专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20150172170A1 METHOD FOR IMPLICIT SESSION ROUTING 有权
标题翻译：隐性会话路由方法
公开(公告)号：US20150172170A1
公开(公告)日：2015-06-18
申请号：US14108994
申请日：2013-12-17
申请人： CISCO TECHNOLOGY, INC.
发明人： Hendrikus G.P. Bosch , James N. Guichard , David D. Ward , Alessandro Duminuco , Rex E. Fernando , Paul Quinn
IPC分类号： H04L12/733
CPC分类号： H04L45/20 , H04L45/04 , H04L45/24 , H04L45/28 , H04L45/586
摘要： An example method is provided in one example embodiment and includes receiving a packet of a session from a previous hop router at a service zone of a service chain; recording the previous hop router for the session; determining an appliance to service the packet in the service zone using load balancing; recording an appliance identity for servicing the session in the service zone; determining a next hop router in the service chain for the packet using load balancing; and recording the next hop router for the session.
摘要翻译：在一个示例实施例中提供了示例性方法，并且包括从服务链的服务区的前一跳路由器接收会话的分组; 记录会话的上一跳路由器; 确定使用负载平衡来服务所述服务区中的分组的设备; 记录在服务区域中为会话服务的设备身份; 使用负载平衡确定所述分组的服务链中的下一跳路由器; 并为会话记录下一跳路由器。

2. 发明申请

US20230007620A1 Systems and Methods for Dynamically Generating a Mobile Software-Defined Wide Area Network Gateway Location for Remote Users 有权
公开(公告)号：US20230007620A1
公开(公告)日：2023-01-05
申请号：US17931333
申请日：2022-09-12
申请人： Cisco Technology, Inc.
发明人： Anubhav Gupta , Hendrikus G.P. Bosch , Vamsidhar Valluri , Stefan Olofsson
IPC分类号： H04W64/00 , H04L61/2585 , H04W24/08 , H04W48/16
摘要： According to certain embodiments, a system comprises one or more processors and one or more computer-readable non-transitory storage media comprising instructions that, when executed by the one or more processors, cause one or more components of the system to perform operations comprising: receiving location data associated with a plurality of remote users accessing one or more existing remote access gateways that are located at one or more network locations; building a heatmap of user locations based at least in part on the received location data; and identifying, from the heatmap of user locations, at least one new network location in which to generate at least one new remote access gateway, or at least one existing network location in which to remove at least one of the existing remote access gateways.

3. 发明申请

US20220086061A1 ON-PATH DYNAMIC POLICY ENFORCEMENT AND ENDPOINT-AWARE POLICY ENFORCEMENT FOR ENDPOINTS 有权
公开(公告)号：US20220086061A1
公开(公告)日：2022-03-17
申请号：US17538983
申请日：2021-11-30
申请人： Cisco Technology, Inc.
发明人： Alberto Rodriguez Natal , Hendrikus G.P. Bosch , Fabio Maino , Lars Olaf Stefan Olofsson , Jeffrey Napper , Anubhav Gupta
IPC分类号： H04L12/24 , H04L12/801
摘要： Systems, methods, and computer-readable media for locally applying endpoint-specific policies to an endpoint in a network environment. A network device local to one or more endpoints in a network environment can receive from a centralized network controller one or more network-wide endpoint policies. A first endpoint of the one or more endpoints can be configured to inject policy metadata into first data traffic. Policy metadata injected into the first traffic data can be received from the first endpoint. The network device can determine one or more first endpoint-specific polices for the first endpoint by evaluation the first policy metadata with respect to the one or more network-wide endpoint policies. As follows, the one or more first endpoint-specific policies can be applied to control data traffic associated with the first endpoint.

4. 发明申请

US20140351452A1 Chaining Service Zones by way of Route Re-Origination 有权
标题翻译：链路服务区通过路由重发
公开(公告)号：US20140351452A1
公开(公告)日：2014-11-27
申请号：US13898932
申请日：2013-05-21
申请人： Cisco Technology, Inc.
发明人： Hendrikus G.P. Bosch , James Guichard , Dave Barach , Alessandro Duminuco , Luyuan Fang , Paul Quinn , Rex Fernando , David Ward
IPC分类号： H04L29/08
CPC分类号： H04L67/10 , H04L45/02 , H04L45/04
摘要： Presented herein are techniques for use in a network environment that includes one or more service zones, each service zone including at least one instance of an in-line application service to be applied to network traffic and one or more routers to direct network traffic to the at least one service, and a route target being assigned to a unique service zone to serve as a community value for route import and export between routers of other service zones, destination networks or source networks via a control protocol. An edge router in each service zone or destination network advertises routes by its destination network prefix tagged with its route target. A service chain is created by importing and exporting of destination network prefixes by way of route targets at edge routers of the service zones or source networks.
摘要翻译：这里提出的是在包括一个或多个服务区域的网络环境中使用的技术，每个服务区域包括要应用于网络业务的在线应用服务的至少一个实例以及一个或多个路由器以将网络流量引导到至少一个服务，以及被分配给唯一服务区的路由目标，以用作通过控制协议在其他服务区域，目的地网络或源网络的路由器之间路由导入和导出的社区值。每个服务区域或目标网络中的边缘路由器通过其路由目标标记的目标网络前缀来通告路由。通过在服务区域或源网络的边缘路由器上的路由目标导入和导出目标网络前缀来创建服务链。

5. 发明申请

US20230026874A1 Packet Communications Providing Packet Processing Efficiencies in a Network including Using a Segment Routing and Tunnel Exchange 有权
公开(公告)号：US20230026874A1
公开(公告)日：2023-01-26
申请号：US17937961
申请日：2022-10-04
申请人： CISCO TECHNOLOGY, INC.
发明人： Pablo Camarillo Garvia , Hendrikus G.P. Bosch , Clarence Filsfils
IPC分类号： H04L12/46 , H04L45/74
摘要： In one embodiment, a segment routing and tunnel exchange provides packet forwarding efficiencies in a network, including providing an exchange between a segment routing domain and a packet tunnel domain. One application includes the segment routing and tunnel exchange interfacing segment routing packet forwarding (e.g., in a Evolved Packet Core (EPC) and/or 5-G user plane) and packet tunnel forwarding in access networks (e.g., replacing a portion of a tunnel between an access node and a user plane function for accessing a corresponding data network). In one embodiment, a network provides mobility services using a segment routing data plane that spans segment routing and tunnel exchange(s) and segment routing-enabled user plane functions. One embodiment uses the segment routing data plane without any modification to a (radio) access network (R)AN (e.g., Evolved NodeB, Next Generation NodeB) nor to user equipment (e.g., any end user device).

6. 发明申请

US20220398324A1 Vulnerability Analysis Using Continuous Application Attestation 有权
公开(公告)号：US20220398324A1
公开(公告)日：2022-12-15
申请号：US17346898
申请日：2021-06-14
申请人： Cisco Technology, Inc.
发明人： Hendrikus G.P. Bosch , Alessandro Duminuco , Sape Jurriën Mullender
IPC分类号： G06F21/57
摘要： The present disclosure is directed to systems and methods for vulnerability analysis using continuous application attestation, a method including receiving a load map associated with an application , the load map indicating loaded modules of the application; determining whether at least one notification is received indicating at least one update to the loaded modules of the application, wherein, if the at least one notification is received, the load map is updated based on the indicated at least one update, and wherein, if the at least one notification is not received, the load map is retained in an existing state; periodically retrieving call traces associated with the application, the call traces indicating executed modules of the application; and generating a continuous application attestation comprising at least a combination of the updated load map or the retained load map, and the retrieved call traces associated with the application at a given time.

7. 发明申请

US20220116381A1 STEERING TRAFFIC ON A FLOW-BY-FLOW BASIS BY A SINGLE SIGN-ON SERVICE 有权
公开(公告)号：US20220116381A1
公开(公告)日：2022-04-14
申请号：US17069540
申请日：2020-10-13
申请人： Cisco Technology, Inc.
发明人： Hendrikus G.P. Bosch , Alessandro Duminuco , Julien Barbot , Jeffrey Michael Napper , Sape Jurrien Mullender
IPC分类号： H04L29/06
摘要： Techniques for using a single sign-on (SSO) service as a software defined networking (SDN) controller for a virtual private network environment. The techniques disclosed herein may include receiving, at a first authentication service, first data including a first request to authenticate a user of a client device to access an application. The techniques may also include sending, to the client device, second data representing a second request configured to prompt a second authentication service to authenticate the user of the client device. Additionally, the first authentication service may receive an indication that the user was authenticated by the second authentication service and determine, based at least in part on an attribute associated with at least one of the client device or the application, whether the client device is to access the application using an unsecured connection or, alternatively, access the application using a secured connection.

8. 发明申请

US20160182458A1 END-TO-END SECURITY FOR VIRTUAL PRIVATE SERVICE CHAINS 有权
标题翻译：虚拟私人服务链的端到端安全
公开(公告)号：US20160182458A1
公开(公告)日：2016-06-23
申请号：US14573564
申请日：2014-12-17
申请人： Cisco Technology, Inc.
发明人： Kevin D. Shatzkamer , Hendrikus G.P. Bosch , Warren Scott Wainner , James N. Guichard , Surendra M. Kumar
IPC分类号： H04L29/06 , G06F9/455
CPC分类号： H04L63/0428 , G06F9/45558 , G06F21/606 , G06F2009/45587 , G06F2009/45595
摘要： A first virtual machine is established in a virtual private service chain to provide a first network service to virtual private service chain traffic. A second virtual machine is also established the virtual private service chain to provide a second network service to the virtual private service chain traffic. The virtual private service chain traffic is encrypted for transmission within the virtual private service chain from the first virtual machine to the second virtual machine, wherein the encryption uses a key shared by the first and second virtual machines.
摘要翻译：在虚拟专用服务链中建立第一虚拟机以向虚拟专用服务链流量提供第一网络服务。第二个虚拟机也建立了虚拟专用服务链，为虚拟私人服务链流量提供第二个网络服务。虚拟专用服务链流量被加密以在虚拟专用服务链中从第一虚拟机到第二虚拟机的传输，其中加密使用由第一和第二虚拟机共享的密钥。

9. 发明申请

US20150358850A1 CONVEYING SUBSCRIBER INFORMATION TO SERVICE CHAIN SERVICES USING TUNNEL PROTOCOL HEADER ENCAPSULATION FOR MOBILE NETWORK APPLICATIONS IN A NETWORK ENVIRONMENT 有权
标题翻译：使用隧道协议头向网络环境中的移动网络应用传输服务链服务信息
公开(公告)号：US20150358850A1
公开(公告)日：2015-12-10
申请号：US14300865
申请日：2014-06-10
申请人： CISCO TECHNOLOGY, INC.
发明人： Humberto J. La Roche, JR. , Hendrikus G.P. Bosch , James N. Guichard , Paul Quinn , Surendra M. Kumar , Kevin D. Shatzkamer
IPC分类号： H04W28/02 , H04L12/721 , H04L12/851 , H04L12/46
CPC分类号： H04W28/0215 , H04L12/4633 , H04L45/306 , H04L45/38
摘要： A method provided in one embodiment includes receiving, at a first network element, a first data packet of a data flow, wherein the data flow is associated with a subscriber. The method further includes receiving subscriber information associated with the subscriber, and encapsulating the subscriber information with the first data packet to form an encapsulated data packet. The method still further includes determining a service chain including one or more services to which the encapsulated data packet is to be forwarded, and forwarding the encapsulated data packet to the service chain.
摘要翻译：在一个实施例中提供的方法包括在第一网络元件处接收数据流的第一数据分组，其中所述数据流与订户相关联。该方法还包括接收与用户相关联的用户信息，以及用第一数据分组封装用户信息以形成封装的数据分组。该方法还包括确定包括一个或多个服务的服务链，封装的数据分组将被转发到该服务链上，并将封装的数据分组转发到服务链。

10. 发明申请

US20230004445A1 ASSESSING SECURITY VULNERABILITIES IN CLOUD-NATIVE APPLICATIONS 有权
公开(公告)号：US20230004445A1
公开(公告)日：2023-01-05
申请号：US17662459
申请日：2022-05-09
申请人： Cisco Technology, Inc.
发明人： Hendrikus G.P. Bosch , Randy Birdsall , Alessandro Duminuco , Zohar Kaufman , Sape Jurriën Mullender
IPC分类号： G06F9/50 , G06F9/54
摘要： According to some embodiments, a method is performed by a distributed cloud-native application. The method comprises receiving a request from a user to perform an operation. The user is associated with a risk profile. The method further comprises determining a call path through the distributed cloud-native application to perform the operation and classifying a risk level associated with the determined call path based on a distributed call graph. The distributed call graph comprises a risk value for each call path through the distributed cloud-native application and each call path comprises one or more distributed cloud-native application components. The risk value is based on a weakness rating associated with each component in the call path. The method further comprises determining the risk level associated with the determined call path is acceptable based on the risk profile associated with the user and performing the operation.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式