Patents by Inventor Lucas Siba

Lucas Siba has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).

  • Patent number: 10666608
    Abstract: A DNS nameserver processes requests for domain name information based on subscriber identifiers, and optionally subscriber information. Based on a subscriber identifier, requests for a target domain name may generate a DNS response with domain name information for a proxy service. Techniques are provided to seamlessly and transparently authenticate a subscriber at the proxy service. The proxy service generates a redirect with a unique domain name including a tracking identifier in response to requests for a target domain name. The nameserver receives a request associated with the unique domain name. The nameserver responds with domain name information of the proxy service and generates a message to the proxy service mapping the tracking identifier to the subscriber identifier. The client then generates a request to the proxy service that includes the tracking identifier. The proxy service uses the mapping from the nameserver to authenticate the corresponding subscriber identifier.
    Type: Grant
    Filed: February 26, 2019
    Date of Patent: May 26, 2020
    Assignee: Cisco Technology, Inc.
    Inventors: Geoff Townsend, Michael Ellery, Lucas Siba, Brian Somers
  • Publication number: 20190199678
    Abstract: A DNS nameserver processes requests for domain name information based on subscriber identifiers, and optionally subscriber information. Based on a subscriber identifier, requests for a target domain name may generate a DNS response with domain name information for a proxy service. Techniques are provided to seamlessly and transparently authenticate a subscriber at the proxy service. The proxy service generates a redirect with a unique domain name including a tracking identifier in response to requests for a target domain name. The nameserver receives a request associated with the unique domain name. The nameserver responds with domain name information of the proxy service and generates a message to the proxy service mapping the tracking identifier to the subscriber identifier. The client then generates a request to the proxy service that includes the tracking identifier. The proxy service uses the mapping from the nameserver to authenticate the corresponding subscriber identifier.
    Type: Application
    Filed: February 26, 2019
    Publication date: June 27, 2019
    Inventors: Geoff Townsend, Michael Ellery, Lucas Siba, Brian Somers
  • Patent number: 10277554
    Abstract: A DNS nameserver processes requests for domain name information based on subscriber identifiers, and optionally subscriber information. Based on a subscriber identifier, requests for a target domain name may generate a DNS response with domain name information for a proxy service. Techniques are provided to seamlessly and transparently authenticate a subscriber at the proxy service. The proxy service generates a redirect with a unique domain name including a tracking identifier in response to requests for a target domain name. The nameserver receives a request associated with the unique domain name. The nameserver responds with domain name information of the proxy service and generates a message to the proxy service mapping the tracking identifier to the subscriber identifier. The client then generates a request to the proxy service that includes the tracking identifier. The proxy service uses the mapping from the nameserver to authenticate the corresponding subscriber identifier.
    Type: Grant
    Filed: March 4, 2014
    Date of Patent: April 30, 2019
    Assignee: Cisco Technology, Inc.
    Inventors: Geoff Townsend, Michael Ellery, Lucas Siba, Brian Somers
  • Patent number: 9942130
    Abstract: A client analyzes requests for network resources to determine an IP address associated with the request, such as a destination IP address of a network packet. The client device selectively routes the request and other traffic associated with the IP address. The client device establishes a tunnel or other direct connection with a remote server. Network traffic can be selectively routed to the destination IP address associated with a resource request, or to the remote server based on the destination IP address associated with the request. The system can route client network requests to the remote server based on a category or other information associated with the destination IP address. Network packets associated with malicious or suspicious IP addresses, for example, may be routed to the remote server for performance of security features, while packets associated with other IP addresses may be directly routed to their target destination.
    Type: Grant
    Filed: August 7, 2015
    Date of Patent: April 10, 2018
    Assignee: Cisco Technology, Inc.
    Inventors: David Ulevitch, Geoff Townsend, Yariv Keinan, Lucas Siba
  • Patent number: 9807050
    Abstract: Internet protocol addressing to uniquely identify clients and destinations across computer networks is provided. Communication between a proxy service and a DNS nameserver is facilitated to permit the DNS nameserver to send a subscriber identifier to the proxy service in response to a DNS request for a flagged domain name. The proxy service selects a unique IP address from a pool of IP addresses assigned to the proxy service. The proxy service associates the selected IP address with the subscriber identifier and optionally, the target domain name of the DNS request. The proxy service provides the unique IP address to the DNS nameserver which returns the unique IP address to the client device for the target domain name. The subscriber can then be authenticated at the proxy service transparently without input from the subscriber or client device based on the unique IP address provided by the client device to the proxy service.
    Type: Grant
    Filed: April 15, 2015
    Date of Patent: October 31, 2017
    Assignee: Cisco Technology, Inc.
    Inventors: Lucas Siba, Scott Cressman
  • Publication number: 20160308821
    Abstract: Internet protocol addressing to uniquely identify clients and destinations across computer networks is provided. Communication between a proxy service and a DNS nameserver is facilitated to permit the DNS nameserver to send a subscriber identifier to the proxy service in response to a DNS request for a flagged domain name. The proxy service selects a unique IP address from a pool of IP addresses assigned to the proxy service. The proxy service associates the selected IP address with the subscriber identifier and optionally, the target domain name of the DNS request. The proxy service provides the unique IP address to the DNS nameserver which returns the unique IP address to the client device for the target domain name. The subscriber can then be authenticated at the proxy service transparently without input from the subscriber or client device based on the unique IP address provided by the client device to the proxy service.
    Type: Application
    Filed: April 15, 2015
    Publication date: October 20, 2016
    Applicant: Cisco Technology, Inc.
    Inventors: Lucas Siba, Scott Cressman
  • Publication number: 20160197830
    Abstract: A client analyzes requests for network resources to determine an IP address associated with the request, such as a destination IP address of a network packet. The client device selectively routes the request and other traffic associated with the IP address. The client device establishes a tunnel or other direct connection with a remote server. Network traffic can be selectively routed to the destination IP address associated with a resource request, or to the remote server based on the destination IP address associated with the request. The system can route client network requests to the remote server based on a category or other information associated with the destination IP address. Network packets associated with malicious or suspicious IP addresses, for example, may be routed to the remote server for performance of security features, while packets associated with other IP addresses may be directly routed to their target destination.
    Type: Application
    Filed: August 7, 2015
    Publication date: July 7, 2016
    Applicant: OpenDNS, Inc.
    Inventors: David Ulevitch, Geoff Townsend, Yariv Keinan, Lucas Siba
  • Publication number: 20150256508
    Abstract: A DNS nameserver processes requests for domain name information based on subscriber identifiers, and optionally subscriber information. Based on a subscriber identifier, requests for a target domain name may generate a DNS response with domain name information for a proxy service. Techniques are provided to seamlessly and transparently authenticate a subscriber at the proxy service. The proxy service generates a redirect with a unique domain name including a tracking identifier in response to requests for a target domain name. The nameserver receives a request associated with the unique domain name. The nameserver responds with domain name information of the proxy service and generates a message to the proxy service mapping the tracking identifier to the subscriber identifier. The client then generates a request to the proxy service that includes the tracking identifier. The proxy service uses the mapping from the nameserver to authenticate the corresponding subscriber identifier.
    Type: Application
    Filed: March 4, 2014
    Publication date: September 10, 2015
    Applicant: OpenDNS, Inc.
    Inventors: Geoff Townsend, Michael Ellery, Lucas Siba, Brian Somers