知搜-全球专利检索

  1. Login
  2. Sign Up

Search Results

17 records (took 0.017 seconds)

    Steering traffic on a flow-by-flow basis by a single sign-on service
    1.
    发明授权
    Steering traffic on a flow-by-flow basis by a single sign-on service 有权

    公开(公告)号：US11457008B2

    公开(公告)日：2022-09-27

    申请号：US17069540

    申请日：2020-10-13

    Applicant: Cisco Technology, Inc.

    Inventor： Hendrikus G. P. Bosch ,  Alessandro Duminuco ,  Julien Barbot ,  Jeffrey Michael Napper ,  Sape Jurrien Mullender

    IPC: G06F7/04 ,  G06F15/16 ,  G06F17/30 ,  H04L29/06 ,  H04L9/40

    Abstract: Techniques for using a single sign-on (SSO) service as a software defined networking (SDN) controller for a virtual private network environment. The techniques disclosed herein may include receiving, at a first authentication service, first data including a first request to authenticate a user of a client device to access an application. The techniques may also include sending, to the client device, second data representing a second request configured to prompt a second authentication service to authenticate the user of the client device. Additionally, the first authentication service may receive an indication that the user was authenticated by the second authentication service and determine, based at least in part on an attribute associated with at least one of the client device or the application, whether the client device is to access the application using an unsecured connection or, alternatively, access the application using a secured connection.

    NONCE-BASED ENTERPRISE SECURITY POLICY ENFORCEMENT
    2.
    发明申请
    NONCE-BASED ENTERPRISE SECURITY POLICY ENFORCEMENT 有权

    公开(公告)号：US20220255937A1

    公开(公告)日：2022-08-11

    申请号：US17169086

    申请日：2021-02-05

    Applicant: Cisco Technology, Inc.

    Inventor： Hendrikus GP Bosch ,  Jeffrey Michael Napper ,  Alessandro Duminuco ,  Sape Jurrien Mullender ,  Julien Barbot ,  Vinny Parla

    IPC: H04L29/06 ,  H04L29/12

    Abstract: This disclosure describes techniques including, by a domain name service (DNS), receiving a name resolution request from a client computing device and, by the DNS, providing a nonce to the client computing device, wherein a service is configured to authorize a connection request from the client computing device based at least in part on processing the nonce. This disclosure further describes techniques include a method of validating a connection request from a client computing device, including receiving the connection request, the connection request including a nonce. The techniques further include determining that the nonce is a valid nonce. The techniques further include, based at least in part on determining that the nonce is a valid nonce, authorizing the connection request and disabling the nonce.

    STEERING TRAFFIC ON A FLOW-BY-FLOW BASIS BY A SINGLE SIGN-ON SERVICE
    3.
    发明申请
    STEERING TRAFFIC ON A FLOW-BY-FLOW BASIS BY A SINGLE SIGN-ON SERVICE 有权

    公开(公告)号：US20220116381A1

    公开(公告)日：2022-04-14

    申请号：US17069540

    申请日：2020-10-13

    Applicant: Cisco Technology, Inc.

    Inventor： Hendrikus G.P. Bosch ,  Alessandro Duminuco ,  Julien Barbot ,  Jeffrey Michael Napper ,  Sape Jurrien Mullender

    IPC: H04L29/06

    Abstract: Techniques for using a single sign-on (SSO) service as a software defined networking (SDN) controller for a virtual private network environment. The techniques disclosed herein may include receiving, at a first authentication service, first data including a first request to authenticate a user of a client device to access an application. The techniques may also include sending, to the client device, second data representing a second request configured to prompt a second authentication service to authenticate the user of the client device. Additionally, the first authentication service may receive an indication that the user was authenticated by the second authentication service and determine, based at least in part on an attribute associated with at least one of the client device or the application, whether the client device is to access the application using an unsecured connection or, alternatively, access the application using a secured connection.

    PER-DEVICE SINGLE SIGN-ON ACROSS APPLICATIONS
    5.
    发明申请
    PER-DEVICE SINGLE SIGN-ON ACROSS APPLICATIONS 有权

    公开(公告)号：US20220217132A1

    公开(公告)日：2022-07-07

    申请号：US17141007

    申请日：2021-01-04

    Applicant: Cisco Technology, Inc.

    Inventor： Ahmed Bakry Helmy Ahmed ,  Sape Jurrien Mullender ,  Hendrikus G. P. Bosch ,  Alessandro Duminuco ,  Jeffrey Michael Napper

    IPC: H04L29/06

    Abstract: Operations include transmitting, on behalf of a first application, a first request to a first service provider, the first request requesting first services from the first service provider, intercepting, at a local agent, a first redirect message from the first service provider to an identity provider, receiving an identity provider cookie from the identity provider based on a validation of credentials during the authentication process, storing a copy of the identity provider cookie, transmitting, on behalf of a second application, a second request to a second service provider, the second request requesting second services from the second service provider, intercepting a second redirect message from the second service provider to the identity provider, adding the identity provider cookie to the second redirect message, and receiving validation to access the second service provider from the identity provider based on the identity provider cookie stored by the local agent.

    Nonce-based enterprise security policy enforcement
    6.
    发明授权
    Nonce-based enterprise security policy enforcement 有权

    公开(公告)号：US12261847B2

    公开(公告)日：2025-03-25

    申请号：US18197895

    申请日：2023-05-16

    Applicant: Cisco Technology, Inc.

    Inventor： Hendrikus G P Bosch ,  Jeffrey Michael Napper ,  Alessandro Duminuco ,  Sape Jurrien Mullender ,  Julien Barbot ,  Vinny Parla

    IPC: H04L9/40 ,  H04L61/4511

    Abstract: This disclosure describes techniques including, by a domain name service (DNS), receiving a name resolution request from a client computing device and, by the DNS, providing a nonce to the client computing device, wherein a service is configured to authorize a connection request from the client computing device based at least in part on processing the nonce. This disclosure further describes techniques include a method of validating a connection request from a client computing device, including receiving the connection request, the connection request including a nonce. The techniques further include determining that the nonce is a valid nonce. The techniques further include, based at least in part on determining that the nonce is a valid nonce, authorizing the connection request and disabling the nonce.

    Multicast flow scheduling in a data center
    10.
    发明授权
    Multicast flow scheduling in a data center 有权

    公开(公告)号：US11012251B2

    公开(公告)日：2021-05-18

    申请号：US16149756

    申请日：2018-10-02

    Applicant: Cisco Technology, Inc.

    Inventor： Hendrikus G. P. Bosch ,  Sape Jurriën Mullender ,  Ijsbrand Wijnands ,  Alessandro Duminuco ,  Jeffrey Michael Napper ,  Subhasri Dhesikan

    IPC: H04L12/18 ,  H04L12/801 ,  H04L12/863 ,  H04L12/931 ,  H04L12/937

    Abstract: In one example embodiment, a server generates a candidate instantiation of virtual applications among a plurality of hosts in a data center to support a multicast stream. The server provides, to a first set of agents corresponding to a first set of the plurality of hosts, a command to initiate a test multicast stream. The server provides, to a second set of agents corresponding to a second set of the plurality of hosts, a command to join the test multicast stream. The server obtains, from the second set of agents, a message indicating whether the second set of agents received the test multicast stream. If the message indicates that the second set of agents received the test multicast stream, the server causes the virtual applications to be instantiated in accordance with the candidate instantiation of the virtual applications.

Patent Agency Ranking