专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

21. 发明授权

US09654937B2 System and method for routing, mobility, application services, discovery, and sensing in a vehicular network environment 有权
公开(公告)号：US09654937B2
公开(公告)日：2017-05-16
申请号：US14664101
申请日：2015-03-20
申请人： CISCO TECHNOLOGY, INC.
发明人： Sateesh K. Addepalli , Raghuram S. Sudhaakar , Lillian Lei Dai , Vina Ermagan , Preethi Natarajan , Kevin C. Lee , Pere Monclus
IPC分类号： H04L12/16 , H04W4/04 , H04W72/04 , H04W28/06 , H04W52/12 , G06F9/54 , H04W48/06 , H04W48/18 , B60W50/10 , G06F3/01 , G06F3/16 , H04L12/26 , H04L29/06 , H04W12/08 , G06F21/45 , H04W12/06 , H04W28/02 , H04W40/20 , H04W48/02 , H04L29/08 , B60R16/023 , H04L12/721 , H04L29/12 , H04W8/06 , H04W8/08 , H04W8/26 , H04W40/02 , H04L1/00 , H04W4/00 , H04W4/10 , H04W12/02 , H04W12/04 , H04W76/00 , H04W80/02 , H04W84/00 , H04W36/08 , H04W52/14 , H04W52/22 , H04W52/24 , H04W52/34 , H04W84/12 , H04W92/18
CPC分类号： H04W4/046 , B60R16/023 , B60W50/10 , G06F3/017 , G06F3/167 , G06F9/542 , G06F21/45 , H04L1/008 , H04L29/06578 , H04L43/0811 , H04L43/0858 , H04L43/0876 , H04L45/12 , H04L51/02 , H04L61/2592 , H04L63/08 , H04L63/107 , H04L67/12 , H04L67/32 , H04L69/18 , H04Q9/00 , H04W4/00 , H04W4/10 , H04W8/06 , H04W8/08 , H04W8/26 , H04W12/02 , H04W12/04 , H04W12/06 , H04W12/08 , H04W28/0215 , H04W28/06 , H04W36/08 , H04W40/02 , H04W40/20 , H04W48/02 , H04W48/06 , H04W48/16 , H04W48/18 , H04W52/12 , H04W52/143 , H04W52/225 , H04W52/241 , H04W52/346 , H04W72/0406 , H04W72/042 , H04W72/0493 , H04W76/45 , H04W80/02 , H04W84/005 , H04W84/12 , H04W92/18 , Y02A30/60
摘要： A method includes selecting a path for routing a data packet from a source node to a destination node in a vehicular ad hoc network, storing the data packet if the selected path is identified as a dead end, and establishing a communication link with a first node. The method also includes forwarding the data packet to the first node if a first distance between the first node and the destination node is less than a second distance between the source node and the destination node. More specific embodiments include sending a query for location information of the destination node, receiving the location information including two or more available paths from the source node to the destination node, and determining the path for routing the data packet is an optimal path of the two or more available paths.

22. 发明申请

US20170041246A1 APPLICATION IDENTIFICATION AND OVERLAY PROVISIONING AS A SERVICE 有权
标题翻译：作为服务的应用程序标识和覆盖提供
公开(公告)号：US20170041246A1
公开(公告)日：2017-02-09
申请号：US14816406
申请日：2015-08-03
申请人： Cisco Technology, Inc.
发明人： Fabio Maino , Vina Ermagan , Christopher Spain
IPC分类号： H04L12/911 , H04L12/851 , H04L12/741
CPC分类号： H04L47/825 , H04L45/74 , H04L47/24
摘要： In one embodiment, a first device in a network receives application traffic sent from a source device towards a destination address. The first device sends the application traffic to a traffic identification service. The first device receives an instruction to establish a network tunnel to send the application traffic from the source device towards the destination address. The instruction is based on a classification of the application traffic by the traffic identification service. The first device establishes the network tunnel to send the application traffic from the source device towards the destination address.
摘要翻译：在一个实施例中，网络中的第一设备接收从源设备发送到目的地地址的应用流量。第一个设备将应用流量发送到流量识别服务。第一设备接收建立网络隧道的指令，以将来自源设备的应用流量发送到目的地址。该指令基于流量识别服务对应用流量的分类。第一个设备建立网络隧道，将应用流量从源设备发送到目的地址。

23. 发明申请

US20150063351A1 INTER-DOMAIN NETWORK TENANT IDENTIFIER 有权
标题翻译：域内网络标识符标识符
公开(公告)号：US20150063351A1
公开(公告)日：2015-03-05
申请号：US14010707
申请日：2013-08-27
申请人： CISCO TECHNOLOGY, INC.
发明人： Victor Moreno , Fabio Maino , Vina Ermagan
IPC分类号： H04L12/741 , H04L12/56
CPC分类号： H04L45/745 , H04L45/04 , H04L45/741
摘要： In one embodiment, a method includes receiving a packet at a tunnel end point in a multi-tenant network, the packet comprising a destination, performing a lookup for the destination in a database comprising a mapping of global identifiers to local tenant identifiers for different hosting locations, each of the global identifiers uniquely identifying a tenant across all of the hosting locations, identifying a destination tunnel end point and a local tenant identifier for the destination, and inserting the destination tunnel end point and the local tenant identifier into the packet and forwarding the packet. An apparatus and logic are also disclosed herein.
摘要翻译：在一个实施例中，一种方法包括在多租户网络中的隧道终点处接收分组，所述分组包括目的地，在数据库中执行目的地的查找，包括全局标识符到不同主机的本地租户标识符的映射位置，每个全局标识符唯一地标识所有托管位置的租户，标识目的地的目的地隧道终点和本地租户标识符，并将目的地隧道终点和本地租户标识符插入到分组中并转发包。本文还公开了一种装置和逻辑。

24. 发明授权

US11363073B2 On-demand security association management 有权
公开(公告)号：US11363073B2
公开(公告)日：2022-06-14
申请号：US17034100
申请日：2020-09-28
申请人： Cisco Technology, Inc.
发明人： Fabio R. Maino , Vina Ermagan , Alberto Rodriguez Natal
IPC分类号： H04L29/06 , H04L12/46 , H04L9/40
摘要： An ingress network element obtains data from a source endpoint associated with the ingress network element. The data identifies a destination endpoint remote from the ingress network element. The ingress network element provides a map request identifying the destination endpoint to a mapping server. The ingress network element obtains a map reply including a network address of an egress network element associated with the destination endpoint and a security association. The ingress network element encrypts the data for the destination endpoint with the security association according to a cryptographic policy based on the source endpoint, the destination endpoint, and the availability of cryptographic resources on the network. The ingress network element provides the encrypted data to the egress network element.

25. 发明申请

US20210014285A1 ON-DEMAND SECURITY ASSOCIATION MANAGEMENT 有权
公开(公告)号：US20210014285A1
公开(公告)日：2021-01-14
申请号：US17034100
申请日：2020-09-28
申请人： Cisco Technology, Inc.
发明人： Fabio R. Maino , Vina Ermagan , Alberto Rodriguez Natal
IPC分类号： H04L29/06 , H04L12/46
摘要： An ingress network element obtains data from a source endpoint associated with the ingress network element. The data identifies a destination endpoint remote from the ingress network element. The ingress network element provides a map request identifying the destination endpoint to a mapping server. The ingress network element obtains a map reply including a network address of an egress network element associated with the destination endpoint and a security association. The ingress network element encrypts the data for the destination endpoint with the security association according to a cryptographic policy based on the source endpoint, the destination endpoint, and the availability of cryptographic resources on the network. The ingress network element provides the encrypted data to the egress network element.

26. 发明授权

US10826827B1 Systems and methods for virtual prefix aggregation in on-demand overlay networks 有权
公开(公告)号：US10826827B1
公开(公告)日：2020-11-03
申请号：US16514223
申请日：2019-07-17
申请人： Cisco Technology, Inc.
发明人： Alberto Rodriguez Natal , Marc Portoles Comeras , Vina Ermagan , Victor Moreno , Fabio Maino , Sanjay Hooda
IPC分类号： H04L12/715 , H04L12/741 , H04L12/733
摘要： In one embodiment, a router includes processors and computer-readable non-transitory storage media coupled to the processors including instructions executable by the processors. The router may store at least one virtual prefix and an associated aggregation threshold. The router may register, with a mapping database of an overlay network, ownership of individual prefixes served by the router. The router may determine an amount of prefixes served by the router that are within an address space of the virtual prefix. The router may register, based on a determination that the amount of prefixes satisfies the aggregation threshold, ownership of the virtual prefix with the mapping database of the overlay network. The registration of the virtual prefix may cause ownership of one or more of the registered individual prefixes served by the router that are within the address space of the virtual prefix to be deregistered.

27. 发明申请

US20200344662A1 ENTERPRISE NETWORK FABRIC EXTENSION ACROSS MOBILE NETWORKS 审中-公开
公开(公告)号：US20200344662A1
公开(公告)日：2020-10-29
申请号：US16395817
申请日：2019-04-26
申请人： Cisco Technology, Inc.
发明人： Fabio R. Maino , Vina Ermagan , Marc Portoles Comeras , John Martin Graybeal , Alberto Rodriguez Natal
IPC分类号： H04W40/02 , H04W76/12 , H04L12/26
摘要： In one illustrative example, network fabric policy data associated with an application, subscriber, and/or device may be received. Mobile network policy data that corresponds to the received network fabric policy data may be selected, based on stored policy mappings between a set of network fabric policy profiles of a fabric network and a set of mobile network policy profiles of a mobile network. A bearer or Quality of Service (QoS) flow of the mobile network may be established in satisfaction of the selected mobile network policy data. In addition, a packet filter of a traffic flow template (TFT) or a packet detection rule (PDR) may be generated and applied in order to direct IP traffic flows associated with the application to the established bearer or QoS flow for communication in the mobile network.

28. 发明申请

US20200059457A1 SECURE WAN PATH SELECTION AT CAMPUS FABRIC EDGE 审中-公开
公开(公告)号：US20200059457A1
公开(公告)日：2020-02-20
申请号：US16104456
申请日：2018-08-17
申请人： Cisco Technology, Inc.
发明人： Syed Khalid Raza , Mosaddaq Hussain Turabi , Fabio Rodolfo Maino , Vina Ermagan , Atri Indiresan
IPC分类号： H04L29/06 , H04L12/28 , H04L12/46
摘要： A method is performed by an access router of an enterprise network including a first edge router to communicate with a second edge router over a wide area network (WAN). The method includes receiving a packet from a first endpoint, receiving from a mapping service a network location of a second edge router for which the packet is destined and a security association (SA) to encrypt the packet from the access router to the second edge router, and generating for the first edge router one or more path selectors for WAN path selection. The method includes encrypting the packet using the SA, and adding to the encrypted IP packet, in clear text, the path selectors and outer encapsulation including the network location, to produce an encrypted tunnel packet. The method also includes forwarding the encrypted tunnel packet to the second edge router via the first edge router and the WAN.

29. 发明申请

US20170054758A1 DYNAMIC VPN POLICY MODEL WITH ENCRYPTION AND TRAFFIC ENGINEERING RESOLUTION 审中-公开
标题翻译：具有加密和交通工程分辨率的动态VPN策略模型
公开(公告)号：US20170054758A1
公开(公告)日：2017-02-23
申请号：US15058447
申请日：2016-03-02
申请人： Cisco Technology, Inc.
发明人： Fabio R. Maino , Horia Miclea , John Evans , Brian Eliot Weis , Vina Ermagan
IPC分类号： H04L29/06
CPC分类号： H04L47/781 , H04L41/0823 , H04L41/5025 , H04L43/0882 , H04L45/64
摘要： High-level network policies that represent a virtual private network (VPN) as a high-level policy model are received. The VPN is to provide secure connectivity between connection sites of the VPN based on the high-level network policies. The high-level network policies are translated into low-level device configuration information represented in a network overlay and used for configuring a network underlay that provides the connections sites to the VPN. The network underlay is configured with the device configuration information so that the network underlay implements the VPN in accordance with the high-level policies. It is determined whether the network underlay is operating to direct traffic flows between the connection sites in compliance with the high-level network policies. If it is determined that the network underlay is not operating in compliance, the network underlay is reconfigured with new low-level device configuration information so that the network underlay operates in compliance.
摘要翻译：收到代表虚拟专用网（VPN）作为高级策略模型的高级网络策略。 VPN是基于高级网络策略在VPN的连接站点之间提供安全连接。高级网络策略被转换为在网络覆盖中表示的低级设备配置信息，并用于配置向VPN提供连接站点的网络底层。网络底层配置了设备配置信息，使得网络底层根据高级策略实现VPN。确定网络底层是否正在操作以在连接站点之间引导符合高级网络策略的业务流。如果确定网络底层不符合操作，则使用新的低级设备配置信息来重新配置网络底层，使得网络底层符合操作。

30. 发明申请

US20170026417A1 SYSTEMS, METHODS, AND DEVICES FOR SMART MAPPING AND VPN POLICY ENFORCEMENT 审中-公开
标题翻译：用于智能映射和VPN策略执行的系统，方法和设备
公开(公告)号：US20170026417A1
公开(公告)日：2017-01-26
申请号：US15217154
申请日：2016-07-22
申请人： CISCO TECHNOLOGY, INC.
发明人： Vina Ermagan , Fabio R. Maino , Florin T. Coras , Marius Horia Miclea , John William Evans , Paul Quinn , Darrel Jay Lewis , Brian E. Weis
IPC分类号： H04L29/06 , H04L12/741 , H04L29/12 , H04L12/46
CPC分类号： H04L63/20 , H04L12/4633 , H04L12/4641 , H04L45/54 , H04L45/64 , H04L45/74 , H04L61/251 , H04L63/0272 , H04L63/029 , H04L63/0428 , H04L63/06 , H04L69/03
摘要： Aspects of the embodiments are directed to systems, methods, and computer program products to program, via a northbound interface, a mapping between an endpoint identifier (EID) and a routing locator (RLOC) directly into a mapping database at a mapping system; receive, from a first tunneling router associated with a first virtual network, a mapping request to a second virtual network, the first router compliant with a Locator/ID Separation Protocol, the mapping request comprising an EID tuple that includes a source identifier and a destination identifier; identify an RLOC based, at least in part, on the destination identifier of the EID tuple from the mapping database; and transmit the RLOC to the first tunneling router implementing an high level policy that has been dynamically resolved into a state of the mapping database.
摘要翻译：实施例的方面涉及通过北向接口将端点标识符（EID）和路由定位器（RLOC）之间的映射直接编程到映射系统的映射数据库中的系统，方法和计算机程序产品; 从与第一虚拟网络相关联的第一隧道路由器接收对第二虚拟网络的映射请求，所述第一路由器符合定位符/ ID分离协议，所述映射请求包括包含源标识符和目的地的EID元组标识符至少部分地基于来自映射数据库的EID元组的目的地标识符来识别RLOC; 并将RLOC发送到实现已经被动态地解析成映射数据库的状态的高级策略的第一隧道路由器。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式