UNITED STATES PATENT AND TRADEMARK OFFICE
`
`
`
`
`
`
`
`
`BEFORE THE PATENT TRIAL AND APPEAL BOARD
`
`
`
`
`
`
`
`
`Liberty Mutual Insurance Company, Liberty Mutual Technology Group, Inc., Liberty Mutual
`Holding Company Inc., Liberty Mutual Group Inc., Liberty Mutual Plano LLC, Comparion
`Insurance Agency, LLC, Ironshore Holdings (U.S.) Inc.,
`
`and
`
`Comerica Incorporated
`
`Petitioners
`
`v.
`
`Intellectual Ventures I LLC
`
`Patent Owner
`
`
`
`
`
`
`
`
`
`
`
`
`IPR2025-00201
`U.S. Patent No. 7,949,785
`
`
`
`
`
`
`
`
`
`
`
`
`
`DECLARATION OF EREZ ZADOK IN SUPPORT OF PETITION FOR INTER PARTES
`REVIEW OF
`U.S. PATENT NO. 7,949,785
`
`
`
`
`
`
`
`
`Mail Stop Patent Board
`Patent Trial and Appeal Board
`U.S. Patent and Trademark Office
`P.O. Box 1450
`Alexandria, VA 22313-1450
`
`IPR2025-00201 / 785 Patent
`
`Page 1 of 120
`
`EX1004
`
`

`

`
`
`
`
`
`I.
`
`II.
`
`Table of Contents
`
`ASSIGNMENT ................................................................................................................... 1
`
`BACKGROUND AND QUALIFICATIONS .................................................................... 1
`
`III. MATERIALS CONSIDERED ........................................................................................... 9
`
`IV.
`
`V.
`
`VI.
`
`LEVEL OF ORDINARY SKILL IN THE ART .............................................................. 11
`
`RELEVANT LEGAL STANDARDS .............................................................................. 12
`
`SUMMARY OF OPINIONS ............................................................................................ 15
`
`VII. TECHNOLOGY OVERVIEW ......................................................................................... 15
`
`A.
`
`B.
`
`General Computer Operations .............................................................................. 15
`
`Networking ........................................................................................................... 17
`
`1.
`
`2.
`
`3.
`
`Networking Overview ............................................................................... 17
`
`Network Protocols .................................................................................... 20
`
`The Domain Name System, Hostnames, and IP Addresses ...................... 31
`
`C.
`
`Virtualization ........................................................................................................ 38
`
`VIII. THE ’844 PATENT .......................................................................................................... 41
`
`A.
`
`B.
`
`Overview ............................................................................................................... 41
`
`Prosecution History ............................................................................................... 47
`
`IX.
`
`X.
`
`THE CLAIMS ................................................................................................................... 49
`
`OVERVIEW OF THE PRIMARY PRIOR ART REFERENCES ................................... 53
`
`A.
`
`B.
`
`C.
`
`Mehta .................................................................................................................... 53
`
`RFC-1383 .............................................................................................................. 54
`
`Johnson .................................................................. Error! Bookmark not defined.
`
`XI.
`
`CLAIM CONSTRUCTION .............................................................................................. 57
`
`
`
`i
`
`IPR2025-00201 / 785 Patent
`
`Page 2 of 120
`
`EX1004
`
`

`

`
`
`
`XII. GROUND 1: Mehta and RFC-1383 Renders Obvious Claims 1-3, 6-12, 22-69, 71-80, 82-
`86, and 89-90 .................................................................................................................... 63
`
`A.
`
`The Independent Claims ....................................................................................... 63
`
`1.
`
`2.
`
`3.
`
`4.
`
`5.
`
`6.
`
`Preamble: Virtual network system or manager ......................................... 64
`
`“A virtual network defined by a domain name” ....................................... 65
`
`Registration/distribution of virtual network address to each device which
`uniquely identifies the device ................................................................... 66
`
`Route director/routing ............................................................................... 69
`
`a.
`
`The Encapsulated Packets in Claims [38.3], [48.3], and [62.4] .... 70
`
`DNS server, request and responses ........................................................... 71
`
`A memory and a processor generally ........................................................ 81
`
`B.
`
`C.
`
`Motivation To Combine Mehta and RFC-1383 .................................................... 83
`
`The Dependent Claims .......................................................................................... 89
`
`1.
`
`Claims 2-3, 6-12, 22-29 are also obvious over the combination of Mehta
`and RFC-1383 ........................................................................................... 89
`
`a.
`
`b.
`
`c.
`
`d.
`
`e.
`
`Claim 2: The system of claim 1 wherein each of the devices
`communicate with the virtual network manager and the other
`devices in the virtual network via an associated agent ................. 90
`
`Claim 3: The system of claim 2 wherein the associated agent is
`installed on a proxy device which is a proxy agent for one or more
`of the devices in the virtual network with respect to the virtual
`network manager and the route director ...... Error! Bookmark not
`defined.
`
`Claim 6: The system of claim 1 wherein each of the devices
`include an agent configured to communicate with the virtual
`network manager and agents of the other devices in the virtual
`network ......................................................................................... 90
`
`Claim 7: The system of claim 1 wherein the virtual network
`manager is coupled to the public network and has an associated
`public network address ................................................................. 90
`
`Claim 8: The system of claim 1 wherein the route director is
`further configured to receive the encapsulated packets when routed
`to a public network address corresponding to the route director .. 91
`ii
`
`
`
`IPR2025-00201 / 785 Patent
`
`Page 3 of 120
`
`EX1004
`
`

`

`
`
`
`Claim 9: The system of claim 1 wherein each of the devices in the
`virtual network are further identified by at least one physical
`network address ............................................................................ 91
`
`Claim 10: The system of claim 9 wherein the physical network
`addresses that are associated with the devices in the virtual
`network are dynamic ..................................................................... 91
`
`Claim 11: The system of claim 9 wherein the physical network
`addresses that are associated with the devices in the virtual
`network are static .......................................................................... 91
`
`Claim 12: The system of claim 9 wherein the physical network
`addresses that are associated with the devices in the virtual
`network are private network addresses, and wherein the virtual
`network addresses are unique in the virtual network so as not to
`conflict with the private network addresses .................................. 92
`
`Claim 22: The system of claim 1 wherein the virtual network
`manager is coupled to the public network and includes a public
`network address ............................................................................ 93
`
`Claim 23: The system of claim 22 wherein the route director is
`coupled to the public network and includes a different public
`network address than the public network address .................. Error!
`Bookmark not defined.
`
`Claim 24: The system of claim 22 wherein the route director is
`coupled to a private network and includes a private network
`address ............................................ Error! Bookmark not defined.
`
`Claim 25: The system of claim 1 wherein the encapsulated packets
`further include virtual IP packets configured for communication of
`the data, the virtual IP packets being encrypted prior to being
`encapsulated .................................................................................. 93
`
`Claim 26: The system of claim 1 wherein the encapsulated packets
`further include virtual IP packets configured for communication of
`the data, the virtual IP packets being encrypted prior to being
`encapsulated .................................................................................. 93
`
`Claim 27: The system of claim 25 wherein the virtual IP packets
`are encrypted using DES or triple DES ....... Error! Bookmark not
`defined.
`
`Claim 28: The system of claim 1 wherein the virtual network
`manager includes a virtual community definition that is defined by
`
`f.
`
`g.
`
`h.
`
`i.
`
`j.
`
`k.
`
`l.
`
`m.
`
`n.
`
`o.
`
`p.
`
`
`
`iii
`
`IPR2025-00201 / 785 Patent
`
`Page 4 of 120
`
`EX1004
`
`

`

`
`
`
`the domain name, and includes one or more of the devices that are
`registered in the virtual network ................................................... 94
`
`q.
`
`Claim 29: The system of claim 1 wherein the route director is a
`public route director in the public network, the system further
`comprising a private route director in a private network configured
`to enable access to devices of the private network that are also in
`the virtual network from devices of the public network that are also
`in the virtual network .................................................................... 94
`
`2.
`
`Claims that Depend on Independent Claim 30 ......................................... 94
`
`a.
`
`b.
`
`c.
`
`d.
`
`e.
`
`f.
`
`g.
`
`Claim 31: The virtual network manager of claim 30 further
`comprising an additional network interface configured for data
`communication via a public network ............................................ 94
`
`Claim 32: The virtual network manager of claim 31 wherein the
`network interface is a UDP port configured for data
`communication via the virtual network, and wherein the additional
`network interface is a TCP port configured for registration
`communications via the public network ....................................... 95
`
`Claim 33: The virtual network manager of claim 30 wherein the
`network interface is a UDP port configured for data
`communication via the virtual network ........................................ 95
`
`Claim 34: The virtual network manager of claim 30 wherein the
`register module is further configured to receive the registration
`request from the agent that is installed on the device for data
`communication via the virtual network ........................................ 96
`
`Claim 35: The virtual network manager of claim 30 further
`comprising a join module configured to receive a join request from
`the agent associated with the device to indicate that the device is
`connected for data communication within the virtual network, the
`join module further configured to receive a leave request from the
`agent associated with the device to indicate that the device will be
`disconnected from data communication within the virtual network
`....................................................................................................... 96
`
`Claim 36: The virtual network manager of claim 35 wherein the
`join module is further configured to provide virtual network
`addresses to the devices that are registered in the virtual network 97
`
`Claim 37: The virtual network manager of claim 35 wherein the
`join module is further configured to maintain data to associate a
`virtual network address with a device in the virtual network ....... 97
`
`
`
`iv
`
`IPR2025-00201 / 785 Patent
`
`Page 5 of 120
`
`EX1004
`
`

`

`3.
`
`Similar or Identical Claims that Depend on Independent Claims 48 and 62
`................................................................................................................... 98
`
`
`
`
`a.
`
`b.
`
`c.
`
`d.
`
`e.
`
`f.
`
`g.
`
`h.
`
`i.
`
`Claim 49: The method of claim 48 further comprising providing
`the devices in the virtual network with a communication agent ... 98
`
`Claim 63: One or more processor readable storage media devices
`as recited in claim 62 further comprising processor readable code
`that, if executed, implements the virtual network manager to
`provide the devices in the virtual network with a communication
`agent .............................................................................................. 98
`
`Claim 50: The method of claim 49 wherein said providing the
`devices in the virtual network with a communication agent
`includes providing a proxy agent ... Error! Bookmark not defined.
`
`Claim 64: One or more processor readable storage media devices
`as recited in claim 63 wherein the virtual network manager
`provides the as a proxy agent ......... Error! Bookmark not defined.
`
`Claim 52: The method of claim 48 further comprising defining a
`member set of the virtual network that includes one or more of the
`devices, and assigning the domain name that defines the virtual
`network ......................................................................................... 99
`
`Claim 65: One or more processor readable storage media devices
`as recited in claim 62 further comprising processor readable code
`that, if executed, implements the virtual network manager to define
`a member set of the virtual network that includes one or more of
`the devices, and the domain name that defines the virtual network
`....................................................................................................... 99
`
`Claim 54: The method of claim 48 further comprising assigning
`the virtual network address to the device as an IPV4 compliant
`address ........................................................................................... 99
`
`Claim 66: One or more processor readable storage media devices
`as recited in claim 62 wherein the virtual network address includes
`a non-routable IPV4 compliant address ........................................ 99
`
`Claim 56: The method of claim 48 further comprising routing
`network traffic via the public network from a first device having a
`public network address to a second device having a different public
`network address, the network traffic being routed as data packets
`having a source address which is the virtual network address of the
`first device and a destination address which is the virtual network
`address of the second device, the data packets being encapsulated
`to include a second source address which is a public network
`v
`
`
`
`IPR2025-00201 / 785 Patent
`
`Page 6 of 120
`
`EX1004
`
`

`

`j.
`
`k.
`
`l.
`
`m.
`
`n.
`
`
`
`
`address of the first device and a second destination address which
`is the different public network address of the second device Error!
`Bookmark not defined.
`
`Claim 67: One or more processor readable storage media devices
`as recited in claim 62 further comprising processor readable code
`that, if executed, implements the virtual network manager to route
`network traffic via the public network from a first device having a
`public network address to a second device having a different public
`network address ............................. Error! Bookmark not defined.
`
`Claim 57: The method of claim 48 further comprising routing
`network traffic from a first device in a private physical network
`having a private network address to a second device having a
`public network address, the network traffic being routed as data
`packets having a source address which is the virtual network
`address of the first device, a destination address which is the
`virtual network address of the second device, and a shim which
`includes the private network address, the data packets being
`encapsulated to include a second destination address which is the
`public network address of the second device .............................. 100
`
`Claim 68: One or more processor readable storage media devices
`as recited in claim 62 further comprising processor readable code
`that, if executed, implements the virtual network manager to route
`network traffic from a first device in a private physical network
`having a private network address to a second device having a
`public network address .................. Error! Bookmark not defined.
`
`Claim 58: The method of claim 48 further comprising routing
`network traffic from a first device in a private physical network
`having a first private network address to a second device in a
`different private physical network having a second private network
`address, the network traffic being routed as encapsulated packets
`having a source address which is the virtual network address of the
`first device, a destination address which is the virtual network
`address of the second device, and a shim which includes the first
`and second private network addresses ......... Error! Bookmark not
`defined.
`
`Claim 69: One or more processor readable storage media devices
`as recited in claim 62 further comprising processor readable code
`that, if executed, implements the virtual network manager to route
`network traffic from a first device in a private physical network
`having a first private network address to a second device in a
`different private physical network having a second private network
`address ............................................ Error! Bookmark not defined.
`
`
`
`vi
`
`IPR2025-00201 / 785 Patent
`
`Page 7 of 120
`
`EX1004
`
`

`

`
`
`
`o.
`
`p.
`
`q.
`
`r.
`
`Claim 59: The method of claim 58 wherein the first private
`network address and the second private network address are
`identical .......................................... Error! Bookmark not defined.
`
`Claim 71: One or more processor readable storage media devices
`as recited in claim 69 wherein the first private network address and
`the second private network address are identical Error! Bookmark
`not defined.
`
`Claim 61: The method of claim 48 further comprising applying a
`group policy to the devices that are registered as the members of
`the virtual network ...................................................................... 100
`
`Claim 74: One or more processor readable storage media devices
`as recited in claim 62 further comprising processor readable code
`that, if executed, implements the virtual network manager to apply
`a group policy to the devices that are registered as the members of
`the virtual network ...................................................................... 100
`
`4.
`
`Additional Claims that Depend on Independent Claims 48 and 62 ........ 101
`
`a.
`
`b.
`
`c.
`
`d.
`
`e.
`
`f.
`
`Claim 51: The method of claim 48 further comprising defining at
`least two member sets of the virtual network that each include one
`or more of the devices, the at least two member sets having at least
`one different device ..................................................................... 101
`
`Claim 53: The method of claim 48 further comprising defining at
`least two member sets of the virtual network that each include one
`or more of the devices, the at least two member sets having at least
`one different device ..................................................................... 101
`
`Claim 55: The method of claim 54 wherein the IPV4 compliant
`address is non-routable ............................................................... 101
`
`Claim 60: The method of claim 48 further comprising: receiving a
`join status request from a first device in the virtual network as a
`query to determine the status of a second device in the virtual
`network; and responding to the join status request to indicate
`whether or not the second device is joined to the virtual network
`for data communication .............................................................. 101
`
`Claim 72: One or more processor readable storage media devices
`as recited in claim 67 wherein the network traffic is routed as
`encapsulated data packets ........................................................... 102
`
`Claim 73: One or more processor readable storage media devices
`as recited in claim 67 wherein the network traffic is routed as
`encrypted data traffic .................................................................. 102
`
`
`
`vii
`
`IPR2025-00201 / 785 Patent
`
`Page 8 of 120
`
`EX1004
`
`

`

`
`
`Claims that Depend on Independent Claims 75 ...................................... 102
`
`5.
`
`a.
`
`b.
`
`c.
`
`d.
`
`e.
`
`f.
`
`g.
`
`h.
`
`i.
`
`j.
`
`k.
`
`l.
`
`Claim 76: The system of claim 75 wherein the virtual network
`manager includes a member register module .............................. 102
`
`Claim 77: The system of claim 75 wherein the virtual network
`manager includes a member join module ................................... 102
`
`Claim 78: The system of claim 77 wherein the member join
`module provides a virtual network address to a device that is
`registered as a member of the network ....................................... 103
`
`Claim 79: The system of claim 75 wherein the virtual network
`manager is further configured to maintain data on an association
`between at least one virtual network address with at least one
`device that is registered as a member of the network ................. 103
`
`Claim 80: The system of claim 75 wherein the virtual network
`manager includes a DNS server for the virtual community network
`..................................................................................................... 103
`
`Claim 82: The system of claim 75 wherein the virtual network
`manager includes at least a second virtual community definition
`..................................................................................................... 103
`
`Claim 83: The system of claim 75 wherein the virtual network
`manager includes a member authenticator .................................. 103
`
`Claim 84: The system of claim 75 wherein the virtual network
`manager includes a DNS server configured to provide authoritative
`responses for DNS queries from devices in the virtual community
`..................................................................................................... 103
`
`Claim 85: The system of claim 75 further comprising at least one
`route director configured to communicate with the one or more
`devices in the user set ................................................................. 104
`
`Claim 86: The system of claim 75 wherein each device registered
`in the network is configured to communicate with the virtual
`network manager and other devices in the user set via at least one
`agent ............................................................................................ 104
`
`Claim 89: The system of claim 75 wherein communications
`between the one or more devices in the user set are encrypted .. 104
`
`Claim 90: The system of claim 89 wherein the virtual network
`manager is configured to provide a shared message to the one or
`
`
`
`viii
`
`IPR2025-00201 / 785 Patent
`
`Page 9 of 120
`
`EX1004
`
`

`

`more devices in the user set to establish encrypted communications
`..................................................................................................... 105
`
`XIII. GROUND 2: Mehta, Johnson, and RFC-1383 Render Obvious Claims 4-5, 13-21, 70, 81,
`and 87-88 ........................................................................... Error! Bookmark not defined.
`
`A.
`
`Claims with NAT Limitations ............................... Error! Bookmark not defined.
`
`
`
`
`1.
`
`2.
`
`3.
`
`4.
`
`5.
`
`6.
`
`7.
`
`8.
`
`9.
`
`Claim 4.0: The system of claim 2 wherein the virtual network manager is
`further configured to: receive a request from the agent associated with a
`device in a private network to register the device in the virtual network;
`and .............................................................. Error! Bookmark not defined.
`
`Claim 4.1: The system of claim 2 wherein the virtual network manager is
`further configured to: receive a request from the agent associated with a
`device in a private network to register the device in the virtual network;
`and .............................................................. Error! Bookmark not defined.
`
`Claim 4.2: the virtual network manager configured to] detect a presence of
`a NAT device via which the request is routed from the agent to the virtual
`network manager ........................................ Error! Bookmark not defined.
`
`Claim 5.0: The system of claim 4 wherein the virtual network manager is
`further configured to receive the request from the agent as a message, and
`.................................................................... Error! Bookmark not defined.
`
`Claim 5.1: the virtual network manager configured to] detect the presence
`of the NAT device by comparing a field in a payload of the message with
`a source address in a header of the message ............ Error! Bookmark not
`defined.
`
`Claim 13.0: The system of claim 9 wherein the source device is coupled to
`a first private network and accesses a public network via a first NAT
`device configured to transmit the encapsulated packets, [and] .......... Error!
`Bookmark not defined.
`
`Claim 13.1: an encapsulated packet further including the physical network
`address of the source device as a private network address in the first
`private network .......................................... Error! Bookmark not defined.
`
`Claim 14: The system of claim 13 wherein the physical network address of
`the source device is dynamic ..................... Error! Bookmark not defined.
`
`Claim 15: The system of claim 13 wherein the physical network address of
`the source device is static ........................... Error! Bookmark not defined.
`
`
`
`ix
`
`IPR2025-00201 / 785 Patent
`
`Page 10 of 120
`
`EX1004
`
`

`

`
`
`
`10.
`
`11.
`
`12.
`
`13.
`
`14.
`
`15.
`
`16.
`
`17.
`
`18.
`
`19.
`
`20.
`
`Claim 16.0: The system of claim 13 wherein the destination device is
`coupled to a second private network and accesses the public network via a
`second NAT device, [and] ......................... Error! Bookmark not defined.
`
`Claim 16.1: the encapsulated packet further including the physical
`network address of the destination device as a private network address in
`the second private network ........................ Error! Bookmark not defined.
`
`Claim 17: The system of claim 16 wherein the physical network address of
`the destination device is dynamic .............. Error! Bookmark not defined.
`
`Claim 18: The system of claim 16 wherein the physical network address of
`the destination device is static .................... Error! Bookmark not defined.
`
`Claim 19: The system of claim 16 wherein said first private network and
`said second private network share at least one network address ....... Error!
`Bookmark not defined.
`
`Claim 20.0: The system of claim 1 wherein the route director is further
`configured to: provide a device-specific pseudo address assignment for the
`device in the virtual network when the device communicates with the
`route director via a NAT device; and ......... Error! Bookmark not defined.
`
`Claim 20.1: store an association of the device-specific pseudo address
`with a public network address of the NAT device and a port number of the
`NAT device ................................................ Error! Bookmark not defined.
`
`Claim 21: The system of claim 1 wherein the route director includes a
`translator for virtual network address information for a device in the
`virtual network that is implemented in a private network ................. Error!
`Bookmark not defined.
`
`Claim 70: One or more processor readable storage media devices as
`recited in claim 69 wherein the network traffic is routed to the first or
`second device via a NAT device ................ Error! Bookmark not defined.
`
`Claim 81: The system of claim 75 wherein the virtual network manager
`includes a NAT device detector for devices connecting with the virtual
`network manager behind a NAT device .... Error! Bookmark not defined.
`
`Claim 87: The system of claim 75 wherein the user set includes at least a
`first device and a second device, and wherein at least one of said first
`device and said second device is coupled to a first private network and
`accesses a public network via a NAT device ........... Error! Bookmark not
`defined.
`
`21.
`
`Claim 88: The system of claim 87 wherein said first device is coupled to
`said first private network, and said second device is coupled to a second
`
`
`
`x
`
`IPR2025-00201 / 785 Patent
`
`Page 11 of 120
`
`EX1004
`
`

`

`
`
`
`private network and accesses the public network via a second NAT device
`.................................................................... Error! Bookmark not defined.
`Motivation to Combine Mehta, Johnson, and RFC-1383 .... Error! Bookmark not
`defined.
`
`B.
`
`XIV. SECONDARY CONSIDERATIONS ............................................................................ 106
`
`XV. CONCLUSION ............................................................................................................... 106
`
`
`
`
`
`xi
`
`IPR2025-00201 / 785 Patent
`
`Page 12 of 120
`
`EX1004
`
`

`

`
`
`
`I, Erez Zadok, Ph.D., declare that:
`I.
`
`ASSIGNMENT
`
`1.
`
`I have been retained by Liberty Mutual Holding Company and Comerica
`
`Incorporated (together “Petitioners”) as an independent expert consultant in this proceeding before
`
`the United States Patent and Trademark Office (“PTO”).
`
`2.
`
`My consulting company, Zadoks Consulting, LLC, is being compensated for my
`
`time at my standard consulting rate. I am also being reimbursed for expenses that I may incur
`
`during the course of this work.
`
`3.
`
`My compensation is in no way contingent on the nature of my findings, the
`
`presentation of my findings in testimony, or the outcome of this or any other proceeding. I have
`
`no other interest in this proceeding.
`
`4.
`
`I have been asked to consider whether certain references disclose or suggest the
`
`features recited in the claims of U.S. Patent No. 7,949,785 (“the ’785 patent”) (EX1001).1 My
`
`opinions are set forth below.
`II.
`
`BACKGROUND AND QUALIFICATIONS
`
`5.
`
`I am a Professor in the Computer Science Department at Stony Brook University
`
`(part of the State University of New York (“SUNY”) system). I direct the File-systems and Storage
`
`Lab (FSL) at Stony Brook’s Computer Science Department. My research interests include file
`
`systems and storage systems, operating systems, transactional systems including database
`
`technologies, information technology and system administration, security/privacy and information
`
`
`1 Where appropriate, I refer to exhibits I understand will be attached to the petition for inter partes
`
`review of the ’785 patent (the “Petition”).
`
`
`
`1
`
`IPR2025-00201 / 785 Patent
`
`Page 13 of 120
`
`EX1004
`
`

`

`
`
`assurance, networking, energy efficiency, performance and benchmarking, virtualization, cloud
`
`systems, compilers, applied machine learning, and software engineering.
`
`6.
`
`I studied at a professional high school in Israel, focusing on electrical engineering
`
`(“EE”), and graduated in 1982. I spent one more year at the high school’s college division,
`
`receiving a special Certified Technician’s degree in EE. I then went on to serve in the Israeli
`
`Defense Forces for three years (1983–1986). I received my Bachelor of Science degree in
`
`computer science (“CS”) in 1991, my Master’s degree in CS in 1994, and my PhD in CS in 2001—
`
`all from Columbia University in New York.
`
`7.
`
`When I began my undergraduate studies at Columbia University, I also started
`
`working as a student assistant in the various campus-wide computer labs, eventually becoming an
`
`assistant to the head labs manager, who was managing all public computer labs on campus. During
`
`that time, I also became more involved with research within the CS Department at Columbia
`
`University, conducting research on operating systems, file and storage systems, distributed and
`
`networked systems, security, and other topics. I also assisted the CS department’s computer
`
`administrators in managing the department’s computers, which included storage, IT, networking,
`
`and cyber-security related duties.
`
`8.
`
`In 1991, I joined Columbia University’s CS department as a full-time systems
`
`administrator, studying towards my MS degree part-time. My MS thesis topic is related to file
`
`system reliability, fault tolerance, replication, and failover in mobile networked storage systems
`
`using file virtualization. My main duties as a systems administrator involved installing,
`
`configuring, and managing many networked servers, proxies, and desktops running several
`
`operating systems, as well as network devices setup; this included many software