Castle Rock, Colorado, United States
3K followers 500+ connections

Join to view profile

About

Cloud and Security Architect with broad experience including hardware, network, and…

Activity

Join now to see all activity

Experience & Education

  • EchoStar Corporation

View Geoffrey’s full experience

See their title, tenure and more.

or

By clicking Continue to join or sign in, you agree to LinkedIn’s User Agreement, Privacy Policy, and Cookie Policy.

Publications

  • A High-Availability Architecture for the Dynamic Domain Name System

    The Domain Name System (DNS) provides a mapping between host names and Internet Protocol (IP) addresses. Hosts that are configured using the Dynamic Host Configuration Protocol (DHCP) can have their assigned IP addresses updated in a Dynamic DNS (DDNS). DNS and DDNS are critical components of the Internet. Most applications use host names rather than IP addresses, allowing the underlying operating system (OS) to translate these host names to IP addresses on behalf of the application. When the…

    The Domain Name System (DNS) provides a mapping between host names and Internet Protocol (IP) addresses. Hosts that are configured using the Dynamic Host Configuration Protocol (DHCP) can have their assigned IP addresses updated in a Dynamic DNS (DDNS). DNS and DDNS are critical components of the Internet. Most applications use host names rather than IP addresses, allowing the underlying operating system (OS) to translate these host names to IP addresses on behalf of the application. When the DDNS service is unavailable, applications that use DNS cannot contact the hosts served by that DDNS server. Unfortunately, the current DDNS implementation cannot continue to operate under failure of a master DNS server. Although a slave DNS server can continue to translate names to addresses, new IP addresses or changes to existing IP addresses cannot be added. Therefore, those new hosts cannot be reached by the DDNS.
    A new architecture is presented that eliminates this single point of failure. In this design, instead of storing resource records in a flat text file, all name servers connect to a Lightweight Directory Access Protocol (LDAP) directory to store and retrieve resource records. These directory servers replicate all resource records across each other using a multi-master replication mechanism. The DHCP servers can add records to any of the functioning DNS servers in event of an outage.
    In this scheme, all DNS servers use the anycast Border Gateway Protocol (BGP). This allows any of the DNS servers to answer queries sent to a single IP address. The DNS clients always use the same IP address to send queries. The routing system removes routes to non-functional name servers and delivers the request to the closest (according to network metrics) available DNS server.

    See publication

Patents

  • System and method for home security monitoring using a television set-top box

    Issued US 9,832,508

    Techniques disclosed herein enable automated home security monitoring via a television connected to a set-top box, such as a cable set-top box. Such techniques integrate the television with a home security system. A television viewer can use the television to control, interact, and automatically receive information about home security events in real-time. A television viewer can control lighting, and room temperature, and arm/disarm sensors in the home such as door sensors, motion detectors…

    Techniques disclosed herein enable automated home security monitoring via a television connected to a set-top box, such as a cable set-top box. Such techniques integrate the television with a home security system. A television viewer can use the television to control, interact, and automatically receive information about home security events in real-time. A television viewer can control lighting, and room temperature, and arm/disarm sensors in the home such as door sensors, motion detectors, cameras, etc, as well as access camera images. Events from such sensors can be monitored or viewed on the television set when they are triggered. For example, when triggered, an icon representing the sensor can be shown on the television screen, or in case of a camera, an image or video can be shown that cause the triggered event.

    Other inventors
    See patent
  • A System and Method for Using Ad Hoc Networks in Cooperation with Service Provider Networks

    Issued US 9,496,983

    Systems and methods for using ad hoc networks in cooperation with service provider networks. Multi-network devices communicate with each other as peers in an ad hoc network while each accessing a service provider network. The multi-network devices may each receive the same real-time multimedia stream, be it broadcast or unicast, while sharing stream parity information. The peers may take corrective action to maintain uninterrupted playback of the real-time multimedia stream with no or minimal…

    Systems and methods for using ad hoc networks in cooperation with service provider networks. Multi-network devices communicate with each other as peers in an ad hoc network while each accessing a service provider network. The multi-network devices may each receive the same real-time multimedia stream, be it broadcast or unicast, while sharing stream parity information. The peers may take corrective action to maintain uninterrupted playback of the real-time multimedia stream with no or minimal loss in perceived quality. The peers may further cooperate to facilitate bandwidth and power optimization, fast channel switching, and real-time mobile traffic and network analysis, displays and alerts.

    Other inventors
    See patent
  • System and method for cloning a Wi-Fi access point

    Issued US 9,491,623

    Systems and methods for cloning a Wi-Fi access point. A determination is made by a network monitoring device to transition communications between a Wi-Fi device and a first access point (AP) to a second AP. The SSID and the security configuration information, and, optionally, network address translation (NAT) information of the first access point are acquired and provided to a second AP. The second AP instantiates the SSID and the security configuration information and, optionally, the NAT…

    Systems and methods for cloning a Wi-Fi access point. A determination is made by a network monitoring device to transition communications between a Wi-Fi device and a first access point (AP) to a second AP. The SSID and the security configuration information, and, optionally, network address translation (NAT) information of the first access point are acquired and provided to a second AP. The second AP instantiates the SSID and the security configuration information and, optionally, the NAT information. The networking monitoring device directs the first AP to cease using the SSID and the security configuration information and, optionally, the NAT information in response to receipt of confirmation that the second AP has instantiated the SSID and the security configuration information and, optionally, the NAT information of the first AP.

    Other inventors
    See patent
  • System and method for home security monitoring using a television set-top box

    Issued US 9,258,593

    Techniques disclosed herein enable automated home security monitoring via a television connected to a set-top box, such as a cable set-top box. Such techniques integrate the television with a home security system. A television viewer can use the television to control, interact, and automatically receive information about home security events in real-time. A television viewer can control lighting, and room temperature, and arm/disarm sensors in the home such as door sensors, motion detectors…

    Techniques disclosed herein enable automated home security monitoring via a television connected to a set-top box, such as a cable set-top box. Such techniques integrate the television with a home security system. A television viewer can use the television to control, interact, and automatically receive information about home security events in real-time. A television viewer can control lighting, and room temperature, and arm/disarm sensors in the home such as door sensors, motion detectors, cameras, etc, as well as access camera images. Events from such sensors can be monitored or viewed on the television set when they are triggered. For example, when triggered, an icon representing the sensor can be shown on the television screen, or in case of a camera, an image or video can be shown that cause the triggered event.

    Other inventors
    See patent
  • System and Method for Wi-Fi Roaming

    Issued US 9,241,367

    Systems and methods for Wi-Fi roaming. A gateway supports both a local access point (AP) and a virtual AP. The local AP is accessible only to an “owner” of the gateway. The virtual AP (VAP) is accessible to devices associated with the owner of the gateway and to roaming Wi-Fi devices. A datastore conveys information about the roaming Wi-Fi devices to the VAP to permit them to access the VAP without the need for manual configuration of the VAP. A roaming Wi-Fi device may communicate with a…

    Systems and methods for Wi-Fi roaming. A gateway supports both a local access point (AP) and a virtual AP. The local AP is accessible only to an “owner” of the gateway. The virtual AP (VAP) is accessible to devices associated with the owner of the gateway and to roaming Wi-Fi devices. A datastore conveys information about the roaming Wi-Fi devices to the VAP to permit them to access the VAP without the need for manual configuration of the VAP. A roaming Wi-Fi device may communicate with a gateway via a tunnel to maintain session connectivity during roaming. A session may be initiated on one network, such as a Wi-Fi network or a cellular network, handed off to another network, such as a cellular network or a Wi-Fi network, and then returned to network on which the session was initiated.

    Other inventors
    See patent
  • System and method for cloning a Wi-Fi access point

    Issued US 9,066,236

    Systems and methods for cloning a Wi-Fi access point. A determination is made by a network monitoring device to transition communications between a Wi-Fi device and a first access point (AP) to a second AP. The SSID and the security configuration information, and, optionally, network address translation (NAT) information of the first access point are acquired and provided to a second AP. The second AP instantiates the SSID and the security configuration information and, optionally, the NAT…

    Systems and methods for cloning a Wi-Fi access point. A determination is made by a network monitoring device to transition communications between a Wi-Fi device and a first access point (AP) to a second AP. The SSID and the security configuration information, and, optionally, network address translation (NAT) information of the first access point are acquired and provided to a second AP. The second AP instantiates the SSID and the security configuration information and, optionally, the NAT information. The networking monitoring device directs the first AP to cease using the SSID and the security configuration information and, optionally, the NAT information in response to receipt of confirmation that the second AP has instantiated the SSID and the security configuration information and, optionally, the NAT information of the first AP.

    Other inventors
    See patent
  • System and Method for Maintaining a Communication Session

    Issued US 8,885,571

    Systems and methods for maintaining a communication session. A gateway supports both a local access point (AP) and a virtual AP. The local AP is accessible only to an "owner" of the gateway. The virtual AP (VAP) is accessible to devices associated with the owner of the gateway and to roaming Wi-Fi devices. A datastore conveys information about the roaming Wi-Fi devices to the VAP to permit them to access the VAP without the need for manual configuration of the VAP. A roaming Wi-Fi/cellular…

    Systems and methods for maintaining a communication session. A gateway supports both a local access point (AP) and a virtual AP. The local AP is accessible only to an "owner" of the gateway. The virtual AP (VAP) is accessible to devices associated with the owner of the gateway and to roaming Wi-Fi devices. A datastore conveys information about the roaming Wi-Fi devices to the VAP to permit them to access the VAP without the need for manual configuration of the VAP. A roaming Wi-Fi/cellular device may communicate with a gateway via a tunnel to maintain session connectivity during roaming. A session may be initiated on one network, such as a Wi-Fi network or a cellular network, handed off to another network, such as a cellular network or a Wi-Fi network, and then returned to network on which the session was initiated.

    Other inventors
    See patent
  • System and method for Quarantining IP Service Devices

    Issued US 8,683,038

    A system and method for quarantining IP service devices (ISDs). When an ISD is placed into a quarantined environment, any request from the ISD will be re-directed to a quarantine alert server in a quarantine sub-system. In response to the request, the quarantine alert server may provide the user with information about the quarantine and may redirect, or instruct the user to redirect, the request to a quarantine response server. The quarantine response server may provide additional information…

    A system and method for quarantining IP service devices (ISDs). When an ISD is placed into a quarantined environment, any request from the ISD will be re-directed to a quarantine alert server in a quarantine sub-system. In response to the request, the quarantine alert server may provide the user with information about the quarantine and may redirect, or instruct the user to redirect, the request to a quarantine response server. The quarantine response server may provide additional information that is not in the quarantine video message as to how the user may end the quarantine.

    Other inventors
    See patent
  • System and method for maintaining a communication session

    Issued US 8,638,717

    Systems and methods for maintaining a communication session. A gateway supports both a local access point (AP) and a virtual AP. The local AP is accessible only to an "owner" of the gateway. The virtual AP (VAP) is accessible to devices associated with the owner of the gateway and to roaming Wi-Fi devices. A datastore conveys information about the roaming Wi-Fi devices to the VAP to permit them to access the VAP without the need for manual configuration of the VAP. A roaming Wi-Fi/cellular…

    Systems and methods for maintaining a communication session. A gateway supports both a local access point (AP) and a virtual AP. The local AP is accessible only to an "owner" of the gateway. The virtual AP (VAP) is accessible to devices associated with the owner of the gateway and to roaming Wi-Fi devices. A datastore conveys information about the roaming Wi-Fi devices to the VAP to permit them to access the VAP without the need for manual configuration of the VAP. A roaming Wi-Fi/cellular device may communicate with a gateway via a tunnel to maintain session connectivity during roaming. A session may be initiated on one network, such as a Wi-Fi network or a cellular network, handed off to another network, such as a cellular network or a Wi-Fi network, and then returned to network on which the session was initiated.

    Other inventors
    See patent
  • A System and Method for Using Ad Hoc Networks in Cooperation with Service Provider Networks

    Issued US 8,599,700

    Systems and methods for using ad hoc networks in cooperation with service provider networks. Multi-network devices communicate with each other as peers in an ad hoc network while each accessing a service provider network. The multi-network devices may each receive the same real-time multimedia stream, be it broadcast or unicast, while sharing stream parity information. The peers may take corrective action to maintain uninterrupted playback of the real-time multimedia stream with no or minimal…

    Systems and methods for using ad hoc networks in cooperation with service provider networks. Multi-network devices communicate with each other as peers in an ad hoc network while each accessing a service provider network. The multi-network devices may each receive the same real-time multimedia stream, be it broadcast or unicast, while sharing stream parity information. The peers may take corrective action to maintain uninterrupted playback of the real-time multimedia stream with no or minimal loss in perceived quality. The peers may further cooperate to facilitate bandwidth and power optimization, fast channel switching, and real-time mobile traffic and network analysis, displays and alerts.

    Other inventors
    See patent
  • System and Method for Cloning a Wi-Fi Access Point

    Issued US 8,555,364

    Systems and methods for cloning a Wi-Fi access point. A determination is made by a network monitoring device to transition communications between a Wi-Fi device and a first access point (AP) to a second AP. The SSID and the security configuration information, and, optionally, network address translation (NAT) information of the first access point are acquired and provided to a second AP. The second AP instantiates the SSID and the security configuration information and, optionally, the NAT…

    Systems and methods for cloning a Wi-Fi access point. A determination is made by a network monitoring device to transition communications between a Wi-Fi device and a first access point (AP) to a second AP. The SSID and the security configuration information, and, optionally, network address translation (NAT) information of the first access point are acquired and provided to a second AP. The second AP instantiates the SSID and the security configuration information and, optionally, the NAT information. The networking monitoring device directs the first AP to cease using the SSID and the security configuration information and, optionally, the NAT information in response to receipt of confirmation that the second AP has instantiated the SSID and the security configuration information and, optionally, the NAT information of the first AP.

    Other inventors
    See patent
  • System and Method for Wi-Fi Roaming

    Issued US 8,553,662

    Systems and methods for Wi-Fi roaming. A gateway supports both a local access point (AP) and a virtual AP. The local AP is accessible only to an “owner” of the gateway. The virtual AP (VAP) is accessible to devices associated with the owner of the gateway and to roaming Wi-Fi devices. A datastore conveys information about the roaming Wi-Fi devices to the VAP to permit them to access the VAP without the need for manual configuration of the VAP. A roaming Wi-Fi device may communicate with a…

    Systems and methods for Wi-Fi roaming. A gateway supports both a local access point (AP) and a virtual AP. The local AP is accessible only to an “owner” of the gateway. The virtual AP (VAP) is accessible to devices associated with the owner of the gateway and to roaming Wi-Fi devices. A datastore conveys information about the roaming Wi-Fi devices to the VAP to permit them to access the VAP without the need for manual configuration of the VAP. A roaming Wi-Fi device may communicate with a gateway via a tunnel to maintain session connectivity during roaming. A session may be initiated on one network, such as a Wi-Fi network or a cellular network, handed off to another network, such as a cellular network or a Wi-Fi network, and then returned to network on which the session was initiated.

    Other inventors
    See patent
  • System and Method for Updating a Dynamic Domain Name Server

    Issued US 7,836,142

    A system and method for synchronizing a dynamic domain name system (DDNS). Updated domain name information is received at a first datastore and sent to a second datastore. Updated domain name information is also received at the second datastore and sent to the first datastore. Either datastore determines whether the other datastore is available to receive the updated domain name information. If the receiving datastore is not available, the sending datastore waits until the receiving datastore…

    A system and method for synchronizing a dynamic domain name system (DDNS). Updated domain name information is received at a first datastore and sent to a second datastore. Updated domain name information is also received at the second datastore and sent to the first datastore. Either datastore determines whether the other datastore is available to receive the updated domain name information. If the receiving datastore is not available, the sending datastore waits until the receiving datastore is available. The first datastore is connected to a first master DNS server and the second datastore is connected to a second master DNS server. The first and second master servers share an IP address. When a request for domain name information is received at a router, the request is sent to a master DNS server selected from the first and second master DNS servers using the shared IP address. A master DNS server is selected to respond to the DNS request only if that master server is able to respond to the request. The requested domain name information is retrieved from the datastore connected to the selected DNS server and a response to the request for domain name information is generated.

    See patent

Courses

  • Fiber Optics and Applications

    ECE 4134

  • Internet Software

    CS 5244

  • Network Application Design

    ECE 4564

  • Network Architecture and Protocols

    ECE 5565

  • Network and Computer Security

    ECE 5560

  • Stochastic Models

    OR 542

  • Wireless Networks and Mobile Systems

    ECE 4570

Projects

  • Cloud-based IPTV Product

    -

    Development Lead for multiple embedded web application development teams. Next generation, cloud-based IPTV multi-room DVR product. Technical training and on-boarding contractors and new employees, JavaScript Development, JavaScript Code Review, Continuous Integration, Build System, Git and GitHub Administrator, Release Management, Agile Epics and Stories, Architecture Review, Performance Optimization and Analysis. Lead onshore and offshore teams.

    See project
  • End-to-End Big Data Analytics

    -

    Big Data Client Instrumentation Development Lead, Big Data Reporting API Client Implementation Code Review, Splunk Client Logging Architecture, Splunk Logging Client Implementation Development Lead, Splunk Dashboards and Reports, Big Data Analysis, Big Data Reporting API Review, Full Stack Analysis, Lead Full Engineering Lifecycle (Architecture, Proof-of-Concept, Development, Capacity Planning, Production Deployment), Structured Data, Semi-Structured Data, Unstructured Data

  • TWCTV Online Video Portal

    -

    Development Lead and Scrum Master for web development team.

    See project
  • Legacy Motorola Start Over Look Back

    -

    EBIF Interactive TV Application

  • Voice Over IP Data Center Design

    -

  • Acision (Logica CMG) Voicemail Integration

    -

    Engineering Integration for Advanced Voice Mail Features for Residential and Commercial TWC VoIP Customers

  • Nokia Siemens Networks IMS Integration

    -

    Engineering Integration for a Next Generation VoIP system for TWC residential customers

  • Cisco BTS 10200 Softswitch Integration

    -

    Engineering Integration for a VoIP system for TWC residential customers

  • US Coast Guard Webmail

    -

  • Astrolink

    -

Honors & Awards

  • "Best Overall Architecture" in the Architectural Kata

    O'Reilly Software Architecture Conference

    http://nealford.com/katas/

    https://conferences.oreilly.com/software-architecture/sa-ny/public/schedule/detail/57839

    As Fred Brooks points out, “How do we get great designers? Great designers design, of course.” So how do we get great architects? Without the chance to try things, how can we improve as architects?

    Architectural Katas are proven exercises designed to maximize the architectural effort, minimize the unnecessary overhead, and complete all the critical elements…

    http://nealford.com/katas/

    https://conferences.oreilly.com/software-architecture/sa-ny/public/schedule/detail/57839

    As Fred Brooks points out, “How do we get great designers? Great designers design, of course.” So how do we get great architects? Without the chance to try things, how can we improve as architects?

    Architectural Katas are proven exercises designed to maximize the architectural effort, minimize the unnecessary overhead, and complete all the critical elements that any architectural exercise should include: changing requirements, a customer, project constraints, a deadline, peers, and a review process. Your moderator will lead a hands-on workshop where, in small groups, you’ll answer an RFP, cook up an architecture, and present it for review.

    Attendees split into eleven teams of five. Teams worked on Architectural Katas (problem statements) that were randomly assigned. Teams had 45-minutes to create their solution. Teams had three minutes to present their solution to the entire audience and three judges. The judges asked questions of the team at the end of the presentation. There were two categories, "Best Overall Architecture" and "Best Non-Microservices Architecture". At the end of the presentations, winners were selected by the judges.

Organizations

  • Code for Denver (Code for America)

    -

    - Present
  • IASA

    Member

    - Present
  • Phi Beta Kappa

    -

    - Present
  • Tau Beta Pi

    -

    - Present
  • HTML5 Denver Users Group

    Coorganizer, Board Member

    -

More activity by Geoffrey

View Geoffrey’s full profile

  • See who you know in common
  • Get introduced
  • Contact Geoffrey directly
Join to view full profile

Other similar profiles

Explore collaborative articles

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.

Explore More

Others named Geoffrey Filippi in United States

Add new skills with these courses