David B Finkelstein

US Patent:

7117097, Oct 3, 2006

Filed:

Dec 13, 2002

Appl. No.:

10/319150

Inventors:

David Finkelstein - San Mateo CA, US

Assignee:

Affymetrix, Inc. - Santa Clara CA

International Classification:

G06F 17/00

US Classification:

702 19, 702 20, 435 6

Abstract:

In some embodiment of the invention, methods are provided to compare lists of genes. In one embodiment, the genes are ranked with the lists. The ranks are analyzed using Spearman correlation.

US Patent:

20080175391, Jul 24, 2008

Filed:

Sep 27, 2007

Appl. No.:

11/863165

Inventors:

David FINKELSTEIN - Sunnyvale CA, US
William F. PRICE - Los Altos CA, US
Derek ATKINS - Somerville MA, US
Harold FINNEY - Santa Barbara CA, US

Assignee:

PGP CORPORATION - Palo Alto CA

International Classification:

H04L 9/08
H04L 9/30
G06F 12/14

US Classification:

380278, 713165, 380 44, 380 30

Abstract:

A computer readable storage medium includes executable instructions to encrypt a file with a file encryption key to produce an encrypted file. The file encryption key is encrypted with a directory encryption key to produce an encrypted file encryption key. The directory encryption key is encrypted with a public key of a user within a group to produce an encrypted directory encryption key.

US Patent:

20200186337, Jun 11, 2020

Filed:

Dec 30, 2019

Appl. No.:

16/730931

Inventors:

- Cupertino CA, US
Libor Sykora - Prague, CZ
Vratislav Kuzela - Cakovicky, CZ
Michael Brouwer - Los Gatos CA, US
Andrew R. Whalley - San Francisco CA, US
Jerrold V. Hauck - Windermere FL, US
David Finkelstein - Sunnyvale CA, US
Thomas Mensch - Sunnyvale CA, US

International Classification:

H04L 9/08
H04L 9/32
H04L 29/06
G06F 21/78
G06F 21/72
G06F 21/74
H04L 9/14
G06F 21/32
H04L 9/00

Abstract:

Techniques are disclosed relating to relating to a public key infrastructure (PKI). In one embodiment, an integrated circuit is disclosed that includes at least one processor and a secure circuit isolated from access by the processor except through a mailbox mechanism. The secure circuit is configured to generate a key pair having a public key and a private key, and to issue, to a certificate authority (CA), a certificate signing request (CSR) for a certificate corresponding to the key pair. In some embodiments, the secure circuit may be configured to receive, via the mailbox mechanism, a first request from an application executing on the processor to issue a certificate to the application. The secure circuit may also be configured to perform, in response to a second request, a cryptographic operation using a public key circuit included in the secure circuit.

US Patent:

20190347007, Nov 14, 2019

Filed:

May 30, 2019

Appl. No.:

16/427235

Inventors:

- Cupertino CA, US
Michael BROUWER - San Jose CA, US
Andrew R. WHALLEY - San Francisco CA, US
John C. HURLEY - Santa Clara CA, US
Richard F. MURPHY - Boulder Creek CA, US
David P. FINKELSTEIN - Sunnyvale CA, US

International Classification:

G06F 3/06
G06Q 90/00
H04L 9/32
G06Q 10/10
G06Q 10/06
H04W 4/08
H04L 29/08

Abstract:

Some embodiments provide a method for a first device that identifies definitions of different groups of devices, each of which is defined by a set of properties required for a device to be a member. The method monitors properties of the first device to determine when the device is eligible for membership in a group. When the first device is eligible for membership in a first group of which the device is not a member, the method sends an application for membership in the first group signed with at least a private key of the device to at least one other device that is a member of the first group. When the first device becomes ineligible for membership in a second group of which the first device is a member, the method removes the device from the second group and notifies other devices that are members of the second group.

US Patent:

20190272101, Sep 5, 2019

Filed:

Jan 17, 2019

Appl. No.:

16/250890

Inventors:

- Cupertino CA, US
Michael BROUWER - San Jose CA, US
Andrew R. WHALLEY - San Francisco CA, US
John C. HURLEY - Santa Clara CA, US
Richard F. MURPHY - Boulder Creek CA, US
David P. FINKELSTEIN - Sunnyvale CA, US

International Classification:

G06F 3/06
G06Q 90/00
H04L 9/32
G06Q 10/10
G06Q 10/06
H04W 4/08
H04L 29/08

Abstract:

Some embodiments provide a method for a first device to synchronize a set of data items with a second device. The method receives a request to synchronize the set of data items stored on the first device with the second device. The method determines a subset of the synchronization data items stored on the first device that belong to at least one synchronization sub-group in which the second device participates. Participation in at least one of the synchronization sub-groups is defined based on membership in at least one verification sub-group. The first and second devices are part of a set of related devices with several different verification sub-groups. The method sends only the subset of the synchronization data items that belong to at least one synchronization sub-group in which the second device participates to the second device using a secure channel.

US Patent:

20190013939, Jan 10, 2019

Filed:

Sep 17, 2018

Appl. No.:

16/133645

Inventors:

- Cupertino CA, US
Libor Sykora - Prague, CZ
Vratislav Kuzela - Cakovicky, CZ
Michael Brouwer - Los Gatos CA, US
Andrew R. Whalley - San Francisco CA, US
Jerrold V. Hauck - Windermere FL, US
David Finkelstein - Sunnyvale CA, US
Thomas Mensch - Sunnyvale CA, US

International Classification:

H04L 9/08
G06F 21/32
H04L 9/32
H04L 9/14
H04L 29/06

Abstract:

Techniques are disclosed relating to relating to a public key infrastructure (PKI). In one embodiment, an integrated circuit is disclosed that includes at least one processor and a secure circuit isolated from access by the processor except through a mailbox mechanism. The secure circuit is configured to generate a key pair having a public key and a private key, and to issue, to a certificate authority (CA), a certificate signing request (CSR) for a certificate corresponding to the key pair. In some embodiments, the secure circuit may be configured to receive, via the mailbox mechanism, a first request from an application executing on the processor to issue a certificate to the application. The secure circuit may also be configured to perform, in response to a second request, a cryptographic operation using a public key circuit included in the secure circuit.

US Patent:

20170373843, Dec 28, 2017

Filed:

Jun 4, 2016

Appl. No.:

15/173643

Inventors:

- Cupertino CA, US
Libor Sykora - Prague, CZ
Vratislav Kuzela - Cakovicky, CZ
Michael Brouwer - Los Gatos CA, US
Andrew R. Whalley - San Francisco CA, US
Jerrold V. Hauck - Windermere FL, US
David Finkelstein - Sunnyvale CA, US
Thomas Mensch - Sunnyvale CA, US

International Classification:

H04L 9/08
H04L 9/00
H04L 9/14
H04L 9/32
G06F 21/32

Abstract:

Techniques are disclosed relating to relating to a public key infrastructure (PKI). In one embodiment, an integrated circuit is disclosed that includes at least one processor and a secure circuit isolated from access by the processor except through a mailbox mechanism. The secure circuit is configured to generate a key pair having a public key and a private key, and to issue, to a certificate authority (CA), a certificate signing request (CSR) for a certificate corresponding to the key pair. In some embodiments, the secure circuit may be configured to receive, via the mailbox mechanism, a first request from an application executing on the processor to issue a certificate to the application. The secure circuit may also be configured to perform, in response to a second request, a cryptographic operation using a public key circuit included in the secure circuit.

US Patent:

20170373844, Dec 28, 2017

Filed:

Jun 4, 2016

Appl. No.:

15/173647

Inventors:

- Cupertino CA, US
Wade Benson - San Jose CA, US
Vratislav Kuzela - Cakovicky, CZ
Michael Brouwer - Los Gatos CA, US
Andrew R. Whalley - San Francisco CA, US
Jerrold V. Hauck - Windermere FL, US
David Finkelstein - Sunnyvale CA, US
Thomas Mensch - Sunnyvale CA, US

International Classification:

H04L 9/08
G06F 21/32
H04L 9/32

Abstract:

Techniques are disclosed relating to relating to a public key infrastructure (PKI). In one embodiment, an integrated circuit is disclosed that includes at least one processor and a secure circuit isolated from access by the processor except through a mailbox mechanism. In some embodiments, the secure circuit is configured to generate a public key and a private key for an application, and receive, from the application via an API, a request to perform a cryptographic operation using the private key. The secure circuit is further configured to perform the cryptographic operation in response to the request.