-
公开(公告)号:US12250215B2
公开(公告)日:2025-03-11
申请号:US16986923
申请日:2020-08-06
Applicant: Cisco Technology, Inc.
Inventor: Patrick Wetterwald , Jonas Zaddach , Pascal Thubert , Eric Levy-Abegnoli
IPC: H04L9/40
Abstract: This disclosure describes techniques for device to device authentication. For instance, a first device may detect a second device, such as when a user physically attaches the second device to the first device or when the second device wireless communicates with the first device. A component of the first device and/or an authentication entity may then determine to authenticate the second device. In some instances, the component determines to authenticate the second device using information associated with an environment of the second device. To authenticate the second device, the authentication entity may send a request to a user, receive a response from the user, and then verify the response. After the authentication, the first device may determine that the second device includes a trusted device and establish a connection with the second device.
-
公开(公告)号:US20240297868A1
公开(公告)日:2024-09-05
申请号:US18659296
申请日:2024-05-09
Applicant: Cisco Technology, Inc.
Inventor: David A. Maluf , Srinath Gundavelli , Pascal Thubert , Pradeep Kumar Kathail , Eric Levy-Abegnoli , Eric Voit , Ali Sajassi
IPC: H04L9/40 , H04L61/2521 , H04L61/2539 , H04L61/4511
CPC classification number: H04L63/0421 , H04L61/2525 , H04L61/2539 , H04L61/4511
Abstract: Techniques for using Network Address Translation (NAT), Mobile Internet Protocol (MIP), and/or other techniques in conjunction with Domain Name System (DNS) to anonymize server-side addresses in data communications. Rather than having DNS provide a client device with an IP address of an endpoint device, such as a server, the DNS instead returns a random IP address that is mapped to the client device and the endpoint device. In this way, IP addresses of servers are obfuscated by a random IP address that cannot be used to identify the endpoint device or service. The client device may then communicate data packets to the server using the random IP address as the destination address, and a gateway that works in conjunction with DNS can convert the random IP address to the actual IP address of the server using NAT and forward the data packet onto the server.
-
公开(公告)号:US20240244028A1
公开(公告)日:2024-07-18
申请号:US18620619
申请日:2024-03-28
Applicant: Cisco Technology, Inc.
Inventor: Pascal Thubert , Pradeep Kumar Kathail , Eric Levy-Abegnoli , David A. Maluf
IPC: H04L61/2503 , H04L61/4511
CPC classification number: H04L61/2503 , H04L61/4511
Abstract: Techniques for using Network Address Translation (NAT), Mobile Internet Protocol (MIP), and/or other techniques in conjunction with Domain Name System (DNS) to anonymize server-side addresses in data communications. Rather than having DNS provide a client device with an IP address of an endpoint device, such as a server, the DNS instead returns a virtual IP (VIP) address that is mapped to the client device and the endpoint device. In this way, IP addresses of servers are obfuscated by a virtual network of VIP addresses. The client device may then communicate data packets to the server using the VIP address as the destination address, and a virtual network service that works in conjunction with DNS can convert the VIP address to the actual IP address of the server using NAT and forward the data packet onto the server.
-
公开(公告)号:US20240163005A1
公开(公告)日:2024-05-16
申请号:US18334054
申请日:2023-06-13
Applicant: Cisco Technology, Inc.
Inventor: Pascal Thubert , J. P. Vasseur , Patrick Wetterwald , Eric Levy-Abegnoli , Jerome Henry
CPC classification number: H04L1/0003 , H04W52/34 , H04W72/54
Abstract: Broadcast energy and spectrum consumption optimization may be provided. It may be determined, by a computing device for each of a plurality of client devices, a corresponding plurality of respective minimum Modulation and Coding Schemes (MCSs) needed to reach each of the respective plurality of client devices from the computing device at a predetermined power level. Next, an optimal MCS from the plurality of respective minimum MCSs may be used to reach a first group of the plurality of client devices via broadcast. Then unicast may be used to reach a second group of the plurality of client devices wherein the optimal MCS is selected to minimize the total amount of airtime used for the broadcast and the unicast.
-
公开(公告)号:US11757827B2
公开(公告)日:2023-09-12
申请号:US17819783
申请日:2022-08-15
Applicant: Cisco Technology, Inc.
Inventor: Pascal Thubert , Eric Levy-Abegnoli , Jonas Zaddach , Patrick Wetterwald
IPC: G06F15/16 , H04L61/3015 , H04L61/30 , H04L45/02 , H04L9/40 , H04L101/622
CPC classification number: H04L61/302 , H04L45/02 , H04L61/3005 , H04L63/062 , H04L2101/622
Abstract: Systems and methods may include sending, to a network registrar, an extended duplicate address request (EDAR) message including a first nonce generated by a host computing device, and receiving, from the network registrar, an extended duplicate address confirmation (EDAC) message including a second nonce and a first signature, a first nonce pair including the first nonce and the second nonce being signed by the network registrar via a first key pair of the network registrar via the first signature. The systems and methods may further include sending a first neighbor advertisement (NA) message to the host computing device including the second nonce. The second nonce and a public key of the network registrar verifies the first signature from the network registrar, the verification of the first signature indicating that a router through which the host computing device connects to a network is not impersonating the network.
-
公开(公告)号:US11736393B2
公开(公告)日:2023-08-22
申请号:US17902158
申请日:2022-09-02
Applicant: Cisco Technology, Inc.
Inventor: Pascal Thubert , Eric Levy-Abegnoli , Patrick Wetterwald
IPC: H04L45/00 , H04L12/46 , H04L45/02 , H04L49/201
CPC classification number: H04L45/566 , H04L12/4641 , H04L45/02 , H04L45/72 , H04L49/201
Abstract: Techniques for leveraging MLD capabilities at edge nodes of network fabrics to receive SNMAs from silent hosts, and creating unicast addresses from the SNMAs for the silent nodes that are used as secondary matches in a network overlay if primary unicast address lookups fail. The edge nodes described herein may act as snoopers of MLD reports in order to identify the SNMAs of the silent hosts. The edge nodes then forge unicast addresses for the silent hosts that match with the least three bytes of the SNMAs. The forged unicast addresses are presented as unicast MAC/IP mappings in the fabric overlay. In situations where a primary IP address lookup fails, the look-up device performs a secondary lookup for a mapped address that has the last three bytes of the IP address. If a mapping is found, the lookup is sent as a unicast message to the matching MAC address.
-
公开(公告)号:US20230179579A1
公开(公告)日:2023-06-08
申请号:US18104603
申请日:2023-02-01
Applicant: Cisco Technology, Inc.
Inventor: David A. Maluf , Srinath Gundavelli , Pascal Thubert , Pradeep Kumar Kathail , Eric Levy-Abegnoli , Eric Voit , Ali Sajassi
IPC: H04L9/40 , H04L61/2521 , H04L61/4511
CPC classification number: H04L63/0421 , H04L61/2525 , H04L61/4511
Abstract: Techniques for using Network Address Translation (NAT), Mobile Internet Protocol (MIP), and/or other techniques in conjunction with Domain Name System (DNS) to anonymize server-side addresses in data communications. Rather than having DNS provide a client device with an IP address of an endpoint device, such as a server, the DNS instead returns a random IP address that is mapped to the client device and the endpoint device. In this way, IP addresses of servers are obfuscated by a random IP address that cannot be used to identify the endpoint device or service. The client device may then communicate data packets to the server using the random IP address as the destination address, and a gateway that works in conjunction with DNS can convert the random IP address to the actual IP address of the server using NAT and forward the data packet onto the server.
-
公开(公告)号:US11240672B2
公开(公告)日:2022-02-01
申请号:US16133826
申请日:2018-09-18
Applicant: Cisco Technology, Inc.
Inventor: Pascal Thubert , Jerome Henry , Patrick Wetterwald , Eric Levy-Abegnoli
IPC: H04W16/14 , H04W24/08 , H04W74/08 , H04B17/318 , H04W4/80
Abstract: Various embodiments disclosed herein enable performing energy detection on a subset of a channel. In various embodiments, a method of performing energy detection is performed by a computing device. In various embodiments, the computing device includes a wireless transceiver, one or more processors, and a non-transitory memory. In various embodiments, the method includes performing energy detection on one or more overlapping portions of a first channel and a second channel. In some embodiments, the method includes determining whether a detected energy level from the energy detection satisfies a threshold. In some embodiments, the method includes transmitting a signal into the first channel based on the threshold being satisfied.
-
公开(公告)号:US11172041B2
公开(公告)日:2021-11-09
申请号:US16545225
申请日:2019-08-20
Applicant: Cisco Technology, Inc.
Inventor: Pascal Thubert , Robert Edgar Barton , Jerome Henry , Eric Levy-Abegnoli
Abstract: Presented herein are techniques that aggregate messages using a subroot node. A plurality of messages is received from a corresponding plurality of nodes by a subroot node acting as a proxy in a wireless mesh sub-network. The plurality of messages is aggregated into a single message according to a template. The single message is wireless transmitted to a root node, wherein the root node has a wired connection to a network.
-
公开(公告)号:US10904882B2
公开(公告)日:2021-01-26
申请号:US16363285
申请日:2019-03-25
Applicant: Cisco Technology, Inc.
Inventor: Pascal Thubert , Jp Vasseur , Eric Levy-Abegnoli , Patrick Wetterwald
Abstract: Disclosed are systems, methods, and computer-readable media for integrating deterministic packet transmissions scheduling of short range local area networks (e.g., 6TiSCH networks) with deterministic packet transmission scheduling for wireless networks such as LTE/4G/5G networks. In one aspect, a wireless communication network includes a plurality of first nodes configured to communicate using a first communication protocol; and a second node configured to communicate with the plurality of first nodes using the first communication protocol and configured to communicate with a third node using a second communication protocol, the second node being further configured to map corresponding transmission schedule of the first communication protocol to a second transmission schedule for the second communication protocol.
-
-
-
-
-
-
-
-
-