Patents by Inventor David Engberg
David Engberg has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).
-
Publication number: 20200388403Abstract: Remotely providing a health service to a person includes predefining a plurality of analysis types, predefining a rule specifying a condition under which to apply the plurality of analysis types, performing the health service on the person, selecting the analysis type to perform based on the rule and information about the person, performing a type of analysis on the information to determine what interventions to be undertaken based on the information as part of performing the health service, and remotely communicating a determined intervention to the person. Each analysis type represents a type of analysis to be performed on information about the person to determine an intervention as part of providing a health service. The intervention may include altering a health treatment administered to the person as part of the health service. The analysis type may be autonomous based on machine learning and/or based on predefined rules.Type: ApplicationFiled: February 25, 2020Publication date: December 10, 2020Applicant: Livongo Health, Inc.Inventors: Michael Iskander Boulos, David Engberg, Karthik Kappaganthu, Amar Kendale, Alicia Nathalie Schep, Emma Townley-Smith
-
Patent number: 9654298Abstract: Providing information about digital certificate validity includes ascertaining digital certificate validity status for each of a plurality of digital certificates in a set of digital certificates, generating a plurality of artificially pre-computed messages about the validity status of at least a subset of the set of digital certificate of the plurality of digital certificates, where at least one of the messages indicates validity status of more than one digital certificate and digitally signing the artificially pre-computed messages to provide OCSP format responses that respond to OCSP queries about specific digital certificates in the set of digital certificates, where at least one digital signature is used in connection with an OCSP format response for more than one digital certificate. Generating and digitally signing may occur prior to any OCSP queries that are answered by any of the OCSP format responses.Type: GrantFiled: August 30, 2016Date of Patent: May 16, 2017Assignee: Assa Abloy ABInventors: David Engberg, Phil Libin, Silvio Micali
-
Publication number: 20160373432Abstract: Providing information about digital certificate validity includes ascertaining digital certificate validity status for each of a plurality of digital certificates in a set of digital certificates, generating a plurality of artificially pre-computed messages about the validity status of at least a subset of the set of digital certificate of the plurality of digital certificates, where at least one of the messages indicates validity status of more than one digital certificate and digitally signing the artificially pre-computed messages to provide OCSP format responses that respond to OCSP queries about specific digital certificates in the set of digital certificates, where at least one digital signature is used in connection with an OCSP format response for more than one digital certificate. Generating and digitally signing may occur prior to any OCSP queries that are answered by any of the OCSP format responses.Type: ApplicationFiled: August 30, 2016Publication date: December 22, 2016Inventors: DAVID ENGBERG, PHIL LIBIN, SILVIO MICALI
-
Patent number: 9461828Abstract: Providing information about digital certificate validity includes ascertaining digital certificate validity status for each of a plurality of digital certificates in a set of digital certificates, generating a plurality of artificially pre-computed messages about the validity status of at least a subset of the set of digital certificate of the plurality of digital certificates, where at least one of the messages indicates validity status of more than one digital certificate and digitally signing the artificially pre-computed messages to provide OCSP format responses that respond to OCSP queries about specific digital certificates in the set of digital certificates, where at least one digital signature is used in connection with an OCSP format response for more than one digital certificate. Generating and digitally signing may occur prior to any OCSP queries that are answered by any of the OCSP format responses.Type: GrantFiled: May 4, 2015Date of Patent: October 4, 2016Assignee: Assa Abloy ABInventors: David Engberg, Phil Libin, Silvio Micali
-
Patent number: 9454671Abstract: Providing analytics information from a cloud service includes maintaining an analytics database that is separate from data and servers accessed by users of the cloud service, selectively pushing information from the cloud service to the analytics database, where data and servers accessed by users of the cloud service are inaccessible for direct access by the analytics database, and allowing users limited access to the analytics database, where users of the analytics information that are accessing the analytics database are restricted from accessing data and servers of the cloud service. The analytics database may include a first database of adapted database records and a second database of dynamic logs of service related events. The adapted database records may be initially formed using the data and servers accessed by users of the cloud service prior to being pushed to the analytics database.Type: GrantFiled: May 13, 2014Date of Patent: September 27, 2016Assignee: Evernote CorporationInventors: David Engberg, Phil Constantinou
-
Patent number: 9449443Abstract: Logging events associated with accessing an area includes recording an event associated with accessing the area to provide an event recording and authenticating at least the event recording to provide an authenticated recording. Recording an event may include recording a time of the event. Recording an event may include recording a type of event. The event may be an attempt to access the area. Recording an event may include recording credentials/proofs used in connection with the attempt to access the area. Recording an event may include recording a result of the attempt. Recording an event may include recording the existence of data other than the credentials/proofs indicating that access should be denied. Recording an event may include recording additional data related to the area. Authenticating the recording may include digitally signing the recording.Type: GrantFiled: August 31, 2015Date of Patent: September 20, 2016Assignee: Assa Abloy, ABInventors: Phil Libin, Silvio Micali, David Engberg
-
Publication number: 20160180614Abstract: A system and method are disclosed for controlling physical access through a digital certificate validation process that works with standard certificate formats and that enables a certifying authority (CA) to prove the validity status of each certificate C at any time interval (e.g., every day, hour, or minute) starting with C's issue date, D1. C's time granularity may be specified within the certificate itself, unless it is the same for all certificates. For example, all certificates may have a one-day granularity with each certificate expires 365 days after issuance. Given certain initial inputs provided by the CA, a one-way hash function is utilized to compute values of a specified byte size that are included on the digital certificate and to compute other values that are kept secret and used in the validation process.Type: ApplicationFiled: November 24, 2015Publication date: June 23, 2016Inventors: Silvio Micali, David Engberg, Phil Libin, Leo Reyzin, Alex Sinelnikov
-
Patent number: 9292563Abstract: Sharing data between applications includes a first application converting data from a first format useable by the first application to a second format useable by a second application and the first application providing editing restrictions to restrict the second application from editing at least some of the data in the second format. At least some of the editing restrictions may prohibit editing at least some of the data by the second application. The user may receive a notification in connection with attempting to edit at least some of the data indicating that editing is prohibited. At least some of the restrictions may provide a warning to a user of the second application. The user may choose to edit the restricted data after receiving the warning.Type: GrantFiled: June 28, 2013Date of Patent: March 22, 2016Assignee: Evernote CorporationInventors: David Engberg, Seth Hitchings, Phil Constantinou, Edward Roskos
-
Publication number: 20160063779Abstract: Logging events associated with accessing an area includes recording an event associated with accessing the area to provide an event recording and authenticating at least the event recording to provide an authenticated recording. Recording an event may include recording a time of the event. Recording an event may include recording a type of event. The event may be an attempt to access the area. Recording an event may include recording credentials/proofs used in connection with the attempt to access the area. Recording an event may include recording a result of the attempt. Recording an event may include recording the existence of data other than the credentials/proofs indicating that access should be denied. Recording an event may include recording additional data related to the area. Authenticating the recording may include digitally signing the recording.Type: ApplicationFiled: August 31, 2015Publication date: March 3, 2016Inventors: Phil Libin, Silvio Micali, David Engberg
-
Patent number: 9230375Abstract: A system and method are disclosed for controlling physical access through a digital certificate validation process that works with standard certificate formats and that enables a certifying authority (CA) to prove the validity status of each certificate C at any time interval (e.g., every day, hour, or minute) starting with C's issue date, D1. C's time granularity may be specified within the certificate itself, unless it is the same for all certificates. For example, all certificates may have a one-day granularity with each certificate expires 365 days after issuance. Given certain initial inputs provided by the CA, a one-way hash function is utilized to compute values of a specified byte size that are included on the digital certificate and to compute other values that are kept secret and used in the validation process.Type: GrantFiled: February 17, 2012Date of Patent: January 5, 2016Assignee: Assa Abloy ABInventors: Silvio Micali, David Engberg, Phil Libin, Leo Reyzin, Alex Sinelnikov
-
Patent number: 9158288Abstract: Logging events associated with accessing an area includes recording an event associated with accessing the area to provide an event recording and authenticating at least the event recording to provide an authenticated recording. Recording an event may include recording a time of the event. Recording an event may include recording a type of event. The event may be an attempt to access the area. Recording an event may include recording credentials/proofs used in connection with the attempt to access the area. Recording an event may include recording a result of the attempt. Recording an event may include recording the existence of data other than the credentials/proofs indicating that access should be denied. Recording an event may include recording additional data related to the area. Authenticating the recording may include digitally signing the recording.Type: GrantFiled: July 30, 2012Date of Patent: October 13, 2015Assignee: Assa Abloy ABInventors: Phil Libin, Silvio Micali, David Engberg
-
Publication number: 20150236861Abstract: Providing information about digital certificate validity includes ascertaining digital certificate validity status for each of a plurality of digital certificates in a set of digital certificates, generating a plurality of artificially pre-computed messages about the validity status of at least a subset of the set of digital certificate of the plurality of digital certificates, where at least one of the messages indicates validity status of more than one digital certificate and digitally signing the artificially pre-computed messages to provide OCSP format responses that respond to OCSP queries about specific digital certificates in the set of digital certificates, where at least one digital signature is used in connection with an OCSP format response for more than one digital certificate. Generating and digitally signing may occur prior to any OCSP queries that are answered by any of the OCSP format responses.Type: ApplicationFiled: May 4, 2015Publication date: August 20, 2015Applicant: Assa Abloy ABInventors: David Engberg, Phil Libin, Silvio Micali
-
Publication number: 20150012565Abstract: Providing analytics information from a cloud service includes maintaining an analytics database that is separate from data and servers accessed by users of the cloud service, selectively pushing information from the cloud service to the analytics database, where data and servers accessed by users of the cloud service are inaccessible for direct access by the analytics database, and allowing users limited access to the analytics database, where users of the analytics information that are accessing the analytics database are restricted from accessing data and servers of the cloud service. The analytics database may include a first database of adapted database records and a second database of dynamic logs of service related events. The adapted database records may be initially formed using the data and servers accessed by users of the cloud service prior to being pushed to the analytics database.Type: ApplicationFiled: May 13, 2014Publication date: January 8, 2015Applicant: Evernote CorporationInventors: David Engberg, Phil Constantinou
-
Patent number: 8707030Abstract: Providing path validation information for a system includes determining paths between a subset of certificate of the system and at least one trust root, storing each of the paths in a table prior to a request for path validation information, and fetching the validation information stored in the table in response to a request for path validation information. Providing path validation information may also include digitally signing the validation information. Providing path validation information may also include applying constraints to the validation information and only providing validation information that is consistent with the constraints. Determining paths may include constructing a directed graph of trusted roots and the subset of certificates and performing a depth-first acyclic search of the graph.Type: GrantFiled: November 19, 2004Date of Patent: April 22, 2014Assignee: CoreStreet, Ltd.Inventor: David Engberg
-
Publication number: 20130120109Abstract: Logging events associated with accessing an area includes recording an event associated with accessing the area to provide an event recording and authenticating at least the event recording to provide an authenticated recording. Recording an event may include recording a time of the event. Recording an event may include recording a type of event. The event may be an attempt to access the area. Recording an event may include recording credentials/proofs used in connection with the attempt to access the area. Recording an event may include recording a result of the attempt. Recording an event may include recording the existence of data other than the credentials/proofs indicating that access should be denied. Recording an event may include recording additional data related to the area. Authenticating the recording may include digitally signing the recording.Type: ApplicationFiled: July 30, 2012Publication date: May 16, 2013Inventors: Phil LIBIN, Silvio Micali, David Engberg
-
Publication number: 20120274444Abstract: A system and method are disclosed for controlling physical access through a digital certificate validation process that works with standard certificate formats and that enables a certifying authority (CA) to prove the validity status of each certificate C at any time interval (e.g., every day, hour, or minute) starting with C's issue date, D1. C's time granularity may be specified within the certificate itself, unless it is the same for all certificates. For example, all certificates may have a one-day granularity with each certificate expires 365 days after issuance. Given certain initial inputs provided by the CA, a one-way hash function is utilized to compute values of a specified byte size that are included on the digital certificate and to compute other values that are kept secret and used in the validation process.Type: ApplicationFiled: February 17, 2012Publication date: November 1, 2012Inventors: Silvio Micali, David Engberg, Phil Libin, Leo Reyzin, Alex Sinelnikov
-
Patent number: 8261319Abstract: Logging events associated with accessing an area includes recording an event associated with accessing the area to provide an event recording and authenticating at least the event recording to provide an authenticated recording. Recording an event may include recording a time of the event. Recording an event may include recording a type of event. The event may be an attempt to access the area. Recording an event may include recording credentials/proofs used in connection with the attempt to access the area. Recording an event may include recording a result of the attempt. Recording an event may include recording the existence of data other than the credentials/proofs indicating that access should be denied. Recording an event may include recording additional data related to the area. Authenticating the recording may include digitally signing the recording.Type: GrantFiled: July 16, 2004Date of Patent: September 4, 2012Assignee: CoreStreet, Ltd.Inventors: Phil Libin, Silvio Micali, David Engberg
-
Publication number: 20120210137Abstract: A cost-effective system that provides for the efficient protection of transmitted non-public attribute information may be used, for example, to control access to a secure area. Encryption of the attribute information may be performed using symmetric encryption techniques, such as XOR and/or stream cipher encryption. A centralized database that stores and transmits the encrypted attribute information may generate the encryption/decryption key based on selected information bytes, for example, as taken from a card inserted into a handheld device used at the secure area. The selected information to generate the encryption key stream may be varied on a periodic basis by the centralized database. Information as to which selected bytes are to be used for a particular access authorization request may be transmitted to the handheld unit or may be input through action of a user of the handheld unit, for example by entry of a PIN code.Type: ApplicationFiled: December 13, 2011Publication date: August 16, 2012Inventors: Phil LIBIN, David Engberg
-
Patent number: 8171524Abstract: A system and method are disclosed for controlling physical access through a digital certificate validation process that works with standard certificate formats and that enables a certifying authority (CA) to prove the validity status of each certificate C at any time interval (e.g., every day, hour, or minute) starting with C's issue date, D1. C's time granularity may be specified within the certificate itself, unless it is the same for all certificates. For example, all certificates may have a one-day granularity with each certificate expires 365 days after issuance. Given certain initial inputs provided by the CA, a one-way hash function is utilized to compute values of a specified byte size that are included on the digital certificate and to compute other values that are kept secret and used in the validation process.Type: GrantFiled: February 8, 2008Date of Patent: May 1, 2012Assignee: Corestreet, Ltd.Inventors: Silvio Micali, David Engberg, Phil Libin, Leo Reyzin, Alex Sinelnikov
-
Patent number: 8099603Abstract: A cost-effective system that provides for the efficient protection of transmitted non-public attribute information may be used, for example, to control access to a secure area. Encryption of the attribute information may be performed using symmetric encryption techniques, such as XOR and/or stream cipher encryption. A centralized database that stores and transmits the encrypted attribute information may generate the encryption/decryption key based on selected information bytes, for example, as taken from a card inserted into a handheld device used at the secure area. The selected information to generate the encryption key stream may be varied on a periodic basis by the centralized database. Information as to which selected bytes are to be used for a particular access authorization request may be transmitted to the handheld unit or may be input through action of a user of the handheld unit, for example by entry of a PIN code.Type: GrantFiled: May 21, 2007Date of Patent: January 17, 2012Assignee: CoreStreet, Ltd.Inventors: Phil Libin, David Engberg