Michael D Conner

US Patent:

8341725, Dec 25, 2012

Filed:

Jul 30, 2009

Appl. No.:

12/512239

Inventors:

Berkay Baykal - Westborough MA, US
Duane M. Butler - Anoka MN, US
Michael W. Conner - Maple Grove MN, US
Shaun Noel Missett - Avon CT, US

Assignee:

Calix, Inc. - Petaluma CA

International Classification:

H04L 29/06

US Classification:

726 13, 455410, 37039553

Abstract:

In general, this disclosure describes network security techniques that may accommodate legitimate movement of a subscriber device while preventing MAC collisions that may result from configuration errors or MAC spoofing attempts. MAC spoofing may result in packets directed to one subscriber device being sent instead to another subscriber device. By modifying an access node or a Dynamic Host Configuration Protocol (DHCP) server to allow only authorized subscriber devices on the access network, layer two collisions (“MAC collisions”) may be prevented.

US Patent:

20060018335, Jan 26, 2006

Filed:

Jan 28, 2005

Appl. No.:

11/046198

Inventors:

Christopher Koch - Minneapolis MN, US
Richard Paal - Minneapolis MN, US
Gayle Livermore - Minneapolis MN, US
Michael Conner - Maple Grove MN, US

International Classification:

H04J 3/26

US Classification:

370432000

Abstract:

Techniques are described for converting multicast traffic to unicast traffic at an optical network terminal (ONT) on a passive optical network (PON). A traffic conversion technique, in accordance with the invention, involves formatting a multicast frame of a multicast packet stream transmitted to the ONT to include a MAC destination address of the station requesting the multicast packet stream. By including the MAC destination address of the specific station to which the multicast packet stream is to be transmitted, the multicast packet stream is effectively converted to unicast traffic stream. The traffic conversion techniques are designed to avoid overloading stations on a subscriber Ethernet network that are not participating in a multicast group by sending multicast traffic to the stations requesting the multicast traffic. In this way, the traffic conversion techniques allow common equipment to be used while not overburdening non-participating stations with traffic that needs to be discarded.

US Patent:

20100131386, May 27, 2010

Filed:

Nov 25, 2009

Appl. No.:

12/626542

Inventors:

Brent D. Shiely - Eden Prairie MN, US
Michael E. Conner - Aliso Viejo CA, US
David A. Woolenberg - Woodinville WA, US
Matthew John Voda - Minneapolis MN, US
Jeffrey M. Diesner - Costa Mesa CA, US

Assignee:

DIGITAL RIVER, INC. - Eden Prairie MN

International Classification:

G06Q 30/00
G06Q 99/00
G06Q 10/00

US Classification:

705 26, 705310, 705318

Abstract:

A system and method for determining e-commerce purchase eligibility of product offerings restricted to particular market segments and used in conjunction with an e-commerce system is described. Identifying information provided by the user is compared to a white list of eligibility parameters selected and configured by the vendor. An e-mail confirming eligibility and containing a customized URL is provided to the user; selecting the link automatically logs the user into the account. The system allows limited or unlimited purchases to be made by qualified users. Fraud detection is performed prior to checkout. Once the order has been processed the user may immediately download the product. An e-mail is sent to the user providing delayed downloading instructions and license key. Downloading may inject the license key for automatic software product or application activation.

US Patent:

20110029645, Feb 3, 2011

Filed:

Jul 30, 2009

Appl. No.:

12/512245

Inventors:

Berkay Baykal - Westborough MA, US
Duane M. Butler - Anoka MN, US
Michael W. Conner - Maple Grove MN, US
Shaun Noel Missett - Avon CT, US

Assignee:

Calix Networks, Inc. - Petaluma CA

International Classification:

G06F 15/177

US Classification:

709221

Abstract:

In general, this disclosure describes network security techniques that may accommodate legitimate movement of a subscriber device while preventing MAC collisions that may result from configuration errors or MAC spoofing attempts. MAC spoofing may result in packets directed to one subscriber device being sent instead to another subscriber device. By modifying an access node or a Dynamic Host Configuration Protocol (DHCP) server to allow only authorized subscriber devices on the access network, layer two collisions (“MAC collisions”) may be prevented.

US Patent:

20120131097, May 24, 2012

Filed:

Jan 30, 2012

Appl. No.:

13/361433

Inventors:

Berkay Baykal - Westborough MA, US
Duane M. Butler - Anoka MN, US
Michael W. Conner - Maple Grove MN, US
Shaun Noel Missett - Avon CT, US

Assignee:

CALIX, INC. - Petaluma CA

International Classification:

G06F 15/16

US Classification:

709203

Abstract:

In general, techniques are described for providing an isolation virtual local area network (VLAN) for layer two access networks. A server comprising an interface and a control unit may implement the techniques. The interface receives a message that initiates a request for a layer three (L3) network address for use by a client device via an isolation virtual local area network (VLAN) that supports transmitting data from a network device to the server, where the network device is intermediately positioned between the client device and the server. The message includes a layer two (L2) address associated with the client device. The control unit determines whether to allow the client device to access the network and assigns the L3 network address to the client device based on the determination.