Patents by Inventor Naveed Alam
Naveed Alam has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).
-
Publication number: 20100066846Abstract: A synchronized multiple imager system includes a plurality of imagers having pixels arranged in rows and columns. The pixels generate pixel data responsive to light directed onto the imagers. One or more respective sensors are coupled to the imagers. The sensors sense the pixel data from the columns and output a vertical raster stream representative of the pixel data in the columns, thereby generating a plurality of vertical raster streams. A clock circuit synchronizes the sensors to sense selected columns in the imagers and to output the vertical raster streams from the selected columns. A processor circuit is configured to receive the vertical raster streams from the imagers and to process the vertical raster streams to generate a plurality of stitched raster streams. The processor circuit stitches seam vertical raster streams from adjacent pairs of imagers.Type: ApplicationFiled: August 9, 2009Publication date: March 18, 2010Inventors: Atif SARWARI, Naveed Alam, Khurshed Mazhar
-
Patent number: 7668087Abstract: Methods and systems are provided for applying metering and rate-limiting in a virtual router environment and supporting a hierarchy of metering/rate-limiting contexts per packet flow. According to one embodiment, multiple first level metering options and multiple second level metering options associated with a hierarchy of metering levels are provided. A virtual routing engine receives packets associated with a first packet flow and packets associated with a second packet flow. The virtual routing engine performs a first type of metering of the first level metering options on the packets associated with the first packet flow using a first metering control block (MCB) and performs a second type of metering of the second level metering options on the packets associated with the first packet flow and the packets associated with the second flow using a second MCB.Type: GrantFiled: January 8, 2007Date of Patent: February 23, 2010Assignee: Fortinet, Inc.Inventors: Zahid Hussain, Sachin Desai, Naveed Alam, Joseph Cheng, Tim Millet
-
Publication number: 20090225759Abstract: Methods and systems are provided for applying metering and rate-limiting in a virtual router environment and supporting a hierarchy of metering/rate-limiting contexts per packet flow. According to one embodiment, multiple first level metering options and multiple second level metering options associated with a hierarchy of metering levels are provided. A virtual routing engine receives packets associated with a first packet flow and packets associated with a second packet flow. The virtual routing engine performs a first type of metering of the first level metering options on the packets associated with the first packet flow using a first metering control block (MCB) and performs a second type of metering of the second level metering options on the packets associated with the first packet flow and the packets associated with the second packet flow using a second MCB.Type: ApplicationFiled: May 18, 2009Publication date: September 10, 2009Applicant: FORTINET, INC.Inventors: Zahid Hussain, Sachin Desai, Naveed Alam, Joseph Cheng, Tim Millet
-
Patent number: 7522604Abstract: Methods and systems are provided for routing traffic through a virtual router-based network switch. According to one embodiment, a method for routing packets in a router includes establishing a flow data structure, which identifies a packet flow through a virtual router in the router. When a packet is received, a comparison is performed between a subset of at least one packet header associated with the packet and a subset of the flow data structure. If the subset of the packet header matches the subset of the flow data structure, then the packet can be hardware accelerated to a network interface. Otherwise, the packet may be either dropped or forwarded to a general purpose processor for processing.Type: GrantFiled: February 5, 2007Date of Patent: April 21, 2009Assignee: Fortinet, Inc.Inventors: Zahid Hussain, Samir Jain, Naveed Alam, Joseph Cheng, Greg Lockwood, Tim Millet
-
Publication number: 20090073977Abstract: Methods and systems are provided for routing traffic through a virtual router-based network switch. According to one embodiment, a flow data structure is established that identifies current packet flows associated with multiple virtual routers in the virtual router-based network device. When an incoming packet is received by the virtual router-based network device, it is then determined whether the incoming packet is associated with a current packet flow by accessing the flow data structure based on a header associated with the incoming packet. If it is determined that the incoming packet is associated with the current packet flow, then the incoming packet is hardware forwarded via a network interface of the virtual router-based network device without intervention by a processor of the virtual router-based network device, otherwise the incoming packet is forwarded to software on the processor for flow learning.Type: ApplicationFiled: October 29, 2008Publication date: March 19, 2009Applicant: FORTINET, INC.Inventors: Zahid Hussain, Samir Jain, Naveed Alam, Joseph Cheng, Gregory Lockwood, Tim Millet
-
Publication number: 20080259934Abstract: Methods and systems are provided for allocating network resources of a distributed virtual system to support managed, network-based services. According to one embodiment, a VR-based switch having multiple processing elements is configured for operation at an Internet POP. An NOS is provided on each of the processing elements. Resources of the VR-based switch are segmented between a first and second subscriber by mapping VRs assigned to the first and second subscriber onto appropriate processing elements. Then, a first and second set of customized services are configured, each including two or more of firewalling, virtual private networking, encryption, traffic shaping, routing and network address translation (NAT), to be provided by the VR-based switch. Customized services are configured by allocating appropriate service object groups to the VRs, which can be dynamically distributed by the NOS to customized processors of the processing elements to achieve desired computational support.Type: ApplicationFiled: June 16, 2008Publication date: October 23, 2008Applicant: FORTINET, INC.Inventors: Abraham R. Matthews, Naveed Alam
-
Patent number: 7389358Abstract: Methods and systems for allocating network resources are provided. According to one embodiment, a VR-based switch is configured for operation at a POP of a service provider. A NOS is provided on each processing element of the switch. Resources of the switch are segmented among multiple subscribers by associating sets of VRs with a first and second subscriber, mapping the sets of VRs onto sets of the processing elements, and configuring a first and second set of customized services, each including two or more of firewalling, virtual private networking, encryption, traffic shaping, routing and NAT, to be provided by the switch on behalf of the first and second subscribers, respectively, by allocating first and second service object groups within sets of VRs. Each service object can be dynamically distributed by the NOS to customized processors of the first or second set of processing elements to achieve desired computational support.Type: GrantFiled: September 13, 2000Date of Patent: June 17, 2008Assignee: Fortinet, Inc.Inventors: Abraham R. Matthews, Naveed Alam
-
Patent number: 7340535Abstract: One or more functions are applied to network data packets in a virtual router. A packet comprising part of a packet flow is received, and the packet is evaluated to determine which of the one or more functions are to be applied to the flow. The results of the evaluation are stored in a record, and the functions indicated in the stored record are applied to subsequent packets in the packet flow.Type: GrantFiled: June 4, 2002Date of Patent: March 4, 2008Assignee: Fortinet, Inc.Inventor: Naveed Alam
-
Publication number: 20070127382Abstract: Methods and systems are provided for routing traffic through a virtual router-based network switch. According to one embodiment, a method for routing packets in a router includes establishing a flow data structure, which identifies a packet flow through a virtual router in the router. When a packet is received, a comparison is performed between a subset of at least one packet header associated with the packet and a subset of the flow data structure. If the subset of the packet header matches the subset of the flow data structure, then the packet can be hardware accelerated to a network interface. Otherwise, the packet may be either dropped or forwarded to a general purpose processor for processing.Type: ApplicationFiled: February 5, 2007Publication date: June 7, 2007Applicant: FORTINET, INC.Inventors: Zahid Hussain, Samir Jain, Naveed Alam, Joseph Cheng, Gregory Lockwood, Tim Millet
-
Publication number: 20070109968Abstract: Methods and systems are provided for applying metering and rate-limiting in a virtual router environment and supporting a hierarchy of metering/rate-limiting contexts per packet flow. According to one embodiment, multiple first level metering options and multiple second level metering options associated with a hierarchy of metering levels are provided. A virtual routing engine receives packets associated with a first packet flow and packets associated with a second packet flow. The virtual routing engine performs a first type of metering of the first level metering options on the packets associated with the first packet flow using a first metering control block (MCB) and performs a second type of metering of the second level metering options on the packets associated with the first packet flow and the packets associated with the second flow using a second MCB.Type: ApplicationFiled: January 8, 2007Publication date: May 17, 2007Applicant: FORTINET, INC.Inventors: Zahid Hussain, Sachin Desai, Naveed Alam, Joseph Cheng, Tim Millet
-
Patent number: 7177311Abstract: A method for routing packets in a router includes establishing a flow data structure identifying a packet flow through a virtual router in the router. Next, a system executing the method receives a packet, said packet having at least one packet header. The method then compares a subset of the at least one packet header to a subset of the flow data structure. If the subset of the at least one packet header matches the subset of the flow data structure, then the packet can be hardware accelerated to a network interface. Otherwise, the packet can be either dropped, or forwarded to a general purpose processor for processing.Type: GrantFiled: June 4, 2002Date of Patent: February 13, 2007Assignee: Fortinet, Inc.Inventors: Zahid Hussain, Samir Jain, Naveed Alam, Joseph Cheng, Gregory Lockwood, Tim Millet
-
Patent number: 7161904Abstract: A virtual routing platform includes a line interface a plurality of virtual routing engines (VREs) to identify packets of different packet flows and perform a hierarchy of metering including at least first and second levels of metering on the packet flows. A first level of metering may be performed on packets of a first packet flow using a first metering control block (MCB). The first level of metering may be one level of metering in a hierarchy of metering levels. A second level of metering on the packets of the first packet flow and packets of a second flow using a second MCB. The second level of metering may be another level of metering in the hierarchy. A cache-lock may be placed on the appropriate MCB prior to performing the level of metering. The first and second MCBs may be data structures stored in a shared memory of the virtual routing platform. The cache-lock may be released after performing the level of metering using the MCB.Type: GrantFiled: June 4, 2002Date of Patent: January 9, 2007Assignee: Fortinet, Inc.Inventors: Zahid Hussain, Sachin Desai, Naveed Alam, Joseph Cheng, Tim Millet
-
Publication number: 20060056298Abstract: Apparatus and methods are provided for multiplexing application flows. According to one embodiment, a predetermined portion of available bandwidth is reserved over a path through a network communicatively coupling a first network device associated with a first set of terminals and a second network device associated with a second set of terminals for real-time communication sessions among multiple applications running on the first set of terminals and the second set of terminals as a real-time bandwidth pool. The real-time bandwidth pool is thereafter shared among multiple real-time communication sessions involving one or more terminals in the first set of terminals and one or more terminals in the second set of terminals by selectively admitting application sessions involving the one or more terminals in the first set of terminals and the one or more terminals in the second set of terminals based upon currently available resources in the real-time bandwidth pool.Type: ApplicationFiled: November 4, 2005Publication date: March 16, 2006Applicant: Prominence Networks, Inc.Inventors: Siddhartha Nag, Alfred D'Souza, Naveed Alam
-
Patent number: 7013338Abstract: Apparatus and methods are provided for multiplexing application flows over a pre-allocated bandwidth reservation protocol session. According to one embodiment, a pre-allocated reservation protocol session, such as an RSVP session, is shared by one or more application sessions. The reservation protocol session is pre-allocated over a path between a first network device associated with a first user community and a second network device associated with a second user community based upon an estimated usage of the path for application sessions between users of the first and second user communities. Subsequently, the one or more application sessions are dynamically aggregated by multiplexing application flows associated with the one or more individual application sessions onto the pre-allocated reservation protocol session at the first network device and demultiplexing at the second network device.Type: GrantFiled: August 8, 2000Date of Patent: March 14, 2006Assignee: Prominence Networks, Inc.Inventors: Siddhartha Nag, Alfred D'Souza, Naveed Alam
-
Publication number: 20030223361Abstract: A virtual routing platform includes a line interface a plurality of virtual routing engines (VREs) to identify packets of different packet flows and perform a hierarchy of metering including at least first and second levels of metering on the packet flows. A first level of metering may be performed on packets of a first packet flow using a first metering control block (MCB). The first level of metering may be one level of metering in a hierarchy of metering levels. A second level of metering on the packets of the first packet flow and packets of a second flow using a second MCB. The second level of metering may be another level of metering in the hierarchy. A cache-lock may be placed on the appropriate MCB prior to performing the level of metering. The first and second MCBs may be data structures stored in a shared memory of the virtual routing platform. The cache-lock may be released after performing the level of metering using the MCB.Type: ApplicationFiled: June 4, 2002Publication date: December 4, 2003Inventors: Zahid Hussain, Sachin Desai, Naveed Alam, Joseph Cheng, Tim Millet
-
Patent number: 4591702Abstract: In devices such as electronic calculators, which perform mathematical or like functions and require plurality of data inputs to perform their functions; a data input key is pivotally maintained within the body of said device and is adapted to provide a plurality of input data. The data input key has an upper exposed portion having an opening configured and adapted to be engaged by the thumb or finger of the user whereby the key may be manipulated to various contact positions situated in a circular or longitudinal path. These various contact positions provide different input data to the device. In another embodiment, a plurality of the input keys may be used to accommodate a large number of inputs, for example, the inputs of a typewriter.Type: GrantFiled: April 10, 1981Date of Patent: May 27, 1986Inventor: Naveed Alam
-
Patent number: 4251897Abstract: A disposable toothbrush comprising a tubular member adapted to fit snugly over one finger of the user, or over a handle provided for such purposes, the tubular member having an inner surface comfortable to the user and an outer surface; selected portions of said outer surface having bristles. In another embodiment the toothbrush has a particularly configured disposable brush portion removably attached to a holder portion.Type: GrantFiled: March 12, 1979Date of Patent: February 24, 1981Inventor: Naveed Alam