Patrick M Foxhoven

8464335, Jun 11, 2013

Apr 28, 2011

13/096727

Amit Sinha - San Jose CA, US
Srikanth Devarajan - San Jose CA, US
Patrick Foxhoven - Santa Clara CA, US

Zscaler, Inc. - San Jose CA

H04L 29/06

726 13, 713153, 713154, 713155

The present disclosure provides distributed, multi-tenant Virtual Private Network (VPN) cloud systems and methods for mobile security and user based policy enforcement. In an exemplary embodiment, plural mobile devices are configured to connect to one or more enforcement or processing nodes over VPN connections. The enforcement or processing nodes are configured to perform content filtering, policy enforcement, and the like on some or all of the traffic from the mobile devices. The present invention is described as multi-tenant as it can connect to plural clients across different companies with different policies in a single distributed system. Advantageously, the present invention allows smartphone and tablet users to protect themselves from mobile malware, without requiring a security applications on the device. It allows administrators to seamless enforce policy for a user regardless of the device or network they are connecting to, as well as get granular visibility into the user's network behavior.

20220286854, Sep 8, 2022

Mar 21, 2022

17/699388

- San Jose CA, US
Kenneth B. Urquhart - Reno NV, US
Subramanian Srinivasan - Milpitas CA, US
Sridhar Kartik Kumar Chatnalli Deshpande - Kirkland WA, US
Patrick Foxhoven - Los Altos CA, US

H04W 12/08
H04W 76/10

The present disclosure relates to systems and methods for cloud-based 5G security network architectures intelligent steering, workload isolation, identity, and secure edge steering. Specifically, various approaches are described to integrate cloud-based security services into Multiaccess Edge Compute servers (MECs). That is, existing cloud-based security services are in line between a UE and the Internet. The present disclosure includes integrating the cloud-based security services and associated cloud-based system within service provider's MECs. In this manner, a cloud-based security service can be integrated with a service provider's 5G network or a 5G network privately operated by the customer. For example, nodes in a cloud-based system can be collocated within a service provider's network, to provide security functions to 5G users or connected by peering from the cloud-based security service into the 5G service provider's regional communications centers.

20220286894, Sep 8, 2022

Mar 21, 2022

17/699455

- San Jose CA, US
Kenneth B. Urquhart - Reno NV, US
Subramanian Srinivasan - Milpitas CA, US
Sridhar Kartik Kumar Chatnalli Deshpande - Kirkland WA, US
Patrick Foxhoven - Los Altos CA, US

H04W 28/02

The present disclosure relates to systems and methods for cloud-based 5G security network architectures intelligent steering, workload isolation, identity, and secure edge steering. Specifically, various approaches are described to integrate cloud-based security services into Multiaccess Edge Compute servers (MECs). That is, existing cloud-based security services are in line between a UE and the Internet. The present disclosure includes integrating the cloud-based security services and associated cloud-based system within service provider's MECs. In this manner, a cloud-based security service can be integrated with a service provider's 5G network or a 5G network privately operated by the customer. For example, nodes in a cloud-based system can be collocated within a service provider's network, to provide security functions to 5G users or connected by peering from the cloud-based security service into the 5G service provider's regional communications centers.

20220286912, Sep 8, 2022

Mar 21, 2022

17/699498

- San Jose CA, US
Kenneth B. Urquhart - Reno NV, US
Subramanian Srinivasan - Milpitas CA, US
Sridhar Kartik Kumar Chatnalli Deshpande - Kirkland WA, US
Patrick Foxhoven - Los Altos CA, US

H04W 28/08
H04W 28/02

The present disclosure relates to systems and methods for cloud-based 5G security network architectures intelligent steering, workload isolation, identity, and secure edge steering. Specifically, various approaches are described to integrate cloud-based security services into Multiaccess Edge Compute servers (MECs). That is, existing cloud-based security services are in line between a UE and the Internet. The present disclosure includes integrating the cloud-based security services and associated cloud-based system within service provider's MECs. In this manner, a cloud-based security service can be integrated with a service provider's 5G network or a 5G network privately operated by the customer. For example, nodes in a cloud-based system can be collocated within a service provider's network, to provide security functions to 5G users or connected by peering from the cloud-based security service into the 5G service provider's regional communications centers.

20200195614, Jun 18, 2020

Feb 25, 2020

16/800307

- San Jose CA, US
Patrick Foxhoven - San Jose CA, US
William Fehring - Sunnyvale CA, US
Denzil Wessels - Los Gatos CA, US
Kunal Shah - San Jose CA, US
Subramanian Srinivasan - Milpitas CA, US

H04L 29/06
H04L 9/00
H04L 9/08
H04L 29/08
H04L 9/30
H04L 9/32
H04L 9/14
G06F 9/54

Systems and methods, in a lightweight connector including a processor communicatively coupled to a network interface, include connecting to a cloud-based system, via the network interface; connecting to one or more of a file share and an application, via the network interface; and providing access to a user device to the one or more of the file share and the application via a stitched connection between the network interface and the user device through the cloud-based system. The systems and methods can further include receiving a query for discovery; and responding to the query based on the one or more of the file share and the application connected thereto.

20190158516, May 23, 2019

Jan 28, 2019

16/258807

- San Jose CA, US
Manoj Apte - San Jose CA, US
Patrick Foxhoven - San Jose CA, US

H04L 29/06
H04L 29/08

A Content Delivery Network (CDN) includes one or more cache servers communicatively coupled to end users for providing content thereto; and one or more origin servers communicatively coupled to the one or more cache servers through a plurality of nodes, the one or more cache servers are configured to receive traffic related to the content from the one or more origin servers through the one or more nodes of the plurality of nodes, based on one or more of a push technique and a pull technique, and the plurality of nodes are configured to monitor the traffic between the one or more origin servers and the one or more cache servers in an inline manner, process the traffic for malware and data leakage based on policy, and block the traffic responsive to detection of one or more of the malware and the data leakage, prior to traffic entering the CDN.

20180270201, Sep 20, 2018

May 23, 2018

15/986874

- San Jose CA, US
Patrick Foxhoven - San Jose CA, US
William Fehring - Sunnyvale CA, US
Denzil Wessels - Los Gatos CA, US
Kunal Shah - San Jose CA, US
Subramanian Srinivasan - Milpitas CA, US

H04L 29/06
H04L 9/30
H04L 9/14
H04L 9/32
G06F 9/54

Virtual private access systems and methods implemented in a clientless manner on a user device include receiving a request to access resources from a Web browser on the user device at an exporter in a cloud system, wherein the resources are located in one of a public cloud and an enterprise network and the user device is remote therefrom on the Internet; performing a series of connections between the exporter and i) the Web browser and ii) centralized components including a crypto service, database, cookie store, and Security Assertion Markup Language (SAML) Service Provider (SP) component to authenticate a user of the user device for the resources; and, subsequent to authentication, exchanging data between the Web browser and the resources through the exporter, wherein the exporter has a first secure tunnel to the Web browser and a second secure tunnel to the resources.

20170223029, Aug 3, 2017

Jan 29, 2016

15/010441

Dhawal Kumar Sharma - San Jose CA, US
Manoj Apte - San Jose CA, US
Patrick Foxhoven - San Jose CA, US

Zscaler, Inc. - San Jose CA

H04L 29/06
H04L 29/08

Content Delivery Network (CDN) protection systems and methods, performed by a cloud node in a distributed security system include receiving traffic between one or more origin servers and the CDN; monitoring the traffic based on policy; detecting one or more of malware and data leakage in the traffic based on the policy; and blocking the traffic responsive to the detecting the one or more of the malware and the data leakage in the traffic, prior to the traffic entering the CDN.