Rohan A Bhutkar

20200012511, Jan 9, 2020

Jul 5, 2019

16/504075

- Suwon-si, KR
Sudhi Herle - Dallas TX, US
Ahmed M. Azab - Palo Alto CA, US
Rohan Bhutkar - San Jose CA, US
Ivan Getta - Mountain View CA, US
Xun Chen - Freemont CA, US
Wenbo Shen - Sunnyvale CA, US
Ruowen Wang - San Jose CA, US
Haining Chen - Santa Clara CA, US
Khaled Elwazeer - Santa Clara CA, US
Mengmeng Li - San Jose CA, US
Peng Ning - Saratoga CA, US
Hyungseok Yu - Suwon-si, KR
Myungsu Cha - Suwon-si, KR
Kyungsun Lee - Suwon-si, KR
Se Young Choi - Hwaseong-si, KR
Yurak Choe - Suwon-si, KR
Yong Shin - Seongnam-si, KR
Kyoung-Joong Shin - Seoul, KR
Donguk Seo - Suwon-si, KR
Junyong Choi - Suwon-si, KR

G06F 9/455
G06F 9/48
G06F 9/54
G06F 9/445

A method for operating an electronic device, the method including spawning a name space tool (NST) as part of a boot process of a host OS, wherein the NST is a process with a plurality of root privileges of the host OS. The method further includes spawning, by the NST, a container for a guest OS, wherein the container for the guest OS is mapped to a dedicated domain in the host OS, and dropping, by the NST, a root privilege of the host OS in response to spawning the container for the guest OS.

20200014741, Jan 9, 2020

Jul 3, 2019

16/503230

- Suwon-si, KR
Ivan Getta - Mountain View CA, US
Myungsu Cha - Suwon-si, KR
Ahmed M. Azab - Palo Alto CA, US
Rohan Bhutkar - San Jose CA, US
Guruprasad Ganesh - Santa Clara CA, US
Wenbo Shen - Sunnyvale CA, US
Ruowen Wang - San Jose CA, US
Junyong Choi - Suwon-si, KR

H04L 29/06
G06F 9/54
G06F 9/48
G06F 9/38

This disclosure relates to an electronic device including a memory and at least one processor coupled to the memory. The at least one processor is configured to execute a daemon process in one of a container or a host operating system, wherein the daemon process is configured to manage data transfer between the container and the host operating system, create, via the daemon process, an inter-process communication (IPC) channel between the container and the host operating system, receive incoming audio data, and buffer the incoming audio data to the IPC channel.

20190228149, Jul 25, 2019

Mar 28, 2019

16/367530

- Suwon-si, KR
Ahmed AZAB - Mountain View CA, US
Wenbo SHEN - Cupertino CA, US
Rohan BHUTKAR - Mountain View CA, US

G06F 21/55
G06F 21/57
G06F 21/12

An apparatus and a method for protecting kernel control-flow integrity using static binary instrumentation are provided. The method includes configuring a compiler to reserve a register in a processor, compiling source code into a binary based on the configured compiler, and modifying the binary to prevent exploits using the reserved register, wherein the reserved register stores a first encryption key for encrypting and decrypting return addresses. The reserved register stores an encryption key that is used to encrypt and decrypt return addresses to prevent control flow exploits.

20190155727, May 23, 2019

Aug 21, 2018

16/107652

- Suwon-si, KR
Sudhi Herle - Dallas TX, US
Ahmed M. Azab - Palo Alto CA, US
Rohan Bhutkar - San Jose CA, US
Guruprasad Ganesh - Santa Clara CA, US
Wenbo Shen - Sunnyvale CA, US

G06F 12/02
G06F 9/455
G06F 9/54

A method for implementing a shared memory buffer includes at an apparatus comprising a processor and a physical memory, running a host environment with a host virtual memory. The method further includes running a guest environment with a guest virtual memory, performing, by the host environment, an allocation of a frame buffer in the physical memory, and mapping the allocated frame buffer into the host virtual memory. Additionally, the method includes passing a handle of the allocated frame buffer to the guest environment and performing a mapping of the allocated frame buffer into the guest virtual memory, the mapping based on the handle of the allocated frame buffer.

20180026963, Jan 25, 2018

May 2, 2017

15/584892

- Suwon-si, KR
Yueh-Hsun Lin - Santa Clara CA, US
Stephen E. McLaughlin - San Jose CA, US
Michael C. Grace - Santa Clara CA, US
Ahmed M. Azab - Palo Alto CA, US
Rohan Bhutkar - Mountain View CA, US
Yong Choi - Saratoga CA, US

H04L 29/06

A connected device includes an application processor, a secure element, and a control module. The application processor is configured to receive a control command from an electronic device. The secure element is connected between the application processor and a control module and is configured to authenticate the control command. The control module is configured to receive the control command when the control command is authenticated by the secure element, execute the control command to activate at least one function of the connected device, and transmit a response to the electronic device.

20170140148, May 18, 2017

Nov 1, 2016

15/340447

- Suwon-si, KR
Ahmed AZAB - Mountain View CA, US
Wenbo SHEN - Cupertino CA, US
Rohan BHUTKAR - Mountain View CA, US

G06F 21/55
G06F 21/12
G06F 21/57

An apparatus and a method for protecting kernel control-flow integrity using static binary instrumentation are provided. The method includes configuring a compiler to reserve a register in a processor, compiling source code into a binary based on the configured compiler, and modifying the binary to prevent exploits using the reserved register, wherein the reserved register stores a first encryption key for encrypting and decrypting return addresses. The reserved register stores an encryption key that is used to encrypt and decrypt return addresses to prevent control flow exploits.

20170098070, Apr 6, 2017

Feb 19, 2016

15/048534

- Suwon-si, KR
Stephen E. MCLAUGHLIN - Mountain View CA, US
Michael C. GRACE - Mountain View CA, US
Ahmed M. AZAB - Mountain View CA, US
Rohan BHUTKAR - Mountain View CA, US
Wenbo SHEN - Mountain View CA, US
Xun CHEN - Mountain View CA, US
Yong CHOI - Mountain View CA, US
Ken CHEN - Mountain View CA, US

G06F 21/51
G06F 21/60

An apparatus and method of a hardware isolated secure element protecting a plurality of mission critical subsystems are provided. The method includes performing an actuation operation received across an unsecure path that modifies the state of a mission critical subsystem, performing a diagnostic operation received across the unsecure path that requests state information of the mission critical subsystem, storing information used to determine which of the diagnostic operation and the actuation operation received across the unsecure path are performed, and flashing an execution image of an electronic control unit when the execution image of the electronic control unit is received across the unsecure path.

20170041290, Feb 9, 2017

Feb 19, 2016

15/048531

- Suwon-si, KR
Stephen E. MCLAUGHLIN - Mountain View CA, US
Michael C. GRACE - Mountain View CA, US
Ahmed M. AZAB - Mountain View CA, US
Rohan BHUTKAR - Mountain View CA, US
Wenbo SHEN - Mountain View CA, US
Xun CHEN - Mountain View CA, US
Yong CHOI - Mountain View CA, US
Ken CHEN - Mountain View CA, US

H04L 29/06
G07C 5/08
H04W 12/10
G06F 13/40
H04L 9/32
G07C 5/02
G06F 13/10

An apparatus and method of an attachment device for interfacing with an on-board diagnostic system of a vehicle is provided. The device includes an application processor configured to receive input from a terminal, control processing of the input by the on-board diagnostic system, transmit a result of the processing of the input by the on-board diagnostic system to the terminal, and a secure element interposed in the communication path between the application processor and the on-board diagnostic system, the secure element configured to filter the input of an on-board diagnostic operation that is untrusted.