Xiaoyong Yi

US Patent:

20120272309, Oct 25, 2012

Filed:

Apr 19, 2011

Appl. No.:

13/089735

Inventors:

Xiangyang Zhang - San Jose CA, US
Xiaoyong Yi - Fremont CA, US

Assignee:

FUTUREWEI TECHNOLOGIES, INC. - Plano TX

International Classification:

H04L 9/00
H04L 12/56

US Classification:

726 13, 370394

Abstract:

An apparatus comprising a processor configured to implement an anti-replay check for a plurality of received packets and a plurality of corresponding sequence numbers; and a circular buffer coupled to the processor and comprising a bitmap, wherein the bitmap is slided in a circular manner by updating a low index that points to a first sequence number for a first received packet and a high index that points to a last sequence number for a last received packet without bit-shifting, and wherein, when the update results in the new value of one of the low index and the high index exceeding the end of the circular buffer, the one of the low index and the high index wraps around from the beginning of the circular buffer.

US Patent:

20130263249, Oct 3, 2013

Filed:

Mar 28, 2013

Appl. No.:

13/852736

Inventors:

Xiaoyong Yi - Fremont CA, US
Xiangyang Zhang - San Jose CA, US

Assignee:

Futurewei Technologies, Inc. - Plano TX

International Classification:

H04L 29/06

US Classification:

726 14

Abstract:

A network element (NE) comprising a memory device configured to store instructions, and a processor configured to execute the instructions by dividing a first plurality of data packets of a data flow into a first plurality of sub-flows, and causing the first plurality of sub-flows to be transmitted to a second NE via a network, wherein the first plurality of sub-flows are transmitted using a first Internet Protocol Security (IPsec) security association (SA) cluster comprising a plurality of parallel sub-SAs. The disclosure also includes a NE comprising a processor configured to create an IPsec SA cluster comprising a first plurality of sub-SAs between the NE and a second NE using an internet key exchange (IKE) or an IKEv2, wherein the first sub-SAs are unidirectional, and wherein the first sub-SAs are configured to transport a first plurality of data packets in a common direction.

US Patent:

20130269022, Oct 10, 2013

Filed:

May 28, 2013

Appl. No.:

13/903069

Inventors:

Xiaoyong Yi - Fremont CA, US

International Classification:

H04L 29/06

US Classification:

726 13

Abstract:

An apparatus comprising a processor configured to implement an anti-replay check for a plurality of received packets and a plurality of corresponding sequence numbers; and a circular buffer coupled to the processor and comprising a bitmap, wherein the bitmap is slided in a circular manner by updating a low index that points to a first sequence number for a first received packet and a high index that points to a last sequence number for a last received packet without bit-shifting, and wherein, when the update results in the new value of one of the low index and the high index exceeding the end of the circular buffer, the one of the low index and the high index wraps around from the beginning of the circular buffer.

US Patent:

20220303135, Sep 22, 2022

Filed:

Jun 13, 2022

Appl. No.:

17/838656

Inventors:

- Beijing, CN
Xiaoyong YI - FREMONT CA, US
Liwei REN - SAN JOSE CA, US

International Classification:

H04L 9/32
B60W 60/00
H04L 9/08

Abstract:

Systems and methods for managing a compromised autonomous vehicle server are described herein. A processor may obtain an indication of a first server configured to control an autonomous vehicle being compromised. The autonomous vehicle may have previously been provisioned with a first public key. The first public key may be paired with a first private key. A processor may compile command information. The command information may include a command for the autonomous vehicle and a digital certificate of a second server configured to control the autonomous vehicle in the event of the first server being compromised. The digital certificate may include a second public key and may be signed with the first private key. The command may be signed with a second private key associated with the second server. The second private key may be paired with the second public key.

US Patent:

20200223395, Jul 16, 2020

Filed:

Oct 21, 2019

Appl. No.:

16/659313

Inventors:

- Mountain View CA, US
Fengmin Gong - Los Gatos CA, US
Xiaoyong Yi - Fremont CA, US
Qi Chen - Burlingame CA, US
Yu Wang - San Jose CA, US

International Classification:

B60R 25/24
B60R 25/01

Abstract:

Methods and systems for improving security of a vehicle are disclosed. In one embodiment, a method comprises receiving, from a requester, a request to access a vehicle compartment of a vehicle; determining a scope of access of the vehicle compartment for the requester based on an operation of the vehicle; and configuring a lock mechanism of the vehicle compartment based on the scope of access.

US Patent:

20200210171, Jul 2, 2020

Filed:

Dec 27, 2018

Appl. No.:

16/233958

Inventors:

- Mountain View CA, US
Jiang ZHANG - San Jose CA, US
Xiaoyong YI - Fremont CA, US

International Classification:

G06F 8/71
G06F 16/11

Abstract:

A first data tree of a first version of the software and a second data tree of a second version of the software may be provided. The first data tree may be converted into a first data tree file, and the second data tree may be converted into a second data tree file. A delta for the first data tree and the second data tree may be generated based on a comparison of the first data tree file and the second data tree file. The delta may be packaged for provision to a client-side agent. The client-side agent may be configured to modify a client-side version of the software based on the delta.

US Patent:

20200210375, Jul 2, 2020

Filed:

Dec 27, 2018

Appl. No.:

16/233606

Inventors:

- Mountain View CA, US
Jiang ZHANG - San Jose CA, US
Xiaoyong YI - Fremont CA, US

International Classification:

G06F 16/11
G06F 16/13
G06F 16/901

Abstract:

A first data tree and a second data tree may be accessed. The first data tree may include a first set of directory nodes and a first set of file nodes, and the second data tree may include a second set of directory nodes and a second set of file nodes. The first data tree may be converted into a first data tree file, and the second data tree may be converted into a second data tree file. A delta for the first data tree and the second data tree may be generated based on a comparison of the first data tree file and the second data tree file.

US Patent:

20200211301, Jul 2, 2020

Filed:

Dec 27, 2018

Appl. No.:

16/233517

Inventors:

- Mountain View CA, US
Xiaoyong Yi - Fremont CA, US
Qi Chen - Burlingame CA, US
Yu Wang - San Jose CA, US
Fengmin Gong - Los Gatos CA, US

International Classification:

G07C 5/08
H04L 29/06
B60R 16/023

Abstract:

Disclosed are techniques for securing electronic control units (ECUs) in a vehicle while allowing secure repairing of the ECUs. A method of repairing a vehicle includes disabling message authentication in secure communication between any two ECUs in a plurality of ECUs on the vehicle, detecting a first ECU that has been changed based on detecting an absence of a valid security key on the first ECU, verifying that a digital certificate associated with the first ECU is a valid certificate, generating one or more security keys for secure communication between the first ECU and a set of ECUs in the plurality of ECUs, provisioning the one or more security keys to the first ECU and the set of ECUs, and enabling the message authentication in secure communication between any two ECUs of the plurality of ECUs.