Mark J Sutherland

US Patent:

7380140, May 27, 2008

Filed:

Mar 21, 2005

Appl. No.:

11/085777

Inventors:

Gregg D. Weissman - Los Gatos CA, US
Hon Tran - San Jose CA, US
Gregory W. Dalcher - Placerville CA, US
Jay H. Hoffmeier - Burke VA, US
James E. Zmuda - Foster City CA, US
Mark J. Sutherland - Milpitas CA, US
Michael T. Guttman - Newberry Park CA, US

Assignee:

Spyrus, Inc. - San Jose CA

International Classification:

G06F 11/30
G06F 12/14
G06F 9/00
G06F 15/177
H04L 9/32
H04L 9/00
G06F 12/00
G06F 13/00
G06F 13/28
G06F 15/167

US Classification:

713193, 711162, 711161, 709213, 713 2, 713189, 713161

Abstract:

The invention establishes a protected volume on a data storage device associated with a computational device by allowing an operating system of the computational device to boot up to a point (the volume conversion crossover point) at which predetermined functionality of the operating system becomes available, then establishing the protected volume. A copy of the operating system data (cleartext operating system data) that is accessed during boot up prior to the volume conversion crossover point (which can be known by monitoring and recording access to operating system data during boot-up) is stored in an unprotected region of the data storage device. A copy of the cleartext operating system data is also stored in the protected volume. After the protected volume is established, the computational device is reset, causing the operating system to boot up again. During each boot-up of the operating system after the protected volume has been established, the cleartext operating system data is used until the volume conversion crossover point, at which time operation of the computational device converts to a secure mode (if authorized) in which data stored on the data storage device can be accessed from the protected volume (including the copy of the cleartext operating system data that is stored in the protected volume).

US Patent:

7620707, Nov 17, 2009

Filed:

Jun 30, 2004

Appl. No.:

10/883475

Inventors:

Mark J. Sutherland - Milpitas CA, US
Paul Y. Wong - Fremont CA, US

Assignee:

Kaseya International Limited - St. Helier

International Classification:

G06F 15/173
G06F 15/16
G06F 15/177
G06F 9/445

US Classification:

709223, 709220, 709202, 717174

Abstract:

The invention facilitates remote management of a computer via a network. Remote computer management in which communication between a managed computer and a remote computer management server is initiated by the managed computer is implemented so that the presence of a proxy server at the site at which the managed computer is located can be detected, and communication from the managed computer to the remote computer management server is routed to a communication port assigned for communication with the proxy server, with instructions to then send the communication to the remote computer management server.

US Patent:

7757100, Jul 13, 2010

Filed:

May 23, 2008

Appl. No.:

12/126759

Inventors:

Gregg D. Weissman - Los Gatos CA, US
Hon Tran - San Jose CA, US
Gregory W. Dalcher - Placerville CA, US
Jay H. Hoffmeier - Burke VA, US
James E. Zmuda - Foster City CA, US
Mark J. Sutherland - Milpitas CA, US
Michael T. Guttman - Newberry Park CA, US

Assignee:

Spyrus, Inc. - San Jose CA

International Classification:

G06F 11/30
G06F 12/14
G06F 9/00
G06F 15/177
H04L 9/32
H04L 9/00
G06F 12/00
G06F 13/00
G06F 13/28
G06F 15/167

US Classification:

713193, 711162, 711161, 709213, 713 2, 713189, 713161

Abstract:

A method provides a protected region of a data storage device associated with a computational device, where data in the protected region is primarily protected by preventing access without proper access authorization. The method comprises the steps of providing, in an unprotected region of the data storage device, a first operating system and associated operating system data; monitoring operating system data accessed by the computational device until a predetermined functionality becomes available; storing, in the protected region, the monitored operating system data; providing, in the protected region, a second operating system; transferring control of the computational device from the first operating system to the second operating system; storing data in the protected region; and preventing access to the stored data in the protected region without access authorization. In a further embodiment of the method, the second operating system optionally provides a second level of security by preventing decryption of data stored in the protected region without decryption authorization.

US Patent:

7827547, Nov 2, 2010

Filed:

Jun 30, 2004

Appl. No.:

10/883630

Inventors:

Mark J. Sutherland - Milpitas CA, US
Paul Y. Wong - Fremont CA, US

Assignee:

Kaseya International Limited - St. Helier

International Classification:

G06F 9/44

US Classification:

717173, 717121, 717178

Abstract:

The invention facilitates remote management of a computer via a network. Remote computer management capability can be updated by providing to a managed computer, for use by software operating on the managed computer to effect management actions, a dynamically loaded library (or other set of instructions and/or data that will not be identified as a new executing process on the managed computer) that includes functionality not previously enabled by the software operating on the managed computer.

US Patent:

8161162, Apr 17, 2012

Filed:

Jun 30, 2004

Appl. No.:

10/883639

Inventors:

Mark J. Sutherland - Milpitas CA, US
Paul Y. Wong - Fremont CA, US

Assignee:

Kaseya International Limited - Jersey

International Classification:

G06F 15/16
G06F 15/173
G06F 3/00
G06F 3/12
H04L 12/66

US Classification:

709227, 709206, 709221, 709223, 709230, 709244, 719310, 719318, 370352, 358 115

Abstract:

The invention facilitates remote management of a computer via a network. Remote computer management in which communication between a managed computer and a remote computer management server is initiated by the managed computer is implemented so that the communication is formatted in accordance with a network communications protocol that can be used to format communication that is allowed to pass through a firewall and/or gateway that mediates communication with the managed computer.

US Patent:

8200794, Jun 12, 2012

Filed:

Jun 30, 2004

Appl. No.:

10/883643

Inventors:

Mark J. Sutherland - Milpitas CA, US
Paul Y. Wong - Fremont CA, US

Assignee:

Kaseya International Limited - Jersey

International Classification:

G06F 15/177

US Classification:

709222

Abstract:

The invention facilitates remote management of a computer via a network. Remote computer management capability can be expanded beyond that previously available through the addition of one or more new primitive functions that can be performed on a managed computer.

US Patent:

8271637, Sep 18, 2012

Filed:

Sep 28, 2009

Appl. No.:

12/568166

Inventors:

Mark J Sutherland - Milpitas CA, US
Paul Y Wong - Fremont CA, US

Assignee:

Kaseya International Limited - NJ

International Classification:

G06F 15/173
G06F 15/16
G06F 15/177
G06F 9/445

US Classification:

709223, 709202, 709220, 717174

Abstract:

The invention facilitates remote management of a computer via a network. Remote computer management in which communication between a managed computer and a remote computer management server is initiated by the managed computer is implemented so that the presence of a proxy server at the site at which the managed computer is located can be detected, and communication from the managed computer to the remote computer management server is routed to a communication port assigned for communication with the proxy server, with instructions to then send the communication to the remote computer management server.

US Patent:

8504665, Aug 6, 2013

Filed:

Jun 30, 2004

Appl. No.:

10/882990

Inventors:

Mark J. Sutherland - Milpitas CA, US
Paul Y. Wong - Fremont CA, US

Assignee:

Kaseya International Limited - NJ

International Classification:

G06F 15/173

US Classification:

709223, 709202, 709226

Abstract:

The invention facilitates remote management of a computer via a network. Remote management of a device connected to a managed computer can be effected by using the managed computer as a proxy for conducting a management action regarding the connected device on behalf of a remote computer management server.