Daniel P Robinson

US Patent:

20020032873, Mar 14, 2002

Filed:

Sep 13, 2001

Appl. No.:

09/952290

Inventors:

David Lordemann - Los Altos CA, US
Daniel Robinson - Santa Clara CA, US
Paul Scheibe - Woodside CA, US

International Classification:

H04L009/00

US Classification:

713/201000

Abstract:

A method and system for protecting objects stored on network servers are presented. An object server runs computer software that designates which objects are to be protected and the security policy for that object. If the object server receives a request for a protected object, the object server creates an enhanced request containing encrypted data related to the request and the requested object; this enhanced request is redirected to a security server which authenticates the request, retrieves the requested object, encrypts the object using a one-time encryption key, and combines the encrypted object with mobile code, the security policy, and object controls to implement the policy. This package is then sent to the requester, which executes the mobile code, resulting in the instantiation of the security policy and object controls on the requester computer. The mobile code will execute tests to ensure proper instantiation of the object controls. A one-time decryption key may be requested by and provided to the requester providing the object controls were properly instantiated. The requested object is rendered subject to the security policy and object controls.

US Patent:

20020046350, Apr 18, 2002

Filed:

Sep 14, 2001

Appl. No.:

09/952696

Inventors:

David Lordemann - Los Altos CA, US
Daniel Robinson - Santa Clara CA, US
Paul Scheibe - Woodside CA, US

International Classification:

G06F011/30
H04L009/00

US Classification:

713/201000

Abstract:

A system and method for establishing a log file which may be used to create an audit trail are presented. A security server maintains a log file of actions performed by a requester and the security server which are related to protected objects. Object controls instantiated with the object on the requester device transmit an encrypted descriptor of the action to the security server and may prevent the requester device from taking any action (viewing, editing, printing, etc.) if there is no secure connection to the security server. The security server will record the information received from the requester device, along with other data, to the log file as well as recording a descriptor of any of the security server's actions taken which relate to the protection of objects.

US Patent:

20030051172, Mar 13, 2003

Filed:

Oct 23, 2002

Appl. No.:

10/279378

Inventors:

David Lordemann - Los Altos CA, US
Daniel Robinson - Santa Clara CA, US
Paul Scheibe - Woodside CA, US

International Classification:

H04L009/00

US Classification:

713/201000

Abstract:

A method and system for protecting objects stored on network servers are presented. An object server runs computer software that designates which objects are to be protected and the security policy for that object. If the object server receives a request for a protected object, the object server creates an enhanced request containing cryptographically protected data related to the request and to the requested object; this enhanced request is redirected to a security server. The security server authenticates the request, retrieves the requested object from the object server, a file server associated with the security server, or a local cache, encrypts the object, and combines the encrypted object with mobile code, the security policy, and object controls to implement the policy. This package is then sent to the requester, which executes the mobile code, resulting in the installation of the security policy and object controls on the requester computer. The requested object is rendered subject to the security policy and object controls. The security server maintains a logfile of actions taken on the object. This logfile can be used to create an audit trail for the object.

US Patent:

20030237005, Dec 25, 2003

Filed:

Jun 18, 2003

Appl. No.:

10/465365

Inventors:

Yuval Bar-Or - Sunnyvale CA, US
David Lordemann - Los Altos CA, US
Daniel Robinson - Santa Clara CA, US

International Classification:

H04L009/00

US Classification:

713/201000, 713/182000

Abstract:

A method and system for protecting digital objects transmitted over a network. A sender creates a notification specifying an object to be delivered to a recipient as well the object's security policy and any authentication information required to access the object. The notification is sent to an object server which creates an identifier associated with the object and sends an e-mail message with the identifier to the recipient. The recipient may access the object by referencing the identifier. The object server authenticates the request for the object and redirects the request to a security server. The security server protects the object in accordance with the security policy designated by the sender and combines the object with mobile code to enforce the security policy at the recipient's computer. The protected object is sent to the recipient. When the recipient tries to access the object, the mobile code executes and instantiates the object's security policy and object controls for enforcing the security policy at the recipient. The object may only be accessed in accordance with the security policy. An audit trail of actions related to the object may also be established.

US Patent:

20220358109, Nov 10, 2022

Filed:

Jul 20, 2022

Appl. No.:

17/869630

Inventors:

- Palo Alto CA, US
Brian Dorne - Menlo Park CA, US
Michael Glazer - San Francisco CA, US
Derek Rabideau - Neenah WI, US
Richard Allen Ducott, III - London, GB
David Karesh - Palo Alto CA, US
Dylan Davis - Palo Alto CA, US
Matthew Dailey - San Francisco CA, US
Hongyi Yao - Mountain View CA, US
Daniel Robinson - Menlo Park CA, US

International Classification:

G06F 16/22
G06F 16/245
G06F 16/951
G06F 16/23

Abstract:

A computer-implemented method comprises receiving, by a processor, search requests to search a database; receiving a reindex request to reindex information in the database based on a new ontology for the database or a new number of shards for a first index server; initiating, by the processor, generation of a second index for the database while a first index managed by the first index server continues to be used live for responding to received search requests; completing the generation of the second index during a certain period when no search request is sent to the first index server; and in response to the completing, using the second index live for responding to received search requests.

US Patent:

20190384751, Dec 19, 2019

Filed:

Aug 30, 2019

Appl. No.:

16/557583

Inventors:

- Palo Alto CA, US
Brian Dorne - Menlo Park CA, US
Michael Glazer - San Francisco CA, US
Derek Rabideau - Neenah WI, US
Richard Allen Ducott, III - London, GB
David Karesh - Palo Alto CA, US
Dylan Davis - Palo Alto CA, US
Matthew Dailey - San Francisco CA, US
Hongyi Yao - Mountain View CA, US
Daniel Robinson - Menlo Park CA, US

International Classification:

G06F 16/22
G06F 16/245
G06F 16/951
G06F 16/23

Abstract:

Systems and methods for live reindexing include receiving, at a dispatch server, a request to reindex a database, wherein, at the time the request to reindex is received, the dispatch server is configured to send queries for information in the database to a first index server, the first index server comprising a first index of information in the database. The systems and methods further include, responsive to receiving the request to reindex and while the database is live, generating a second index of the information in the database, storing the second index at a second index server, and configuring the dispatch server to use the second index server as a live index server and to no longer use the first index server as a live index server.