公开(公告)号：US20160315921A1

公开(公告)日：2016-10-27

申请号：US14992112

申请日：2016-01-11

Applicant: Cisco Technology, Inc.

Inventor： Venkata Krishna Sashank Dara ,  Shwetha Subray Bhandari ,  Andrew Yourtchenko ,  Eric Vyncke ,  Frank Brockners

IPC: H04L29/06 ,  H04L9/32

CPC classification number: H04L9/32 ,  H04L12/4633 ,  H04L41/0246 ,  H04L41/0853 ,  H04L41/0866 ,  H04L41/28 ,  H04L45/26 ,  H04L61/6059 ,  H04L63/06 ,  H04L63/12 ,  H04L63/1408 ,  H04L69/166 ,  H04L69/22

Abstract: A system and methods are provided for verifying proof of transit of network traffic through a plurality of network nodes in a network. In one embodiment, each network node reads a first value and a second value from in-band metadata of packet, and generates, using a cryptographic key that is unique to each respective network node, an encryption result based on the first value. An updated second value is generated based on the second value read from the packet and the encryption result. Each network node writes the updated second value to the in-band metadata of the packet, and forwards the packet in the network. In another embodiment, a secret sharing scheme is employed by each network node computes a portion of verification information using a unique share of a secret and based on the packet specific information.

Abstract translation: 提供了一种用于验证通过网络中的多个网络节点的网络流量的过境证明的系统和方法。 在一个实施例中，每个网络节点从分组的带内元数据中读取第一值和第二值，并且使用每个相应网络节点唯一的密码密钥生成基于第一值的加密结果。 基于从分组读取的第二值和加密结果生成更新的第二值。 每个网络节点将更新的第二个值写入分组的带内元数据，并转发网络中的分组。 在另一个实施例中，每个网络节点使用秘密共享方案，使用秘密的唯一共享并基于分组特定信息来计算验证信息的一部分。

公开(公告)号：US20150382229A1

公开(公告)日：2015-12-31

申请号：US14844448

申请日：2015-09-03

Applicant: CISCO TECHNOLOGY, INC.

Inventor： Shwetha Subray Bhandari ,  Samer Salam ,  Kannan Jayaraman ,  Arvind Saproo

IPC: H04W28/02 ,  H04L12/751 ,  H04W24/02

CPC classification number: H04W28/0236 ,  H04L45/02 ,  H04W24/02 ,  H04W40/12

Abstract: A method is provided in one example and includes receiving a current bandwidth characteristic for a link, where the current bandwidth characteristic is determined under fading conditions associated with signal propagation on the link. The method can also include calculating a new cost for the link that is different from a nominal cost associated with a nominal bandwidth of the link without the fading conditions. The method could also include routing at least a portion of a plurality of flows that are to traverse the link away from the link based, at least in part, on the new cost. Another example method includes receiving the current bandwidth characteristic for the link, comparing the current bandwidth characteristic with a preconfigured low watermark corresponding to a class-specific MTR topology associated with a class of traffic traversing the link, and removing the link from the MTR topology based on the current bandwidth characteristic.

Abstract translation: 在一个示例中提供了一种方法，并且包括接收用于链路的当前带宽特性，其中在与链路上的信号传播相关联的衰落条件下确定当前带宽特性。 该方法还可以包括计算不同于没有衰落条件的与链路的标称带宽相关联的名义成本的链路的新成本。 该方法还可以包括至少部分地基于新成本路由将要从链路横越链路的多个流的至少一部分路由。 另一示例性方法包括：接收当前带宽特性，将当前带宽特性与对应于与通过链路的一类流量相关联的类特定MTR拓扑相对应的预配置低水印，以及从基于MTR拓扑的链路中移除链路 关于当前的带宽特性。