record of a file system located within one of the partitions on a virtual disk of the virtual machine, wherein the journal record reflects disk operations that have been performed to a storage device associated with a host device/machine running the virtual machine. Once portions of the storage device which data have been modified since the last data backup are identified based on the journal of the file system, only the modified portions of the storage device are submitted to the backup process to be backed up to a backup storage device.
    Type: Application
    Filed: February 21, 2014
    Publication date: August 21, 2014
    Applicant: Barracuda Networks, Inc.
    Inventor: Andy Blyler
  • Patent number: 8788597
    Abstract: A method for operating an apparatus to recall email which has already passed through a spam filter to user mailboxes. An apparatus stores a highly efficient database for a brief period of time after an email is received, filtered, and transmitted to an email server. Message id, recipient, connecting IP address and other spam attributes are stored in a searchable format. After receiving updated spam attributes, a spam filter apparatus under software control queries the database for messages that were not detected as spam before transmittal to the email clients and servers, and sends spam recall messages. Improved email clients and servers adapted by software instructions, move or modify email user mailboxes upon receipt of the spam recall.
    Type: Grant
    Filed: March 24, 2009
    Date of Patent: July 22, 2014
    Assignee: Barracuda Networks, Inc.
    Inventor: Zachary Levow
  • Patent number: 8788831
    Abstract: An apparatus to scale for multiple petabyte backup in redundant locations. Workload is automatically shared among many servers by a characteristic derived from the content itself. Duplicate storage is eliminated by checking for the existence or absence of simple files and appending client identification to files shared among multiple subscribers. Replication depends on simple atomic file operations rather than use of tables or databases. An efficient storage method for much larger quantities of data than conventional services.
    Type: Grant
    Filed: September 27, 2011
    Date of Patent: July 22, 2014
    Assignee: Barracuda Networks, Inc.
    Inventor: Lindsay Eugene Snider
  • Patent number: 8789178
    Abstract: An apparatus and system for scoring and grading websites and method of operation. An apparatus receives one or more Uniform Resource Identifiers (URI), requests and receives a resource such as a webpage, and observes the behaviors of an enhanced browser emulator as controlled by javascript provided by the webpage. The enhanced browser emulator tracks behaviors which when aggregated imply malicious intent.
    Type: Grant
    Filed: June 3, 2011
    Date of Patent: July 22, 2014
    Assignee: Barracuda Networks, Inc.
    Inventors: Nidhi Govindram Kejriwal, Paul Judge
  • Patent number: 8775604
    Abstract: Domain Name Service (DNS) requests are used as the reporting vehicle for ensuring that security-related information can be transferred from a network. As one possibility, a central facility for a security provider may maintain a data collection capability that is based upon receiving the DNS requests containing the information being reported. In an email application, if a data block is embedded within or attached to an email message, an algorithm is applied to the data block to generate an indicator that is specifically related to the contents of the data block. As one possibility, the algorithm may generate a hash that provides a “digital fingerprint” having a reasonable likelihood that the hash is unique to the data block. By embedding the hash within a DNS request, the request becomes a report that the data block has been accessed.
    Type: Grant
    Filed: November 2, 2009
    Date of Patent: July 8, 2014
    Assignee: Barracuda Networks, Inc.
    Inventors: Zachary Levow, Joseph Wilson Evans
  • Patent number: 8726384
    Abstract: A system at a central server and at a plurality of web filters is installed to observe traffic and to protect users from attempting connection to suspicious, malicious, and/or infectious targets. Targets are defined as Uniform Resource Identifiers (URI) and Internet Protocol (IP) addresses. Traffic is collected, analyzed, and reported for further analysis. Behavior is analyzed for each client attempting a connection to an uncategorized target. IP addresses and URIs are evaluated toward placement in either a Trusted target store or an Anomalous target store. The accumulated content of Anomalous target store is provided back to the Network Service Subscriber Clients. Warnings and tools are presented when appropriate.
    Type: Grant
    Filed: April 21, 2011
    Date of Patent: May 13, 2014
    Assignee: Barracuda Networks, Inc.
    Inventors: Fleming Shi, Dean Drako
  • Patent number: 8725704
    Abstract: An apparatus which receives client-server transactions such as HTTP REQUESTS and transforms them into a synopsis format for archival storage. HTTP transactions are logged and parsed for key words called HTTP METHODS. For each HTTP METHOD, data is extracted from the message or the resources provided by the transaction. The data is efficiently stored into a transaction store. The data is also indexed and the index is stored into the transaction store. A record is kept for all concurrent sessions by usernames associated with a directory entry.
    Type: Grant
    Filed: September 27, 2011
    Date of Patent: May 13, 2014
    Assignee: Barracuda Networks, Inc.
    Inventor: Zachary Levow