专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US10291657B2 Metadata-based data loss prevention (DLP) for cloud storage 有权
公开(公告)号：US10291657B2
公开(公告)日：2019-05-14
申请号：US16000132
申请日：2018-06-05
申请人： NetSkope, Inc.
发明人： Krishna Narayanaswamy , Lebin Cheng , Abhay Kulkarni , Ravi Ithal , Chetan Anand , Rajneesh Chopra
IPC分类号： H04L29/06 , G06F21/62 , G06F17/30
摘要： The technology disclosed relates to enforcing multi-part policies on data-deficient transactions of independent data stores. In particular, it relates to combining active analysis of access requests for the independent object stores with inspection of objects in the independent object stores, each of the analysis and inspection generating and persisting object metadata in a supplemental data store, actively processing data-deficient transactions that apply to the objects by accessing the supplemental data store to retrieve object metadata not available in transaction streams of the data-deficient transactions, and actively enforcing the multi-part policies using the retrieved object metadata.

2. 发明授权

US11019101B2 Middle ware security layer for cloud computing services 有权
公开(公告)号：US11019101B2
公开(公告)日：2021-05-25
申请号：US15368246
申请日：2016-12-02
申请人： NetSkope, Inc.
发明人： Krishna Narayanaswamy , Lebin Cheng , Abhay Kulkarni , Ravi Ithal , Chetan Anand , Rajneesh Chopra
IPC分类号： H04L29/06 , G06F16/28 , G06F16/951 , G06F21/62
摘要： The technology disclosed relates to enforcing multi-part policies on data-deficient transactions of independent data stores. In particular, it relates to combining active analysis of access requests for the independent object stores with inspection of objects in the independent object stores, each of the analysis and inspection generating and persisting object metadata in a supplemental data store, actively processing data-deficient transactions that apply to the objects by accessing the supplemental data store to retrieve object metadata not available in transaction streams of the data-deficient transactions, and actively enforcing the multi-part policies using the retrieved object metadata.

3. 发明授权

US10979458B2 Data loss prevention (DLP) policy enforcement based on object metadata 有权
公开(公告)号：US10979458B2
公开(公告)日：2021-04-13
申请号：US16409685
申请日：2019-05-10
申请人： Netskope, Inc.
发明人： Krishna Narayanaswamy , Lebin Cheng , Abhay Kulkarni , Ravi Ithal , Chetan Anand , Rajneesh Chopra
IPC分类号： H04L29/06 , G06F16/28 , G06F16/951 , G06F21/62
摘要： The technology disclosed relates to enforcing multi-part policies on data-deficient transactions of independent data stores. In particular, it relates to combining active analysis of access requests for the independent object stores with inspection of objects in the independent object stores, each of the analysis and inspection generating and persisting object metadata in a supplemental data store, actively processing data-deficient transactions that apply to the objects by accessing the supplemental data store to retrieve object metadata not available in transaction streams of the data-deficient transactions, and actively enforcing the multi-part policies using the retrieved object metadata.

4. 发明申请

US20140259093A1 SECURITY FOR NETWORK DELIVERED SERVICES 有权
公开(公告)号：US20140259093A1
公开(公告)日：2014-09-11
申请号：US14198499
申请日：2014-03-05
申请人： Netskope, Inc.
发明人： Krishna Narayanaswamy , Lebin Cheng , Ravi Ithal , Sanjay Beri
IPC分类号： H04L29/06
CPC分类号： H04L63/20 , H04L63/0272 , H04L63/0281 , H04L63/08 , H04L63/1425 , H04L63/168 , H04L67/20
摘要： A computer-implemented method for accessing a hosted service on client devices is described. The client devices include client software that uses a remotely delivered policy to redirect network requests for hosted services to a server to enforce visibility, policy and data security for network delivered services. The method can be used in conjunction with existing VPN and proxy solutions, but provides distinct additional functionality, particularly suited to corporate needs. Policies allow entities to centralize enforcement of service-specific restrictions across networks and communication channels, e.g. only certain users can download client records from a service—irrespective of the network used to access the service.

5. 发明授权

US11184398B2 Points of presence (POPs) architecture for cloud security 有权
公开(公告)号：US11184398B2
公开(公告)日：2021-11-23
申请号：US16554482
申请日：2019-08-28
申请人： Netskope, Inc.
发明人： Krishna Narayanaswamy , Lebin Cheng , Ravi Ithal , Sanjay Beri
IPC分类号： H04L29/06 , H04L12/813 , H04L29/08
摘要： A computer-implemented method for accessing a hosted service on client devices is described. The client devices include client software that uses a remotely delivered policy to redirect network requests for hosted services to a server to enforce visibility, policy and data security for network delivered services. The method can be used in conjunction with existing VPN and proxy solutions, but provides distinct additional functionality, particularly suited to corporate needs. Policies allow entities to centralize enforcement of service-specific restrictions across networks and communication channels, e.g. only certain users can download client records from a service—irrespective of the network used to access the service.

6. 发明授权

US11064016B2 Universal connectors for cloud data loss prevention (DLP) 有权
公开(公告)号：US11064016B2
公开(公告)日：2021-07-13
申请号：US16438374
申请日：2019-06-11
申请人： Netskope, Inc.
发明人： Lebin Cheng , Krishna Narayanaswamy
IPC分类号： H04L29/08 , G06F16/955 , G06F9/54 , H04L29/06
摘要： The technology disclosed includes a system to apply data loss prevention (DLP) to cloud-based services for which no service-specific parser is available. The system determines that a known cloud-based service is being accessed via an application programming interface (API) and no service-specific parser is available for the API being accessed. The system applies a category-directed parser to the API being accessed. The category-directed parser includes multiple category-directed match rules derived from multiple syntaxes used by numerous known providers to implement a category of service. The category-directed parser collects metadata from content being conveyed via the API and assigns the collected metadata to variables. The system invokes a DLP processor and sends the collected metadata to the DLP processor for use in focusing analysis of content being conveyed via the API.

7. 发明授权

US11064013B2 Data loss prevention using category-directed parsers 有权
公开(公告)号：US11064013B2
公开(公告)日：2021-07-13
申请号：US15986732
申请日：2018-05-22
申请人： Netskope, Inc.
发明人： Lebin Cheng , Krishna Narayanaswamy
IPC分类号： H04L29/08 , G06F16/955 , G06F9/54 , H04L29/06
摘要： The technology disclosed includes a system to apply data loss prevention (DLP) to cloud-based services for which no service-specific parser is available. The system determines that a known cloud-based service is being accessed via an application programming interface (API) and no service-specific parser is available for the API being accessed. The system applies a category-directed parser to the API being accessed. The category-directed parser includes multiple category-directed match rules derived from multiple syntaxes used by numerous known providers to implement a category of service. The category-directed parser collects metadata from content being conveyed via the API and assigns the collected metadata to variables. The system invokes a DLP processor and sends the collected metadata to the DLP processor for use in focusing analysis of content being conveyed via the API.

8. 发明授权

US09398102B2 Security for network delivered services 有权
标题翻译：网络传送服务的安全
公开(公告)号：US09398102B2
公开(公告)日：2016-07-19
申请号：US14198499
申请日：2014-03-05
申请人： Netskope, Inc.
发明人： Krishna Narayanaswamy , Lebin Cheng , Ravi Ithal , Sanjay Beri
IPC分类号： H04L29/08 , H04L29/06
CPC分类号： H04L63/20 , H04L63/0272 , H04L63/0281 , H04L63/08 , H04L63/1425 , H04L63/168 , H04L67/20
摘要： A computer-implemented method for accessing a hosted service on client devices is described. The client devices include client software that uses a remotely delivered policy to redirect network requests for hosted services to a server to enforce visibility, policy and data security for network delivered services. The method can be used in conjunction with existing VPN and proxy solutions, but provides distinct additional functionality, particularly suited to corporate needs. Policies allow entities to centralize enforcement of service-specific restrictions across networks and communication channels, e.g. only certain users can download client records from a service—irrespective of the network used to access the service.
摘要翻译：描述了用于访问客户端设备上的托管服务的计算机实现的方法。客户端设备包括使用远程传递的策略的客户端软件，将托管服务的网络请求重定向到服务器，以实现对网络传送服务的可见性，策略和数据安全性。该方法可以与现有的VPN和代理解决方案结合使用，但提供了独特的附加功能，特别适合企业需求。政策允许实体集中执行网络和通信渠道之间的服务特定限制，例如只有某些用户可以从服务下载客户端记录，而不管用于访问服务的网络如何。

9. 发明授权

US11575735B2 Cloud application-agnostic data loss prevention (DLP) 有权
公开(公告)号：US11575735B2
公开(公告)日：2023-02-07
申请号：US17373643
申请日：2021-07-12
申请人： Netskope, Inc.
发明人： Lebin Cheng , Krishna Narayanaswamy
IPC分类号： H04L67/10 , G06F16/955 , G06F9/54 , H04L67/01
摘要： The technology disclosed applies data loss prevention (DLP) to those cloud-applications for which no application-specific parser is available. Known cloud applications can be arranged in categories of services such as “personal pages and blog,” “news websites,” “cloud-based storage services,” and “social media services.” A category includes a list of uniform resource locators (URLs) of providers of cloud applications that allow users to perform similar activities. The various providers in a category use different syntaxes to implement services in the category. The disclosed category-directed parsers synthesize interaction syntax patterns of a sample of providers in the category. A category-directed parser collects metadata from known cloud applications using multiple category-directed match rules synthesized from syntaxes used by the sample providers in the category. The metadata collected by the category-directed parser enables the DLP processor to focus analysis of the content being conveyed via a corresponding API.

10. 发明授权

US11057367B2 Assertion proxy for single sign-on access to cloud applications 有权
公开(公告)号：US11057367B2
公开(公告)日：2021-07-06
申请号：US16782027
申请日：2020-02-04
申请人： Netskope, Inc.
发明人： Kartik Kumar Chatnalli Deshpande Sridhar , Lebin Cheng , Krishna Narayanaswamy
IPC分类号： H04L29/06 , H04L29/08 , H04L9/32 , H04L9/14 , H04L9/30
摘要： The technology disclosed relates to non-intrusively enforcing security during federated single sign-on (SSO) authentication without modifying a trust relationship between a service provider (SP) and an identity provider (IDP). In particular, it relates to configuring the IDP to use a proxy-URL for forwarding an assertion generated when a user logs into the SP, in place of an assertion consumer service (ACS)-URL of the SP. It also relates to configuring an assertion proxy, at the proxy-URL, to use the SP's ACS-URL for forwarding the assertion to the SP. It further relates to inserting the assertion proxy in between the user's client and an ACS of the SP by forwarding the assertion to the SP's ACS-URL to establish a federated SSO authenticated session through the inserted assertion proxy.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式