Dariush M Amiri

20140006777, Jan 2, 2014

Jun 28, 2013

13/930950

Dariush M. Amiri - San Francisco CA, US

H04L 29/06

713158, 713155, 713156

A network traversal module in a branch node enables the establishment of secure communication between networks. The module allows devices on otherwise disconnected networks to communicate collected data to a root node for storage and analysis. The network traversal module supports auto configuration, and includes both a client-side functionality of accessing open ports or services, and server-side functionality of providing open ports or services. Each branch node is responsible for collecting data from client devices on its network or sub-network, and transmitting that data to the higher nodes. Each branch node is also responsible for retransmitting data received from lower nodes to higher nodes. In one embodiment, the network traversal module includes components to allow it to support authentication and revocation of certificates. A root node generates certificates. Each branch node is assigned a certificate, and uses that certificate to access and authenticate itself to other branch nodes.

20170223057, Aug 3, 2017

May 6, 2016

15/148935

- Schenectady NY, US
Dariush Amiri - San..Ramon CA, US

H04L 29/06
H04L 29/08

A system and method for access control services are disclosed. In some example embodiments, the method includes storing a user attribute of a user, a resource attribute of a resource of a web service, and an access control policy for accessing the resource, with the access control policy comprising one or more policy conditions to be satisfied in order to permit an action. In some example embodiments, a web service request for accessing the resource of the web service is received, with the web service request corresponding to the user and comprising an access token for the user, action data, and resource data. In some example embodiments, a decision to either permit or deny the web service request is generated based on the access control policy, the user attribute, and the resource attribute, and the decision is transmitted to the web service.

20150350212, Dec 3, 2015

May 29, 2014

14/290492

- Schenectady NY, US
Dariush Mario Amiri - San Ramon CA, US

General Electric Company - Schenectady NY

H04L 29/06

Systems and methods for authorizing web service requests. In some embodiments, a computer-implemented method includes receiving a web service request having an authorization header and business code, authenticating a Security Assertion Markup Language (SAML) token included in the authorization header and constructing a security context based on attributes of the SAML token. The process also includes passing the security context to an authorization interceptor to interact with a policy information point (PIP) and a policy decision point (PDP), receiving a permit response, and then authorizing the web services request. In some implementations, the requested web service is then transmitted to the client computer that requested the web service.