公开(公告)号：US12081534B2

公开(公告)日：2024-09-03

申请号：US17444021

申请日：2021-07-29

Applicant: Cisco Technology, Inc.

Inventor： Domenico Ficara ,  Roberto Muccifora ,  Amine Choukir ,  Shree N. Murthy ,  Bart A. Brinckman ,  Mirko Raca

IPC: H04L9/40

CPC classification number: H04L63/0815 ,  H04L63/0876 ,  H04L63/101 ,  H04L63/104

Abstract: Aspects described herein include a method of automated grouping of client devices for a user-defined network (UDN). The method includes receiving, from a client device an authentication request to join an access provider network. The authentication request includes a unique identifier of the client device for a federation-based network. The method further includes transmitting the unique identifier to a UDN cloud, transmitting the authentication request to an identity provider, and receiving, responsive to the identity provider authenticating the authentication request, a list of one or more UDNs from the UDN cloud that are associated with the unique identifier. The method further includes joining the client device with one or more other client devices present on the access provider network listing a same UDN.

公开(公告)号：US12069478B2

公开(公告)日：2024-08-20

申请号：US18325288

申请日：2023-05-30

Applicant: Cisco Technology, Inc.

Inventor： Ugo Mario Campiglio ,  Amine Choukir ,  Roberto Muccifora ,  Domenico Ficara ,  Sachin Dinkar Wakudkar

IPC: H04L9/40 ,  H04W12/033 ,  H04W12/041 ,  H04W12/06 ,  H04W12/069 ,  H04W12/71

CPC classification number: H04W12/069 ,  H04W12/033 ,  H04W12/041 ,  H04W12/71

Abstract: A method for providing multicast frames in a Multi-Dwelling Unit (MDU) is provided herein. An Access Point (AP) can receive a join request from a first client device. The AP can generate a Group Master Key (GMK) from the Pre-Shared Key (PSK) associated with a Basic Service Set (BSS) that includes the first client device. The AP can then derive a Group Transient Key (GTK) from the GMK. The AP may then send the GTK to the first client device. Thereinafter, the AP can send multicast frames to the first client device encrypted by the GTK. The first client device can decrypt the multicast frames with the GTK. However, a second client device, that does not share the PSK, may receive the multicast frame but cannot decrypt the multicast frames.

公开(公告)号：US11962461B1

公开(公告)日：2024-04-16

申请号：US18357497

申请日：2023-07-24

Applicant: Cisco Technology, Inc.

Inventor： Domenico Ficara ,  Amine Choukir ,  Salvatore Valenza ,  Vincent Cuissard

IPC: H04L41/0806 ,  H04L41/0853 ,  H04L41/0893

CPC classification number: H04L41/0806 ,  H04L41/0853 ,  H04L41/0893

Abstract: A system and a method to dynamically reprovision network devices may include a first network device configured to reprovision a second network device in accordance with a specific location of the second network device in a predefined area. The first network device may be configured to sense the second device at the specific location in the predefined area, identify reprovisioning parameters associated with the specific location, and provide the reprovisioning parameters to the second network device. In turn, the second network device may be configured to perform one or more roles associated with the specific location in the predefined area based at least in part upon information in the reprovisioning parameters.

公开(公告)号：US11930541B2

公开(公告)日：2024-03-12

申请号：US17683833

申请日：2022-03-01

Applicant: Cisco Technology, Inc.

Inventor： Pascal Thubert ,  Domenico Ficara ,  Alessandro Erta ,  Amine Choukir ,  Patrick Wetterwald

IPC: H04W74/08 ,  H04W48/20 ,  H04W72/02

CPC classification number: H04W74/085 ,  H04W48/20 ,  H04W72/02

Abstract: In one embodiment, an access point of an overhead mesh of access points in an area selects a range of client identifiers. The access point sends, via a beam cone transmitted in a substantially downward direction towards a floor of the area, a trigger signal that includes the range of client identifiers and prompts client devices having identifiers in that range to send best effort transmissions towards the overhead mesh. The access point detects a collision between the best effort transmissions of the client devices. The access point adjusts the range of client identifiers so as to avoid future collisions between the best effort transmissions of the client devices.

公开(公告)号：US20240070137A1

公开(公告)日：2024-02-29

申请号：US17894369

申请日：2022-08-24

Applicant: Cisco Technology, Inc.

Inventor： Domenico Ficara ,  Pedro Miguel Esteves Ramalhete ,  Yann Poupet ,  Thomas Vegas

IPC: G06F16/22 ,  G06F16/215

CPC classification number: G06F16/2282 ,  G06F16/215 ,  G06F16/2228

Abstract: Techniques are provided for read-based storage of time-series records. In one example, a server obtains at least one indication of one or more records of a plurality of records written to a record database by a producer that have been read from the record database by at least one consumer. The server stores in a time-series database the one or more records that have been read by the at least one consumer. One or more records of the plurality of records that have not been read by the at least one consumer may be pruned from storage in the time-series database.

公开(公告)号：US20240064125A1

公开(公告)日：2024-02-22

申请号：US18501275

申请日：2023-11-03

Applicant: Cisco Technology, Inc.

Inventor： Roberto Muccifora ,  Domenico Ficara ,  Amine Choukir ,  Anirban Karmakar ,  Vincent Cuissard ,  Sudhir Kumar Jain

IPC: H04L61/5061 ,  H04L61/5053

CPC classification number: H04L61/5061 ,  H04L61/5053 ,  H04W88/02

Abstract: Techniques are provided that rotate a device address used to identify a wireless client device on a wireless network. The wireless client device and at least one network infrastructure component identify a plurality of device addresses associated with the wireless client device. In some embodiments, the plurality of device addresses are generated via a corresponding plurality of invocations of a stateful random number generator, such as a cryptographically secure pseudorandom number generator.

公开(公告)号：US11855961B2

公开(公告)日：2023-12-26

申请号：US17329827

申请日：2021-05-25

Applicant: Cisco Technology, Inc.

Inventor： Roberto Muccifora ,  Domenico Ficara ,  Amine Choukir ,  Anirban Karmakar ,  Vincent Cuissard ,  Sudhir Kumar Jain

IPC: H04L61/5061 ,  H04L61/5053 ,  H04W88/02

CPC classification number: H04L61/5061 ,  H04L61/5053 ,  H04W88/02

Abstract: Techniques are provided that rotate a device address used to identify a wireless client device on a wireless network. The wireless client device and at least one network infrastructure component identify a plurality of device addresses associated with the wireless client device. In some embodiments, the plurality of device addresses are generated via a corresponding plurality of invocations of a stateful random number generator, such as a cryptographically secure pseudorandom number generator.

公开(公告)号：US20230221961A1

公开(公告)日：2023-07-13

申请号：US17571906

申请日：2022-01-10

Applicant: Cisco Technology, Inc.

Inventor： Thomas Vegas ,  Domenico Ficara ,  Anirban Karmakar ,  Giacomo Trifilo ,  Amine Choukir

IPC: G06F9/38

CPC classification number: G06F9/3861 ,  G06F9/3867

Abstract: This disclosure describes techniques for performing a remote front-drop of data for recovery after a pipeline stall. The techniques include using a receiver-side dropping strategy that is driven from the sender-side. Components of a pipeline determine whether a pipeline is operating within specified latency constraints (e.g., experiencing a pipeline stall). Upon detecting a pipeline stall, the sending device is notified of the stall. Once the sending device is notified of the pipeline stall, the sending device can determine what action(s) to perform to address the pipeline stall. For example, the sending device may instruct one or more components of the pipeline to discard already sent data that has not been processed. This allows the older data to be dropped on the stalled pipeline while keeping the more recently sent data.

公开(公告)号：US20230198990A1

公开(公告)日：2023-06-22

申请号：US17552394

申请日：2021-12-16

Applicant: Cisco Technology, Inc.

Inventor： Roberto Muccifora ,  Domenico Ficara ,  Amine Choukir ,  Ugo Mario Campiglio ,  Shree Murthy ,  Stephen M. Orr

IPC: H04L9/40 ,  H04L61/5038 ,  H04L45/74 ,  H04L101/622

CPC classification number: H04L63/102 ,  H04L63/0876 ,  H04L61/5038 ,  H04L63/104 ,  H04L45/74 ,  H04L2101/622

Abstract: Group identity assignment and policy enforcement may be provided. A User Defined Network Identifier (UDN ID) defining a group of client devices may be received. Next, a client identifier (ID) associated with a source client device that is associated with the group of client devices may be received. The UDN ID and the client ID may be encoded in an Extended Local Identifier (ELI) Media Access Control (MAC) address associated with the source client device. A source MAC address of a packet received from the source client device may then be substituted with the ELI MAC address. Then the packet may be forwarded.

公开(公告)号：US11678250B2

公开(公告)日：2023-06-13

申请号：US17240116

申请日：2021-04-26

Applicant: Cisco Technology, Inc.

Inventor： Alessandro Erta ,  Luca Bisti ,  Arun Khanna ,  Sudhir Kumar Jain ,  Kasi Nalamalapu ,  Stefano Ferrari ,  Salvatore Valenza ,  Domenico Ficara ,  Vincent Cuissard ,  Loris Gazzarrini ,  Rupak Chandra

IPC: H04W40/00 ,  H04W40/24 ,  H04W40/02 ,  H04W28/10 ,  H04L45/24 ,  H04W28/06 ,  H04L45/50

CPC classification number: H04W40/246 ,  H04L45/24 ,  H04L45/50 ,  H04W28/06 ,  H04W28/10 ,  H04W40/02

Abstract: In one embodiment, a device identifies a plurality of access points of a wireless network. The device also identifies a plurality of mobile nodes of a mobile system. The device establishes a first label-switched path in the wireless network that comprises a wireless link between a first mobile node in the plurality of mobile nodes and a first access point in the plurality of access points. The device establishes a second label-switched path in the wireless network that comprises a wireless link between a second mobile node of the mobile system and a second access point in the plurality of access points.