公开(公告)号：US20230328553A1

公开(公告)日：2023-10-12

申请号：US18332854

申请日：2023-06-12

Applicant: Cisco Technology, Inc.

Inventor： Nagendra Kumar Nainar ,  Carlos M. Pignataro ,  Jerome Henry ,  Robert E. Barton

IPC: H04W24/04 ,  H04W88/08 ,  H04W48/16 ,  H04W48/20 ,  H04W48/02

CPC classification number: H04W24/04 ,  H04W88/08 ,  H04W48/16 ,  H04W48/20 ,  H04W48/02

Abstract: Failure prediction signaling and cognitive user migration may be provided. A client device may receive at least a portion of failure prediction data. The client device may then analyze the at least the portion of the failure prediction data. The client device may then roam from a first computing device to a second computing device in response to analyzing the at least the portion of the failure prediction data.

公开(公告)号：US20230269219A1

公开(公告)日：2023-08-24

申请号：US17677134

申请日：2022-02-22

Applicant: Cisco Technology, Inc.

Inventor： Nagendra Kumar Nainar ,  Carlos M. Pignataro ,  Robert E. Barton ,  Jerome Henry

IPC: H04L101/622 ,  H04L61/5014 ,  H04W12/108 ,  H04W12/71

CPC classification number: H04L61/6022 ,  H04L61/2015 ,  H04W12/108 ,  H04W12/71

Abstract: An authorization device obtains a registration request associated with an end device, the registration request including a new randomized media access control (MAC) address associated with the end device; determines whether the end device is authorized to use the new randomized MAC address; transmits a message to the end device with a first randomly generated number when it is determined that the end device is authorized to use the new randomized MAC address; obtains integrity information associated with the end device, the first integrity information being computed based on the first randomly generated number; transmits a request to a validation system to validate the end device based on the first integrity information; obtains an indication that the end device is validated; determines policies associated with the end device when it is determined that the end device is validated; and applies the policies to the end device.

公开(公告)号：US20230254255A1

公开(公告)日：2023-08-10

申请号：US18129755

申请日：2023-03-31

Applicant: Cisco Technology, Inc.

Inventor： Ian James Wells ,  Kyle Andrew Donald Mestery ,  Carlos M. Pignataro ,  Nagendra Kumar Nainar

IPC: H04L47/24 ,  H04L45/50

CPC classification number: H04L47/24 ,  H04L45/507

Abstract: This disclosure describes techniques for performing application-based tagging. An example method includes receiving, at a virtual socket, non-packetized data from an application and generating, by the virtual socket, a label based on the application. One or more data packets are generated by packetizing at least a portion of the non-packetized data. A header field of the one or more data packets includes a tag based on the label.

公开(公告)号：US11716264B2

公开(公告)日：2023-08-01

申请号：US16102395

申请日：2018-08-13

Applicant: Cisco Technology, Inc.

Inventor： Nagendra Kumar Nainar ,  Carlos M. Pignataro ,  Rajiv Asati

IPC: H04L12/26 ,  G06F9/48 ,  G06F8/41 ,  H04L43/028

CPC classification number: H04L43/028 ,  G06F8/4441 ,  G06F9/4881

Abstract: The present technology is directed to a system and method for automatic triggering of relevant code segments corresponding to a sequence of code segments or function codes having a preferred execution order. The automatic triggering action is based on the snooping of a response generated from an execution of a previous code segment. Information with respect to the next code segment in the preferred execution order may be obtained by directing a network proxy, such as Envoy to snoop the Uniform Resource Identifier (URI) field of a response packet being forwarded to a client entity. In this way, a network proxy may preemptively spawn and instantiate the following function codes (pointed to by the snooped Uniform Resource Identifier) prior to receiving the corresponding client request. As such, by the time a client request for the subsequent function code is received the code ready for execution.

公开(公告)号：US20230118375A1

公开(公告)日：2023-04-20

申请号：US18068470

申请日：2022-12-19

Applicant: Cisco Technology, Inc.

Inventor： K Tirumaleswar Reddy ,  Prashanth Patil ,  Carlos M. Pignataro

IPC: H04L9/40 ,  H04L9/08

Abstract: A method for resuming a Transport Layer Security (TLS) session in a Service Function Chain comprising a plurality of Service Function nodes coupled to a Service Function Forwarder. A request is received at a first Service Function node to establish a TLS session, and a Pre-Shared Key (PSK) and a PSK identifier that uniquely correspond to the first Service Function node and the TLS session are generated. The PSK identifier is forwarded to one or more of the Service Function Forwarder and the plurality of Service Function nodes. A request to resume the TLS session is received from a client device that previously disconnected. It is determined that the connection request contains the PSK identifier, a second Service Function node is selected, and the TLS session is re-established between the client device and the second Service Function node using the same PSK as the prior TLS session.

公开(公告)号：US20230093130A1

公开(公告)日：2023-03-23

申请号：US17479297

申请日：2021-09-20

Applicant: Cisco Technology, Inc.

Inventor： Enzo Fenoglio ,  David John Zacks ,  Zizhen Gao ,  Carlos M. Pignataro ,  Dmitry Goloubev

IPC: H04L12/24 ,  H04L12/26 ,  G06K9/62

Abstract: A method, computer system, and computer program product are provided for detecting drift in predictive models for network devices and traffic. A plurality of streams of time-series telemetry data are obtained, the time-series telemetry data generated by network devices of a data network. The plurality of streams are analyzed to identify a subset of streams, wherein each stream of the subset of streams includes telemetry data that is substantially empirically distributed. The subset of streams of time-series data are analyzed to identify a change point. In response to identifying the change point, additional time-series data is obtained from one or more streams of the plurality of streams of time-series telemetry data. A predictive model is trained using the additional time-series data to update the predictive model and provide a trained predictive model.

公开(公告)号：US20230092777A1

公开(公告)日：2023-03-23

申请号：US17479237

申请日：2021-09-20

Applicant: Cisco Technology, Inc.

Inventor： Nagendra Kumar Nainar ,  Carlos M. Pignataro ,  David John Zacks ,  Dmitry Goloubev

IPC: H04L29/06 ,  G06N20/20 ,  H04L12/24

Abstract: A method, computer system, and computer program product are provided for decentralized machine learning. A plurality of computing networks are identified by determining that each computing network of the plurality of computing networks satisfies a predetermined number of criteria. A decentralized learning agent is provided to each computing network, wherein the decentralized learning agent is provided with input parameters for training and is trained using training data associated with a computing network to which the decentralized learning agent is provided. A plurality of learned parameters are obtained from the plurality of computing networks, wherein each learned parameter of the plurality of learned parameters is obtained by training the decentralized learning agent provided to each respective computing network. A global model is generated based on the plurality of learned parameters.

公开(公告)号：US20230078197A1

公开(公告)日：2023-03-16

申请号：US17477036

申请日：2021-09-16

Applicant: Cisco Technology, Inc.

Inventor： Robert E. Barton ,  Jerome Henry ,  Vinay Saini ,  David John Zacks ,  Carlos M. Pignataro ,  Nagendra Kumar Nainar

IPC: G06F21/62 ,  G06F21/31 ,  G06F21/78 ,  G06F21/60

Abstract: In one example, a controller obtains a request to store an object-based storage object and identifies a data sovereignty policy identifier associated with the object-based storage object. The controller queries a data sovereignty policy manager for a data sovereignty policy associated with the data sovereignty policy identifier and obtains, from the data sovereignty policy manager, an indication of the data sovereignty policy. The controller stores the object-based storage object in compliance with the data sovereignty policy.

公开(公告)号：US20230062502A1

公开(公告)日：2023-03-02

申请号：US17463807

申请日：2021-09-01

Applicant: Cisco Technology, Inc.

Inventor： Nagendra Kumar Nainar ,  Carlos M. Pignataro ,  David John Zacks

IPC: H04L12/24

Abstract: Aggregation of cross domain service level indications provide an estimate of available end to end error budget within a service chain of a network system. In some embodiments, service level indications are obtained from a plurality of sub-domains, and aggregated to determine an end to end reliability score. The end to end reliability score is then distributed one or more of the sub-domains. The sub-domains then consider whether to implement a change based on local service level indications as well as the end to end reliability score. In other embodiments, a sub-domain requests approval to implement a change from an error manager. The error manager consults the end to end reliability score to determine whether adequate margin exists in the service chain to allow the change to occur, while still meeting service level objectives of the service chain. The error manager conditionally approves the request based on the determination.

公开(公告)号：US11582140B2

公开(公告)日：2023-02-14

申请号：US17123294

申请日：2020-12-16

Applicant: Cisco Technology, Inc.

Inventor： Nagendra Kumar Nainar ,  Pascal Thubert ,  Carlos M. Pignataro

IPC: H04L12/733 ,  H04L45/00 ,  H04L45/74 ,  H04L45/24 ,  H04L12/707

Abstract: A node of a network configured to forward packets based on network programming instructions encoded in the packets, performs a method. The method includes generating a probe packet encoded with a replication network programming instruction. The replication network programming instruction is configured to validate equal-cost multi-path (ECMP) routing in the network from the node to a destination by remotely triggering transit nodes of the network, that are traversed by the probe packet, to each perform replicate-and-forward actions. The replicate-and-forward actions include: identifying ECMP paths toward the destination; generating, for the ECMP paths, replicated probe packets that each include the replication network programming instruction; and forwarding the replicated probe packets along the ECMP paths. The method further includes forwarding the probe packet toward the destination.