专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US11483796B2 Systems and methods for dynamically generating a mobile software-defined wide area network gateway location for remote users 有权
公开(公告)号：US11483796B2
公开(公告)日：2022-10-25
申请号：US16694509
申请日：2019-11-25
申请人： Cisco Technology, Inc.
发明人： Anubhav Gupta , Hendrikus G. P. Bosch , Vamsidhar Valluri , Stefan Olofsson
IPC分类号： H04W64/00 , H04L61/2585 , H04W24/08 , H04W48/16
摘要： According to certain embodiments, a system comprises one or more processors and one or more computer-readable non-transitory storage media comprising instructions that, when executed by the one or more processors, cause one or more components of the system to perform operations comprising: receiving location data associated with a plurality of remote users accessing one or more existing remote access gateways that are located at one or more network locations; building a heatmap of user locations based at least in part on the received location data; and identifying, from the heatmap of user locations, at least one new network location in which to generate at least one new remote access gateway, or at least one existing network location in which to remove at least one of the existing remote access gateways.

2. 发明授权

US11425098B2 Streamlined authentication and authorization for virtual private network tunnel establishment 有权
公开(公告)号：US11425098B2
公开(公告)日：2022-08-23
申请号：US16855809
申请日：2020-04-22
申请人： Cisco Technology, Inc.
发明人： Hendrikus G. P. Bosch , Alessandro Duminuco , Sape Jurriën Mullender , Jeffrey Michael Napper
IPC分类号： H04L9/40 , H04L12/46
摘要： An identity provider (IdP) service interoperates with a Virtual Private Network (VPN) client. The IdP service receives a login request originating from the VPN client to establish a VPN tunnel between the VPN client and a VPN host, the login request indicating a user of the VPN client. The IdP service provides a response to the login request. The response includes at least both first information including an indication that the user of the VPN client is an authorized user and second information including an indication of a VPN policy for the VPN tunnel, the VPN policy including a VPN client policy to be utilized during the VPN tunnel by the VPN client and a VPN host policy to be utilized during the VPN tunnel by the VPN host.

3. 发明授权

US09769217B2 Providing cellular-specific transport layer service by way of cell-site proxying in a network environment 有权
公开(公告)号：US09769217B2
公开(公告)日：2017-09-19
申请号：US14086734
申请日：2013-11-21
申请人： CISCO TECHNOLOGY, INC.
发明人： Hendrikus G. P. Bosch , Paul A. Polakos , Humberto J. La Roche , Mahavir Dagdulal Karnavat
IPC分类号： H04L29/06
CPC分类号： H04L65/1069 , H04L65/105
摘要： A method is provided in one example embodiment and includes receiving a first request from a first user equipment by a first transport layer proxy located within an access network The first request includes a request to establish a user session between the first user equipment and a remote server. The method further includes establishing a first transport layer session between the first user equipment and the first transport layer proxy, establishing a second transport layer session between the first transport layer proxy and the remote server, and establishing a first control channel between the first transport layer proxy and a transport layer function manager within a core network. The method further includes sending session state parameters associated with the first transport layer session and the second transport layer session to the transport layer function manager using the first control channel.

4. 发明授权

US09479443B2 System and method for transporting information to services in a network environment 有权
标题翻译：将信息传输到网络环境中的服务的系统和方法
公开(公告)号：US09479443B2
公开(公告)日：2016-10-25
申请号：US14285843
申请日：2014-05-23
申请人： CISCO TECHNOLOGY, INC.
发明人： Hendrikus G. P. Bosch , Ian McDowell Campbell , Humberto J. La Roche , James N. Guichard , Surendra M. Kumar , Paul Quinn , Alessandro Duminuco , Jeffrey Napper , Ravi Shekhar
IPC分类号： H04L12/851 , H04L12/801 , H04W72/04 , H04L12/721 , H04W88/16
CPC分类号： H04L47/2408 , H04L45/38 , H04L47/12 , H04L47/14 , H04W72/0493 , H04W88/16
摘要： An example method is provided in one example embodiment and may include receiving a packet for a subscriber at a gateway, wherein the gateway includes a local policy anchor for interfacing with one or more policy servers and one or more classifiers for interfacing with one or more service chains, each service chain including one or more services accessible by the gateway; determining a service chain to receive the subscriber's packet; appending the subscriber's packet with a header, wherein the header includes, at least in part, identification information for the subscriber and an Internet Protocol (IP) address for the local policy anchor; and injecting the packet including the header into the service chain determined for the subscriber.
摘要翻译：在一个示例性实施例中提供了示例性方法，并且可以包括在网关处接收订户的分组，其中所述网关包括用于与一个或多个策略服务器进行接口的本地策略锚点以及用于与一个或多个服务每个服务链包括由网关可访问的一个或多个服务; 确定服务链以接收订户的分组; 用标题附加订户的分组，其中该报头至少部分地包括用户的标识信息和用于本地策略锚的因特网协议（IP）地址; 以及将包括所述头部的分组注入到为所述用户确定的服务链中。

5. 发明授权

US09413659B2 Distributed network address and port translation for migrating flows between service chains in a network environment 有权
标题翻译：分布式网络地址和端口转换，用于在网络环境中的服务链之间迁移流
公开(公告)号：US09413659B2
公开(公告)日：2016-08-09
申请号：US14301767
申请日：2014-06-11
申请人： CISCO TECHNOLOGY, INC.
发明人： Alessandro Duminuco , Hendrikus G. P. Bosch , Jeffrey Napper
IPC分类号： H04L12/26 , H04L12/741 , H04L12/801 , H04L12/851
CPC分类号： H04L45/745 , H04L47/18 , H04L47/2441
摘要： An example method for distributed network address and port translation (NAPT) for migrating flows between service chains in a network environment is provided and includes distributing translation state for a flow traversing the network across a plurality of NAPT service nodes in the network, with packets belonging to the flow being translated according to the translation state, associating the flow with a first service chain at a flow classifier in the network, and updating the association when the flow migrates from the first service chain to a second service chain, with packets belonging to the migrated flow also being translated according to the translation state. The method may be executed at a pool manager in the network. In specific embodiments, the pool manager may include a distributed storage located across the plurality of NAPT service nodes.
摘要翻译：提供了一种用于在网络环境中的服务链之间迁移流的分布式网络地址和端口转换（NAPT）的示例方法，并且包括：跨越网络中的多个NAPT服务节点的跨流过的流的分发转换状态，分组属于根据所述翻译状态对所述流进行翻译，将所述流与所述网络中的流分类器处的第一服务链相关联，以及当所述流从所述第一服务链迁移到第二服务链时更新所述关联，其中分组属于迁移流也根据翻译状态进行翻译。该方法可以在网络中的池管理器处执行。在具体实施例中，池管理器可以包括跨越多个NAPT服务节点的分布式存储器。

6. 发明授权

US09258243B2 Symmetric service chain binding 有权
标题翻译：对称服务链绑定
公开(公告)号：US09258243B2
公开(公告)日：2016-02-09
申请号：US13891247
申请日：2013-05-10
申请人： Cisco Technology, Inc.
发明人： James Guichard , Paul Quinn , Rex Fernando , Govind P. Sharma , David Ward , Hendrikus G. P. Bosch , Luyuan Fang
IPC分类号： H04L12/721 , H04L12/859 , H04L12/851
CPC分类号： H04L47/2475 , H04L47/2441
摘要： A plurality of network nodes are deployed in a network, each network node configured to apply a service function to traffic that passes through the respective network nodes. A controller generates information for a service chain that involves application to traffic of one or more service functions at corresponding ones of the plurality of network nodes along a forward path through the one or more network nodes. The controller identifies one or more of the service functions within the service chain that is stateful. When one or more of the service functions of the service chain is stateful, the controller generates information for a reverse path through the one or more service nodes for the one or more stateful service functions. The controller binds a forward chain identifier for the forward path with a reverse chain identifier for the reverse path for the service chain.
摘要翻译：多个网络节点部署在网络中，每个网络节点被配置为向通过各个网络节点的业务应用服务功能。控制器生成用于服务链的信息，其涉及通过所述一个或多个网络节点沿着前向路径应用于所述多个网络节点中的对应的一个或多个服务功能的业务。控制器识别服务链中的一个或多个服务功能是有状态的。当服务链的一个或多个服务功能是有状态时，控制器通过用于一个或多个有状态服务功能的一个或多个服务节点生成用于反向路径的信息。控制器将正向路径的前向链标识符与用于服务链的反向路径的反向链标识符绑定。

7. 发明申请

US20220217132A1 PER-DEVICE SINGLE SIGN-ON ACROSS APPLICATIONS 有权
公开(公告)号：US20220217132A1
公开(公告)日：2022-07-07
申请号：US17141007
申请日：2021-01-04
申请人： Cisco Technology, Inc.
发明人： Ahmed Bakry Helmy Ahmed , Sape Jurrien Mullender , Hendrikus G. P. Bosch , Alessandro Duminuco , Jeffrey Michael Napper
IPC分类号： H04L29/06
摘要： Operations include transmitting, on behalf of a first application, a first request to a first service provider, the first request requesting first services from the first service provider, intercepting, at a local agent, a first redirect message from the first service provider to an identity provider, receiving an identity provider cookie from the identity provider based on a validation of credentials during the authentication process, storing a copy of the identity provider cookie, transmitting, on behalf of a second application, a second request to a second service provider, the second request requesting second services from the second service provider, intercepting a second redirect message from the second service provider to the identity provider, adding the identity provider cookie to the second redirect message, and receiving validation to access the second service provider from the identity provider based on the identity provider cookie stored by the local agent.

8. 发明授权

US11277337B2 Systems and methods for routing network traffic using labels 有权
公开(公告)号：US11277337B2
公开(公告)日：2022-03-15
申请号：US16750139
申请日：2020-01-23
申请人： Cisco Technology Inc.
发明人： Hendrikus G. P. Bosch , Stefan Olofsson , Ijsbrand Wijnands , Anubhav Gupta , Jeffrey Napper , Sape Jurriën Mullender
IPC分类号： H04L12/723 , H04L12/755 , H04L12/717 , H04L29/12 , H04L29/06 , H04L29/08 , H04L12/741 , H04L12/725 , H04L45/50 , H04L45/021 , H04L67/63 , H04L61/4511 , H04L45/42
摘要： In one embodiment, a method includes detecting a request to route traffic to a service associated with an application. The method also includes identifying an application identifier associated with the application and selecting, using the application identifier, a label from a plurality of labels included in a routing table. The label includes one or more routes. The method further includes routing the traffic to the service associated with the application using the label.

9. 发明授权

US11018886B1 Methods and apparatus for selectively filtering an IP multicast data stream for selected group members of a multicast group 有权
公开(公告)号：US11018886B1
公开(公告)日：2021-05-25
申请号：US16136636
申请日：2018-09-20
申请人： Cisco Technology, Inc.
发明人： Ijsbrand Wijnands , Hendrikus G. P. Bosch , Sape Jurriën Mullender , Subhasri Dhesikan
IPC分类号： H04L12/18 , H04L29/06 , H04L12/935
摘要： An IP multicast group may include a plurality of group members corresponding to a plurality of host receivers that are connected to router nodes of a multicast distribution tree and joined in the multicast group. At least some of the router nodes may store a plurality of group member indicator bits associated with the multicast group. Each group member indicator bit may be assigned to a respective one of the group members and indicate whether the respective group member is reachable downstream from the router node. During IP multicast, the router node may receive an IP multicast message having a destination address field, a source address field, and a payload field. The payload field may include one or more data items of a multicast data stream. The destination address field may include a multicast group address for addressing communications to the multicast group.

10. 发明授权

US10511640B2 Providing cellular-specific transport layer service by way of cell-site proxying in a network environment 有权
公开(公告)号：US10511640B2
公开(公告)日：2019-12-17
申请号：US15708042
申请日：2017-09-18
申请人： Cisco Technology, Inc.
发明人： Hendrikus G. P. Bosch , Paul A. Polakos , Humberto J. La Roche , Mahavir Dagdulal Karnavat
IPC分类号： H04L29/06
摘要： A method is provided in one example embodiment and includes receiving a first request from a first user equipment by a first transport layer proxy located within an access network The first request includes a request to establish a user session between the first user equipment and a remote server. The method further includes establishing a first transport layer session between the first user equipment and the first transport layer proxy, establishing a second transport layer session between the first transport layer proxy and the remote server, and establishing a first control channel between the first transport layer proxy and a transport layer function manager within a core network. The method further includes sending session state parameters associated with the first transport layer session and the second transport layer session to the transport layer function manager using the first control channel.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式