Patents by Inventor Si Wu
Si Wu has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).
-
Publication number: 20250163610Abstract: Provided are the uses of spinel-type single crystals as ferroelectrics and relaxor ferroelectrics, which can be applied to energy storage materials, and rechargeable energy storage products. In respect of the use of spinel-type single crystals AB2O4 as ferroelectrics, in AB2O4, A is Ca, Sr, Ba, Ti, V, Cr, Mn, Fe, Co, Ni, Cu or Zn, and B is a transition metal element or a rare earth element. In respect of the use of spinel-type single crystals AB2O4 as relaxor ferroelectrics, in AB2O4, A is Sr, and B is Tb. The energy storage material comprises a spinel-type single crystal AB2O4. The rechargeable energy storage product comprises a spinel-type single crystal AB2O4.Type: ApplicationFiled: June 17, 2022Publication date: May 22, 2025Inventors: Haifeng LI, Si WU, Kaitong SUN, Zirui ZHAO
-
Patent number: 12259370Abstract: A spray-capillary device is configured to process ultra-low-volume samples. The spray-capillary device includes a capillary tube that includes a lumen, an inner surface, an outer surface, an inlet end for receiving a fluid, and a discharge end having a porous section. A polymer material may be applied to the inner surface to form a polymer coating thereon. A downstream connector provides an interface between the porous section of the capillary tube, a conductive fluid, and a high voltage electrical source. The application of voltage to the downstream connector causes electrospray ionization, which can be used to draw ultra-low-volume samples into the inlet end. A gas injection assembly can be used to increase the pressure on the inlet end of the capillary tube to encourage movement of the sample therethrough. The spray-capillary device may be used to provide the ultra-low-volume samples to a mass spectrometer or other suitable analytic device.Type: GrantFiled: May 20, 2022Date of Patent: March 25, 2025Assignee: The Board of Regents of the University of OklahomaInventors: Si Wu, Lushuang Huang, Zhe Wang
-
Publication number: 20250013654Abstract: To search for digital twins (avatars) on a computerized platform, a semantic embedding is made of the search query and this is compared with respective semantic embeddings generated for digital twins on the computerized platform, to determine a first set digital twins whose semantic embeddings are similar to that of the search query. A trained graph neural network generates respective graph embeddings of feature data of the first set of digital twins, and these graph embeddings are compared with graph embeddings that the trained graph neural network generates for other digital twins on the platform, to determine a second set of digital twins whose graph embeddings are similar to graph embeddings of the first set of digital twins. The search results returned in response to the search query may include at least one digital twin in the second set of digital twins.Type: ApplicationFiled: November 14, 2022Publication date: January 9, 2025Inventors: Si Wu, Xi Wang, Chuantao Yin
-
Publication number: 20240195840Abstract: The technology disclosed describes a network security system (NSS) for managing cloud security posture. The NSS uses synthetic request injection to determine a security posture of a resource hosted on a cloud application for policy enforcement. The NSS receives an incoming request from a client directed toward a resource hosted on a cloud application during an application session. The NSS holds the incoming request, generates the synthetic request, and transmits the synthetic request to the cloud application. The synthetic request is designed to retrieve information specifying the security posture of the resource from the cloud application using the resource identifier. The NSS receives a response to the synthetic request from the cloud application that supplies the information specifying the security posture of the resource. The NSS applies a policy on the incoming request based on the security posture information.Type: ApplicationFiled: February 16, 2024Publication date: June 13, 2024Inventors: Krishna Narayanaswamy, David Tze-Si Wu, Prasenna Ravi
-
Patent number: 11985168Abstract: The technology disclosed describes a system. The system comprises an edge network of a plurality of points of presence of a network security system. Points of presence in the plurality of points of presence are configured to intermediate traffic between clients and cloud applications and to use metadata to apply policies on the intermediated traffic. There are redundancies in metadata synchronization between the points of presence due to metadata migration to a second point of presence from a first point of presence handing off intermediation to the second point of presence within an application session. Each of the points of presence is configured with inline metadata generation logic. The inline metadata generation logic is configured to issue synthetic requests to provide the metadata to the second point of presence without requiring the metadata migration to the second point of presence.Type: GrantFiled: November 22, 2021Date of Patent: May 14, 2024Assignee: Netskope, Inc.Inventors: David Tze-Si Wu, Prasenna Ravi
-
Patent number: 11943260Abstract: The technology disclosed enables metadata-based policy enforcement for requests that do not include metadata relevant to a policy. In a particular example, a method provides, in a network security system interposed between clients and a cloud application, receiving an incoming request from a client directed towards the cloud application. In response to determining that the incoming request lacks metadata for enforcement of a policy, the method includes transmitting a synthetic request to obtain the metadata from the cloud application and receiving a response to the synthetic request. The response provides the metadata. The method further includes applying the policy to the incoming request based on the metadata.Type: GrantFiled: February 2, 2023Date of Patent: March 26, 2024Assignee: Netskope, Inc.Inventors: Krishna Narayanaswamy, David Tze-Si Wu, Prasenna Ravi
-
Publication number: 20240039961Abstract: The technology disclosed relates to configuring IoT devices for policy enforcement. In particular, the technology disclosed relates to configuring a plurality of special-purpose devices on a network segment of a network to steer outbound network traffic to an inline secure forwarder on the network segment instead of a default gateway on the network segment. The inline secure forwarder is configured to route the outbound network traffic to a policy enforcement point for a policy enforcement.Type: ApplicationFiled: October 10, 2023Publication date: February 1, 2024Inventors: David Tze-Si Wu, Siying Yang, Krishna Narayanaswamy
-
Patent number: 11888902Abstract: The technology disclosed describes a network security system that is configured to configure a synthetic request with an object identifier, and to inject the synthetic request into an application session to transmit the synthetic request to a cloud application. The synthetic request is configured to retrieve object metadata about the object using the object identifier. The network security system is further configured to receive from the cloud application a response to the synthetic request. The response supplies the object metadata.Type: GrantFiled: March 7, 2022Date of Patent: January 30, 2024Assignee: Netskope, Inc.Inventors: Prasenna Ravi, David Tze-Si Wu
-
Patent number: 11857323Abstract: A system and method for camera-based stress determination. The method includes: determining a plurality of regions-of-interest (ROIs) of a body part; determining a set of bitplanes in a captured image sequence for each ROI that represent HC changes using a trained machine learning model, the machine learning model trained with a hemoglobin concentration (HC) changes training set, the HC changes training set trained using bitplanes from previously captured image sequences of other human individuals as input and received cardiovascular data as targets; determining an HC change signal for each of the ROIs based on changes in the set of determined bitplanes; for each ROI, determining intervals between heartbeats based on peaks in the HC change signal; determining heart rate variability using the intervals between heartbeats; determining a stress level using at least one determination of a standard deviation of the heart rate variability; and outputting the stress level.Type: GrantFiled: September 15, 2022Date of Patent: January 2, 2024Assignee: NURALOGIX CORPORATIONInventors: Kang Lee, Pu Zheng, Si Wu
-
Patent number: 11843637Abstract: The technology disclosed relates to a DHCP relay-based steering logic for policy enforcement on IoT devices. In particular, the technology disclosed provides a steering logic that is interposed between a plurality of special-purpose devices on a network segment of a network and a DHCP server on the network segment. The steering logic is configured to intercept DHCP requests broadcasted to the DHCP server by special-purpose devices in the plurality of special-purpose devices, forward the intercepted DHCP requests to the DHCP sever 522, receive, from the DHCP server, DHCP responses to the intercepted DHCP requests, receive, from a device classification logic, a positive determination that the special-purpose devices are special-purpose devices and not general-purpose devices, modify the received DHCP responses by replacing the default gateway with an inline secure forwarder on the network segment, and send the modified DHCP responses to the special-purpose devices.Type: GrantFiled: August 12, 2022Date of Patent: December 12, 2023Assignee: Netskope, Inc.Inventors: David Tze-Si Wu, Siying Yang, Krishna Narayanaswamy
-
Patent number: 11843638Abstract: The technology disclosed relates to a DHCP server-based steering logic for policy enforcement on IoT devices. In particular, the technology disclosed provides a steering logic running on a DHCP server on a network segment of a network. The steering logic is configured to receive DHCP requests broadcasted to the DHCP server by a plurality of special-purpose devices on the network segment, access DHCP responses generated by the DHCP server for the DHCP requests, receive, from a device classification logic, a positive determination that special-purpose devices in the plurality of special-purpose devices are special-purpose devices and not general-purpose devices, modify the accessed DHCP responses by replacing the default gateway with an inline secure forwarder on the network segment, and send the modified DHCP responses to the special-purpose devices.Type: GrantFiled: August 12, 2022Date of Patent: December 12, 2023Assignee: Netskope, Inc.Inventors: David Tze-Si Wu, Siying Yang, Krishna Narayanaswamy
-
Patent number: 11843579Abstract: The technology disclosed relates to a steering logic for policy enforcement on IoT devices. In particular, the technology disclosed provides a system. The system comprises an in-network intermediary. The in-network intermediary is configured to receive outbound network traffic from a plurality of special-purpose devices on a network segment of a network. The outbound network traffic is directed at one or more out-of-network servers. The in-network intermediary is further configured to determine, from the outbound network traffic, metadata required for policy enforcement. The in-network intermediary is further configured to append the metadata to the outbound network traffic, and send the outbound network traffic appended with the metadata to a policy enforcement point for policy enforcement.Type: GrantFiled: August 12, 2022Date of Patent: December 12, 2023Assignee: Netskope, Inc.Inventors: David Tze-Si Wu, Siying Yang, Krishna Narayanaswamy
-
Publication number: 20230396654Abstract: The technology disclosed relates to configuring IoT devices for policy enforcement. In particular, the technology disclosed relates to configuring a plurality of special-purpose devices on a network segment of a network to steer outbound network traffic to an inline secure forwarder on the network segment instead of a default gateway on the network segment. The inline secure forwarder is configured to route the outbound network traffic to a policy enforcement point for a policy enforcement.Type: ApplicationFiled: August 12, 2022Publication date: December 7, 2023Applicant: Netskope, Inc.Inventors: David Tze-Si WU, Siying YANG, Krishna NARAYANASWAMY
-
Publication number: 20230396652Abstract: The technology disclosed relates to a DHCP server-based steering logic for policy enforcement on IoT devices. In particular, the technology disclosed provides a steering logic running on a DHCP server on a network segment of a network. The steering logic is configured to receive DHCP requests broadcasted to the DHCP server by a plurality of special-purpose devices on the network segment, access DHCP responses generated by the DHCP server for the DHCP requests, receive, from a device classification logic, a positive determination that special-purpose devices in the plurality of special-purpose devices are special-purpose devices and not general-purpose devices, modify the accessed DHCP responses by replacing the default gateway with an inline secure forwarder on the network segment, and send the modified DHCP responses to the special-purpose devices.Type: ApplicationFiled: August 12, 2022Publication date: December 7, 2023Applicant: Netskope, Inc.Inventors: David Tze-Si WU, Siying YANG, Krishna NARAYANASWAMY
-
Publication number: 20230396585Abstract: The technology disclosed relates to a steering logic for policy enforcement on IoT devices. In particular, the technology disclosed provides a system. The system comprises an in-network intermediary. The in-network intermediary is configured to receive outbound network traffic from a plurality of special-purpose devices on a network segment of a network. The outbound network traffic is directed at one or more out-of-network servers. The in-network intermediary is further configured to determine, from the outbound network traffic, metadata required for policy enforcement. The in-network intermediary is further configured to append the metadata to the outbound network traffic, and send the outbound network traffic appended with the metadata to a policy enforcement point for policy enforcement.Type: ApplicationFiled: August 12, 2022Publication date: December 7, 2023Applicant: Netskope, Inc.Inventors: David Tze-Si WU, Siying YANG, Krishna NARAYANASWAMY
-
Publication number: 20230396653Abstract: The technology disclosed relates to a transparent inline secure forwarder for policy enforcement on IoT devices. In particular, the technology disclosed provides a system. The system comprises a plurality of special-purpose devices on a network segment of a network. The system further comprises a default gateway of the network segment configured to receive outbound network traffic from special-purpose devices in the plurality of special-purpose devices. The system further comprises an inline secure forwarder configured to share an Internet Protocol (IP) address with the default gateway in a transparent mode to intercept the outbound network traffic prior to the default gateway receiving the outbound network traffic, and route the intercepted outbound network traffic to a policy enforcement point for policy enforcement.Type: ApplicationFiled: August 12, 2022Publication date: December 7, 2023Applicant: Netskope, Inc.Inventors: David Tze-Si WU, Siying YANG, Krishna NARAYANASWAMY
-
Publication number: 20230396651Abstract: The technology disclosed relates to a DHCP relay-based steering logic for policy enforcement on IoT devices. In particular, the technology disclosed provides a steering logic that is interposed between a plurality of special-purpose devices on a network segment of a network and a DHCP server on the network segment. The steering logic is configured to intercept DHCP requests broadcasted to the DHCP server by special-purpose devices in the plurality of special-purpose devices, forward the intercepted DHCP requests to the DHCP sever 522, receive, from the DHCP server, DHCP responses to the intercepted DHCP requests, receive, from a device classification logic, a positive determination that the special-purpose devices are special-purpose devices and not general-purpose devices, modify the received DHCP responses by replacing the default gateway with an inline secure forwarder on the network segment, and send the modified DHCP responses to the special-purpose devices.Type: ApplicationFiled: August 12, 2022Publication date: December 7, 2023Applicant: Netskope, Inc.Inventors: David Tze-Si WU, Siying YANG, Krishna NARAYANASWAMY
-
Patent number: 11831683Abstract: The technology disclosed relates to using synthetic request injection to improve cloud object security posture management.Type: GrantFiled: November 29, 2021Date of Patent: November 28, 2023Assignee: Netskope, Inc.Inventors: David Tze-Si Wu, Prasenna Ravi
-
Patent number: 11831685Abstract: The technology disclosed relates to application-specific data flow for synthetic request injection for cloud security enforcement. In particular, it relates to data flow logic configured to inject an incoming request directed to a cloud application in a processing path of a particular network security system.Type: GrantFiled: March 7, 2022Date of Patent: November 28, 2023Assignee: Netskope, Inc.Inventors: Prasenna Ravi, David Tze-Si Wu
-
Patent number: 11831686Abstract: The technology disclosed relates to a transparent inline secure forwarder for policy enforcement on IoT devices. In particular, the technology disclosed provides a system. The system comprises a plurality of special-purpose devices on a network segment of a network. The system further comprises a default gateway of the network segment configured to receive outbound network traffic from special-purpose devices in the plurality of special-purpose devices. The system further comprises an inline secure forwarder configured to share an Internet Protocol (IP) address with the default gateway in a transparent mode to intercept the outbound network traffic prior to the default gateway receiving the outbound network traffic, and route the intercepted outbound network traffic to a policy enforcement point for policy enforcement.Type: GrantFiled: August 12, 2022Date of Patent: November 28, 2023Assignee: Netskope, Inc.Inventors: David Tze-Si Wu, Siying Yang, Krishna Narayanaswamy