Augmented onboarding of internet-of-things devices

    公开(公告)号:US10812963B2

    公开(公告)日:2020-10-20

    申请号:US16247797

    申请日:2019-01-15

    Abstract: A method, apparatus, and computer program product are disclosed for determining, by a mobile wireless device, a likelihood that a first device ID of a target wireless device corresponds to a physical location of the first wireless device at a first measurement location, based on comparing a measured received signal strength of the target wireless device at the first and a second measurement locations and comparing the measured received signal strength of one or more other wireless devices at the first and second measurement locations. The mobile wireless device registers the first device ID of the target wireless device and associates the registered first device ID with the determined corresponding physical location of the target wireless device.

    ZERO-TRUST AUTHENTICATION FOR SECURE REMOTE DIRECT MEMORY ACCESS

    公开(公告)号:US20240064203A1

    公开(公告)日:2024-02-22

    申请号:US18498950

    申请日:2023-10-31

    CPC classification number: H04L67/1097 H04L63/0435 H04L63/20

    Abstract: Various example embodiments for supporting zero-trust policy enforcement in a communication system are presented herein. Various example embodiments for supporting zero-trust policy enforcement in a communication system may be configured to support zero-trust policy enforcement, including zero-trust authentication, for Remote Direct Memory Access (RDMA) communications. Various example embodiments for supporting zero-trust policy enforcement for RDMA communications may be configured to support transparent zero-trust policy enforcement for RDMA communications by leveraging programmable Smart Network Interface Cards (SmartNICs). Various example embodiments for supporting zero-trust policy enforcement for RDMA communications based on leveraging of programmable SmartNICs may be configured to support zero-trust policy enforcement for RDMA communications by applying zero-trust policies on a connection-by-connection basis within SmartNICs for RDMA connections between RDMA applications hosted on end hosts served by the SmartNICs.

    Zero-trust authentication for secure remote direct memory access

    公开(公告)号:US11818213B2

    公开(公告)日:2023-11-14

    申请号:US17691544

    申请日:2022-03-10

    CPC classification number: H04L67/1097 H04L63/0435 H04L63/20

    Abstract: Various example embodiments for supporting zero-trust policy enforcement in a communication system are presented herein. Various example embodiments for supporting zero-trust policy enforcement in a communication system may be configured to support zero-trust policy enforcement, including zero-trust authentication, for Remote Direct Memory Access (RDMA) communications. Various example embodiments for supporting zero-trust policy enforcement for RDMA communications may be configured to support transparent zero-trust policy enforcement for RDMA communications by leveraging programmable Smart Network Interface Cards (SmartNICs). Various example embodiments for supporting zero-trust policy enforcement for RDMA communications based on leveraging of programmable SmartNICs may be configured to support zero-trust policy enforcement for RDMA communications by applying zero-trust policies on a connection-by-connection basis within SmartNICs for RDMA connections between RDMA applications hosted on end hosts served by the SmartNICs.

    ZERO-TRUST AUTHENTICATION FOR SECURE REMOTE DIRECT MEMORY ACCESS

    公开(公告)号:US20230291797A1

    公开(公告)日:2023-09-14

    申请号:US17691544

    申请日:2022-03-10

    CPC classification number: H04L67/1097 H04L63/0435 H04L63/20

    Abstract: Various example embodiments for supporting zero-trust policy enforcement in a communication system are presented herein. Various example embodiments for supporting zero-trust policy enforcement in a communication system may be configured to support zero-trust policy enforcement, including zero-trust authentication, for Remote Direct Memory Access (RDMA) communications. Various example embodiments for supporting zero-trust policy enforcement for RDMA communications may be configured to support transparent zero-trust policy enforcement for RDMA communications by leveraging programmable Smart Network Interface Cards (SmartNICs). Various example embodiments for supporting zero-trust policy enforcement for RDMA communications based on leveraging of programmable SmartNICs may be configured to support zero-trust policy enforcement for RDMA communications by applying zero-trust policies on a connection-by-connection basis within SmartNICs for RDMA connections between RDMA applications hosted on end hosts served by the SmartNICs.

    Zero-trust authentication for secure remote direct memory access

    公开(公告)号:US12113859B2

    公开(公告)日:2024-10-08

    申请号:US18498950

    申请日:2023-10-31

    CPC classification number: H04L67/1097 H04L63/0435 H04L63/20

    Abstract: Various example embodiments for supporting zero-trust policy enforcement in a communication system are presented herein. Various example embodiments for supporting zero-trust policy enforcement in a communication system may be configured to support zero-trust policy enforcement, including zero-trust authentication, for Remote Direct Memory Access (RDMA) communications. Various example embodiments for supporting zero-trust policy enforcement for RDMA communications may be configured to support transparent zero-trust policy enforcement for RDMA communications by leveraging programmable Smart Network Interface Cards (SmartNICs). Various example embodiments for supporting zero-trust policy enforcement for RDMA communications based on leveraging of programmable SmartNICs may be configured to support zero-trust policy enforcement for RDMA communications by applying zero-trust policies on a connection-by-connection basis within SmartNICs for RDMA connections between RDMA applications hosted on end hosts served by the SmartNICs.

    End-to-end RDMA telemetry system
    7.
    发明授权

    公开(公告)号:US11876691B2

    公开(公告)日:2024-01-16

    申请号:US17586969

    申请日:2022-01-28

    CPC classification number: H04L43/06 G06F13/28 H04L43/08 G06F2213/28

    Abstract: An end-to-end telemetry system for a Remote Direct Memory Access (RDMA) communication network having multiple end-servers. The system includes an RDMA tracer for each end-server, one or more programmable data planes, and a telemetry collector. Each RDMA tracer extracts host-level telemetry information for one or more RDMA sessions associated with the corresponding end-server. Each programmable data plane extracts network-level telemetry information for one or more RDMA sessions associated with the programmable data plane. The telemetry collector (i) receives the host-level telemetry information from the RDMA tracers and the network-level telemetry information from the one or more programmable data planes and (ii) generates telemetry reports based on the host-level and network-level telemetry information. In some implementations, the system enables real-time monitoring of RDMA traffic at the RDMA protocol level granularity across all RDMA-enabled workloads for different use cases.

    END-TO-END RDMA TELEMETRY SYSTEM
    9.
    发明公开

    公开(公告)号:US20230246931A1

    公开(公告)日:2023-08-03

    申请号:US17586969

    申请日:2022-01-28

    CPC classification number: H04L43/06 H04L43/08 G06F13/28 G06F2213/28

    Abstract: An end-to-end telemetry system for a Remote Direct Memory Access (RDMA) communication network having multiple end-servers. The system includes an RDMA tracer for each end-server, one or more programmable data planes, and a telemetry collector. Each RDMA tracer extracts host-level telemetry information for one or more RDMA sessions associated with the corresponding end-server. Each programmable data plane extracts network-level telemetry information for one or more RDMA sessions associated with the programmable data plane. The telemetry collector (i) receives the host-level telemetry information from the RDMA tracers and the network-level telemetry information from the one or more programmable data planes and (ii) generates telemetry reports based on the host-level and network-level telemetry information. In some implementations, the system enables real-time monitoring of RDMA traffic at the RDMA protocol level granularity across all RDMA-enabled workloads for different use cases.

    In-network decision for end-server-based network function acceleration

    公开(公告)号:US11909656B1

    公开(公告)日:2024-02-20

    申请号:US18155416

    申请日:2023-01-17

    CPC classification number: H04L47/2483 H04L41/0895 H04L47/11

    Abstract: A CPU implements a virtual network function (VNF) associated with flow processing and can offload at least some of the flow processing to a hardware accelerator. A module (e.g., TOR switch), external to the software-based processor and the hardware accelerator, examines packet flows and determines (e.g., using a top-K elephant-flow-detection algorithm) which ones are more suitable for offloading from the software-based processor to the hardware accelerator than others. The external module communicates the relative suitability for offloading to the CPU using packet tags or out-of-band messaging, and the CPU uses the relative suitability to determine which flows to offload or onload. In some implementations, the CPU can instruct the external module to change the value of K used in the algorithm.

Patent Agency Ranking