Patents by Inventor Vinay Phegade
Vinay Phegade has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).
-
Publication number: 20200301972Abstract: Described are computing systems and methods as well as computer program products for enhancing the detection of abnormal online user behavior by incorporating time-series data of behavior-based user clusters into an entity graph for purposes of entity resolution. In various embodiments, graph analysis performed on a graph that includes nodes representing users, user attributes, and user clusters serves to determine groups of similar user entities, which may then be merged and/or further analyzed to detect abnormal behavior.Type: ApplicationFiled: March 21, 2019Publication date: September 24, 2020Inventors: Hanzhang Wang, Vinay Phegade
-
Patent number: 10701039Abstract: Various embodiments are generally directed to the providing for mutual authentication and secure distributed processing of multi-party data. In particular, an experiment may be submitted to include the distributed processing of private data owned by multiple distrustful entities. Private data providers may authorize the experiment and securely transfer the private data for processing by trusted computing nodes in a pool of trusted computing nodes.Type: GrantFiled: September 25, 2015Date of Patent: June 30, 2020Assignee: INTEL CORPORATIONInventors: Vinay Phegade, Huaiyu Liu, Jesse Walker
-
Patent number: 10453114Abstract: Selective/controlled disclosure of user information to private workspaces of other users/invitees based on context/contextual relations, and a shared workspace or market to collaborate amongst the other users (e.g., to crowd-source gifts of interest to the recipient). Contextual disclosure may be based on common context or commonality under a set of conditions, such as a topic, which may include known topics of relationships amongst the users and/or undiscovered contexts. As an example, items of interest to each user are identified and clustered, keywords are assigned to the clusters indicative of topics/subjects of interests to the respective users, recipient keywords are compared to keywords of an invitee to identify common keywords as shared interests, and items of interest to the recipient that relate to the common keywords are disclosed to the invitee as a personalized wish-list. Keyword weighting and/or keyword/item level privacy designations may be provided to further control disclosure.Type: GrantFiled: June 23, 2014Date of Patent: October 22, 2019Assignee: Intel CorporationInventors: Rita H Wouhaybi, Timothy G Coppernoll, Jose K Sia, Jr., Richard T Beckwith, Maria Bezaitis, Scott H Robinson, Vinay Phegade, Michael Lemay
-
Patent number: 10402579Abstract: Systems, methods, and apparatus to provide private information retrieval are disclosed. An example apparatus includes a protected data enclave to store a first portion of data such that entities other than the first trusted hardware processing unit are unable to access the first portion of the data. The example apparatus includes a request processor to determine that a data element specified in a first request from an entity is stored in a second trusted hardware processing unit. The request processor is to send an encrypted request for the data element to the second trusted hardware processing unit, and send an encrypted dummy request to a third trusted hardware processing unit. The request processor is to determine whether an encrypted dummy response has been received from the third trusted hardware processing unit, and whether an encrypted response including the data element has been received from the second trusted hardware processing unit.Type: GrantFiled: February 15, 2018Date of Patent: September 3, 2019Assignee: Intel CorporationInventors: Richard Chow, Edward Wang, Vinay Phegade
-
Publication number: 20180173888Abstract: Systems, methods, and apparatus to provide private information retrieval are disclosed. An example apparatus includes a protected data enclave to store a first portion of data such that entities other than the first trusted hardware processing unit are unable to access the first portion of the data. The example apparatus includes a request processor to determine that a data element specified in a first request from an entity is stored in a second trusted hardware processing unit. The request processor is to send an encrypted request for the data element to the second trusted hardware processing unit, and send an encrypted dummy request to a third trusted hardware processing unit. The request processor is to determine whether an encrypted dummy response has been received from the third trusted hardware processing unit, and whether an encrypted response including the data element has been received from the second trusted hardware processing unit.Type: ApplicationFiled: February 15, 2018Publication date: June 21, 2018Inventors: RICHARD CHOW, EDWARD WANG, VINAY PHEGADE
-
Patent number: 9923886Abstract: In one embodiment a controller comprises logic configured to define, for display on a region of a display device coupled to the controller, a dialog box, lock the dialog box such that input/output operations conducted in the dialog box are visible to the secure controller and are not visible to an untrusted execution complex communicatively coupled to the secure controller, receive one or more authentication credentials based on a user input to the dialog box, and use the one or more authentication credentials to establish a secure communication session with a remote service. Other embodiments may be described.Type: GrantFiled: February 24, 2016Date of Patent: March 20, 2018Assignee: Intel CorporationInventors: Vinay Phegade, Conor Cahill, Sanjay Bakshi
-
Patent number: 9904793Abstract: Systems, methods, and apparatus to provide private information retrieval. A disclosed example system includes a first trusted processing unit to store a first portion of data such that entities other than the first trusted processing unit are unable to access the first portion of the data in the first trusted processing unit; a second trusted processing unit to store a second portion of the data such that entities other than the second trusted processing unit are unable to access the second portion of the data in the second trusted processing unit; and a third trusted processing unit to: determine that a data element specified in a request is stored in the first trusted processing unit; request the data element from the first trusted processing unit; send a dummy request to the second trusted processing unit; and send the data element to a requester.Type: GrantFiled: March 23, 2015Date of Patent: February 27, 2018Assignee: Intel CorporationInventors: Richard Chow, Edward Wang, Vinay Phegade
-
Patent number: 9769129Abstract: An apparatus for sharing information between entities includes a processor and a trusted execution module executing on the processor. The trusted execution module is configured to receive first confidential information from a first client device associated with a first entity, seal the first confidential information within a trusted execution environment, receive second confidential information from a second client device associated with a second entity, seal the second confidential information within the trusted execution environment, and execute code within the trusted execution environment. The code is configured to compute a confidential result based upon the first confidential information and the second confidential information.Type: GrantFiled: October 26, 2015Date of Patent: September 19, 2017Assignee: Intel CorporationInventors: Vinay Phegade, Anand Rajan, Simon Johnson, Vincent Scarlata, Carlos Rozas, Nikhil Deshpande
-
Publication number: 20170093806Abstract: Various embodiments are generally directed to the providing for mutual authentication and secure distributed processing of multi-party data. In particular, an experiment may be submitted to include the distributed processing of private data owned by multiple distrustful entities. Private data providers may authorize the experiment and securely transfer the private data for processing by trusted computing nodes in a pool of trusted computing nodes.Type: ApplicationFiled: September 25, 2015Publication date: March 30, 2017Applicant: Intel CorporationInventors: VINAY PHEGADE, HUAIYU LIU, JESSE WALKER
-
Patent number: 9536100Abstract: In one embodiment a controller comprises logic configured to establish a pairing with a remote processor in a second electronic device, create a first secure communication channel with the remote processor, transmit a first portion of a processing task to the remote processor via the first secure channel, receive, via a second communication channel, an input from the first portion of the processing task, and complete at least a second portion of the processing task using the input. Other embodiments may be described.Type: GrantFiled: April 16, 2012Date of Patent: January 3, 2017Assignee: Intel CorporationInventors: Vinay Phegade, Sanjay Bakshi
-
Publication number: 20160359921Abstract: Apparatus, systems and methods may provide a browser interface to detect an attempt by web content to manipulate data in a local data store. In addition, the data may be classified into a category if the data is remotely accessible. Additionally, a security policy may be applied to the data based on the category. In one example, a separator may separate the data from other data based on the category, the data may be encrypted/decrypted based on the category, and/or context information and user input may be determined to apply the security policy further based on the context information and the user input.Type: ApplicationFiled: August 19, 2016Publication date: December 8, 2016Inventors: Hong C. Li, Mark D. Boucher, Conor P. Cahill, Manohar R. Castelino, Steve Orrin, Vinay Phegade, John E. Simpson, JR.
-
Publication number: 20160283731Abstract: Systems, methods, and apparatus to provide private information retrieval. A disclosed example system includes a first trusted processing unit to store a first portion of data such that entities other than the first trusted processing unit are unable to access the first portion of the data in the first trusted processing unit; a second trusted processing unit to store a second portion of the data such that entities other than the second trusted processing unit are unable to access the second portion of the data in the second trusted processing unit; and a third trusted processing unit to: determine that a data element specified in a request is stored in the first trusted processing unit; request the data element from the first trusted processing unit; send a dummy request to the second trusted processing unit; and send the data element to a requester.Type: ApplicationFiled: March 23, 2015Publication date: September 29, 2016Inventors: RICHARD CHOW, EDWARD WANG, VINAY PHEGADE
-
Patent number: 9436838Abstract: Apparatus, systems and methods may provide a browser interface to detect an attempt by web content to manipulate data in a local data store. In addition, the data may be classified into a category if the data is remotely accessible. Additionally, a security policy may be applied to the data based on the category. In one example, a separator may separate the data from other data based on the category, the data may be encrypted/decrypted based on the category, and/or context information and user input may be determined to apply the security policy further based on the context information and the user input.Type: GrantFiled: December 20, 2012Date of Patent: September 6, 2016Assignee: Intel CorporationInventors: Hong C. Li, Mark D. Boucher, Conor P. Cahill, Manohar R. Castelino, Steve Orrin, Vinay Phegade, John E. Simpson, Jr.
-
Publication number: 20160173490Abstract: In one embodiment a controller comprises logic configured to define, for display on a region of a display device coupled to the controller, a dialog box, lock the dialog box such that input/output operations conducted in the dialog box are visible to the secure controller and are not visible to an untrusted execution complex communicatively coupled to the secure controller, receive one or more authentication credentials based on a user input to the dialog box, and use the one or more authentication credentials to establish a secure communication session with a remote service. Other embodiments may be described.Type: ApplicationFiled: February 24, 2016Publication date: June 16, 2016Applicant: Intel CorporationInventors: Vinay Phegade, Conor Cahill, Sanjay Bakshi
-
Patent number: 9306934Abstract: In one embodiment a controller comprises logic configured to receive, from an application executing on an untrusted execution complex of the electronic device, a request for a secure communication session with a remote service, verify a security credential received from the remote service, establish a secure communication connection between the secure controller and the remote service, establish a secure user interface, collect one or more authentication credentials from a user via the secure user interface, forward the one or more authentication credentials to the remote service, and conduct a secure communication session with the remote service. Other embodiments may be described.Type: GrantFiled: April 17, 2012Date of Patent: April 5, 2016Assignee: Intel CorporationInventors: Vinay Phegade, Conor Cahill, Sanjay Bakshi
-
Publication number: 20160055571Abstract: Selective/controlled disclosure of user information to private workspaces of other users/invitees based on context/contextual relations, and a shared workspace or market to collaborate amongst the other users (e.g., to crowd-source gifts of interest to the recipient). Contextual disclosure may be based on common context or commonality under a set of conditions, such as a topic, which may include known topics of relationships amongst the users and/or undiscovered contexts. As an example, items of interest to each user are identified and clustered, keywords are assigned to the clusters indicative of topics/subjects of interests to the respective users, recipient keywords are compared to keywords of an invitee to identify common keywords as shared interests, and items of interest to the recipient that relate to the common keywords are disclosed to the invitee as a personalized wish-list. Keyword weighting and/or keyword/item level privacy designations may be provided to further control disclosure.Type: ApplicationFiled: June 23, 2014Publication date: February 25, 2016Inventors: Rita H WOUHAYBI, Timothy G COPPERNOLL, Jose K SIA Jr., Richard T BECKWITH, Maria BEZAITIS, Scott H ROBINSON, Vinay PHEGADE, Michael LEMAY
-
Publication number: 20160044005Abstract: An apparatus for sharing information between entities includes a processor and a trusted execution module executing on the processor. The trusted execution module is configured to receive first confidential information from a first client device associated with a first entity, seal the first confidential information within a trusted execution environment, receive second confidential information from a second client device associated with a second entity, seal the second confidential information within the trusted execution environment, and execute code within the trusted execution environment. The code is configured to compute a confidential result based upon the first confidential information and the second confidential information.Type: ApplicationFiled: October 26, 2015Publication date: February 11, 2016Applicant: INTEL CORPORATIONInventors: VINAY PHEGADE, ANAND RAJAN, Simon Johnson, Vincent Scarlata, Carlos Rozas, Nikhil Deshpande
-
Patent number: 9171163Abstract: An apparatus for sharing information between entities includes a processor and a trusted execution module executing on the processor. The trusted execution module is configured to receive first confidential information from a first client device associated with a first entity, seal the first confidential information within a trusted execution environment, receive second confidential information from a second client device associated with a second entity, seal the second confidential information within the trusted execution environment, and execute code within the trusted execution environment. The code is configured to compute a confidential result based upon the first confidential information and the second confidential information.Type: GrantFiled: March 15, 2013Date of Patent: October 27, 2015Assignee: Intel CorporationInventors: Vinay Phegade, Anand Rajan, Simon Johnson, Vincent Scarlata, Carlos Rozas, Nikhil Deshpande
-
Patent number: 9158942Abstract: Systems, apparatus and methods are described including operations for securing display output data against malicious software attacks.Type: GrantFiled: February 11, 2013Date of Patent: October 13, 2015Assignee: INTEL CORPORATIONInventors: Ravi L. Sahita, Vinay Phegade, David J. Cowperthwaite
-
Patent number: 9118639Abstract: Generally, this disclosure describes a system and method for trusted data processing in the public cloud. A system may include a cloud server including a trusted execution environment, the cloud server one of a plurality of cloud servers, a cloud storage device coupled to the cloud server, and a RKM server including a key server module, the RKM server configured to sign the key server module using a private key and a gateway server configured to provide the signed key server module to the cloud server, the trusted execution environment configured to verify the key server module using a public key related to the private key and to launch the key server module, the key server module configured to establish a secure communication channel between the gateway server and the key server module, and the gateway server configured to provide a cryptographic key to the key server module via the secure communication channel.Type: GrantFiled: March 14, 2013Date of Patent: August 25, 2015Assignee: Intel CorporationInventors: Vinay Phegade, Nilesh K Jain, Jesse Walker