知搜-全球专利检索

  1. Login
  2. Sign Up

Search Results

42 records (took 0.038 seconds)

    PATH VALIDATION CHECKS FOR PROOF OF SECURITY
    21.
    发明公开
    PATH VALIDATION CHECKS FOR PROOF OF SECURITY 审中-公开

    公开(公告)号：US20230188534A1

    公开(公告)日：2023-06-15

    申请号：US17546492

    申请日：2021-12-09

    Applicant: Cisco Technology, Inc.

    Inventor： Craig Thomas Hill ,  Sujal Sheth ,  Frank Brockners ,  Cesar Obediente

    IPC: H04L9/40 ,  H04L9/08

    CPC classification number: H04L63/123 ,  H04L63/0464 ,  H04L63/205 ,  H04L9/0838

    Abstract: According to an embodiment, a node comprises one or more processors and one or more computer-readable non-transitory storage media comprising instructions that, when executed by the one or more processors, cause one or more components of the node to perform operations. The operations comprise determining security validation information that the node associates with a packet, inserting into the packet an identifier associated with the node and the security validation information that the node associates with the packet, and transmitting the packet comprising the identifier associated with the node and the security validation information that the node associates with the packet. The security validation information comprises one or more proof of security attributes and/or one or more proof of security level attributes.

    SET UP AND DISTRIBUTION OF POST-QUANTUM SECURE PRE-SHARED KEYS USING EXTENDIBLE AUTHENTICATION PROTOCOL
    22.
    发明申请
    SET UP AND DISTRIBUTION OF POST-QUANTUM SECURE PRE-SHARED KEYS USING EXTENDIBLE AUTHENTICATION PROTOCOL 有权

    公开(公告)号：US20230071333A1

    公开(公告)日：2023-03-09

    申请号：US18054219

    申请日：2022-11-10

    Applicant: Cisco Technology, Inc.

    Inventor： Amjad Inamdar ,  Lionel Florit ,  Eric Voit ,  Sujal Sheth ,  Chennakesava Reddy Gaddam

    IPC: H04L9/08 ,  H04L9/30

    Abstract: Systems and methods are provided for quantum-resistant secure key distribution between a peer and an EAP authenticator by using an authentication server. The systems and methods include receiving requests for a COMMON-SEED and a quantum-safe public key from a peer and an EAP authenticator. The COMMON-SEED is encrypted using the quantum-safe public key of the peer and the quantum-safe public key of the EAP authenticator, and the encrypted COMMON-SEED is sent to the peer along with a request for a PPK_ID from the peer to complete authentication of the peer. The PPK_ID is received from the peer, and the encrypted COMMON-SEED and PPK_ID is sent to the EAP authenticator. A quantum-resistant secure channel is established between the peer and the EAP authenticator when the peer and the EAP authenticator share the same COMMON-SEED and the same PPK-ID.

    SET UP AND DISTRIBUTION OF POST-QUANTUM SECURE PRE-SHARED KEYS USING EXTENDIBLE AUTHENTICATION PROTOCOL
    23.
    发明申请
    SET UP AND DISTRIBUTION OF POST-QUANTUM SECURE PRE-SHARED KEYS USING EXTENDIBLE AUTHENTICATION PROTOCOL 有权

    公开(公告)号：US20220345300A1

    公开(公告)日：2022-10-27

    申请号：US17377303

    申请日：2021-07-15

    Applicant: Cisco Technology, Inc.

    Inventor： Amjad Inamdar ,  Lionel Florit ,  Eric Voit ,  Sujal Sheth ,  Chennakesava Reddy Gaddam

    IPC: H04L9/08 ,  H04L9/30

    Abstract: A method is provided for quantum-resistant secure key distribution between a peer and an extendible authentication protocol (EAP) authenticator by using an authentication server. The method may include receiving requests for a COMMON-SEED and a McEliece public key from a peer and an EAP authenticator by an authentication server using an EAP method, encrypting the COMMON-SEED using the McEliece public key of the peer and the McEliece public key of the EAP authenticator by the authentication server, and sending the encrypted COMMON-SEED from the authentication server to the peer along with a request for a PPK_ID from the peer using the EAP method to complete authentication of the peer. The method may also include receiving the PPK_ID from the peer using the EAP method, where the PPK_ID is from a key pair consisting of PPK_ID and PPK obtained from a first SKS server in electrical communication with the peer based upon the encrypted COMMON-SEED. The method may also include sending the encrypted COMMON-SEED and PPK_ID from the authentication server to the EAP authenticator, and establishing a quantum-resistant secure channel between the peer and the EAP authenticator, where a message of EAP success is delivered from the EAP authenticator to the peer when the peer and the EAP authenticator share the same COMMON-SEED and the same PPK-ID.

    AUTHENTICATION OF NETWORK DEVICES BASED ON EXTENSIBLE ACCESS CONTROL PROTOCOLS
    25.
    发明申请
    AUTHENTICATION OF NETWORK DEVICES BASED ON EXTENSIBLE ACCESS CONTROL PROTOCOLS 审中-公开

    公开(公告)号：US20200322334A1

    公开(公告)日：2020-10-08

    申请号：US16782903

    申请日：2020-02-05

    Applicant: Cisco Technology, Inc.

    Inventor： Sujal Sheth ,  Shwetha Subray Bhandari ,  Eric Voit ,  William F. Sulzen ,  Frank Brockners

    IPC: H04L29/06

    Abstract: Systems, methods, and computer-readable media for authenticating extensible authentication protocol (EAP) messages include receiving, at a first node, EAP messages from a second node. The first node and the second node including network devices and the EAP messages can be based on Diameter protocol or other. The first node can obtain attestation information from one or more EAP messages to determine whether the second node is authentic and trustworthy based on the attestation information. The EAP messages can include a Capabilities Exchange Request (CER) or a Capabilities Exchange Answer (CEA) whose fields or combination of fields can include the attestation information. The EAP messages can also include a Trust Information Request (TIR) or a Trust Information Answer (TIA) which include the authentication information. The attestation information can include Proof of Integrity based on a hardware fingerprint, device identifier, or Canary Stamp.

    Attestation based routing
    26.
    发明授权
    Attestation based routing 有权

    公开(公告)号：US10735308B2

    公开(公告)日：2020-08-04

    申请号：US16230751

    申请日：2018-12-21

    Applicant: Cisco Technology, Inc.

    Inventor： Eric Voit ,  Shwetha Subray Bhandari ,  William F. Sulzen ,  Sujal Sheth

    IPC: H04L12/761 ,  H04L29/06 ,  H04L12/721 ,  H04L12/773 ,  H04L12/751

    Abstract: At a networking device, a method includes obtaining, according to a predefined protocol, a first plurality of attestation vectors from a corresponding plurality of candidate next-hop nodes. Each of the plurality of candidate next-hop nodes is included within a respective route between a particular node and a destination node. The method further includes determining a plurality of confidence scores. Each of the plurality of confidence scores is based on a comparison between a corresponding one of the first plurality of attestation vectors and a trusted image vector. The method further includes selecting, from the plurality of confidence scores, a particular confidence score that satisfies one or more selection criteria. Each of the particular confidence score is associated with a particular candidate next-hop node of the plurality of candidate next-hop nodes. The method further includes directing, to the particular candidate next-hop node, a data packet destined for the destination node.

    Path validation checks for proof of security
    28.
    发明授权
    Path validation checks for proof of security 有权

    公开(公告)号：US11818141B2

    公开(公告)日：2023-11-14

    申请号：US17546492

    申请日：2021-12-09

    Applicant: Cisco Technology, Inc.

    Inventor： Craig Thomas Hill ,  Sujal Sheth ,  Frank Brockners ,  Cesar Obediente

    IPC: H04L29/06 ,  H04L9/40 ,  H04L9/08

    CPC classification number: H04L63/123 ,  H04L9/0838 ,  H04L63/0464 ,  H04L63/20 ,  H04L63/205

    Abstract: According to an embodiment, a node comprises one or more processors and one or more computer-readable non-transitory storage media comprising instructions that, when executed by the one or more processors, cause one or more components of the node to perform operations. The operations comprise determining security validation information that the node associates with a packet, inserting into the packet an identifier associated with the node and the security validation information that the node associates with the packet, and transmitting the packet comprising the identifier associated with the node and the security validation information that the node associates with the packet. The security validation information comprises one or more proof of security attributes and/or one or more proof of security level attributes.

Patent Agency Ranking