利索-全球专利检索

  1. 登录
  2. 注册

搜索结果

10 条记录 (耗时 0.017 秒)

    CONTROLLER-BASED DISTRIBUTED REMOTE ACCESS WITH STATIC PUBLIC IP AVOIDANCE
    1.
    发明公开
    CONTROLLER-BASED DISTRIBUTED REMOTE ACCESS WITH STATIC PUBLIC IP AVOIDANCE 审中-公开

    公开(公告)号：US20240244029A1

    公开(公告)日：2024-07-18

    申请号：US18153930

    申请日：2023-01-12

    申请人： Cisco Technology, Inc.

    发明人： Amjad Inamdar ,  Syed Arslan Ahmed ,  Anoop V A

    IPC分类号： H04L61/2567 ,  H04L9/40 ,  H04L61/256

    CPC分类号： H04L61/2567 ,  H04L61/2564 ,  H04L63/061 ,  H04L63/0876

    摘要： A method of implementing controller-based distributed remote access may include connecting a plurality of edge devices to a controller via a network. The plurality of edge devices may perform hole punching to traverse a network address translation (NAT) gateway to create a NAT hole. The method may also include connecting a client device to the controller. The client device may be directly connected to one of the plurality of edge devices via the NAT hole in the network. The method may further include directly connecting the client device to one of the plurality of edge devices by receiving a query from the client device and returning public IP/ports of a most relevant edge device to the client device, the most relevant edge device being based on attributes of the client device, attributes of the plurality of edge devices, or combinations thereof.

    ROUTABLE AND INTENT-BASED SERVICE CHAINS
    3.
    发明公开
    ROUTABLE AND INTENT-BASED SERVICE CHAINS 审中-公开

    公开(公告)号：US20240348549A1

    公开(公告)日：2024-10-17

    申请号：US18356853

    申请日：2023-07-21

    申请人： Cisco Technology, Inc.

    发明人： Pritam Baruah ,  Amjad Inamdar ,  Laxmikantha Reddy Ponnuru ,  Samir D. Thoria

    IPC分类号： H04L47/2408 ,  H04L45/24

    CPC分类号： H04L47/2408 ,  H04L45/24

    摘要： The present disclosure is directed to making service-chains routable and intent-based within an enterprise network. In one aspect, a method for simplifying steering of network traffic includes receiving an intent-based description of one or more services to be applied to the network traffic; defining a type for a service chain that includes the one or more services based on the intent-based description, the type serving as an address for the service chain for routing the network traffic to and from the one or more service included in the service chain; implementing the service chain at one or more network hubs; and implementing a traffic steering policy in the network for steering the network traffic to the one or more network hubs to be serviced by the one or more services.

    QUANTUM COMPUTER RESISTANT PRE-SHARED KEY DISTRIBUTION FOR LARGE SCALE WIDE AREA NETWORK SOLUTIONS
    5.
    发明申请
    QUANTUM COMPUTER RESISTANT PRE-SHARED KEY DISTRIBUTION FOR LARGE SCALE WIDE AREA NETWORK SOLUTIONS 有权

    公开(公告)号：US20210226782A1

    公开(公告)日：2021-07-22

    申请号：US16749299

    申请日：2020-01-22

    申请人： Cisco Technology, Inc.

    发明人： Lionel Florit ,  Scott Roy Fluhrer ,  Amjad Inamdar ,  David Arthur McGrew

    IPC分类号： H04L9/08 ,  H04L9/32 ,  G06N10/00 ,  H04L9/30

    摘要： Presented herein are methodologies for establishing secure communications in a post-quantum computer context. The methodology includes receiving, from a first communications device, at a second communications device, a secret seed value, or otherwise obtaining the secret seed value; initializing a session key service with the secret seed value; receiving, from the first communications device, at the second communications device, a pre-shared key identifier; querying the session key service for a pre-shared key corresponding the pre-shared key identifier; receiving, from the session key service, the pre-shared key; deriving a session key based, at least in part, on the pre-shared key; receiving from the first communications device, at the second communications device, data encrypted with the session key; and decrypting the data at the second communications device using the session key.

    SET UP AND DISTRIBUTION OF POST-QUANTUM SECURE PRE-SHARED KEYS USING EXTENDIBLE AUTHENTICATION PROTOCOL
    9.
    发明申请
    SET UP AND DISTRIBUTION OF POST-QUANTUM SECURE PRE-SHARED KEYS USING EXTENDIBLE AUTHENTICATION PROTOCOL 有权

    公开(公告)号：US20230071333A1

    公开(公告)日：2023-03-09

    申请号：US18054219

    申请日：2022-11-10

    申请人： Cisco Technology, Inc.

    发明人： Amjad Inamdar ,  Lionel Florit ,  Eric Voit ,  Sujal Sheth ,  Chennakesava Reddy Gaddam

    IPC分类号： H04L9/08 ,  H04L9/30

    摘要： Systems and methods are provided for quantum-resistant secure key distribution between a peer and an EAP authenticator by using an authentication server. The systems and methods include receiving requests for a COMMON-SEED and a quantum-safe public key from a peer and an EAP authenticator. The COMMON-SEED is encrypted using the quantum-safe public key of the peer and the quantum-safe public key of the EAP authenticator, and the encrypted COMMON-SEED is sent to the peer along with a request for a PPK_ID from the peer to complete authentication of the peer. The PPK_ID is received from the peer, and the encrypted COMMON-SEED and PPK_ID is sent to the EAP authenticator. A quantum-resistant secure channel is established between the peer and the EAP authenticator when the peer and the EAP authenticator share the same COMMON-SEED and the same PPK-ID.

    SET UP AND DISTRIBUTION OF POST-QUANTUM SECURE PRE-SHARED KEYS USING EXTENDIBLE AUTHENTICATION PROTOCOL
    10.
    发明申请
    SET UP AND DISTRIBUTION OF POST-QUANTUM SECURE PRE-SHARED KEYS USING EXTENDIBLE AUTHENTICATION PROTOCOL 有权

    公开(公告)号：US20220345300A1

    公开(公告)日：2022-10-27

    申请号：US17377303

    申请日：2021-07-15

    申请人： Cisco Technology, Inc.

    发明人： Amjad Inamdar ,  Lionel Florit ,  Eric Voit ,  Sujal Sheth ,  Chennakesava Reddy Gaddam

    IPC分类号： H04L9/08 ,  H04L9/30

    摘要： A method is provided for quantum-resistant secure key distribution between a peer and an extendible authentication protocol (EAP) authenticator by using an authentication server. The method may include receiving requests for a COMMON-SEED and a McEliece public key from a peer and an EAP authenticator by an authentication server using an EAP method, encrypting the COMMON-SEED using the McEliece public key of the peer and the McEliece public key of the EAP authenticator by the authentication server, and sending the encrypted COMMON-SEED from the authentication server to the peer along with a request for a PPK_ID from the peer using the EAP method to complete authentication of the peer. The method may also include receiving the PPK_ID from the peer using the EAP method, where the PPK_ID is from a key pair consisting of PPK_ID and PPK obtained from a first SKS server in electrical communication with the peer based upon the encrypted COMMON-SEED. The method may also include sending the encrypted COMMON-SEED and PPK_ID from the authentication server to the EAP authenticator, and establishing a quantum-resistant secure channel between the peer and the EAP authenticator, where a message of EAP success is delivered from the EAP authenticator to the peer when the peer and the EAP authenticator share the same COMMON-SEED and the same PPK-ID.