Daniel S Jensen

6408336, Jun 18, 2002

Mar 4, 1998

09/034507

David S. Schneider - Woodland Hills CA, 91367
Michael B. Ribet - Oak Brook IL, 60523
Laurence R. Lipstone - Calabasas CA, 91302
Daniel Jensen - Van Nuys CA, 91406

G06F 1516

709229, 713201

A scalable access filter that is used together with others like it in a virtual private network to control access by users at clients in the network to information resources provided by servers in the network. Each access filter use a local copy of an access control data base to determine whether an access request made by a user. Changes made by administrators in the local copies are propagated to all of the other local copies. Each user belongs to one or more user groups and each information resource belongs to one or more information sets. Access is permitted or denied according to of access policies which define access in terms of the user groups and information sets. The rights of administrators are similarly determined by administrative policies. Access is further permitted only if the trust levels of a mode of identification of the user and of the path in the network by which the access is made are sufficient for the sensitivity level of the information resource. If necessary, the access filter automatically encrypts the request with an encryption method whose trust level is sufficient.

6785728, Aug 31, 2004

Mar 23, 2000

09/533340

David S. Schneider - Woodland Hills CA, 91367
Michael B. Ribet - Oak Brook IL, 60523
Laurence R. Lipstone - Calabasas CA, 91302
Daniel Jensen - Van Nuys CA, 91406

G06F 1516

709229, 713201, 345741

A scalable access filter that is used together with others like it in a virtual private network to control access by users at clients in the network to information resources provided by servers in the network. Each access filter use a local copy of an access control data base to determine whether an access request made by a user. Changes made by administrators in the local copies are propagated to all of the other local copies. Each user belongs to one or more user groups and each information resource belongs to one or more information sets. Access is permitted or denied according to of access policies which define access in terms of the user groups and information sets. The rights of administrators are similarly determined by administrative policies. Access is further permitted only if the trust levels of a mode of identification of the user and of the path in the network by which the access is made are sufficient for the sensitivity level of the information resource. If necessary, the access filter automatically encrypts the request with an encryption method whose trust level is sufficient.

61785059, Jan 23, 2001

Mar 4, 1998

9/034576

David S. Schneider - Woodland Hills CA
Laurence R. Lipstone - Calabasas CA
Daniel Jensen - Van Nuys CA
Michael B. Ribet - Oak Brook IL

Internet Dynamics, Inc. - Westlake Village CA

H04L 932

713168

A scalable access filter that is used together with others like it in a virtual private network to control access by users at clients in the network to information resources provided by servers in the network. Each access filter use a local copy of an access control data base to determine whether an access request made by a user. Changes made by administrators in the local copies are propagated to all of the other local copies. Each user belongs to one or more user groups and each information resource belongs to one or more information sets. Access is permitted or denied according to of access policies which define access in terms of the user groups and information sets. The rights of administrators are similarly determined by administrative policies. Access is further permitted only if the trust levels of a mode of identification of the user and of the path in the network by which the access is made are sufficient for the sensitivity level of the information resource. If necessary, the access filter automatically encrypts the request with an encryption method whose trust level is sufficient.

6105027, Aug 15, 2000

Mar 4, 1998

9/034587

David S. Schneider - Woodland Hills CA
Laurence R. Lipstone - Calabasas CA
Daniel Jensen - Van Nuys CA
Michael B. Ribet - Oak Brook IL

Internet Dynamics, Inc. - Westlake Village CA

G06F 15163

707 9

A scalable access filter that is used together with others like it in a virtual private network to control access by users at clients in the network to information resources provided by servers in the network. Each access filter uses a local copy of an access control data base to determine whether an access request is made by a user. Changes made by administrators in the local copies are propagated to all of the other local copies. Each user belongs to one or more user groups and each information resource belongs to one or more information sets. Access is permitted or denied according to of access policies which define access in terms of the user groups and information sets. The rights of administrators are similarly determined by administrative policies. Access is further permitted only if the trust levels of a mode of identification of the user and of the path in the network by which the access is made are sufficient for the sensitivity level of the information resource. If necessary, the access filter automatically encrypts the request with an encryption method whose trust level is sufficient.

20220272160, Aug 25, 2022

Jun 29, 2021

17/362079

- Broomfield CO, US
Daniel JENSEN - Lake Balboa CA, US
Pawel JAKOBOWSKI - Strzebowiska, PL
Laurence LIPSTONE - Calabasas CA, US
William POWER - Boulder CO, US

Level 3 Communications, LLC - Broomfield CO

H04L 29/08
H04L 29/06
G06F 15/173

Examples described herein relate to standardizing content requests and responses in a content delivery network (CDN). An edge node receives a control object including sets of instructions each implementing portions of a customer's business logic. The edge node may receive, from a client, a content request identifying a content item, and may apply a set of the instructions which causes the edge node to (i) determine whether any changes are needed for the benefit of a cache server and whether any changes are need for the benefit of an origin server, and (ii) generate a processed client request identifying the content item and including, if needed, any changes for the benefit of the cache server and the origin server. The edge node transmits the processed client request to the cache server, receives a response from the cache server, and transmits a processed client response to the client.

20220263715, Aug 18, 2022

May 6, 2022

17/738056

- Broomfield CO, US
Daniel Jensen - Lake Balboa CA, US
William Power - Boulder CO, US

Level 3 Communications, LLC - Broomfield CO

H04L 41/0816
H04L 41/12
H04L 41/0896
H04L 41/0893

Examples described herein relate to systems and methods for tiered updating of configuration data. Updated configuration data is transmitted to different tiers of nodes. The nodes of a first tier are commanded to use the updated configuration data. After waiting to see if any nodes of the first tier communicate a fault after using the updated configuration data, for each of the additional tiers in the CDN it is sequentially repeated to: transmit a command to the nodes of that additional tier to use the updated configuration data; and after waiting to see if any nodes of any tier communicate a fault after using the updated configuration data, transmitting a command to the nodes of another additional tier to use the updated configuration data.

20230046502, Feb 16, 2023

Oct 31, 2022

17/976914

- Broomfield CO, US
Daniel Jensen - Lake Balboa CA, US
William Power - Boulder CO, US

Level 3 Communications, LLC - Broomfield CO

H04L 41/0816
H04L 41/0893
H04L 41/0896
H04L 41/12

Examples described herein relate to systems and methods for tiered updating of configuration data. Updated configuration data is transmitted to different tiers of nodes. The nodes of a first tier are commanded to use the updated configuration data. After waiting to see if any nodes of the first tier communicate a fault after using the updated configuration data, for each of the additional tiers in the CDN it is sequentially repeated to: transmit a command to the nodes of that additional tier to use the updated configuration data; and after waiting to see if any nodes of any tier communicate a fault after using the updated configuration data, transmitting a command to the nodes of another additional tier to use the updated configuration data.

20230016419, Jan 19, 2023

Sep 23, 2022

17/951817

- Broomfield CO, US
Daniel Jensen - Lake Balboa CA, US
Pawel Jakobowski - Strzebowiska, PL
Laurence Lipstone - Calabasas CA, US
William Power - Boulder CO, US

Level 3 Communications, LLC - Broomfield CO

H04L 67/568
G06F 15/173
H04L 9/40
H04L 67/10

Examples described herein relate to standardizing content requests and responses in a content delivery network (CDN). An edge node receives a control object including sets of instructions each implementing portions of a customer's business logic. The edge node may receive, from a client, a content request identifying a content item, and may apply a set of the instructions which causes the edge node to (i) determine whether any changes are needed for the benefit of a cache server and whether any changes are need for the benefit of an origin server, and (ii) generate a processed client request identifying the content item and including, if needed, any changes for the benefit of the cache server and the origin server. The edge node transmits the processed client request to the cache server, receives a response from the cache server, and transmits a processed client response to the client.