Patents by Inventor Mitchell T. Christensen

Mitchell T. Christensen has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).

  • Publication number: 20230362130
    Abstract: Systems and techniques are described for monitoring network communications using a distributed firewall. One of the techniques includes receiving, at a driver executing in a guest operating system of a virtual machine, a request to open a network connection from a process associated with a user, wherein the driver performs operations comprising: obtaining identity information for the user; providing the identity information and data identifying the network connection to an identity module external to the driver; and receiving, by a distributed firewall, data associating the identity information with the data identifying the network connection from the identity module, wherein the distributed firewall performs operations comprising: receiving an outgoing packet from the virtual machine; determining that the identity information corresponds to the outgoing packet; and evaluating one or more routing rules based at least in part on the identity information.
    Type: Application
    Filed: July 3, 2023
    Publication date: November 9, 2023
    Inventors: Anirban Sengupta, Subrahmanyam Manuguri, Mitchell T. Christensen, Azeem Feroz, Todd Sabin
  • Patent number: 11695731
    Abstract: Systems and techniques are described for monitoring network communications using a distributed firewall. One of the techniques includes receiving, at a driver executing in a guest operating system of a virtual machine, a request to open a network connection from a process associated with a user, wherein the driver performs operations comprising: obtaining identity information for the user; providing the identity information and data identifying the network connection to an identity module external to the driver; and receiving, by a distributed firewall, data associating the identity information with the data identifying the network connection from the identity module, wherein the distributed firewall performs operations comprising: receiving an outgoing packet from the virtual machine; determining that the identity information corresponds to the outgoing packet; and evaluating one or more routing rules based at least in part on the identity information.
    Type: Grant
    Filed: October 5, 2020
    Date of Patent: July 4, 2023
    Assignee: NICIRA, INC.
    Inventors: Anirban Sengupta, Subrahmanyam Manuguri, Mitchell T. Christensen, Azeem Feroz, Todd Sabin
  • Publication number: 20210036990
    Abstract: Systems and techniques are described for monitoring network communications using a distributed firewall. One of the techniques includes receiving, at a driver executing in a guest operating system of a virtual machine, a request to open a network connection from a process associated with a user, wherein the driver performs operations comprising: obtaining identity information for the user; providing the identity information and data identifying the network connection to an identity module external to the driver; and receiving, by a distributed firewall, data associating the identity information with the data identifying the network connection from the identity module, wherein the distributed firewall performs operations comprising: receiving an outgoing packet from the virtual machine; determining that the identity information corresponds to the outgoing packet; and evaluating one or more routing rules based at least in part on the identity information.
    Type: Application
    Filed: October 5, 2020
    Publication date: February 4, 2021
    Inventors: Anirban Sengupta, Subrahmanyam Manuguri, Mitchell T. Christensen, Azeem Feroz, Todd Sabin
  • Patent number: 10798058
    Abstract: Systems and techniques are described for monitoring network communications using a distributed firewall. One of the techniques includes receiving, at a driver executing in a guest operating system of a virtual machine, a request to open a network connection from a process associated with a user, wherein the driver performs operations comprising: obtaining identity information for the user; providing the identity information and data identifying the network connection to an identity module external to the driver; and receiving, by a distributed firewall, data associating the identity information with the data identifying the network connection from the identity module, wherein the distributed firewall performs operations comprising: receiving an outgoing packet from the virtual machine; determining that the identity information corresponds to the outgoing packet; and evaluating one or more routing rules based at least in part on the identity information.
    Type: Grant
    Filed: July 20, 2018
    Date of Patent: October 6, 2020
    Assignee: NICIRA, INC.
    Inventors: Anirban Sengupta, Subrahmanyam Manuguri, Mitchell T. Christensen, Azeem Feroz, Todd Sabin
  • Publication number: 20180351912
    Abstract: Systems and techniques are described for monitoring network communications using a distributed firewall. One of the techniques includes receiving, at a driver executing in a guest operating system of a virtual machine, a request to open a network connection from a process associated with a user, wherein the driver performs operations comprising: obtaining identity information for the user; providing the identity information and data identifying the network connection to an identity module external to the driver; and receiving, by a distributed firewall, data associating the identity information with the data identifying the network connection from the identity module, wherein the distributed firewall performs operations comprising: receiving an outgoing packet from the virtual machine; determining that the identity information corresponds to the outgoing packet; and evaluating one or more routing rules based at least in part on the identity information.
    Type: Application
    Filed: July 20, 2018
    Publication date: December 6, 2018
    Inventors: Anirban Sengupta, Subrahmanyam Manuguri, Mitchell T. Christensen, Azeem Feroz, Todd Sabin
  • Patent number: 10033693
    Abstract: Systems and techniques are described for monitoring network communications using a distributed firewall. One of the techniques includes receiving, at a driver executing in a guest operating system of a virtual machine, a request to open a network connection from a process associated with a user, wherein the driver performs operations comprising: obtaining identity information for the user; providing the identity information and data identifying the network connection to an identity module external to the driver; and receiving, by a distributed firewall, data associating the identity information with the data identifying the network connection from the identity module, wherein the distributed firewall performs operations comprising: receiving an outgoing packet from the virtual machine; determining that the identity information corresponds to the outgoing packet; and evaluating one or more routing rules based at least in part on the identity information.
    Type: Grant
    Filed: October 1, 2013
    Date of Patent: July 24, 2018
    Assignee: NICIRA, INC.
    Inventors: Anirban Sengupta, Subrahmanyam Manuguri, Mitchell T. Christensen, Azeem Feroz, Todd Sabin
  • Publication number: 20160218921
    Abstract: The present invention is related to a method and system for facilitating the integration of a plurality of dissimilar systems by allowing networks of integration framework installations and/or other compatible B2B servers to inter-operate across corporate enterprise boundaries to integrate the disparate systems operating within each corporate enterprise.
    Type: Application
    Filed: January 22, 2015
    Publication date: July 28, 2016
    Inventors: Mitchell T. Christensen, Danny R. Sojka
  • Publication number: 20150096007
    Abstract: Systems and techniques are described for monitoring network communications using a distributed firewall. One of the techniques includes receiving, at a driver executing in a guest operating system of a virtual machine, a request to open a network connection from a process associated with a user, wherein the driver performs operations comprising: obtaining identity information for the user; providing the identity information and data identifying the network connection to an identity module external to the driver; and receiving, by a distributed firewall, data associating the identity information with the data identifying the network connection from the identity module, wherein the distributed firewall performs operations comprising: receiving an outgoing packet from the virtual machine; determining that the identity information corresponds to the outgoing packet; and evaluating one or more routing rules based at least in part on the identity information.
    Type: Application
    Filed: October 1, 2013
    Publication date: April 2, 2015
    Applicant: VMware, Inc.
    Inventors: Anirban Sengupta, Subrahmanyam Manuguri, Mitchell T. Christensen, Azeem Feroz, Todd Sabin
  • Patent number: 8972599
    Abstract: The present invention is related to a host system for full customization of functional process logic in an integrated system having multiple nodes, each node being independent of other nodes in said system, said system capable of handling standard markup language data. The system has functional process logic that uses one of agents and agent management services approach and a payload processor approach. Each unit of functional process logic is a service, multiple services are grouped together to form an agent, and incoming standard markup language data is processed as a document object method and system for facilitating the integration of a plurality of dissimilar systems by allowing networks of integration framework installations and/or other compatible B2B servers to inter-operate across corporate enterprise boundaries to integrate the disparate systems operating within each corporate enterprise.
    Type: Grant
    Filed: July 30, 2010
    Date of Patent: March 3, 2015
    Inventors: Mitchell T. Christensen, Danny R. Sojka
  • Patent number: 8312522
    Abstract: A solution is provided for associating network traffic traversing on a networked environment according to a selected category item, such as a user name or other network entity identity-related information, by using a monitor device. The solution includes: obtaining user information from the directory service by obtaining at least one set of user object attributes from the directory service; identifying at least one authentication exchange packet from packets traversing on the networked environment; extracting a user ID and a network address from the authentication exchange packet; filtering or selecting packets traversing on the network environment that each have a network address equivalent to the extracted network address; and associating packets that were selected with user information having a name attribute equivalent to the extracted user ID.
    Type: Grant
    Filed: May 3, 2010
    Date of Patent: November 13, 2012
    Assignee: Packetmotion, Inc.
    Inventors: Pramod John, Tsehua A. Chen, Mitchell T. Christensen, Maxine R. Erlund
  • Patent number: 7941827
    Abstract: A solution is provided for associating network traffic traversing on a networked environment according to a selected category item, such as a user name or other network entity identity-related information, by using a monitor device. The solution includes: obtaining user information from the directory service by obtaining at least one set of user object attributes from the directory service; identifying at least one authentication exchange packet from packets traversing on the networked environment; extracting a user ID and a network address from the authentication exchange packet; filtering or selecting packets traversing on the network environment that each have a network address equivalent to the extracted network address; and associating packets that were selected with user information having a name attribute equivalent to the extracted user ID.
    Type: Grant
    Filed: April 4, 2006
    Date of Patent: May 10, 2011
    Assignee: Packetmotion, Inc.
    Inventors: Pramod John, Tsehua A. Chen, Mitchell T. Christensen, Maxine R. Erlund
  • Patent number: 7904353
    Abstract: A payment processing method and system is described which involves serially processing remittance documents, e.g. financial instruments, remittances, and associated documents obtained from diverse sources, electronically scanning the financial instruments and other remittance documents, thereby converting the information contained thereon into a digital format. The digital information is passed through a series of software programs and associated hardware that read the scanned financial instruments, remittances, and other documents, and compares the information obtained with preexisting information about the payor, detects errors, and the like automatically, with minimal human intervention. It also allows the information to be corrected and passed to a check encoding machine or process which imparts desired information on said checks before they are sent to a bank for deposit.
    Type: Grant
    Filed: April 17, 2007
    Date of Patent: March 8, 2011
    Inventors: Mitchell T. Christensen, Daniel J. King, Srinivasan Sangameswara, Robert F. Crothers, Paul T. Ortiz, Bruno O. Angelin, Yuping He
  • Publication number: 20100325223
    Abstract: The present invention is related to a host system for full customization of functional process logic in an integrated system having multiple nodes, each node being independent of other nodes in said system, said system capable of handling standard markup language data. The system has functional process logic that uses one of agents and agent management services approach and a payload processor approach. Each unit of functional process logic is a service, multiple services are grouped together to form an agent, and incoming standard markup language data is processed as a document object method and system for facilitating the integration of a plurality of dissimilar systems by allowing networks of integration framework installations and/or other compatible B2B servers to inter-operate across corporate enterprise boundaries to integrate the disparate systems operating within each corporate enterprise.
    Type: Application
    Filed: July 30, 2010
    Publication date: December 23, 2010
    Inventors: Mitchell T. Christensen, Danny R. Sojka
  • Publication number: 20100281527
    Abstract: A solution is provided for associating network traffic traversing on a networked environment according to a selected category item, such as a user name or other network entity identity-related information, by using a monitor device. The solution includes: obtaining user information from the directory service by obtaining at least one set of user object attributes from the directory service; identifying at least one authentication exchange packet from packets traversing on the networked environment; extracting a user ID and a network address from the authentication exchange packet; filtering or selecting packets traversing on the network environment that each have a network address equivalent to the extracted network address; and associating packets that were selected with user information having a name attribute equivalent to the extracted user ID.
    Type: Application
    Filed: May 3, 2010
    Publication date: November 4, 2010
    Inventors: Pramod John, Tsehua A. Chen, Mitchell T. Christensen, Maxine R. Erlund
  • Patent number: 7797452
    Abstract: The present invention is related to a method and system for facilitating the integration of a plurality of dissimilar systems by allowing networks of integration framework installations and/or other compatible B2B servers to inter-operate across corporate enterprise boundaries to integrate the disparate systems operating within each corporate enterprise.
    Type: Grant
    Filed: September 19, 2006
    Date of Patent: September 14, 2010
    Inventors: Mitchell T. Christensen, Danny R. Sojka
  • Publication number: 20080262950
    Abstract: A payment processing method and system is described which involves serially processing remittance documents, e.g. financial instruments, remittances, and associated documents obtained from diverse sources, electronically scanning the financial instruments and other remittance documents, thereby converting the information contained thereon into a digital format. The digital information is passed through a series of software programs and associated hardware that read the scanned financial instruments, remittances, and other documents, and compares the information obtained with preexisting information about the payor, detects errors, and the like automatically, with minimal human intervention. It also allows the information to be corrected and passed to a check encoding machine or process which imparts desired information on said checks before they are sent to a bank for deposit.
    Type: Application
    Filed: April 17, 2007
    Publication date: October 23, 2008
    Inventors: Mitchell T. Christensen, Daniel J. King, Srinivasan Sangameswara, Robert F. Crothers, Paul T. Ortiz, Bruno O. Angelin, Yuping He
  • Patent number: 7143190
    Abstract: The present invention is related to a method and system for facilitating the integration of a plurality of dissimilar systems by allowing networks of integration framework installations and/or other compatible B2B servers to inter-operate across corporate enterprise boundaries to integrate the disparate systems operating within each corporate enterprise.
    Type: Grant
    Filed: April 1, 2002
    Date of Patent: November 28, 2006
    Inventors: Mitchell T. Christensen, Danny R. Sojka
  • Publication number: 20020169842
    Abstract: The present invention is related to a method and system for facilitating the integration of a plurality of dissimilar systems by allowing networks of integration framework installations and/or other compatible B2B servers to inter-operate across corporate enterprise boundaries to integrate the disparate systems operating within each corporate enterprise.
    Type: Application
    Filed: April 1, 2002
    Publication date: November 14, 2002
    Applicant: Centegy Corporation
    Inventors: Mitchell T. Christensen, Danny R. Sojka