Anurag Te Sharma

US Patent:

7694328, Apr 6, 2010

Filed:

Oct 21, 2004

Appl. No.:

10/971645

Inventors:

Amit Joshi - San Jose CA, US
Ananta Iyengar - San Jose CA, US
Anurag Sharma - Mountain View CA, US
Finnur Thorarinsson - Stanford CA, US
Johann Sigurdsson - Montreal, CA
Sanjeev Radhakrishnan - San Jose CA, US
Sigurdur Asgeirsson - Beaconsfield, CA
Sunil Shilimkar - Pune, IN
Tomas Gunnarsson - Montreal, CA
Wayne Gray - Sunnyvale CA, US

Assignee:

Google Inc. - Mountain View CA

International Classification:

H04L 9/32

US Classification:

726 2

Abstract:

An innovative security solution which separates a client into a Protected Context, which is the real files and resources of the client, and an Isolated Context, which is a restricted execution environment which makes use of virtualized resources to execute applications and modify content in the Isolated Context, without allowing explicit access to the resources in the Protected Context. The solution further consolidates user interfaces to allow users to seamlessly work with content in both contexts, and provide a visual indication of which display windows are rendered from content executed in the Isolated Context.

US Patent:

7954092, May 31, 2011

Filed:

Dec 24, 2005

Appl. No.:

11/318192

Inventors:

Anurag Sharma - Mountain View CA, US
Amit Singh - Sunnyvale CA, US

Assignee:

International Business Machines Corporation - Armonk NY

International Classification:

G06F 9/45

US Classification:

717136

Abstract:

The present invention provides processor-implemented method and system of creating an assured execution environment for at least one computer program executable on a computer system. In an exemplary embodiment, the method and system include (1) converting the executable into a computer program targeted for the computer system, where the converting includes scrambling the executable by applying an encryption scheme to the executable and (2) executing the program on the computer system only if the program complies with a policy.

US Patent:

8074069, Dec 6, 2011

Filed:

Feb 24, 2005

Appl. No.:

11/067570

Inventors:

Anurag Sharma - Mt View CA, US
Mark Andrew Smith - Los Gatos CA, US

Assignee:

International Business Machines Corporation - Armonk NY

International Classification:

H04L 29/06

US Classification:

713165, 380 3, 380 4, 380 49, 380 71, 380190, 380286, 380259, 705 71, 707 1, 707103, 707200, 707205, 709203, 709 24, 709229, 709213, 709217, 709225, 711114, 713164, 713193, 713201

Abstract:

Embodiments of the invention relate to reading at least one locked, encrypted computer file encrypted by an encryption filter driver running on an operating system of a computer system, with an added kernel driver, while the operating system is running and reading at least one locked, unencrypted computer file in a computer system with an operating system with an added kernel driver while the operating system is running. An exemplary embodiment includes getting the handle of the locked, encrypted computer file, causing encryption key information associated with the locked, encrypted computer file to be processed, and reading data from the locked, encrypted computer file by using the added kernel driver.

US Patent:

8082260, Dec 20, 2011

Filed:

Jan 31, 2007

Appl. No.:

11/669760

Inventors:

Anurag Sharma - Mountain View CA, US
Amit Singh - Sunnyvale CA, US

Assignee:

International Business Machines Corporation - Armonk NY

International Classification:

G06F 17/30

US Classification:

707756, 707741, 707755, 707793, 707803

Abstract:

Embodiments of the invention relate to manipulating the original content of at least one original read-only computer file in a file-system of a computer system, where the computer system includes an operating system including a framework for in-line monitoring of accesses to the file-system. An exemplary embodiment, includes transforming the original content via a non-length-preserving data transformation algorithm, thereby resulting in transformed content, storing the transformed content in a transformed computer file, splitting the transformed computer tile into a first file and a second file, and associating the first file with the second file in the file-system. The non-length-preserving data transformation algorithm includes a length-increasing data transformation algorithm.

US Patent:

8402553, Mar 19, 2013

Filed:

Oct 30, 2009

Appl. No.:

12/609186

Inventors:

Jon E. Graham - San Jose CA, US
Anurag Sharma - Mountain View CA, US
Steven Welch - Gilroy CA, US

Assignee:

International Business Machines Corporation - Armonk NY

International Classification:

G06F 7/04

US Classification:

726 27, 713100, 717168

Abstract:

The present invention provides a processor-implemented method and system of updating an operating system of a computer system, where the operating system is subject to a system lockdown that does not allow changes to a list of approved executables of the operating system and that does not allow changes to a base system configuration of the operating system. In an exemplary embodiment, the method and system include, (1) identifying at least one trusted updater process in the operating system and (2) allowing the trusted updater process to make at least one change to the list of approved executables. In an exemplary embodiment, the method and system include, (1) identifying at least one trusted updater process in the operating system and (2) allowing the trusted updater process to make at least one change to the base system configuration.

US Patent:

8407757, Mar 26, 2013

Filed:

Jan 4, 2008

Appl. No.:

11/969842

Inventors:

Jon E. Graham - San Jose CA, US
Anurag Sharma - Mountain View CA, US

Assignee:

International Business Machines Corporation - Armonk NY

International Classification:

G06F 21/00

US Classification:

726 1, 726 26, 726 27, 726 28, 726 29, 726 30, 726 31, 726 32, 726 33, 726 22, 726 23, 726 24, 726 25, 713153, 713154, 713164, 713165, 713166, 713167

Abstract:

The present invention provides a method and system of specifying and enforcing at least one run-time policy for at least one computer process executing on a computer system, where the computer system includes a computer operating system. In an exemplary embodiment, the method and system include (1) relating the policy with an executable file of the process, (2) associating the policy with a running instance of the process, and (3) enforcing the policy on the running instance.

US Patent:

20060028979, Feb 9, 2006

Filed:

Aug 6, 2004

Appl. No.:

10/912152

Inventors:

Gilbert Levesque - Mountain View CA, US
Drago Goricanec - San Jose CA, US
Anurag Sharma - San Jose CA, US
Ajay Singhani - Fremont CA, US
Vijay Damojipurapu - Fremont CA, US

International Classification:

H04L 12/26

US Classification:

370229000

Abstract:

Network recovery of multiple NEs, such as at NMS restart, or at re-establishment of communication after loss of communication with the NMS that provides reduced cost and reduced the elapsed time before the NMS can start performing network monitoring. A method of recovering data from a network element at a network management system comprises the steps of determining whether a data buffer of the network element is valid, if the data buffer of the network element is valid, determining whether the data buffer of the network element contains a database change event not received by the network management system, if the data buffer of the network element is not valid or if the data buffer of the network element contains a database change event not received by the network management system, indicating that the data buffer of the network element is out-of-sync with the network management system, and if the data buffer of the network element is valid and if the data buffer of the network element does not contains a database change event not received by the network management system, indicating that the data buffer of the network element is in sync with the network management system.

US Patent:

20080183662, Jul 31, 2008

Filed:

Jan 31, 2007

Appl. No.:

11/669554

Inventors:

BENJAMIN CLAY REED - Morgan Hill CA, US
Anurag Sharma - Mountain View CA, US
Mark Andrew Smith - Los Gatos CA, US

International Classification:

G06F 17/30

US Classification:

707 2, 707E17002

Abstract:

The present invention provides a method and system of resolving at least one file-path for a change-record of a computer file-system object in a computer file-system in a computer system including a cache and an operating system, where the change-record includes a file-name of the file-system object, the file-id of the file-system object, and the file-id of the file-system container object containing the file-system object. The present invention provides a method and system of resolving at least one file-path for a change-record of a computer file-system object in a computer file-system in a computer system including an operating system, where the change-record includes a file-name of the file-system object, the file-id of the file-system object, and the file-id of the file-system container object containing the file-system object.