知搜-全球专利检索

  1. Login
  2. Sign Up

Search Results

111 records (took 0.029 seconds)

    System and method of verifying network communication paths between applications and services
    52.
    发明授权
    System and method of verifying network communication paths between applications and services 有权

    公开(公告)号：US10511590B1

    公开(公告)日：2019-12-17

    申请号：US16413411

    申请日：2019-05-15

    Applicant: Cisco Technology, Inc.

    Inventor： Hendrikus G. P. Bosch ,  Alessandro Duminuco ,  Jeffrey Napper ,  David Delano Ward ,  Syed Khalid Raza ,  Sape Jurrien Mullender

    IPC: H04L29/06 ,  H04L12/725 ,  H04L12/721

    Abstract: Disclosed are concepts for provided for managing application traffic. A method includes receiving a request to access a service from an application, confirming an entity of a user of the application and, based on the confirmation, generating, via an authentication service, a routing policy for data flows between the application and the service. The routing policy defines a mandated path between the application and the service. The method also can include storing proof-of-transit data in the traffic flow for tracking an actual path from the application to the service and determining whether the data path complies with the mandated path defined in the policy. When the determination indicates that the actual path followed the mandated path defined in the routing policy, the method includes granting access to the user for the service. When the actual path differs from the mandated path, the method includes denying access to the user.

    Chaining service zones by way of route re-origination
    53.
    发明授权
    Chaining service zones by way of route re-origination 有权

    公开(公告)号：US10270843B2

    公开(公告)日：2019-04-23

    申请号：US15711235

    申请日：2017-09-21

    Applicant: Cisco Technology, Inc.

    Inventor： Hendrikus G. P. Bosch ,  James Guichard ,  Dave Barach ,  Alessandro Duminuco ,  Luyuan Fang ,  Paul Quinn ,  Rex Fernando ,  David Ward

    IPC: H04L29/08 ,  H04L12/715 ,  H04L12/751

    Abstract: Presented herein are techniques for use in a network environment that includes one or more service zones, each service zone including at least one instance of an in-line application service to be applied to network traffic and one or more routers to direct network traffic to the at least one service, and a route target being assigned to a unique service zone to serve as a community value for route import and export between routers of other service zones, destination networks or source networks via a control protocol. An edge router in each service zone or destination network advertises routes by its destination network prefix tagged with its route target. A service chain is created by importing and exporting of destination network prefixes by way of route targets at edge routers of the service zones or source networks.

    Resource access control using named capabilities
    54.
    发明授权
    Resource access control using named capabilities 有权

    公开(公告)号：US10218704B2

    公开(公告)日：2019-02-26

    申请号：US15287454

    申请日：2016-10-06

    Applicant: CISCO TECHNOLOGY, INC.

    Inventor： Sape Jurriën Mullender ,  Hendrikus G. P. Bosch ,  Louis Gwyn Samuel

    IPC: H04L29/06 ,  H04L12/927 ,  H04L12/911 ,  G06F9/455 ,  H04L9/32 ,  G06F21/60

    Abstract: Aspects of the embodiments are directed to systems, methods, and computer program products embodied at a server managing a resource for providing access to a resource in a distributed network. Embodiments include receiving a request from a client for access to a resource, the request comprising a named capability identifying the resource and identifying a server managing the resource; determining, from the named capability, whether the client is authorized to access the resource identified by the named capability; and granting access to the resource named by the named capability based on the named capability received with the request.

    INFRASTRUCTURE-EXCLUSIVE SERVICE FORWARDING
    60.
    发明申请
    INFRASTRUCTURE-EXCLUSIVE SERVICE FORWARDING 审中-公开

    公开(公告)号：US20170163531A1

    公开(公告)日：2017-06-08

    申请号：US15143253

    申请日：2016-04-29

    Applicant: CISCO TECHNOLOGY, INC.

    Inventor： Surendra M. Kumar ,  Hendrikus G. P. Bosch ,  Kent K. Leung ,  Abhijit Patra

    IPC: H04L12/741 ,  H04L12/743 ,  H04L12/935

    CPC classification number: H04L45/74 ,  H04L45/00 ,  H04L45/7453 ,  H04L49/3009

    Abstract: A method is provided in one example embodiment and includes receiving at a network element a packet including a Network Services Header (“NSH”), in which the NSH includes an Infrastructure (“I”) flag and a service path header comprising a Service Index (“SI”), and a Service Path ID (“SPI”) and determining whether the I flag is set to a first value. The method further includes, if the I flag is set to the first value, setting the I flag to a second value and forwarding the packet to the service function that corresponds to the SI for processing. The method still further includes, if the I flag is not set to the first value, decrementing the SI and making a forwarding decision based on a new value of the SI and the SPI.

Patent Agency Ranking