中科微点-全球专利检索

  1. Login
  2. Sign Up

Search Results

128 records (took 0.022 seconds)

    DISCOVERING TRUSTWORTHY DEVICES USING ATTESTATION AND MUTUAL ATTESTATION
    121.
    发明申请
    DISCOVERING TRUSTWORTHY DEVICES USING ATTESTATION AND MUTUAL ATTESTATION 审中-公开

    公开(公告)号：US20200322380A1

    公开(公告)日：2020-10-08

    申请号：US16839576

    申请日：2020-04-03

    Applicant: Cisco Technology, Inc.

    Inventor： Sujal Sheth ,  Shwetha Subray Bhandari ,  Eric Voit ,  William F. Sulzen ,  Frank Brockners

    IPC: H04L29/06

    Abstract: Systems, methods, and computer-readable media for discovering trustworthy devices through attestation and authenticating devices through mutual attestation. A relying node in a network environment can receive attestation information from an attester node in the network environment as part of a unidirectional push of information from the attester node according to a unidirectional link layer communication scheme. A trustworthiness of the attester node can be verified by identifying a level of trust of the attester node from the attestation information. Further, network service access of the attester node through the relying node in the network environment can be controlled based on the level of trust of the attester node identified from the attestation information.

    SYSTEMS AND METHODS FOR PRE-CONFIGURATION ATTESTATION OF NETWORK DEVICES
    122.
    发明申请
    SYSTEMS AND METHODS FOR PRE-CONFIGURATION ATTESTATION OF NETWORK DEVICES 审中-公开

    公开(公告)号：US20200322356A1

    公开(公告)日：2020-10-08

    申请号：US16808114

    申请日：2020-03-03

    Applicant: Cisco Technology, Inc.

    Inventor： Sujal Sheth ,  Shwetha Subray Bhandari ,  Eric Voit ,  William F. Sulzen ,  Frank Brockners ,  Selvaraj Mani ,  Eliot Lear

    IPC: H04L29/06 ,  H04L29/12

    Abstract: Systems, methods, and computer-readable media are disclosed for measurement of trustworthiness of network devices prior to their configuration and deployment in a network. In one aspect of the present disclosure, a method for pre-configuration of network devices includes receiving, at a dynamic host configuration server, a first request from a network device for configuration data, the configuration data including at least an IP address; sending, by the dynamic host configuration server, a second request to the network device for attestation information; verifying, by the dynamic host configuration server, the network device based on the attestation information; and assigning, by the dynamic host configuration server, the configuration data to the network device upon verifying the network device.

    NETWORK SECURITY BY INTEGRATING MUTUAL ATTESTATION
    124.
    发明申请
    NETWORK SECURITY BY INTEGRATING MUTUAL ATTESTATION 审中-公开

    公开(公告)号：US20200320199A1

    公开(公告)日：2020-10-08

    申请号：US16752488

    申请日：2020-01-24

    Applicant: Cisco Technology, Inc.

    Inventor： Sujal Sheth ,  Shwetha Subray Bhandari ,  Eric Voit ,  William F. Sulzen ,  Frank Brockners

    IPC: G06F21/57 ,  H04L9/32 ,  H04L9/08

    Abstract: Technologies for attestation techniques, systems, and methods to confirm the integrity of a device for establishing and/or maintaining a trustworthy encrypted network session. An example method can include sending, via a server and using a cryptographic security protocol, a message associated with establishing an encrypted network session; receiving a response from a client device; identifying a level of trust of the client device based on the response; determining whether to perform a next step in the cryptographic security protocol based on the level of trust, wherein the cryptographic security protocol comprises at least one of a Secure Shell (SSH) protocol, a Transport Layer Security (TLS) protocol, a Secure Sockets Layer (SSL) protocol, and an Internet Protocol Security (IPsec) protocol.

    CUMULATIVE SCHEMES FOR NETWORK PATH PROOF OF TRANSIT
    127.
    发明申请
    CUMULATIVE SCHEMES FOR NETWORK PATH PROOF OF TRANSIT 审中-公开
    网路路线证明的计算方案

    公开(公告)号：US20160315921A1

    公开(公告)日：2016-10-27

    申请号：US14992112

    申请日：2016-01-11

    Applicant: Cisco Technology, Inc.

    Inventor： Venkata Krishna Sashank Dara ,  Shwetha Subray Bhandari ,  Andrew Yourtchenko ,  Eric Vyncke ,  Frank Brockners

    IPC: H04L29/06 ,  H04L9/32

    CPC classification number: H04L9/32 ,  H04L12/4633 ,  H04L41/0246 ,  H04L41/0853 ,  H04L41/0866 ,  H04L41/28 ,  H04L45/26 ,  H04L61/6059 ,  H04L63/06 ,  H04L63/12 ,  H04L63/1408 ,  H04L69/166 ,  H04L69/22

    Abstract: A system and methods are provided for verifying proof of transit of network traffic through a plurality of network nodes in a network. In one embodiment, each network node reads a first value and a second value from in-band metadata of packet, and generates, using a cryptographic key that is unique to each respective network node, an encryption result based on the first value. An updated second value is generated based on the second value read from the packet and the encryption result. Each network node writes the updated second value to the in-band metadata of the packet, and forwards the packet in the network. In another embodiment, a secret sharing scheme is employed by each network node computes a portion of verification information using a unique share of a secret and based on the packet specific information.

    Abstract translation: 提供了一种用于验证通过网络中的多个网络节点的网络流量的过境证明的系统和方法。 在一个实施例中，每个网络节点从分组的带内元数据中读取第一值和第二值，并且使用每个相应网络节点唯一的密码密钥生成基于第一值的加密结果。 基于从分组读取的第二值和加密结果生成更新的第二值。 每个网络节点将更新的第二个值写入分组的带内元数据，并转发网络中的分组。 在另一个实施例中，每个网络节点使用秘密共享方案，使用秘密的唯一共享并基于分组特定信息来计算验证信息的一部分。

    System and method for providing a translation mechanism in a network environment
    128.
    发明授权
    System and method for providing a translation mechanism in a network environment 有权
    在网络环境中提供翻译机制的系统和方法

    公开(公告)号：US09397940B2

    公开(公告)日：2016-07-19

    申请号：US14180379

    申请日：2014-02-14

    Applicant: CISCO TECHNOLOGY, INC.

    Inventor： Srinath Gundavelli ,  Frank Brockners ,  Mark Grayson ,  Kent K. Leung ,  Flemming S. Andreasen

    IPC: H04L12/28 ,  H04L12/56 ,  H04L12/46 ,  H04L29/12 ,  H04L29/06

    CPC classification number: H04L45/741 ,  H04L12/4633 ,  H04L29/12367 ,  H04L29/12377 ,  H04L61/106 ,  H04L61/2514 ,  H04L61/2517 ,  H04L69/22

    Abstract: An example method is provided and includes receiving a packet associated with a flow, determining a tunnel identifier for the flow, and determining a flow identifier for the flow. The method includes associating the flow identifier and the tunnel identifier to an Internet protocol (IP) address to generate a binding to be used for a network address and port translation (NAPT). In other embodiments, a routing decision is executed based on the binding between the identifiers and the IP address. The flow identifier can be a context identifier (CID), and the tunnel identifier can be a softwire tunnel ID. In yet other embodiments, the packet can be tagged as part of an encapsulation operation, which includes providing information about a network location at which the network address and port translation is to be executed.

    Abstract translation: 提供了示例性方法，并且包括接收与流相关联的分组，确定流的隧道标识符，以及确定流的流标识符。 该方法包括将流标识符和隧道标识符与因特网协议（IP）地址相关联，以生成用于网络地址和端口转换（NAPT）的绑定。 在其他实施例中，基于标识符和IP地址之间的绑定来执行路由决定。 流标识符可以是上下文标识符（CID），隧道标识符可以是软线隧道ID。 在其他实施例中，分组可以被标记为封装操作的一部分，其包括提供关于将要执行网络地址和端口转换的网络位置的信息。

Patent Agency Ranking