中科微点-全球专利检索

  1. Login
  2. Sign Up

Search Results

102 records (took 0.016 seconds)

    PATH SIGNATURES FOR DATA FLOWS
    91.
    发明申请
    PATH SIGNATURES FOR DATA FLOWS 有权

    公开(公告)号：US20210126864A1

    公开(公告)日：2021-04-29

    申请号：US16661540

    申请日：2019-10-23

    Applicant: Cisco Technology, Inc.

    Inventor： Atri Indiresan ,  Frank Brockners ,  Shwetha Subray Bhandari

    IPC: H04L12/743 ,  H04L12/24 ,  H04L29/12 ,  H04L12/851

    Abstract: This disclosure describes various methods, systems, and devices related to identifying path changes of data flows in a network. An example method includes receiving, at a node, a packet including a first path signature. The method further includes generating a second path signature by inputting the first path signature and one or more node details into a hash function. The method includes replacing the first path signature with the second path signature in the packet. The packet including the second path signature is forwarded by the node.

    Network operations reactive to operations data included in seamless bidirectional forwarding detection (S-BFD) packets
    92.
    发明授权
    Network operations reactive to operations data included in seamless bidirectional forwarding detection (S-BFD) packets 有权

    公开(公告)号：US10972381B2

    公开(公告)日：2021-04-06

    申请号：US16392299

    申请日：2019-04-23

    Applicant: Cisco Technology, Inc.

    Inventor： Carlos M. Pignataro ,  Nagendra Kumar Nainar ,  Reshad Rahman ,  Frank Brockners ,  Shwetha Subray Bhandari

    IPC: H04L12/707 ,  H04L12/703 ,  H04L29/06 ,  H04L12/24

    Abstract: In one embodiment, in-band operations data (e.g., In-situ Operations, Administration, Maintenance and/or other operations data) is added to Seamless Bidirectional Forwarding (S-BFD) packets. In one embodiment, a S-BFD packet received by a node includes a BFD discriminator and operations data. Reactive processing is identified based on the BFD discriminator. The S-BFD packet and the operations data (e.g., in an operations data field in a header of the received S-BFD packet, in an IOAM Type-Length-Value (TLV), etc.) is processed according to the identified reactive function. Examples of these reactive actions include, but are not limited to, determining a result based on processing of said particular operations data by the local node or a remote analytics server, and sending a response packet including unprocessed and/or a result of the processed operations data (e.g., performance, loss, jitter, an indication of compliance with a service level agreement, and/or another data measurement or result).

    DISCOVERING TRUSTWORTHY DEVICES USING ATTESTATION AND MUTUAL ATTESTATION
    95.
    发明申请
    DISCOVERING TRUSTWORTHY DEVICES USING ATTESTATION AND MUTUAL ATTESTATION 审中-公开

    公开(公告)号：US20200322380A1

    公开(公告)日：2020-10-08

    申请号：US16839576

    申请日：2020-04-03

    Applicant: Cisco Technology, Inc.

    Inventor： Sujal Sheth ,  Shwetha Subray Bhandari ,  Eric Voit ,  William F. Sulzen ,  Frank Brockners

    IPC: H04L29/06

    Abstract: Systems, methods, and computer-readable media for discovering trustworthy devices through attestation and authenticating devices through mutual attestation. A relying node in a network environment can receive attestation information from an attester node in the network environment as part of a unidirectional push of information from the attester node according to a unidirectional link layer communication scheme. A trustworthiness of the attester node can be verified by identifying a level of trust of the attester node from the attestation information. Further, network service access of the attester node through the relying node in the network environment can be controlled based on the level of trust of the attester node identified from the attestation information.

    SYSTEMS AND METHODS FOR PRE-CONFIGURATION ATTESTATION OF NETWORK DEVICES
    96.
    发明申请
    SYSTEMS AND METHODS FOR PRE-CONFIGURATION ATTESTATION OF NETWORK DEVICES 审中-公开

    公开(公告)号：US20200322356A1

    公开(公告)日：2020-10-08

    申请号：US16808114

    申请日：2020-03-03

    Applicant: Cisco Technology, Inc.

    Inventor： Sujal Sheth ,  Shwetha Subray Bhandari ,  Eric Voit ,  William F. Sulzen ,  Frank Brockners ,  Selvaraj Mani ,  Eliot Lear

    IPC: H04L29/06 ,  H04L29/12

    Abstract: Systems, methods, and computer-readable media are disclosed for measurement of trustworthiness of network devices prior to their configuration and deployment in a network. In one aspect of the present disclosure, a method for pre-configuration of network devices includes receiving, at a dynamic host configuration server, a first request from a network device for configuration data, the configuration data including at least an IP address; sending, by the dynamic host configuration server, a second request to the network device for attestation information; verifying, by the dynamic host configuration server, the network device based on the attestation information; and assigning, by the dynamic host configuration server, the configuration data to the network device upon verifying the network device.

    NETWORK SECURITY BY INTEGRATING MUTUAL ATTESTATION
    98.
    发明申请
    NETWORK SECURITY BY INTEGRATING MUTUAL ATTESTATION 审中-公开

    公开(公告)号：US20200320199A1

    公开(公告)日：2020-10-08

    申请号：US16752488

    申请日：2020-01-24

    Applicant: Cisco Technology, Inc.

    Inventor： Sujal Sheth ,  Shwetha Subray Bhandari ,  Eric Voit ,  William F. Sulzen ,  Frank Brockners

    IPC: G06F21/57 ,  H04L9/32 ,  H04L9/08

    Abstract: Technologies for attestation techniques, systems, and methods to confirm the integrity of a device for establishing and/or maintaining a trustworthy encrypted network session. An example method can include sending, via a server and using a cryptographic security protocol, a message associated with establishing an encrypted network session; receiving a response from a client device; identifying a level of trust of the client device based on the response; determining whether to perform a next step in the cryptographic security protocol based on the level of trust, wherein the cryptographic security protocol comprises at least one of a Secure Shell (SSH) protocol, a Transport Layer Security (TLS) protocol, a Secure Sockets Layer (SSL) protocol, and an Internet Protocol Security (IPsec) protocol.

Patent Agency Ranking