公开(公告)号：US20160020987A1

公开(公告)日：2016-01-21

申请号：US14336051

申请日：2014-07-21

Applicant: Cisco Technology, Inc.

Inventor： Patrick Wetterwald ,  Pascal Thubert ,  Jean-Philippe Vasseur

IPC: H04L12/26

CPC classification number: H04L41/0803 ,  H04L41/04

Abstract: In one embodiment, a scheduling device in a network receives routing metrics regarding a network path between a device controller and a networked device. The scheduling device also receives controller metrics for the device controller. The scheduling device determines time costs associated with the network path and one or more control operations performed by the device controller, based on the routing and controller metrics. The scheduling device generates a communication schedule based on the time costs and instructs the device controller and the networked device to use the communication schedule.

Abstract translation: 在一个实施例中，网络中的调度设备接收关于设备控制器和联网设备之间的网络路径的路由度量。 调度设备还接收设备控制器的控制器度量。 调度设备基于路由和控制器度量来确定与网络路径相关联的时间成本以及由设备控制器执行的一个或多个控制操作。 调度设备基于时间成本生成通信调度，并指示设备控制器和联网设备使用通信调度。

公开(公告)号：US20140181279A1

公开(公告)日：2014-06-26

申请号：US13721738

申请日：2012-12-20

Applicant: CISCO TECHNOLOGY, INC.

Inventor： Yves Louis ,  Patrick Wetterwald ,  Patrick Grossetete ,  Maurizio Portolani

IPC: H04L12/24 ,  H04L9/08

CPC classification number: H04L41/28 ,  H04L12/2807 ,  H04L63/0272 ,  H04W12/02 ,  H04W12/06

Abstract: Techniques are providing for managing and optimizing the configuration of network devices. At a management device in a network, a message is received from a first network device via a wireless link or a power line communication link between the management device and the first network device. The new network device is classified as belonging to one of a plurality of network device zones based on evaluating the message. A response message is then sent to the new network device via the wireless link or the power line communication link to ensure secure access to a virtual console-port is provided for the management device and the network devices in the network device zones.

Abstract translation: 技术提供管理和优化网络设备的配置。 在网络中的管理设备处，经由无线链路或管理设备与第一网络设备之间的电力线通信链路从第一网络设备接收消息。 基于评估消息，将新的网络设备分类为属于多个网络设备区域中的一个。 然后通过无线链路或电力线通信链路将响应消息发送到新网络设备，以确保为网络设备区域中的管理设备和网络设备提供对虚拟控制台端口的安全访问。

公开(公告)号：US12231417B2

公开(公告)日：2025-02-18

申请号：US18120889

申请日：2023-03-13

Applicant: Cisco Technology, Inc.

Inventor： Pascal Thubert ,  Patrick Wetterwald ,  Jonas Zaddach ,  Eric Levy-Abegnoli

IPC: H04L9/40 ,  H04L67/141 ,  H04L67/142

Abstract: Techniques for adjusting a duration of an authenticated user device session. A baseline session duration is determined for a session for which a user account is authorized in response to a request for authentication. A first session is established on behalf of a user device associated with the user account based at least in part on the user account performing a first authentication. A posture associated with the user device is determined. The baseline duration is then adjusted to a dynamic duration based at least in part upon the posture associated with the user device. Based at least in part on the dynamic duration the user can be required to re-authenticate.

公开(公告)号：US12213052B2

公开(公告)日：2025-01-28

申请号：US17750229

申请日：2022-05-20

Applicant: Cisco Technology, Inc.

Inventor： Pascal Thubert ,  Eric Levy-Abegnoli ,  Jonas Zaddach ,  Patrick Wetterwald

IPC: H04W40/24

Abstract: In one embodiment, an illustrative method herein may comprise: receiving, at a first edge device, a direct indication from a second edge device that a mobile device has moved from the first to the second edge device; determining, based on the direct indication, a first time at which the mobile device attached to the second edge device; receiving a network routing update message indicative of a routing update for the mobile device having moved to the second edge device; determining, based on the network routing update message, a second time at which convergence completed at the first edge device; and calculating a convergence time for the mobile device to be detected as having moved to the second edge device based on a difference between the first time and the second time.

公开(公告)号：US20250023811A1

公开(公告)日：2025-01-16

申请号：US18352858

申请日：2023-07-14

Applicant: Cisco Technology, Inc.

Inventor： Pascal Thubert ,  Patrick Wetterwald ,  JP Vasseur ,  Eric Levy- Abegnoli

IPC: H04L45/02

Abstract: A process can include determining respective link state information corresponding to a plurality of links between two or more border routers and a plurality of child nodes of the two or more border routers, the border routers and the child nodes included in a Destination Oriented Directed Acyclic Graph (DODAG) of a Low-Power Lossy Network (LLN). Consensus information indicative of a current status of each border router of the two or more border routers can be determined based on the respective link state information. The consensus information can be used to update an election of one or more active border routers from the two or more border routers to utilize as a virtual DODAG root for the LLN. Traffic directed to the virtual DODAG root can be routed to an active border router of the two or more border routers based on the updated election.

公开(公告)号：US12155622B1

公开(公告)日：2024-11-26

申请号：US18237590

申请日：2023-08-24

Applicant: Cisco Technology, Inc.

Inventor： Pascal Thubert ,  Eric A. Voit ,  Eric Levy-Abegnoli ,  Patrick Wetterwald ,  Jonas Zaddach

IPC: H04L61/5007 ,  H04L9/40 ,  H04L61/2503 ,  H04L61/4511

Abstract: Techniques for varying locations of virtual networks associated with endpoints using Network Address Translation (NAT), Mobile Internet Protocol (MIP), and/or other techniques in conjunction with Domain Name System (DNS). Rather than having DNS provide a client device with an IP address of an endpoint device, such as a server, the DNS instead returns a virtual IP (VIP) address that is mapped to the client device and the endpoint device. The VIP address may be selected based on a number of factors (e.g., power usage, privacy requirements, virtual distances, etc.). In this way, IP addresses of servers are obfuscated by a virtual network of VIP addresses that can be periodically rotated and/or load balanced. The client device may then communicate data packets to the server using the VIP address as the destination address, and a virtual network service that works in conjunction with DNS can convert the VIP address to the actual IP address of the server using NAT and forward the data packet onto the server.

公开(公告)号：US12089089B2

公开(公告)日：2024-09-10

申请号：US17581188

申请日：2022-01-21

Applicant: Cisco Technology, Inc.

Inventor： Pascal Thubert ,  Domenico Ficara ,  Patrick Wetterwald ,  Alessandro Erta ,  Amine Choukir

IPC: H04B10/00 ,  H04B10/114 ,  H04W16/26 ,  H04W16/28 ,  H04W28/16 ,  H04W84/18

CPC classification number: H04W28/16 ,  H04B10/1149 ,  H04W16/26 ,  H04W16/28 ,  H04W84/18

Abstract: In one embodiment, a controller identifies access points forming an overhead mesh of access points in an area, each access point comprising one or more directional transmitters each configured to transmit a beam cone in a substantially downward direction towards a floor of the area. The controller assigns the access points to access point groups. The controller generates communication schedules for the access points such that each access point in an access point group is on a common channel and only one of neighboring directional transmitters of access points in that group is able to transmit at any given time. The controller sends the communication schedules to the access points forming the overhead mesh of access points in the area.

公开(公告)号：US20240098063A1

公开(公告)日：2024-03-21

申请号：US17932754

申请日：2022-09-16

Applicant: Cisco Technology, Inc.

Inventor： Pascal Thubert ,  Jonas Zaddach ,  Patrick Wetterwald ,  Eric Levy-Abegnoli

IPC: H04L9/40

CPC classification number: H04L63/0263

Abstract: In one embodiment, a method includes identifying, using a Static Context Header Compression (SCHC) rules engine, one or more packets matching a rule, selecting a firewall decision based on the identified one or more packets and the rule, and applying the firewall decision to the one or more identified packets.

公开(公告)号：US11930541B2

公开(公告)日：2024-03-12

申请号：US17683833

申请日：2022-03-01

Applicant: Cisco Technology, Inc.

Inventor： Pascal Thubert ,  Domenico Ficara ,  Alessandro Erta ,  Amine Choukir ,  Patrick Wetterwald

IPC: H04W74/08 ,  H04W48/20 ,  H04W72/02

CPC classification number: H04W74/085 ,  H04W48/20 ,  H04W72/02

Abstract: In one embodiment, an access point of an overhead mesh of access points in an area selects a range of client identifiers. The access point sends, via a beam cone transmitted in a substantially downward direction towards a floor of the area, a trigger signal that includes the range of client identifiers and prompts client devices having identifiers in that range to send best effort transmissions towards the overhead mesh. The access point detects a collision between the best effort transmissions of the client devices. The access point adjusts the range of client identifiers so as to avoid future collisions between the best effort transmissions of the client devices.

公开(公告)号：US11894939B2

公开(公告)日：2024-02-06

申请号：US17317124

申请日：2021-05-11

Applicant: Cisco Technology, Inc.

Inventor： Pascal Thubert ,  Patrick Wetterwald ,  Eric Levy- Abegnoli ,  Jonas Zaddach

IPC: H04L12/18 ,  G06V40/40 ,  G06V40/16

CPC classification number: H04L12/1822 ,  G06V40/168 ,  G06V40/40

Abstract: Techniques are provided that validate a participant in a video conference. As a video conferencing system is remote from a video conference participant, and user devices are not trusted, traditional methods such as client side facial recognition are ineffective at validating a participant from a video conferencing system. Thus, the embodiments encode modulated data for projection onto a face of the participant. A video of the participant is then captured. The conferencing system then confirms that the modulated data is present in the captured video.