公开(公告)号：US20250055760A1

公开(公告)日：2025-02-13

申请号：US18231372

申请日：2023-08-08

Applicant: Cisco Technology, Inc.

Inventor： Swapna Anandan ,  Michael Freed ,  Akshay Khushu ,  Ruben Erick Escolero

IPC: H04L41/12 ,  H04L41/14 ,  H04L67/12

Abstract: In one embodiment, a process discovers network topology information of a particular computer network and creates a plurality of zones of devices in the particular computer network based on the network topology information. The process also discovers network communication activity patterns and endpoints of the particular computer network and creates a plurality of conduits between devices of the particular computer network based on the network communication activity patterns and endpoints of the particular computer network and association of the devices within the plurality of zones as described above.

公开(公告)号：US20240137220A1

公开(公告)日：2024-04-25

申请号：US18114693

申请日：2023-02-27

Applicant: Cisco Technology, Inc.

Inventor： Ruben Erick Escolero ,  Michael Freed ,  Fiona Hall-Zazueta ,  Jason Trung Hoa Tang

IPC: H04L9/08

CPC classification number: H04L9/0894 ,  H04L9/0825

Abstract: In various embodiments, a server stores a set of cryptographic keys associated with a client that includes a server-stored bootstrap key, a server-stored authentication key, and a server-stored proposed key. The server receives an authentication request from the client that includes a client-indicated bootstrap key, a client-indicated authentication key, and a client-indicated proposed key. The server makes a determination that the client is authenticated based in part on whether there is a match between the client-indicated authentication key and either the server-stored authentication key or the server-stored proposed key. The server provides, based on the determination, an authentication response to the client indicating that the client has been authenticated.