专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US11412000B2 Lightweight distributed application security through programmable extraction of dynamic metadata 有权
公开(公告)号：US11412000B2
公开(公告)日：2022-08-09
申请号：US16741794
申请日：2020-01-14
申请人： Cisco Technology, Inc.
发明人： Michel Khouderchah , Jayaraman Iyer , Kent K. Leung , Jianxin Wang , Donovan O'Hara , Saman Taghavi Zargar , Subharthi Paul
IPC分类号： H04L9/40 , H04L67/02 , H04L41/22
摘要： Presented herein are methodologies for implementing application security. A method includes generating an extraction vector based on a plurality of application security rules to be enforced, transmitting the extraction vector to a first agent operating on a first network device and to a second agent operating on a second network device; receiving, separately, from the first agent and from the second agent, first metadata generated by the first agent and second metadata generated by the second agent by the agents applying the extraction vector to network traffic passing, respectively, through the first network device and the second network device. The first metadata includes a transaction ID assigned by the first agent, and the second metadata includes the same transaction ID. The method further includes correlating the first metadata with the second metadata based on the transaction ID to construct a transactional service graph for the network traffic.

2. 发明申请

US20190068490A1 Generating Packets in a Reverse Direction of a Service Function Chain 审中-公开
公开(公告)号：US20190068490A1
公开(公告)日：2019-02-28
申请号：US16170175
申请日：2018-10-25
申请人： Cisco Technology, Inc.
发明人： Reinaldo Penno , Carlos M. Pignataro , Paul Quinn , Hung The Chau , Chui-Tin Yen , Vivek Kansal , Jianxin Wang , Kent K. Leung
IPC分类号： H04L12/721 , H04L12/801 , H04L12/703 , H04L12/911 , H04L12/715 , H04L12/851
摘要： Embodiments are directed to receiving an original packet at a service function; determining, for a reverse packet, a reverse service path identifier for a previous hop on a service function chain; determining, for the reverse packet, a service index for the reverse service path identifier; and transmitting the reverse packet to the previous hop on the service function chain.

3. 发明授权

US10084703B2 Infrastructure-exclusive service forwarding 有权
公开(公告)号：US10084703B2
公开(公告)日：2018-09-25
申请号：US15143253
申请日：2016-04-29
申请人： CISCO TECHNOLOGY, INC.
发明人： Surendra M. Kumar , Hendrikus G. P. Bosch , Kent K. Leung , Abhijit Patra
IPC分类号： H04L12/741 , H04L12/935 , H04L12/743 , H04L12/701
CPC分类号： H04L45/74 , H04L45/00 , H04L45/7453 , H04L49/3009
摘要： A method is provided in one example embodiment and includes receiving at a network element a packet including a Network Services Header (“NSH”), in which the NSH includes an Infrastructure (“I”) flag and a service path header comprising a Service Index (“SI”), and a Service Path ID (“SPI”) and determining whether the I flag is set to a first value. The method further includes, if the I flag is set to the first value, setting the I flag to a second value and forwarding the packet to the service function that corresponds to the SI for processing. The method still further includes, if the I flag is not set to the first value, decrementing the SI and making a forwarding decision based on a new value of the SI and the SPI.

4. 发明授权

US10063556B2 Content service on demand 有权
公开(公告)号：US10063556B2
公开(公告)日：2018-08-28
申请号：US15228558
申请日：2016-08-04
申请人： CISCO TECHNOLOGY, INC.
发明人： Kent K. Leung , Jayaraman R. Iyer , Bruce A. Thompson , Flemming S. Andreasen
IPC分类号： H04L29/06 , H04L12/24
CPC分类号： H04L63/10 , H04L41/0896 , H04L63/0807 , H04L63/0876
摘要： A method is provided and may include receiving a request for a network content delivery service from an access device; directing the access device to a network service provider for authentication for the network content delivery service; receiving a network authorization token from the access device, where the network authorization token is associated with the access device; obtaining a network access token from the network service provider; and binding the network access token to a content access token.

5. 发明授权

US09413748B2 Content service on demand 有权
标题翻译：内容服务按需
公开(公告)号：US09413748B2
公开(公告)日：2016-08-09
申请号：US13842426
申请日：2013-03-15
申请人： CISCO TECHNOLOGY, INC.
发明人： Kent K. Leung , Jayaraman R. Iyer , Bruce A. Thompson , Flemming S. Andreasen
IPC分类号： H04L29/06
CPC分类号： H04L63/10 , H04L41/0896 , H04L63/0807 , H04L63/0876
摘要： A method is provided and may include receiving a request for a network content delivery service from an access device; directing the access device to a network service provider for authentication for the network content delivery service; receiving a network authorization token from the access device, where the network authorization token is associated with the access device; obtaining a network access token from the network service provider; and binding the network access token to a content access token.
摘要翻译：提供了一种方法，并且可以包括从接入设备接收对网络内容传送服务的请求; 将访问设备引导到网络服务提供商以进行网络内容传递服务的认证; 从所述接入设备接收网络授权令牌，其中所述网络授权令牌与所述接入设备相关联; 从网络服务提供商获取网络访问令牌; 并将网络访问令牌绑定到内容访问令牌。

6. 发明授权

US09397940B2 System and method for providing a translation mechanism in a network environment 有权
标题翻译：在网络环境中提供翻译机制的系统和方法
公开(公告)号：US09397940B2
公开(公告)日：2016-07-19
申请号：US14180379
申请日：2014-02-14
申请人： CISCO TECHNOLOGY, INC.
发明人： Srinath Gundavelli , Frank Brockners , Mark Grayson , Kent K. Leung , Flemming S. Andreasen
IPC分类号： H04L12/28 , H04L12/56 , H04L12/46 , H04L29/12 , H04L29/06
CPC分类号： H04L45/741 , H04L12/4633 , H04L29/12367 , H04L29/12377 , H04L61/106 , H04L61/2514 , H04L61/2517 , H04L69/22
摘要： An example method is provided and includes receiving a packet associated with a flow, determining a tunnel identifier for the flow, and determining a flow identifier for the flow. The method includes associating the flow identifier and the tunnel identifier to an Internet protocol (IP) address to generate a binding to be used for a network address and port translation (NAPT). In other embodiments, a routing decision is executed based on the binding between the identifiers and the IP address. The flow identifier can be a context identifier (CID), and the tunnel identifier can be a softwire tunnel ID. In yet other embodiments, the packet can be tagged as part of an encapsulation operation, which includes providing information about a network location at which the network address and port translation is to be executed.
摘要翻译：提供了示例性方法，并且包括接收与流相关联的分组，确定流的隧道标识符，以及确定流的流标识符。该方法包括将流标识符和隧道标识符与因特网协议（IP）地址相关联，以生成用于网络地址和端口转换（NAPT）的绑定。在其他实施例中，基于标识符和IP地址之间的绑定来执行路由决定。流标识符可以是上下文标识符（CID），隧道标识符可以是软线隧道ID。在其他实施例中，分组可以被标记为封装操作的一部分，其包括提供关于将要执行网络地址和端口转换的网络位置的信息。

7. 发明授权

US10455403B2 Virtual mobility anchor for network sharing 有权
公开(公告)号：US10455403B2
公开(公告)日：2019-10-22
申请号：US15984997
申请日：2018-05-21
申请人： Cisco Technology, Inc.
发明人： Srinath Gundavelli , Vojislav Vucetic , Kent K. Leung
IPC分类号： H04W8/04 , H04W48/16 , H04W12/06 , H04W8/08 , H04W8/18 , H04W8/02 , H04W8/26
摘要： Embodiments are directed to a virtual mobility anchor network element to receive, from a packet gateway (PGW) node, a request for an internet protocol (IP) address for a mobile device, establish an IP address for the mobile device; and provide the IP address to the PGW node in response to the request for the IP address for the mobile device. The virtual mobility anchor network element is configured to receive IP traffic from a network location; determine a target destination for the IP traffic based on a destination IP address, the destination IP address comprising the second IP address; and forward the IP traffic to the PGW node associated with the destination IP address. The virtual mobility anchor network element is also configured to receive IP traffic from the PGW node; determine a target destination for the IP traffic; and route the IP traffic to the target destination.

8. 发明授权

US09973961B2 System and method for offloading data in a communication system 有权
公开(公告)号：US09973961B2
公开(公告)日：2018-05-15
申请号：US14683228
申请日：2015-04-10
申请人： CISCO TECHNOLOGY, INC.
发明人： Flemming S. Andreasen , Kent K. Leung , Michel Khouderchah , Jayaraman R. Iyer , Timothy P. Stammers
IPC分类号： H04W28/02 , H04L12/46 , H04L12/707 , H04L12/721 , H04W48/16 , H04L29/12 , H04W40/24
CPC分类号： H04W28/0226 , H04L12/4633 , H04L29/12367 , H04L45/22 , H04L45/26 , H04L61/2514 , H04W40/24 , H04W48/16
摘要： A method is provided in one example embodiment and includes receiving a data packet transported on a backhaul link at a first network element; de-capsulating the data packet; identifying whether the data packet is an upstream data packet; identifying whether the data packet matches an internet protocol (IP) access control list (ACL) or a tunnel endpoint identifier; and offloading the data packet from the backhaul link. In more specific embodiment, the method can include identifying that the data packet does not match the IP ACL or the tunnel endpoint identifier; and communicating the data packet to a second network element. In other examples, the method can include identifying that the data packet is a downstream data packet; identifying a service to be performed for the data packet that cannot be performed at the first network element; and communicating the data packet to a second network element.

9. 发明申请

US20170317926A1 GENERATING PACKETS IN A REVERSE DIRECTION OF A SERVICE FUNCTION CHAIN 审中-公开
公开(公告)号：US20170317926A1
公开(公告)日：2017-11-02
申请号：US15160804
申请日：2016-05-20
申请人： CISCO TECHNOLOGY, INC.
发明人： Reinaldo Penno , Carlos M. Pignataro , Paul Quinn , Hung The Chau , Chui-Tin Yen , Vivek Kansal , Jianxin Wang , Kent K. Leung
IPC分类号： H04L12/721 , H04L12/703 , H04L12/911
CPC分类号： H04L45/36 , H04L45/26 , H04L45/28 , H04L45/64 , H04L45/70 , H04L47/10 , H04L47/2441 , H04L47/726 , H04L2212/00
摘要： Embodiments are directed to receiving an original packet at a service function; determining, for a reverse packet, a reverse service path identifier for a previous hop on a service function chain; determining, for the reverse packet, a service index for the reverse service path identifier; and transmitting the reverse packet to the previous hop on the service function chain.

10. 发明申请

US20160234168A1 HIERARCHICAL CLUSTERING IN A GEOGRAPHICALLY DISPERSED NETWORK ENVIRONMENT 有权
标题翻译：地理分布式网络环境中的分层聚类
公开(公告)号：US20160234168A1
公开(公告)日：2016-08-11
申请号：US14619759
申请日：2015-02-11
申请人： CISCO TECHNOLOGY, INC.
发明人： Kent K. Leung , Xun Wang , Andrew E. Ossipov , Zhijun Liu , Jonathan Augustine Kunder
IPC分类号： H04L29/06 , H04L29/12
CPC分类号： H04L63/0254 , H04L61/2007 , H04L61/2061 , H04L63/0218
摘要： An example method for facilitating hierarchical clustering in a geographically dispersed network environment is provided and includes receiving a packet at one of a plurality of adaptive security appliance (ASA) units in one of a plurality of ASA clusters in a cluster domain of a network environment, identifying the packet as matching an inter-data center live traffic profile, identifying a target ASA cluster in the plurality of ASA clusters in the cluster domain, querying a domain director in the target ASA cluster for a flow owner, and if the flow owner is identified by the domain director, forwarding the packet to the flow owner in the target cluster, and if the flow owner is not identified by the domain director, and the domain director includes a flow state for a flow to which the packet belongs, designating the ASA unit as the flow owner.
摘要翻译：提供了一种用于促进地理上分散的网络环境中的层次聚类的示例性方法，并且包括在网络环境的集群域中的多个ASA集群之一的多个自适应安全设备（ASA）单元之一中接收分组，将数据包识别为匹配数据中心之间的实时流量简档，识别集群域中的多个ASA集群中的目标ASA集群，查询流所有者的目标ASA集群中的域控制器，以及流所有者是否为由域主任识别，将分组转发到目标群集中的流所有者，并且如果域所有者没有被域主管识别，并且域主管包括该分组所属的流的流状态，则指定 ASA单位作为流动所有者。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式