Patents by Inventor Roy N. Nakashima

Roy N. Nakashima has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).

  • Automated generation of access control rules for use in a distributed network management system that uses a label-based policy model
    Patent number: 10212191
    Abstract: An access control rule authorizing communication between a plurality of managed servers within an administrative domain is determined. Communication information describing past communication between the plurality of managed servers is obtained. A subset of managed servers from the plurality of managed servers is identified by grouping the plurality of managed servers based on the obtained communication information. A group-level label set is determined to associate with the subset of managed servers. Role labels are determined for managed servers in the subset of managed servers. A managed server is associated with one role label. Based on the group-level label set and the role labels, an access control rule is generated authorizing communication between a first managed server of the subset of managed servers and a second managed server. The access control rule is stored as part of an administrative domain-wide management policy.
    Type: Grant
    Filed: February 7, 2018
    Date of Patent: February 19, 2019
    Assignee: Illumio, Inc.
    Inventors: Paul J. Kirner, Matthew K. Glenn, Mukesh Gupta, Roy N. Nakashima, Thukalan V. Verghese
  • AUTOMATED GENERATION OF ACCESS CONTROL RULES FOR USE IN A DISTRIBUTED NETWORK MANAGEMENT SYSTEM THAT USES A LABEL-BASED POLICY MODEL
    Publication number: 20180167417
    Abstract: An access control rule authorizing communication between a plurality of managed servers within an administrative domain is determined. Communication information describing past communication between the plurality of managed servers is obtained. A subset of managed servers from the plurality of managed servers is identified by grouping the plurality of managed servers based on the obtained communication information. A group-level label set is determined to associate with the subset of managed servers. Role labels are determined for managed servers in the subset of managed servers. A managed server is associated with one role label. Based on the group-level label set and the role labels, an access control rule is generated authorizing communication between a first managed server of the subset of managed servers and a second managed server. The access control rule is stored as part of an administrative domain-wide management policy.
    Type: Application
    Filed: February 7, 2018
    Publication date: June 14, 2018
    Inventors: Paul J. Kirner, Matthew K. Glenn, Mukesh Gupta, Roy N. Nakashima, Thukalan V. Verghese
  • Automated generation of access control rules for use in a distributed network management system that uses a label-based policy model
    Patent number: 9923928
    Abstract: An access control rule authorizing communication between a plurality of managed servers within an administrative domain is determined. Communication information describing past communication between the plurality of managed servers is obtained. A subset of managed servers from the plurality of managed servers is identified by grouping the plurality of managed servers based on the obtained communication information. A group-level label set is determined to associate with the subset of managed servers. Role labels are determined for managed servers in the subset of managed servers. A managed server is associated with one role label. Based on the group-level label set and the role labels, an access control rule is generated authorizing communication between a first managed server of the subset of managed servers and a second managed server. The access control rule is stored as part of an administrative domain-wide management policy.
    Type: Grant
    Filed: October 3, 2016
    Date of Patent: March 20, 2018
    Assignee: Illumio, Inc.
    Inventors: Paul J. Kirner, Matthew K. Glenn, Mukesh Gupta, Roy N. Nakashima, Thukalan V. Verghese
  • AUTOMATED GENERATION OF ACCESS CONTROL RULES FOR USE IN A DISTRIBUTED NETWORK MANAGEMENT SYSTEM THAT USES A LABEL-BASED POLICY MODEL
    Publication number: 20170026418
    Abstract: An access control rule authorizing communication between a plurality of managed servers within an administrative domain is determined. Communication information describing past communication between the plurality of managed servers is obtained. A subset of managed servers from the plurality of managed servers is identified by grouping the plurality of managed servers based on the obtained communication information. A group-level label set is determined to associate with the subset of managed servers. Role labels are determined for managed servers in the subset of managed servers. A managed server is associated with one role label. Based on the group-level label set and the role labels, an access control rule is generated authorizing communication between a first managed server of the subset of managed servers and a second managed server. The access control rule is stored as part of an administrative domain-wide management policy.
    Type: Application
    Filed: October 3, 2016
    Publication date: January 26, 2017
    Inventors: Paul J. Kirner, Matthew K. Glenn, Mukesh Gupta, Roy N. Nakashima, Thukalan V. Verghese
  • Automated generation of access control rules for use in a distributed network management system that uses a label-based policy model
    Patent number: 9485279
    Abstract: An access control rule authorizing communication between a plurality of managed servers within an administrative domain is determined. Communication information describing past communication between the plurality of managed servers is obtained. A subset of managed servers from the plurality of managed servers is identified by grouping the plurality of managed servers based on the obtained communication information. A group-level label set is determined to associate with the subset of managed servers. Role labels are determined for managed servers in the subset of managed servers. A managed server is associated with one role label. Based on the group-level label set and the role labels, an access control rule is generated authorizing communication between a first managed server of the subset of managed servers and a second managed server. The access control rule is stored as part of an administrative domain-wide management policy.
    Type: Grant
    Filed: October 30, 2014
    Date of Patent: November 1, 2016
    Assignee: Illumio, Inc.
    Inventors: Paul J. Kirner, Matthew K. Glenn, Mukesh Gupta, Roy N. Nakashima, Thukalan V. Verghese
  • AUTOMATED GENERATION OF ACCESS CONTROL RULES FOR USE IN A DISTRIBUTED NETWORK MANAGEMENT SYSTEM THAT USES A LABEL-BASED POLICY MODEL
    Publication number: 20150128211
    Abstract: An access control rule authorizing communication between a plurality of managed servers within an administrative domain is determined. Communication information describing past communication between the plurality of managed servers is obtained. A subset of managed servers from the plurality of managed servers is identified by grouping the plurality of managed servers based on the obtained communication information. A group-level label set is determined to associate with the subset of managed servers. Role labels are determined for managed servers in the subset of managed servers. A managed server is associated with one role label. Based on the group-level label set and the role labels, an access control rule is generated authorizing communication between a first managed server of the subset of managed servers and a second managed server. The access control rule is stored as part of an administrative domain-wide management policy.
    Type: Application
    Filed: October 30, 2014
    Publication date: May 7, 2015
    Inventors: Paul J. Kirner, Matthew K. Glenn, Mukesh Gupta, Roy N. Nakashima, Thukalan V. Verghese