知搜-全球专利检索

  1. Login
  2. Sign Up

Search Results

13 records (took 0.031 seconds)

    SELECTIVE NETWORK ACCESS BASED ON TRUST LEVEL
    1.
    发明申请
    SELECTIVE NETWORK ACCESS BASED ON TRUST LEVEL 有权

    公开(公告)号：US20230084085A1

    公开(公告)日：2023-03-16

    申请号：US17474033

    申请日：2021-09-13

    Applicant: Cisco Technology, Inc.

    Inventor： David J. Zacks ,  Thomas Szigeti ,  Carlos M. Pignataro ,  Jerome Henry

    IPC: H04W12/033 ,  H04L9/32 ,  H04L9/30 ,  H04W48/10

    Abstract: This disclosure describes techniques for enabling selective connections between user devices and trusted network devices. An example method includes receiving a beacon from a network device. The beacon includes a trust level of the network device. The method further includes determining that the trust level of the network device satisfies a predetermined trust criterion. Based on determining that the trust level of the network device satisfies the predetermined trust criterion, the method includes transmitting a connection request to the network device. Further, user data is received from the network device.

    Non-disruptive implementation of policy configuration changes
    2.
    发明授权
    Non-disruptive implementation of policy configuration changes 有权

    公开(公告)号：US11483206B2

    公开(公告)日：2022-10-25

    申请号：US16989684

    申请日：2020-08-10

    Applicant: Cisco Technology, Inc.

    Inventor： Thomas Szigeti ,  David J. Zacks

    IPC: H04L41/0893 ,  H04L41/0816 ,  H04L47/20 ,  H04L49/9047 ,  H04L49/901 ,  H04L41/084 ,  H04L47/50

    Abstract: Techniques for non-disruptive configuration changes are provided. A packet is received at a network device, and the packet is buffered in a common pool shared by a first processing pipeline and a second processing pipeline, where the first processing pipeline corresponds to a first policy and the second processing pipeline corresponds to a second policy. A first copy of a packet descriptor for the packet is queued in a first scheduler based on processing the first copy of the packet descriptor with the first processing pipeline. A second copy of the packet descriptor is queued in a second scheduler associated based on processing the second copy of the packet descriptor with the second processing pipeline. Upon determining that the first policy is currently active on the network device, the first copy of the packet descriptor is dequeued from the first scheduler.

    Resolving access policies between intent-based network architectures and cloud native architectures
    5.
    发明授权
    Resolving access policies between intent-based network architectures and cloud native architectures 有权

    公开(公告)号：US11792230B2

    公开(公告)日：2023-10-17

    申请号：US17473306

    申请日：2021-09-13

    Applicant: Cisco Technology, Inc.

    Inventor： Thomas Szigeti ,  David J. Zacks ,  Walter Hulick ,  Shannon McFarland

    IPC: G06F21/62 ,  H04L9/40 ,  G06F21/51 ,  G06F21/78

    CPC classification number: H04L63/20 ,  H04L63/0876 ,  H04L63/101

    Abstract: Techniques for expressing, communicating, de-conflicting, and enforcing consistent access policies between an IBN architecture and a Cloud-Native architecture. Generally, network administrators and/or users of a Cloud-Native architecture and an IBN architecture express access policies independently for the two different domains or architectures. According to the techniques described herein, a Network Service Endpoint (NSE) of the Cloud-Native architecture may exchange access policies with a network device of the IBN architecture. After exchanging access policies, conflicts between the sets of access policies may be identified, such as differences between allowing or denying communications between microservices and/or applications. The conflicts may be de-conflicted using various types of heuristics or rules, such as always selecting an access policy of the IBN architecture when conflicts arise. After the access policies have been de-conflicted, the IBN architecture and Cloud-Native architecture may then apply consistent access policies for traffic and communications in their respective network architectures.

    ENHANCED MULTI-FACTOR AUTHENTICATION BASED ON PHYSICAL AND LOGICAL PROXIMITY TO TRUSTED DEVICES AND USERS
    6.
    发明申请
    ENHANCED MULTI-FACTOR AUTHENTICATION BASED ON PHYSICAL AND LOGICAL PROXIMITY TO TRUSTED DEVICES AND USERS 有权

    公开(公告)号：US20220255913A1

    公开(公告)日：2022-08-11

    申请号：US17178234

    申请日：2021-02-17

    Applicant: Cisco Technology, Inc.

    Inventor： David J. Zacks ,  Carlos M. Pignataro ,  Thomas Szigeti

    IPC: H04L29/06 ,  G06F21/31

    Abstract: This disclosure describes techniques for performing enhanced authentication of a device based on physical and logical proximity of the device to one or more other authenticated devices. An example method includes performing, at a first time, a first authentication of a first device or a first user of the first device and determining that the first device is connected to at least one second device in a communication session. The at least one second device or at least one second user of the at least one second device are authenticated. The example method further includes determining a reauthentication interval based on the first device being connected to the at least one second device in the communication session and initiating, at a second time that is after the first time by the reauthentication interval, a second authentication of the first device or the first user of the first device.

    Resolving Access Policies Between Intent-Based Network Architectures and Cloud Native Architectures
    10.
    发明申请
    Resolving Access Policies Between Intent-Based Network Architectures and Cloud Native Architectures 有权

    公开(公告)号：US20230081708A1

    公开(公告)日：2023-03-16

    申请号：US17473306

    申请日：2021-09-13

    Applicant: Cisco Technology, Inc.

    Inventor： Thomas Szigeti ,  David J. Zacks ,  Walter Hulick ,  Shannon McFarland

    IPC: H04L29/06

    Abstract: Techniques for expressing, communicating, de-conflicting, and enforcing consistent access policies between an IBN architecture and a Cloud-Native architecture. Generally, network administrators and/or users of a Cloud-Native architecture and an IBN architecture express access policies independently for the two different domains or architectures. According to the techniques described herein, a Network Service Endpoint (NSE) of the Cloud-Native architecture may exchange access policies with a network device of the IBN architecture. After exchanging access policies, conflicts between the sets of access policies may be identified, such as differences between allowing or denying communications between microservices and/or applications. The conflicts may be de-conflicted using various types of heuristics or rules, such as always selecting an access policy of the IBN architecture when conflicts arise. After the access policies have been de-conflicted, the IBN architecture and Cloud-Native architecture may then apply consistent access policies for traffic and communications in their respective network architectures.

Patent Agency Ranking