Michael E Freedman

US Patent:

8204982, Jun 19, 2012

Filed:

Sep 14, 2007

Appl. No.:

11/855745

Inventors:

Martin Casado - Menlo Park CA, US
Michael J. Freedman - Kingston PA, US

Assignee:

Quova, Inc. - Mountain View CA

International Classification:

G06F 15/173

US Classification:

709224, 709238, 370389, 370400

Abstract:

A computer-implemented system and method to detect and characterize middleboxes is disclosed. Embodiments of the system and method include a middlebox detection engine to provide a plurality of middlebox detection modules, and to use at least one middlebox detection module of the plurality of middlebox detection modules to determine if a middlebox exists on a path between a first communicating entity of a network and a second communicating entity of the network.

US Patent:

8463904, Jun 11, 2013

Filed:

Dec 2, 2011

Appl. No.:

13/309860

Inventors:

Martin Casado - Menlo Park CA, US
Michael J. Freedman - Kingston PA, US

Assignee:

Quova, Inc. - Mountain View CA

International Classification:

G06F 15/173

US Classification:

709224, 709238, 370389, 370400

Abstract:

A computer-implemented system and method to detect and characterize middleboxes is disclosed. Embodiments of the system and method include a middlebox detection engine to provide a plurality of middlebox detection modules, and to use at least one middlebox detection module of the plurality of middlebox detection modules to determine if a middlebox exists on a path between a first communicating entity of a network and a second communicating entity of the network.

US Patent:

20070005594, Jan 4, 2007

Filed:

Jun 30, 2005

Appl. No.:

11/171994

Inventors:

Binyamin Pinkas - Tel Avlv, IL
Michael Freedman - Stanford CA, US

International Classification:

G06F 17/30

US Classification:

707006000

Abstract:

A system and method for confidentially keyword searching information residing in a remote server processing system are disclosed. Briefly described, one embodiment is a method comprising receiving from a client system a keyword search request having at least one searchword; mapping a plurality of items to at least one of L bins using a function (H), the items residing in a dataset and comprised of item pairs (xi, pi), such that the item pairs are mapped to the bin H(xi); for the bins, defining at least one polynomial as a function of the items mapped into the bins; evaluating at least one of the polynomials at the searchword using an oblivious polynomial evaluation (OPE) protocol; and determining presence of at least one match between the searchword and one of the xi based upon the evaluation.

US Patent:

20080189769, Aug 7, 2008

Filed:

Jan 8, 2008

Appl. No.:

11/970976

Inventors:

Martin Casado - Menlo Park CA, US
Nick Mckeown - Palo Alto CA, US
Dan Boneh - Palo Alto CA, US
Michael J. Freedman - Kingston PA, US
Scott Shenker - Palo Alto CA, US

International Classification:

G06F 21/22
H04L 9/32

US Classification:

726 4

Abstract:

Use of a centralized control architecture in a network. Policy declaration, routing computation, and permission checks are managed by a logically centralized controller. By default, hosts on the network can only route to the network controller. Hosts and users must first authenticate themselves with the controller before they can request access to the network resources. The controller uses the first packet of each flow for connection setup. When a packet arrives at the controller, the controller decides whether the flow represented by that packet should be allowed. The switches use a simple flow table to forward packets under the direction of the controller. When a packet arrives that is not in the flow table, it is forwarded to the controller, along with information about which port the packet arrived on. When a packet arrives that is in the flow table, it is forwarded according to the controller's directive.