John Summers

US Patent:

8458769, Jun 4, 2013

Filed:

Dec 10, 2010

Appl. No.:

12/965188

Inventors:

John Dilley - Los Altos CA, US
Prasanna Laghate - Santa Clara CA, US
John Summers - Newton MA, US
Thomas Devanneaux - Los Altos CA, US

Assignee:

Akamai Technologies, Inc. - Cambridge MA

International Classification:

H04L 9/32

US Classification:

726 2, 726 11

Abstract:

A cloud-based firewall system and service is provided to protect customer sites from attacks, leakage of confidential information, and other security threats. In various embodiments, such a firewall system and service can be implemented in conjunction with a content delivery network (CDN) having a plurality of distributed content servers. The CDN servers receive requests for content identified by the customer for delivery via the CDN. The CDN servers include firewalls that examine those requests and take action against security threats, so as to prevent them from reaching the customer site. The CDN provider implements the firewall system as a managed firewall service, with the operation of the firewalls for given customer content being defined by that customer, independently of other customers. In some embodiments, a customer may define different firewall configurations for different categories of that customer's content identified for delivery via the CDN.

US Patent:

20120096546, Apr 19, 2012

Filed:

May 19, 2011

Appl. No.:

13/111676

Inventors:

John A. Dilley - Los Altos CA, US
Stephen L. Ludin - Mill Valley CA, US
John F. Summers - Waban MA, US

Assignee:

AKAMAI TECHNOLOGIES, INC. - Cambridge MA

International Classification:

G06F 17/00
G06F 21/00

US Classification:

726 22, 715236

Abstract:

A CDN edge server process receives an HTTP message, takes a given action with respect to that message, and then forwards a modified version of the message to a target server, typically a server associated with a CDN customer. The process may include an associated intermediate processing agent (IPA) or a sub-processing thread to facilitate the given action. In one embodiment, the message is an HTTP POST, and the given action comprises the following: (i) recognizing the POST, (ii) removing given data from the POST, (iii) issuing an intermediate (or subordinate) request to another process (e.g., a third party server), passing the given data removed from the POST to the process, (iv) receiving a response to the intermediate request, (v) incorporating data received from or associated with the response into a new HTTP message, and (vi) forwarding the new HTTP message onto the target server. In this manner, the given data in the POST may be protected as the HTTP message “passes through” the edge server on its way from the client to the target (merchant) server. In an alternative embodiment, data extracted from the POST message is enhanced by passing the data to an externalized process and adding a derived value (such as a fraud risk score based on the data) back into the message.

US Patent:

20120124372, May 17, 2012

Filed:

Oct 12, 2011

Appl. No.:

13/272071

Inventors:

John A. Dilley - Los Altos CA, US
Andrew B. Ellis - Medford MA, US
Stephen L. Ludin - Mill Valley CA, US
John Summers - Newton MA, US

Assignee:

AKAMAI TECHNOLOGIES, INC. - Cambridge MA

International Classification:

H04L 29/06

US Classification:

713162

Abstract:

Websites and website users are subject to an increasing array of online threats and attacks. Disclosed herein are, among other things, approaches for protecting websites and website users from online threats. For example, a content server, such as a proxying content delivery network (CDN) server that is delivering content on behalf of an origin server, can modify URLs as they pass through the content server to obscured values that are given to the end-user client browser. The end-user browser can use the obscured URL to obtain content from the content server, but the URL may be valid only for a limited time, and may be invalid for obtaining content from the origin. Hence, information is hidden from the client, making attacks against the website more difficult and frustrating client-end malware that leverages knowledge of browsed URLs.

US Patent:

20130269023, Oct 10, 2013

Filed:

May 17, 2013

Appl. No.:

13/896995

Inventors:

Prasanna Laghate - Santa Clara CA, US
John Summers - Newton MA, US
Thomas Devanneaux - Los Altos CA, US

International Classification:

H04L 29/06

US Classification:

726 14

Abstract:

A cloud-based firewall system and service is provided to protect customer sites from attacks, leakage of confidential information, and other security threats. In various embodiments, such a firewall system and service can be implemented in conjunction with a content delivery network (CDN) having a plurality of distributed content servers. The CDN servers receive requests for content identified by the customer for delivery via the CDN. The CDN servers include firewalls that examine those requests and take action against security threats, so as to prevent them from reaching the customer site. The CDN provider implements the firewall system as a managed firewall service, with the operation of the firewalls for given customer content being defined by that customer, independently of other customers. In some embodiments, a customer may define different firewall configurations for different categories of that customer's content identified for delivery via the CDN.

US Patent:

49883712, Jan 29, 1991

Filed:

Sep 12, 1989

Appl. No.:

7/406675

Inventors:

Thomas O. Jeanes - Antioch CA
John D. Summers - Walnut Creek CA
Edgar S. Sanders - Pittsburg CA

Assignee:

The Dow Chemical Company - Midland MI

International Classification:

B01D 5372
B01D 7164

US Classification:

55 16

Abstract:

This invention relates to novel polyimide gas separation membranes derived from alicyclic dianhydrides and aliphatic, alicyclic, or aromatic diamines, and a process for using such membranes.

US Patent:

50268236, Jun 25, 1991

Filed:

Sep 12, 1989

Appl. No.:

7/406677

Inventors:

John D. Summers - Walnut Creek CA
Thomas O. Jeanes - Antioch CA

Assignee:

The Dow Chemical Company - Midland MI

International Classification:

C08G 6926
C08G 6942
C08G 6300

US Classification:

528353

Abstract:

This invention relates to novel polyimides derived from alicyclic dianhydrides and a process for synthesizing the polyimides.

US Patent:

20200007506, Jan 2, 2020

Filed:

Feb 4, 2019

Appl. No.:

16/266335

Inventors:

- Cambridge MA, US
Prasanna Laghate - Santa Clara CA, US
John F. Summers - Newton MA, US
Thomas Devanneaux - Los Altos CA, US

Assignee:

Akamai Technologies, Inc. - Cambridge MA

International Classification:

H04L 29/06
H04L 29/08

Abstract:

A cloud-based firewall system and service is provided to protect customer sites from attacks, leakage of confidential information, and other security threats. In various embodiments, such a firewall system and service can be implemented in conjunction with a content delivery network (CDN) having a plurality of distributed content servers. The CDN servers receive requests for content identified by the customer for delivery via the CDN. The CDN servers include firewalls that examine those requests and take action against security threats, so as to prevent them from reaching the customer site. The CDN provider implements the firewall system as a managed firewall service, with the operation of the firewalls for given customer content being defined by that customer, independently of other customers. In some embodiments, a customer may define different firewall configurations for different categories of that customer's content identified for delivery via the CDN.

US Patent:

20160373411, Dec 22, 2016

Filed:

Dec 24, 2015

Appl. No.:

14/998187

Inventors:

- Cambridge MA, US
Prasanna Laghate - Santa Clara CA, US
John F. Summers - Newton MA, US
Thomas Devanneaux - Los Altos CA, US

Assignee:

Akamai Technologies, Inc. - Cambridge MA

International Classification:

H04L 29/06
H04L 29/08

Abstract:

A cloud-based firewall system and service is provided to protect customer sites from attacks, leakage of confidential information, and other security threats. In various embodiments, such a firewall system and service can be implemented in conjunction with a content delivery network (CDN) having a plurality of distributed content servers. The CDN servers receive requests for content identified by the customer for delivery via the CDN. The CDN servers include firewalls that examine those requests and take action against security threats, so as to prevent them from reaching the customer site. The CDN provider implements the firewall system as a managed firewall service, with the operation of the firewalls for given customer content being defined by that customer, independently of other customers. In some embodiments, a customer may define different firewall configurations for different categories of that customer's content identified for delivery via the CDN.