17 granted patents across 12 inventions, 2018–2026
Grouped by invention; continuations and international counterparts are listed under the invention they protect. Summaries are the author's own; the claims are in the linked documents. Assignees: Amazon Technologies, T-Mobile USA, Telefonaktiebolaget LM Ericsson.
A mapping authority issues transient, time-to-live-bound identifiers in place of durable ones, so services can link operational data to personal data without ever holding a persistent key to the person. Linkage expires by design, and personally identifiable information stays confined to a small privileged core.
Shared parameters between adjacent layers of a multi-layer application are held as conflict-free replicated data types and propagated through layer pointers, so distributed state converges without rebuilding the stack — over star, mesh, or hybrid topologies.
A single-program, multiple-data model for stream processing: code regions reference streams and processing nodes by rank, name, or range through global descriptors instead of hard-wired identifiers, so pipelines scale across a node pool without per-node code.
Message state in geographically distributed queues is tracked with replicated data-type objects keyed by a unique message identifier and replicated asynchronously, so delivery converges across sites without synchronous coordination.
A socket-wrapper layer presents IP and non-IP (NIDD) channels to DTLS as one ordinary UDP socket, so LwM2M devices reach the same server over either path with full security modes and no client changes — closing a gap in the cellular IoT standards.
Encrypted session state is parked on the server, so a constrained device waking from low-power sleep resumes its secure session without a full handshake — radio time and energy saved on every wake cycle.
Two-channel bootstrapping: a limited-use credential arrives out of band, unlocks a long-term credential over the data channel, and is overwritten by it — zero-touch provisioning with no pre-installed secret.
Device notifications land in message queues configured per consumer preference, so each consumer receives only its subset of fleet events; monitoring scales with the queue, not with the fleet.
A middlebox binds client address, server address, and an application client marker, so reverse translation still finds the client when NAT bindings expire or the application moves between servers — bidirectional load balancing for very large device populations.
3GPP reachability notifications are translated into equivalent non-3GPP status messages that tell the application server to queue traffic while a device sleeps and release it on wake — power-saving mode made transparent to the application layer.
A network media service obtains a renderer's certificate and issues a temporary token, establishing a scoped, time-limited trust relationship with an untrusted device — the pattern behind cloud-delivered TV to home renderers.
An SFP module that inspects packet payloads and rewrites headers in transit, adding packet-processing capability to legacy network equipment without replacing the hardware.
Indexes: Justia · Google Patents · ORCID