Eric T Hastings

US Patent:

20190188368, Jun 20, 2019

Filed:

Dec 18, 2017

Appl. No.:

15/845263

Inventors:

- Sunnyvale CA, US
Eric C. Hastings - Austin TX, US

Assignee:

Fortinet, Inc. - Sunnyvale CA

International Classification:

G06F 21/35
H04L 29/06
G06F 21/43

Abstract:

Systems and methods for a passive wireless multi-factor authentication approach are provided. According to one embodiment, a user authentication request is received by a first computing device connected to a private network. The user authentication request is sent by an endpoint protection suite running on the first computing device to an authentication device associated with the private network. A proximity of a second computing device, which was previously registered with the authentication device to be used as a factor of a multi-factor authentication process involving the first computing device, is determined by the authentication device in relation to one or more wireless access points of a wireless network of the private network. The user authentication request is then processed by the authentication device based on the proximity.

US Patent:

20170366507, Dec 21, 2017

Filed:

Sep 4, 2017

Appl. No.:

15/694960

Inventors:

- Sunnyvale CA, US
Eric C. Hastings - Austin TX, US

Assignee:

Fortinet, Inc. - Sunnyvale CA

International Classification:

H04L 29/06

Abstract:

Methods and systems for Data Leak Prevention (DLP) in a private network are provided. According to one embodiment, a packet is received by a network security device. An upper layer protocol associated with the packet is identified. It is determined whether the identified upper layer protocol is one of multiple candidate upper layer protocols having a potential to carry sensitive information with reference to a database identifying the candidate upper layer protocols, corresponding commands of interest and a corresponding suspect field within each of the commands that is to be subjected to DLP scanning. Responsive to an affirmative determination and when a command represented by the packet is one of the corresponding commands of interest for the identified upper layer protocol, then a DLP scan is performed on content contained within the corresponding suspect field of the packet. Otherwise, performance of the DLP scan for the received packet is skipped.

US Patent:

20160344698, Nov 24, 2016

Filed:

Aug 8, 2016

Appl. No.:

15/231560

Inventors:

- Sunnyvale CA, US
Eric C. Hastings - Austin TX, US

Assignee:

Fortinet, Inc. - Sunnyvale CA

International Classification:

H04L 29/06

Abstract:

Methods and systems for Data Leak Prevention (DLP) in a private network are provided. According to one embodiment, a packet is received by a network security device. An upper layer protocol associated with the packet is identified. It is determined whether the identified upper layer protocol is one of multiple candidate upper layer protocols having a potential to carry sensitive information with reference to a database identifying the candidate upper layer protocols, corresponding commands of interest and a corresponding suspect field within each of the commands that is to be subjected to DLP scanning. Responsive to an affirmative determination and when a command represented by the packet is one of the corresponding commands of interest for the identified upper layer protocol, then a DLP scan is performed on content contained within the corresponding suspect field of the packet. Otherwise, performance of the DLP scan for the received packet is skipped.

US Patent:

20160105396, Apr 14, 2016

Filed:

Nov 12, 2015

Appl. No.:

14/940041

Inventors:

- Sunnyvale CA, US
Eric C. Hastings - Austin TX, US

Assignee:

Fortinet, Inc. - Sunnyvale CA

International Classification:

H04L 29/06

Abstract:

Methods and systems for Data Leak Prevention (DLP) in a private network are provided. A data structure is maintained within a network security appliance identifying candidate upper layer protocols, corresponding commands of interest and a corresponding suspect field within each of the commands that is to be subjected to DLP scanning as a result of its potential for carrying sensitive information. A packet is received by the network security appliance. A protocol associated with the packet is identified. It is determined whether the identified protocol is among those of the candidate protocols. Responsive to an affirmative determination and when a command represented by the packet is among those of the corresponding commands of interest for the candidate protocol, then a DLP scan is performed on the packet. Otherwise, the packet is allowed to pass through the network security appliance without being subject to a DLP scan.