公开(公告)号：US08688828B2

公开(公告)日：2014-04-01

申请号：US13219773

申请日：2011-08-29

Applicant: Navindra Yadav ,  Atul Mahamuni

Inventor： Navindra Yadav ,  Atul Mahamuni

IPC: G06F15/173

CPC classification number: H04L43/0876 ,  H04L43/04 ,  H04L43/08 ,  H04L43/0829 ,  H04L43/0852 ,  H04L43/087 ,  H04L43/106 ,  H04L43/16 ,  H04L43/18

Abstract: Techniques are provided to facilitate monitoring of utility application traffic streams. At a network device that routes utility application traffic for utility devices, control information is received, where the control information is configured to cause the network device to monitor utility application traffic that passes through the network device. The network device monitors a header inserted into utility application traffic messages based on the control information.

Abstract translation: 提供技术以便于监控公用应用业务流。 在用于实用设备路由实用程序应用程序流量的网络设备上，接收控制信息，其中控制信息被配置为使得网络设备监视通过网络设备的应用程序流量。 网络设备基于控制信息监视插入到应用程序业务消息中的报头。

公开(公告)号：US08446876B2

公开(公告)日：2013-05-21

申请号：US12773351

申请日：2010-05-04

Applicant: Patrice Calhoun ,  Abhijit Choudhury ,  Rohit Suri ,  Sudhir Jain ,  Bhanu Gopalasetty ,  Navindra Yadav ,  Fusun Ertemalp ,  Kent Leung

Inventor： Patrice Calhoun ,  Abhijit Choudhury ,  Rohit Suri ,  Sudhir Jain ,  Bhanu Gopalasetty ,  Navindra Yadav ,  Fusun Ertemalp ,  Kent Leung

IPC: H04W36/00

CPC classification number: H04W40/24 ,  H04L45/04 ,  H04L45/42 ,  H04W8/087

Abstract: Techniques are provided to enable support of roaming wireless devices in a network such that the wireless devices can keep their Internet Protocol (IP) addresses as they roam across mobility sub-domains. Traffic for a wireless device that roams is tunneled back to the access switch that serves the IP subnet which includes an IP address for the wireless device. Traffic is tunneled back to that access switch for the wireless device when the wireless device roams to another access switch which does not serve the IP subnet for the wireless device in the same mobility sub-domain and when the wireless device roams to a different mobility sub-domain, in which case the traffic is tunneled between tunneling endpoints in the respective mobility sub-domains.

Abstract translation: 提供技术以支持网络中的漫游无线设备，使得无线设备可以在移动子域漫游时保持其互联网协议（IP）地址。 漫游的无线设备的流量被隧道传回给服务于包含无线设备的IP地址的IP子网的接入交换机。 当无线设备漫游到不为同一移动性子域中的无线设备的IP子网服务的另一个接入交换机以及当无线设备漫游到不同的移动性子网时，业务被隧道传送回无线设备的接入交换机 在这种情况下，流量在相应的移动性子域中的隧道端点之间隧道化。

公开(公告)号：US20130036305A1

公开(公告)日：2013-02-07

申请号：US13196960

申请日：2011-08-03

Applicant: Navindra Yadav ,  Atul Mahamuni ,  Jonathan Hui ,  Wei Hong ,  Alec Woo

Inventor： Navindra Yadav ,  Atul Mahamuni ,  Jonathan Hui ,  Wei Hong ,  Alec Woo

IPC: H04L9/32

CPC classification number: H04L9/0819 ,  H04L9/0827 ,  H04L9/0833 ,  H04L9/088 ,  H04L9/0891 ,  H04L9/14 ,  H04L9/321 ,  H04L9/3273 ,  H04L63/065 ,  H04L63/068 ,  H04L63/0823 ,  H04L63/12 ,  H04L2209/24 ,  H04L2463/061 ,  H04W12/04 ,  H04W12/06 ,  H04W12/10 ,  H04W84/18

Abstract: According to one embodiment, techniques are provided to enable secure communication among devices in a mesh network using a group temporal key. An authenticator device associated with a mesh network stores a pairwise master key for each of a plurality of devices in a mesh network upon authentication of the respective devices. Using the pairwise master key, the authenticator device initiates a handshake procedure with a particular device in the mesh network to mutually derive a pairwise temporal key from the pairwise master key. The authenticator device encrypts and signs a group temporal key using the pairwise temporal key for the particular device and sends the group temporal key encrypted and signed with the pairwise temporal key to the particular device.

公开(公告)号：US20130014217A1

公开(公告)日：2013-01-10

申请号：US13176857

申请日：2011-07-06

Applicant: Navindra Yadav ,  Atul Mahamuni ,  Jonathan Hui ,  Alec Woo

Inventor： Navindra Yadav ,  Atul Mahamuni ,  Jonathan Hui ,  Alec Woo

IPC: G06F21/00 ,  H04W12/06

CPC classification number: H04L63/0884 ,  H04W12/06

Abstract: Techniques are provided for adaptive routing of authentication packets in a network, such as a wireless mesh network. At an authenticated device in the network, an authentication packet is received over the network from a device that is seeking authentication. The authentication packet is encapsulated for transmission in Layer 3 packets over an Internet Protocol (IP) tunnel to an authenticator device associated in the network. Similarly, for an authentication packet encapsulated in Layer 3 packets from the authenticator device over the IP tunnel, the authentication packet is decapsulated from the Layer 3 packets and transmitted over the network to the device seeking authentication.

Abstract translation: 提供技术用于网络中的认证分组的自适应路由选择，例如无线网状网络。 在网络中的认证设备上，通过网络从正在寻求认证的设备接收认证报文。 认证分组被封装以通过到网络中相关联的认证设备的因特网协议（IP）隧道在三层分组中传输。 类似地，对于通过IP隧道从认证设备封装在三层报文中的认证报文，认证报文从三层报文中解封装，并通过网络发送到寻求认证的设备。

公开(公告)号：US20120323381A1

公开(公告)日：2012-12-20

申请号：US13160909

申请日：2011-06-15

Applicant: Navindra Yadav ,  Jeffrey D. Taft

Inventor： Navindra Yadav ,  Jeffrey D. Taft

IPC: G06F1/26

CPC classification number: H04L63/0236 ,  H04L63/1441 ,  H04L63/1491 ,  Y04S40/24

Abstract: Security is enabled in an electrical system by examining a configuration file for a substation present in the electrical system, where the substation includes one or more electrical devices and one or more network devices. Based on the examination of the configuration file, information is determined on a characteristic of an electrical device that is selected from a group including a type, allowed role of the electrical device and allowed communication modes for the electrical device. Based on the determined information, a basis for controlling the role and communication modes for the electrical device is identified. A security policy is configured in a network device in the substation to incorporate the identified basis. Based on the configured security policy in the network device, communication patterns for the electrical device are allowed that are associated with the allowed role and allowed communication modes for the electrical device.

Abstract translation: 通过检查电气系统中存在的变电站的配置文件，在电气系统中启用安全性，其中变电站包括一个或多个电气设备和一个或多个网络设备。 基于配置文件的检查，根据从包括电气设备的类型，允许的角色以及电气设备的允许通信模式的组中选择的电气设备的特性来确定信息。 基于确定的信息，识别用于控制电气设备的角色和通信模式的基础。 在变电站中的网络设备中配置安全策略以合并所识别的基础。 基于网络设备中配置的安全策略，允许与电子设备的允许角色和允许的通信模式相关联的电气设备的通信模式。

公开(公告)号：US20120082159A1

公开(公告)日：2012-04-05

申请号：US13251728

申请日：2011-10-03

Applicant: Jeffrey D. Taft ,  Navindra Yadav

Inventor： Jeffrey D. Taft ,  Navindra Yadav

IPC: H04L12/56

CPC classification number: H04L12/1863 ,  H04L12/1836 ,  H04L12/185 ,  H04L45/16 ,  H04L49/15 ,  H04L49/35 ,  H04L67/125 ,  H04L69/22

Abstract: A method is provided in one example embodiment and includes receiving a request for a service that involves phasor measurement unit (PMU) data; identifying a service device in a network to perform the service; and multicasting one or more results of the service to a group of subscribers identified by a multicast group address. In more particular embodiments, particular PMU data is redirected to the service device via a service insertion architecture (SIA) protocol. In addition, the service can include replicating packets and masking a subset of traffic for forwarding to a first hop router of the network. In certain example instances, metadata is used in order to apply the service to certain traffic propagating in the network.

Abstract translation: 在一个示例实施例中提供了一种方法，并且包括接收对涉及相量测量单元（PMU）数据的服务的请求; 识别网络中的服务设备来执行所述服务; 以及将一个或多个服务结果多播到由多播组地址标识的一组订户。 在更具体的实施例中，特定PMU数据经由服务插入架构（SIA）协议被重定向到服务设备。 此外，该服务可以包括复制分组并且掩蔽用于转发到网络的第一跳路由器的流量子集。 在某些示例实例中，使用元数据来将服务应用于在网络中传播的某些流量。

公开(公告)号：US20120082048A1

公开(公告)日：2012-04-05

申请号：US13251701

申请日：2011-10-03

Applicant: Jeffrey D. Taft ,  Navindra Yadav

Inventor： Jeffrey D. Taft ,  Navindra Yadav

IPC: H04L12/56 ,  H04L12/26

CPC classification number: H04L12/1863 ,  H04L12/1836 ,  H04L12/185 ,  H04L45/16 ,  H04L49/15 ,  H04L49/35 ,  H04L67/125 ,  H04L69/22

Abstract: A method is provided in one example embodiment and includes receiving phasor measurement unit (PMU) data in a first transmission; converting the first transmission into a multicast transmission; and multicasting the PMU data to a multicast group address, which identifies a plurality of subscribers. In more specific implementations, the converting of the first transmission into the multicast transmission occurs at a first-hop router in relation to a PMU source that sent the first transmission. In some cases, the first transmission is a unicast transmission sent from a network element, which includes a PMU sensor.

Abstract translation: 在一个示例实施例中提供了一种方法，并且包括在第一传输中接收相量测量单元（PMU）数据; 将第一传输转换成多播传输; 以及将所述PMU数据组播到识别多个订户的多播组地址。 在更具体的实现中，将第一传输转换为组播传输发生在相对于发送第一传输的PMU源的第一跳路由器处。 在一些情况下，第一传输是从包括PMU传感器的网元发送的单播传输。

公开(公告)号：US20110274036A1

公开(公告)日：2011-11-10

申请号：US12773360

申请日：2010-05-04

Applicant: Patrice Calhoun ,  Abhijit Choudhury ,  Rohit Suri ,  Sudhir Jain ,  Bhanu Gopalasetty ,  Navindra Yadav ,  Fusun Ertemalp ,  Kent Leung

Inventor： Patrice Calhoun ,  Abhijit Choudhury ,  Rohit Suri ,  Sudhir Jain ,  Bhanu Gopalasetty ,  Navindra Yadav ,  Fusun Ertemalp ,  Kent Leung

IPC: H04W40/00

CPC classification number: H04W40/24 ,  H04L45/04 ,  H04L45/42

Abstract: Techniques are provided to support roaming of wireless devices in a network such that the wireless devices can keep their Internet Protocol (IP) addresses as they roam within and across mobility sub-domains. When a wireless device roams from one access switch to another access switch, a tunneling endpoint apparatus in the wireless device's home mobility sub-domain is configured to serve as the point of presence for the roamed wireless device. Traffic for the roamed wireless device is tunneled from the access switch where the wireless device has roamed (where it is currently attached) to the tunneling endpoint apparatus. When the wireless device roams across mobility sub-domains, then traffic is tunneled from the access switch where the wireless device is currently attached to the tunneling endpoint apparatus in that mobility sub-domain (called a “foreign” mobility sub-domain) to the tunneling endpoint apparatus in the wireless device's home mobility sub-domain.

Abstract translation: 提供技术以支持网络中的无线设备的漫游，使得无线设备可以在移动性子域内漫游时保持其互联网协议（IP）地址。 当无线设备从一个接入交换机漫游到另一个接入交换机时，无线设备的归属移动性子域中的隧道端点设备被配置为用作漫游无线设备的存在点。 漫游无线设备的业务从无线设备已经漫游（其当前附接的）的接入交换机隧道传送到隧道终端设备。 当无线设备漫游跨越移动性子域时，则将业务从无线设备当前附接到的接入交换机隧道传送到该移动性子域（称为“外部”移动性子域）的隧道端点设备， 隧道终端设备在无线设备的归属移动性子域中。

公开(公告)号：US07995498B2

公开(公告)日：2011-08-09

申请号：US11353311

申请日：2006-02-13

Applicant: Robert Andrews ,  Navindra Yadav ,  Shree Murthy ,  Gnanaprakasam Pandian ,  Murali Duvvury ,  Sudhakar Padavala

Inventor： Robert Andrews ,  Navindra Yadav ,  Shree Murthy ,  Gnanaprakasam Pandian ,  Murali Duvvury ,  Sudhakar Padavala

IPC: H04L12/28

CPC classification number: H04L41/0886 ,  H04L12/66 ,  H04L41/0816

Abstract: A method and system provides dynamic configuration of network elements using hierarchical inheritance. The method includes monitoring a data network, detecting a change associated with a configuration of the data network, identifying one or more member groups affected by the detected change, and modifying the network configuration for the one or more member groups in the data network.

Abstract translation: 一种方法和系统使用分层继承来提供网络元素的动态配置。 该方法包括监视数据网络，检测与数据网络的配置相关联的改变，识别受检测到的改变影响的一个或多个成员组，以及修改数据网络中的一个或多个成员组的网络配置。

公开(公告)号：US07720006B1

公开(公告)日：2010-05-18

申请号：US10636347

申请日：2003-08-06

Applicant: Navindra Yadav

Inventor： Navindra Yadav

IPC: H04L12/28 ,  H04L12/56

CPC classification number: H04L45/00

Abstract: A system for determining reachablity of a neighboring node from a node. A packet is received over a network by node. The packet has a destination address of a node other than the receiving node. The node reads a source address from the packet. The node then determines whether the source address is for a neighboring node in which the node has an interest. The node then determines whether the packet indicates a forward link from the node to the neighboring node. Reachablity information for the neighboring node is then stored in a memory responsive to a determination of the forward link.

Abstract translation: 一种用于从节点确定相邻节点的可达性的系统。 通过节点通过网络接收分组。 分组具有除了接收节点之外的节点的目的地地址。 节点从数据包中读取源地址。 然后，节点确定源地址是否用于节点具有兴趣的相邻节点。 然后，节点确定分组是否指示从节点到相邻节点的前向链路。 然后，响应于前向链路的确定将相邻节点的可达性信息存储在存储器中。