Patents by Inventor Naveed Alam

Naveed Alam has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).

  • Publication number: 20100066846
    Abstract: A synchronized multiple imager system includes a plurality of imagers having pixels arranged in rows and columns. The pixels generate pixel data responsive to light directed onto the imagers. One or more respective sensors are coupled to the imagers. The sensors sense the pixel data from the columns and output a vertical raster stream representative of the pixel data in the columns, thereby generating a plurality of vertical raster streams. A clock circuit synchronizes the sensors to sense selected columns in the imagers and to output the vertical raster streams from the selected columns. A processor circuit is configured to receive the vertical raster streams from the imagers and to process the vertical raster streams to generate a plurality of stitched raster streams. The processor circuit stitches seam vertical raster streams from adjacent pairs of imagers.
    Type: Application
    Filed: August 9, 2009
    Publication date: March 18, 2010
    Inventors: Atif SARWARI, Naveed Alam, Khurshed Mazhar
  • Patent number: 7668087
    Abstract: Methods and systems are provided for applying metering and rate-limiting in a virtual router environment and supporting a hierarchy of metering/rate-limiting contexts per packet flow. According to one embodiment, multiple first level metering options and multiple second level metering options associated with a hierarchy of metering levels are provided. A virtual routing engine receives packets associated with a first packet flow and packets associated with a second packet flow. The virtual routing engine performs a first type of metering of the first level metering options on the packets associated with the first packet flow using a first metering control block (MCB) and performs a second type of metering of the second level metering options on the packets associated with the first packet flow and the packets associated with the second flow using a second MCB.
    Type: Grant
    Filed: January 8, 2007
    Date of Patent: February 23, 2010
    Assignee: Fortinet, Inc.
    Inventors: Zahid Hussain, Sachin Desai, Naveed Alam, Joseph Cheng, Tim Millet
  • Publication number: 20090225759
    Abstract: Methods and systems are provided for applying metering and rate-limiting in a virtual router environment and supporting a hierarchy of metering/rate-limiting contexts per packet flow. According to one embodiment, multiple first level metering options and multiple second level metering options associated with a hierarchy of metering levels are provided. A virtual routing engine receives packets associated with a first packet flow and packets associated with a second packet flow. The virtual routing engine performs a first type of metering of the first level metering options on the packets associated with the first packet flow using a first metering control block (MCB) and performs a second type of metering of the second level metering options on the packets associated with the first packet flow and the packets associated with the second packet flow using a second MCB.
    Type: Application
    Filed: May 18, 2009
    Publication date: September 10, 2009
    Applicant: FORTINET, INC.
    Inventors: Zahid Hussain, Sachin Desai, Naveed Alam, Joseph Cheng, Tim Millet
  • Patent number: 7522604
    Abstract: Methods and systems are provided for routing traffic through a virtual router-based network switch. According to one embodiment, a method for routing packets in a router includes establishing a flow data structure, which identifies a packet flow through a virtual router in the router. When a packet is received, a comparison is performed between a subset of at least one packet header associated with the packet and a subset of the flow data structure. If the subset of the packet header matches the subset of the flow data structure, then the packet can be hardware accelerated to a network interface. Otherwise, the packet may be either dropped or forwarded to a general purpose processor for processing.
    Type: Grant
    Filed: February 5, 2007
    Date of Patent: April 21, 2009
    Assignee: Fortinet, Inc.
    Inventors: Zahid Hussain, Samir Jain, Naveed Alam, Joseph Cheng, Greg Lockwood, Tim Millet
  • Publication number: 20090073977
    Abstract: Methods and systems are provided for routing traffic through a virtual router-based network switch. According to one embodiment, a flow data structure is established that identifies current packet flows associated with multiple virtual routers in the virtual router-based network device. When an incoming packet is received by the virtual router-based network device, it is then determined whether the incoming packet is associated with a current packet flow by accessing the flow data structure based on a header associated with the incoming packet. If it is determined that the incoming packet is associated with the current packet flow, then the incoming packet is hardware forwarded via a network interface of the virtual router-based network device without intervention by a processor of the virtual router-based network device, otherwise the incoming packet is forwarded to software on the processor for flow learning.
    Type: Application
    Filed: October 29, 2008
    Publication date: March 19, 2009
    Applicant: FORTINET, INC.
    Inventors: Zahid Hussain, Samir Jain, Naveed Alam, Joseph Cheng, Gregory Lockwood, Tim Millet
  • Publication number: 20080259934
    Abstract: Methods and systems are provided for allocating network resources of a distributed virtual system to support managed, network-based services. According to one embodiment, a VR-based switch having multiple processing elements is configured for operation at an Internet POP. An NOS is provided on each of the processing elements. Resources of the VR-based switch are segmented between a first and second subscriber by mapping VRs assigned to the first and second subscriber onto appropriate processing elements. Then, a first and second set of customized services are configured, each including two or more of firewalling, virtual private networking, encryption, traffic shaping, routing and network address translation (NAT), to be provided by the VR-based switch. Customized services are configured by allocating appropriate service object groups to the VRs, which can be dynamically distributed by the NOS to customized processors of the processing elements to achieve desired computational support.
    Type: Application
    Filed: June 16, 2008
    Publication date: October 23, 2008
    Applicant: FORTINET, INC.
    Inventors: Abraham R. Matthews, Naveed Alam
  • Patent number: 7389358
    Abstract: Methods and systems for allocating network resources are provided. According to one embodiment, a VR-based switch is configured for operation at a POP of a service provider. A NOS is provided on each processing element of the switch. Resources of the switch are segmented among multiple subscribers by associating sets of VRs with a first and second subscriber, mapping the sets of VRs onto sets of the processing elements, and configuring a first and second set of customized services, each including two or more of firewalling, virtual private networking, encryption, traffic shaping, routing and NAT, to be provided by the switch on behalf of the first and second subscribers, respectively, by allocating first and second service object groups within sets of VRs. Each service object can be dynamically distributed by the NOS to customized processors of the first or second set of processing elements to achieve desired computational support.
    Type: Grant
    Filed: September 13, 2000
    Date of Patent: June 17, 2008
    Assignee: Fortinet, Inc.
    Inventors: Abraham R. Matthews, Naveed Alam
  • Patent number: 7340535
    Abstract: One or more functions are applied to network data packets in a virtual router. A packet comprising part of a packet flow is received, and the packet is evaluated to determine which of the one or more functions are to be applied to the flow. The results of the evaluation are stored in a record, and the functions indicated in the stored record are applied to subsequent packets in the packet flow.
    Type: Grant
    Filed: June 4, 2002
    Date of Patent: March 4, 2008
    Assignee: Fortinet, Inc.
    Inventor: Naveed Alam
  • Publication number: 20070127382
    Abstract: Methods and systems are provided for routing traffic through a virtual router-based network switch. According to one embodiment, a method for routing packets in a router includes establishing a flow data structure, which identifies a packet flow through a virtual router in the router. When a packet is received, a comparison is performed between a subset of at least one packet header associated with the packet and a subset of the flow data structure. If the subset of the packet header matches the subset of the flow data structure, then the packet can be hardware accelerated to a network interface. Otherwise, the packet may be either dropped or forwarded to a general purpose processor for processing.
    Type: Application
    Filed: February 5, 2007
    Publication date: June 7, 2007
    Applicant: FORTINET, INC.
    Inventors: Zahid Hussain, Samir Jain, Naveed Alam, Joseph Cheng, Gregory Lockwood, Tim Millet
  • Publication number: 20070109968
    Abstract: Methods and systems are provided for applying metering and rate-limiting in a virtual router environment and supporting a hierarchy of metering/rate-limiting contexts per packet flow. According to one embodiment, multiple first level metering options and multiple second level metering options associated with a hierarchy of metering levels are provided. A virtual routing engine receives packets associated with a first packet flow and packets associated with a second packet flow. The virtual routing engine performs a first type of metering of the first level metering options on the packets associated with the first packet flow using a first metering control block (MCB) and performs a second type of metering of the second level metering options on the packets associated with the first packet flow and the packets associated with the second flow using a second MCB.
    Type: Application
    Filed: January 8, 2007
    Publication date: May 17, 2007
    Applicant: FORTINET, INC.
    Inventors: Zahid Hussain, Sachin Desai, Naveed Alam, Joseph Cheng, Tim Millet
  • Patent number: 7177311
    Abstract: A method for routing packets in a router includes establishing a flow data structure identifying a packet flow through a virtual router in the router. Next, a system executing the method receives a packet, said packet having at least one packet header. The method then compares a subset of the at least one packet header to a subset of the flow data structure. If the subset of the at least one packet header matches the subset of the flow data structure, then the packet can be hardware accelerated to a network interface. Otherwise, the packet can be either dropped, or forwarded to a general purpose processor for processing.
    Type: Grant
    Filed: June 4, 2002
    Date of Patent: February 13, 2007
    Assignee: Fortinet, Inc.
    Inventors: Zahid Hussain, Samir Jain, Naveed Alam, Joseph Cheng, Gregory Lockwood, Tim Millet
  • Patent number: 7161904
    Abstract: A virtual routing platform includes a line interface a plurality of virtual routing engines (VREs) to identify packets of different packet flows and perform a hierarchy of metering including at least first and second levels of metering on the packet flows. A first level of metering may be performed on packets of a first packet flow using a first metering control block (MCB). The first level of metering may be one level of metering in a hierarchy of metering levels. A second level of metering on the packets of the first packet flow and packets of a second flow using a second MCB. The second level of metering may be another level of metering in the hierarchy. A cache-lock may be placed on the appropriate MCB prior to performing the level of metering. The first and second MCBs may be data structures stored in a shared memory of the virtual routing platform. The cache-lock may be released after performing the level of metering using the MCB.
    Type: Grant
    Filed: June 4, 2002
    Date of Patent: January 9, 2007
    Assignee: Fortinet, Inc.
    Inventors: Zahid Hussain, Sachin Desai, Naveed Alam, Joseph Cheng, Tim Millet
  • Publication number: 20060056298
    Abstract: Apparatus and methods are provided for multiplexing application flows. According to one embodiment, a predetermined portion of available bandwidth is reserved over a path through a network communicatively coupling a first network device associated with a first set of terminals and a second network device associated with a second set of terminals for real-time communication sessions among multiple applications running on the first set of terminals and the second set of terminals as a real-time bandwidth pool. The real-time bandwidth pool is thereafter shared among multiple real-time communication sessions involving one or more terminals in the first set of terminals and one or more terminals in the second set of terminals by selectively admitting application sessions involving the one or more terminals in the first set of terminals and the one or more terminals in the second set of terminals based upon currently available resources in the real-time bandwidth pool.
    Type: Application
    Filed: November 4, 2005
    Publication date: March 16, 2006
    Applicant: Prominence Networks, Inc.
    Inventors: Siddhartha Nag, Alfred D'Souza, Naveed Alam
  • Patent number: 7013338
    Abstract: Apparatus and methods are provided for multiplexing application flows over a pre-allocated bandwidth reservation protocol session. According to one embodiment, a pre-allocated reservation protocol session, such as an RSVP session, is shared by one or more application sessions. The reservation protocol session is pre-allocated over a path between a first network device associated with a first user community and a second network device associated with a second user community based upon an estimated usage of the path for application sessions between users of the first and second user communities. Subsequently, the one or more application sessions are dynamically aggregated by multiplexing application flows associated with the one or more individual application sessions onto the pre-allocated reservation protocol session at the first network device and demultiplexing at the second network device.
    Type: Grant
    Filed: August 8, 2000
    Date of Patent: March 14, 2006
    Assignee: Prominence Networks, Inc.
    Inventors: Siddhartha Nag, Alfred D'Souza, Naveed Alam
  • Publication number: 20030223361
    Abstract: A virtual routing platform includes a line interface a plurality of virtual routing engines (VREs) to identify packets of different packet flows and perform a hierarchy of metering including at least first and second levels of metering on the packet flows. A first level of metering may be performed on packets of a first packet flow using a first metering control block (MCB). The first level of metering may be one level of metering in a hierarchy of metering levels. A second level of metering on the packets of the first packet flow and packets of a second flow using a second MCB. The second level of metering may be another level of metering in the hierarchy. A cache-lock may be placed on the appropriate MCB prior to performing the level of metering. The first and second MCBs may be data structures stored in a shared memory of the virtual routing platform. The cache-lock may be released after performing the level of metering using the MCB.
    Type: Application
    Filed: June 4, 2002
    Publication date: December 4, 2003
    Inventors: Zahid Hussain, Sachin Desai, Naveed Alam, Joseph Cheng, Tim Millet
  • Patent number: 4591702
    Abstract: In devices such as electronic calculators, which perform mathematical or like functions and require plurality of data inputs to perform their functions; a data input key is pivotally maintained within the body of said device and is adapted to provide a plurality of input data. The data input key has an upper exposed portion having an opening configured and adapted to be engaged by the thumb or finger of the user whereby the key may be manipulated to various contact positions situated in a circular or longitudinal path. These various contact positions provide different input data to the device. In another embodiment, a plurality of the input keys may be used to accommodate a large number of inputs, for example, the inputs of a typewriter.
    Type: Grant
    Filed: April 10, 1981
    Date of Patent: May 27, 1986
    Inventor: Naveed Alam
  • Patent number: 4251897
    Abstract: A disposable toothbrush comprising a tubular member adapted to fit snugly over one finger of the user, or over a handle provided for such purposes, the tubular member having an inner surface comfortable to the user and an outer surface; selected portions of said outer surface having bristles. In another embodiment the toothbrush has a particularly configured disposable brush portion removably attached to a holder portion.
    Type: Grant
    Filed: March 12, 1979
    Date of Patent: February 24, 1981
    Inventor: Naveed Alam