Kenneth S Araujo

US Patent:

6393488, May 21, 2002

Filed:

May 27, 1999

Appl. No.:

09/321062

Inventors:

Kenneth Araujo - Sunnyvale CA

Assignee:

3Com Corporation - Santa Clara CA

International Classification:

G06F 1516

US Classification:

709245, 709238, 709227

Abstract:

A method and system for resolving network address translator (NAT) based internet protocol (IP) subnet address conflicts. In one embodiment of the present invention, a first NAT is used to assign an address to a first device which is coupled to the first NAT. Next, the present embodiment using a second NAT to assign an address to a second device coupled to the second NAT. Additionally, in the present embodiment, the second NAT automatically assigns an address to a link coupling the first NAT and the second NAT. The second NAT then assigns a second address to the second device. The second address is related to the address of the link coupling the first NAT and the second NAT. In so doing, the present invention insures that the second device has a second address associated therewith wherein the second address is different from the address of the first device. As a result, the present embodiment is able to resolve NAT-based subnet address conflicts. The present embodiment also eliminates the need for tedious user examination of all NAT-assigned IP addresses for each of the various NATs.

US Patent:

6434165, Aug 13, 2002

Filed:

Aug 19, 1998

Appl. No.:

09/136795

Inventors:

Paul Sherer - Danville CA
Kenneth Araujo - Sunnyvale CA
Peter Si-Sheng Wang - Cupertino CA

Assignee:

3Com Corporation - Santa Clara CA

International Classification:

H04J 316

US Classification:

370465, 714758

Abstract:

A communications network system that transmits and receives communication frames that include a transmission status section that indicates a communication frame transmission is aborted. In one embodiment, a transmission status section includes a cyclical redundancy check value that is non-matching with the information in the communication frame. For example, a non-matching cyclical redundancy check value is created by generating a ones compliment of a CRC calculated based upon the information within a communication frame. The communication network includes a wireless network, a wired network (e. g. , an Ethernet network) and a data cable system that transmits a data over cable media access control (MAC) frame with an Ethernet/[ISO8802-3] type packet protocol data unit payload.

US Patent:

6463071, Oct 8, 2002

Filed:

Aug 17, 1998

Appl. No.:

09/136104

Inventors:

Kenneth Araujo - Sunnyvale CA
Peter Si-Sheng Wang - Cupertino CA

Assignee:

3Com Corporation - Santa Clara CA

International Classification:

H04J 316

US Classification:

370437, 370474, 370486

Abstract:

A communications network operating in a data cable system that transmits a data over cable media access control (MAC) frame with an Ethernet/ISO8802-3 type packet protocol data unit payload. Time frames for transmission of data over the network are allocated to cable modems and time frames originally allocated to a cable modem for transmission of lower priority data can be utilized to transfer high priority data while aborting the transmission of lower priority data. A high level data link control (HDLC) section is coupled immediately before a cyclical redundancy check (CRC) to indicate that all data packet protocol data units (PDU) that are encapsulated by HDLC flags is high priority data that is not to be discarded and other data is to be abandoned.

US Patent:

6920502, Jul 19, 2005

Filed:

Jul 17, 2001

Appl. No.:

09/907094

Inventors:

Kenneth S. Araujo - Somerset NJ, US
Reginald P. Best - Somerset NJ, US
Christopher P. Douglas - Somerset NJ, US
Siuling C. Zhang - Stony Brook NY, US
Gamid Isayev - Monmouth Junction NJ, US

Assignee:

Netilla Networks, Inc. - Somerset NJ

International Classification:

G06F015/16
G06F015/173
G06F012/00
G06F017/30

US Classification:

709229, 709219, 709225, 709227, 713201

Abstract:

Apparatus and accompanying methods for use therein for implementing an integrated, virtual office user environment, through an office server(s), through which a remotely stationed user can access typical office network-based applications, including e-mail, file sharing and hosted thin-client programs, through a remotely located network, e. g. , WAN, connected web browser. Specifically, a front end, namely a service enablement platform (SEP), to one or more office servers on a LAN is connected to both the WAN and LAN and acts both as a bridge between the user and his(her) office applications and as a protocol translator to enable bi-directional, web-based, real-time communication to occur between the browser and each such application. During initial operation, the SEP, operating under a default profile, establishes, over an analog connection to the WAN, a management session with the site to obtain customer WAN access information, then tears down the analog connection and establishes a broadband WAN connection through which the SEP re-establishes its prior session and obtains a client certificate and its customized profile. The SEP then re-initializes itself to that particular profile.

US Patent:

6981041, Dec 27, 2005

Filed:

Apr 13, 2001

Appl. No.:

09/835075

Inventors:

Kenneth S. Araujo - Somerset NJ, US
Reginald P. Best - Somerset NJ, US
Christopher P. Douglas - Somerset NJ, US
Siuling C. Zhang - Stony Brook NY, US
Gamid Isayev - Monmouth Junction NJ, US

Assignee:

AEP Networks, Inc. - Somerset NJ

International Classification:

G06F015/173
G06F015/177
G06F015/16

US Classification:

709224, 709223, 709222, 709227, 709249

Abstract:

Apparatus and accompanying methods for use therein for implementing an integrated, virtual office user environment, through an office server(s), through which a remotely stationed user can access typical office network-based applications, including e-mail, file sharing and hosted thin-client programs, through a remotely located network, e. g. , WAN, connected web browser. Specifically, a front end, namely a service enablement platform (SEP), to one or more office servers on a LAN is connected to both the WAN and LAN and acts both as a bridge between the user and his(her) office applications and as a protocol translator to enable bi-directional, web-based, real-time communication to occur between the browser and each such application. During initial operation, the SEP, operating under a default profile, establishes, over an analog connection to the WAN, a management session with the site to obtain customer WAN access information, then tears down the analog connection and establishes a broadband WAN connection through which the SEP re-establishes its prior session and obtains a client certificate and its customized profile. The SEP then re-initializes itself to that particular profile.

US Patent:

7111060, Sep 19, 2006

Filed:

Mar 14, 2001

Appl. No.:

09/808404

Inventors:

Kenneth S. Araujo - Somerset NJ, US
Reginald P. Best - Somerset NJ, US
Christopher P. Douglas - Matawan NJ, US
Siuling C. Zhang - Stony Brook NY, US

Assignee:

AEP Networks, Inc. - Somerset NJ

International Classification:

G06F 15/173
G06F 15/177
G06F 15/16

US Classification:

709224, 709222, 709223, 709227, 709249

Abstract:

Apparatus and accompanying methods for use therein for implementing an integrated, virtual office user environment, through an office server(s), through which a remotely stationed user can access typical office network-based applications, including e-mail, file sharing and hosted thin-client programs, through a remotely located network, e. g. , WAN, connected web browser. Specifically, a front end, namely a service enablement platform (SEP), to one or more office servers on a LAN is connected to both the WAN and LAN and acts both as a bridge between the user and his(her) office applications and as a protocol translator to enable bi-directional, web-based, real-time communication to occur between the browser and each such application. The SEP translates user input originating from the browser into application-specific protocols and applies a result to a corresponding office application server.

US Patent:

7275113, Sep 25, 2007

Filed:

May 27, 1999

Appl. No.:

09/322114

Inventors:

Kenneth Araujo - Sunnyvale CA, US

Assignee:

3 Com Corporation - Marlborough MA

International Classification:

G06F 15/16

US Classification:

709245, 709203, 370389, 370352

Abstract:

A dynamic network address registration system and method. In one embodiment, the present invention is comprised of a first device which is adapted to communicate over a communications network. The present invention is a also comprised of a second device which is adapted to communicate via a communications network, and, more specifically, is adapted to communicate with the first device via the communications network. The present invention is further comprised of a controller which is adapted to be coupled to the communications network. The controller of the present invention is adapted to store address information for the first device, and to store address information for the second device therein. The controller is further adapted to provide the address information of the second device to the first device such that a communication path can be efficiently established between the first device and the second device via the communications network. In so doing, the present embodiment provides for the efficient establishment of a communications path between the first device and the second device via the communications network without requiring that the first device and the second device have a static address.

US Patent:

20050251856, Nov 10, 2005

Filed:

Mar 11, 2005

Appl. No.:

11/077980

Inventors:

Kenneth Araujo - Somerset NJ, US
Devin Heitmueller - Bridgewater NJ, US

Assignee:

AEP Networks - Somerset NJ

International Classification:

H04L009/00

US Classification:

726012000

Abstract:

A security platform connected to a private network permits access to the private network from a public network (such as the Internet) through a variety of mechanisms. A reverse proxy system operating as part of the security platform provides access to web-enabled applications from a browser connected to the public network. The reverse proxy rewrites requests and responses so that the browser directs requests to the reverse proxy, from which the requests can be directed to the appropriate server on the public network or the private network. Responses come back to the reverse proxy, and are then forwarded to the browser. An SSL tunneling system permits fat clients to access the private network through an SSL connection. The SSL tunneling system employs a server component operating on the security platform and components downloaded to the client computer from the security platform. The client components include a control component operating in a browser window, a server-proxy component that sets up secure communications with the private network, and an adapter component between the server-proxy and the fat client. The adapter component operates in kernel space. Data is directed from the fat client to the adapter, and then forwarded to the server-proxy; data from the server-proxy is directed to the adapter, and then forwarded to the fat client. Security is provided through the use of multiple authentication realms, each of which provides a set of authentication stages for authenticating users and providing client integrity validation.