公开(公告)号：US20170230185A1

公开(公告)日：2017-08-10

申请号：US15386120

申请日：2016-12-21

Applicant: Cisco Technology, Inc.

Inventor： Kannan Varadhan ,  Chirag Shroff ,  Rakesh Chopra

IPC: H04L9/32 ,  H04L9/30 ,  G06F9/445 ,  H04L9/14

CPC classification number: H04L9/3263 ,  G06F8/63 ,  G06F8/65 ,  G06F21/121 ,  G06F21/44 ,  H04L9/14 ,  H04L9/30 ,  H04L63/0823 ,  H04L63/123 ,  H04L63/126

Abstract: In one embodiment, a computing device receives an image that has been signed with a first key, wherein the image includes a first computational value associated with it. A second computational value associated with the image is determined and the image is signed with a second key to produce a signed image that includes both the first and second computational values. Prior to loading the dual-signed image, the computing device attempts to authenticate the dual-signed image using both the first and second computational values, and, if successful, loads and installs the dual-signed image.

公开(公告)号：US10659234B2

公开(公告)日：2020-05-19

申请号：US15386120

申请日：2016-12-21

Applicant: Cisco Technology, Inc.

Inventor： Kannan Varadhan ,  Chirag Shroff ,  Rakesh Chopra

IPC: G06F21/12 ,  G06F21/44 ,  G06F8/61 ,  G06F8/65 ,  H04L9/32 ,  H04L29/06 ,  H04L9/14 ,  H04L9/30

Abstract: In one embodiment, a computing device receives an image that has been signed with a first key, wherein the image includes a first computational value associated with it. A second computational value associated with the image is determined and the image is signed with a second key to produce a signed image that includes both the first and second computational values. Prior to loading the dual-signed image, the computing device attempts to authenticate the dual-signed image using both the first and second computational values, and, if successful, loads and installs the dual-signed image.

公开(公告)号：US10069725B1

公开(公告)日：2018-09-04

申请号：US15387313

申请日：2016-12-21

Applicant: Cisco Technology, Inc.

Inventor： Dheerendra Talur ,  Kannan Varadhan ,  Karthik Subramanian ,  Xiongbin Ma ,  Bharath Vasudevan

IPC: H04L12/723 ,  H04L12/755 ,  H04L12/28 ,  H04L12/741 ,  H04L12/935

Abstract: In one embodiment, a service domain router (SDR) establishes a virtual fabric interface between the SDR and at least one peer SDR in a computer network. When the SDR receives a routing advertisement from the peer SDR, where the routing advertisement provides nexthop (NH) information for one or more network routes, the SDR may add the one or more network routes to a routing information base (RIB) listing the peer SDR as a next-to-nexthop (NNH) for the network routes. A forwarding information base (FIB) on the network device then resolves the NNH for the corresponding network routes to an egress interface of the peer SDR, such that packets received at the SDR and destined along a particular route of the one or more network routes may be forwarded via the egress interface of the peer SDR.