公开(公告)号：US20240144269A1

公开(公告)日：2024-05-02

申请号：US17974337

申请日：2022-10-26

申请人： Cisco Technology, Inc.

发明人： Thomas Szigeti ,  David John ZACKS ,  Walter Theodore HULICK ,  Nagendra Kumar NAINAR ,  Carlos M. PIGNATARO

IPC分类号： G06Q20/40 ,  G06Q20/38 ,  H04L9/40

CPC分类号： G06Q20/4014 ,  G06Q20/3827 ,  H04L63/20 ,  G06Q2220/00

摘要： In one embodiment, a device obtains transaction data regarding a user account of an application performing a transaction within the application to access a particular document. The transaction data is captured by instrumentation code inserted into the application at runtime. The device identifies, based on the transaction data, a data mining policy for the transaction. The device generates, based on the data mining policy, identification information associated with the user account and the particular document. The device inserts, via the instrumentation code, tracing data into the particular document that causes a client that opens the particular document to send a web request for a uniform resource locator (URL) associated with the identification information.

公开(公告)号：US20230114234A1

公开(公告)日：2023-04-13

申请号：US18066193

申请日：2022-12-14

申请人： Cisco Technology, Inc.

发明人： Jerome HENRY ,  Robert E. BARTON ,  Nagendra Kumar NAINAR ,  Carlos M. PIGNATARO ,  Bart A. BRINCKMAN

IPC分类号： H04B17/309 ,  H04W76/15 ,  H04W24/10 ,  H04W24/08

摘要： Techniques and apparatus for determining quality of experience (QoE) for wireless communications are described. One technique involves transmitting a QoE support message to an access point (AP) within an access network. The QoE support message queries whether the AP supports providing key performance indicators (KPI(s)) indicative of QoE provided by the access network. An indication of whether the AP supports providing the KPI(s) is received in response to the QoE support message. The KPI(s) are received when the AP supports providing the KPI(s). A determination is made whether to communicate with the AP based at least in part on the KPI(s). Communications are then performed in accordance with the determination.

公开(公告)号：US20230070468A1

公开(公告)日：2023-03-09

申请号：US17446921

申请日：2021-09-03

申请人： Cisco Technology, Inc.

发明人： Nagendra Kumar NAINAR ,  Robert E. BARTON ,  Carlos M. PIGNATARO ,  Jerome HENRY

IPC分类号： H04W12/30 ,  H04L29/06 ,  H04W12/06 ,  H04W76/10

摘要： Federated multi-access edge computing availability notifications may be provided by: transmitting, from a User Equipment (UE) to an Access Point (AP) of a wireless network, an attach request for the wireless network that includes authentication credentials for an identity provider independent from the wireless network to authenticate the UE to the wireless network; receiving, at the UE via the AP, an authentication success message for the wireless network from the independent identity provider; transmitting, from the UE to the AP, a Multi-access Edge Computing (MEC) query; and receiving, at the UE from the AP, a MEC response that identifies MEC resources that are available to the UE based on an identity for the UE confirmed by the identity provider to the wireless network.

公开(公告)号：US20220385661A1

公开(公告)日：2022-12-01

申请号：US17332589

申请日：2021-05-27

申请人： Cisco Technology, Inc.

发明人： Carlos M. PIGNATARO ,  Nagendra Kumar NAINAR ,  Jerome HENRY ,  Robert E. BARTON ,  Bart A. BRINCKMAN

IPC分类号： H04L29/06 ,  H04L9/32

摘要： Embodiments herein describe disconnecting, by an access node, a first device having a first media access control (MAC) address due to a network violation and receiving, by the access node, information about a second device having a second MAC address different from the first MAC address. In one embodiment, the information is generated by a certificate server based on a token generated by the second device. Further, when the access node determines, based on the information, that the second device is the first device, the access node denies a connection request from the second device.

公开(公告)号：US20200145255A1

公开(公告)日：2020-05-07

申请号：US16231247

申请日：2018-12-21

申请人： Cisco Technology, Inc.

发明人： Carlos M. PIGNATARO ,  Frank BROCKNERS ,  Shwetha Subray BHANDARI ,  Nagendra Kumar NAINAR

IPC分类号： H04L12/46 ,  H04L12/749 ,  H04L12/54

摘要： In one embodiment, a service function forwarder (SFF) analyzes pre-service state and post-service state of an original packet to determine whether to initiate and perform service offload or service bypass. A service function forwarder (SFF) receives a particular packet having a service function chain (SFC) encapsulation of the original packet, the SFC encapsulation identifying a particular service function path (SFP) designating a particular service function (SF). The SFF extracts pre-service state of the original packet, typically adding it to the particular packet in an In-Situ Operations, Administration, and Maintenance (IOAM) data field (or alternatively storing locally) before sending the particular packet to the particular SF. The SFF receives the particular packet after the SF applies the particular network service. In response to analyzing pre-service state and post-service state by the SFF, the SFF may perform service bypass or service offload for subsequently received packets identifying the same particular SFP.

公开(公告)号：US20200076727A1

公开(公告)日：2020-03-05

申请号：US16675083

申请日：2019-11-05

申请人： Cisco Technology, Inc.

发明人： Clarence FILSFILS ,  Zafar ALI ,  Syed Kamran RAZA ,  Ahmed Refaat BASHANDY ,  Nagendra Kumar NAINAR ,  Carlos M. PIGNATARO ,  Jaganbabu RAJAMANICKAM ,  Rakesh GANDHI ,  Bhupendra YADAV ,  Faisal IQBAL

IPC分类号： H04L12/721 ,  H04L12/26 ,  H04L12/751 ,  H04L12/733 ,  H04L12/24

摘要： In one embodiment, a service chain data packet is instrumented as it is communicated among network nodes in a network providing service-level and/or networking operations visibility. The service chain data packet includes a particular header identifying a service group defining one or more service functions, and is a data packet and not a probe packet. A network node adds networking and/or service-layer operations data to the particular service chain data packet, such as, but not limited to, in the particular header. Such networking operations data includes a performance metric or attribute related to the transport of the particular service chain packet in the network. Such service-layer operations data includes a performance metric or attribute related to the service-level processing of the particular service chain data packet in the network.

公开(公告)号：US20240154947A1

公开(公告)日：2024-05-09

申请号：US18414137

申请日：2024-01-16

申请人： Cisco Technology, Inc.

发明人： Nagendra Kumar NAINAR ,  Robert E. BARTON ,  Carlos M. PIGNATARO ,  Jerome HENRY ,  Bart A. BRINCKMAN

IPC分类号： H04L9/40 ,  H04W12/06 ,  H04W36/00

CPC分类号： H04L63/0815 ,  H04L63/04 ,  H04L63/20 ,  H04W12/06 ,  H04W36/0038

摘要： Aspects of the disclosure include a method and associated network device. The method includes authenticating an identity of a user of a client device after the client device is associated with an access network provider. Authenticating the identity of the user comprises receiving, from an identity provider, a credential associated with the identity, and receiving, from the identity provider, information identifying a network-based service to be applied to network traffic with the client device. The method further includes establishing, using the credential and the received information, a secure connection between the access network provider and a service provider that is capable of providing the network-based service. The method further includes receiving network traffic from the service provider. Packets of the network traffic include an assurance value that enables the client device to determine that the network-based service is being provided by the service provider.

公开(公告)号：US20240089737A1

公开(公告)日：2024-03-14

申请号：US18510447

申请日：2023-11-15

申请人： Cisco Technology, Inc.

发明人： Nagendra Kumar NAINAR ,  Robert E. BARTON ,  Carlos M. PIGNATARO ,  Jerome HENRY

IPC分类号： H04W12/30 ,  H04L9/40 ,  H04W12/06 ,  H04W76/10

CPC分类号： H04W12/35 ,  H04L63/0815 ,  H04W12/06 ,  H04W76/10

摘要： Federated multi-access edge computing availability notifications may be provided by: transmitting, from a User Equipment (UE) to a node of a wireless network of a federated service, an attach request for the wireless network that includes authentication credentials for an independent identity provider in an identity federation, wherein the independent identity provider is external and independent from the wireless network and used to authenticate the UE to the wireless network; forwarding, from the node to the independent identity provider, the authentication credentials; transmitting, from the independent identity provider to the node, an authentication success message; receiving, at the UE via the node, the authentication success message; transmitting, from the UE to the node, a Multi-access Edge Computing (MEC) query; and receiving, at the UE from the node, a MEC response that identifies MEC resources that are available to the UE.

公开(公告)号：US20230334478A1

公开(公告)日：2023-10-19

申请号：US17723885

申请日：2022-04-19

申请人： Cisco Technology, Inc.

发明人： Thomas SZIGETI ,  David John ZACKS ,  Walter Theodore HULICK, JR. ,  Nagendra Kumar NAINAR ,  Carlos M. PIGNATARO

IPC分类号： G06Q20/38 ,  G06Q20/40 ,  G06Q30/06

CPC分类号： G06Q20/382 ,  G06Q20/405 ,  G06Q30/06

摘要： In one embodiment, a device obtains data regarding a transaction attempted by a user account within an online application that is captured by instrumentation code that is inserted into the online application at runtime, wherein the user account has sufficient privileges within the online application to perform the transaction. The device makes an inference about the data regarding the transaction using a behavioral model. The device determines, based on the inference, a mitigation action for performance within the online application according to an enforcement policy. The device enforces the mitigation action within the online application.

公开(公告)号：US20230124886A1

公开(公告)日：2023-04-20

申请号：US17502141

申请日：2021-10-15

申请人： Cisco Technology, Inc.

发明人： Rajesh Indira Viswambharan ,  Vinay SAINI ,  Ram Mohan RAVINDRANATH ,  Nagendra Kumar NAINAR

IPC分类号： H04L12/46 ,  H04L12/66

摘要： In one embodiment, a method herein comprises: establishing, by a process, a virtual private network connection (VPN connection) with a particular VPN gateway; requesting, by the process, observability monitoring through the particular VPN gateway, wherein requesting results in a controller being informed about the particular VPN gateway and a domain of the particular VPN gateway; receiving, by the process, test specifics from the controller based on the particular VPN gateway and the domain of the particular VPN gateway; and executing, by the process, one or more tests to the particular VPN gateway based on the test specifics.