公开(公告)号：US10666608B2

公开(公告)日：2020-05-26

申请号：US16286128

申请日：2019-02-26

申请人： Cisco Technology, Inc.

发明人： Geoff Townsend ,  Michael Ellery ,  Lucas Siba ,  Brian Somers

IPC分类号： H04L29/12 ,  H04L29/06 ,  H04L29/08

摘要： A DNS nameserver processes requests for domain name information based on subscriber identifiers, and optionally subscriber information. Based on a subscriber identifier, requests for a target domain name may generate a DNS response with domain name information for a proxy service. Techniques are provided to seamlessly and transparently authenticate a subscriber at the proxy service. The proxy service generates a redirect with a unique domain name including a tracking identifier in response to requests for a target domain name. The nameserver receives a request associated with the unique domain name. The nameserver responds with domain name information of the proxy service and generates a message to the proxy service mapping the tracking identifier to the subscriber identifier. The client then generates a request to the proxy service that includes the tracking identifier. The proxy service uses the mapping from the nameserver to authenticate the corresponding subscriber identifier.

公开(公告)号：US10277554B2

公开(公告)日：2019-04-30

申请号：US14196973

申请日：2014-03-04

申请人： Cisco Technology, Inc.

发明人： Geoff Townsend ,  Michael Ellery ,  Lucas Siba ,  Brian Somers

IPC分类号： H04L29/06 ,  H04L29/08 ,  H04L29/12

摘要： A DNS nameserver processes requests for domain name information based on subscriber identifiers, and optionally subscriber information. Based on a subscriber identifier, requests for a target domain name may generate a DNS response with domain name information for a proxy service. Techniques are provided to seamlessly and transparently authenticate a subscriber at the proxy service. The proxy service generates a redirect with a unique domain name including a tracking identifier in response to requests for a target domain name. The nameserver receives a request associated with the unique domain name. The nameserver responds with domain name information of the proxy service and generates a message to the proxy service mapping the tracking identifier to the subscriber identifier. The client then generates a request to the proxy service that includes the tracking identifier. The proxy service uses the mapping from the nameserver to authenticate the corresponding subscriber identifier.

公开(公告)号：US09807050B2

公开(公告)日：2017-10-31

申请号：US14687622

申请日：2015-04-15

申请人： Cisco Technology, Inc.

发明人： Lucas Siba ,  Scott Cressman

IPC分类号： G06F15/16 ,  H04L29/12 ,  H04L29/06 ,  H04L12/24 ,  H04L29/08

CPC分类号： H04L61/2007 ,  H04L29/12066 ,  H04L41/0893 ,  H04L61/1511 ,  H04L63/0281 ,  H04L63/20 ,  H04L67/28

摘要： Internet protocol addressing to uniquely identify clients and destinations across computer networks is provided. Communication between a proxy service and a DNS nameserver is facilitated to permit the DNS nameserver to send a subscriber identifier to the proxy service in response to a DNS request for a flagged domain name. The proxy service selects a unique IP address from a pool of IP addresses assigned to the proxy service. The proxy service associates the selected IP address with the subscriber identifier and optionally, the target domain name of the DNS request. The proxy service provides the unique IP address to the DNS nameserver which returns the unique IP address to the client device for the target domain name. The subscriber can then be authenticated at the proxy service transparently without input from the subscriber or client device based on the unique IP address provided by the client device to the proxy service.

公开(公告)号：US09942130B2

公开(公告)日：2018-04-10

申请号：US14821537

申请日：2015-08-07

申请人： Cisco Technology, Inc.

发明人： David Ulevitch ,  Geoff Townsend ,  Yariv Keinan ,  Lucas Siba

IPC分类号： H04L12/28 ,  H04L12/707 ,  H04L12/46 ,  H04L12/741 ,  H04L29/08 ,  H04L29/06 ,  H04L12/823

CPC分类号： H04L45/22 ,  H04L12/4633 ,  H04L45/74 ,  H04L47/32 ,  H04L63/0281 ,  H04L63/0428 ,  H04L63/101 ,  H04L63/18 ,  H04L67/00

摘要： A client analyzes requests for network resources to determine an IP address associated with the request, such as a destination IP address of a network packet. The client device selectively routes the request and other traffic associated with the IP address. The client device establishes a tunnel or other direct connection with a remote server. Network traffic can be selectively routed to the destination IP address associated with a resource request, or to the remote server based on the destination IP address associated with the request. The system can route client network requests to the remote server based on a category or other information associated with the destination IP address. Network packets associated with malicious or suspicious IP addresses, for example, may be routed to the remote server for performance of security features, while packets associated with other IP addresses may be directly routed to their target destination.

公开(公告)号：US20160308821A1

公开(公告)日：2016-10-20

申请号：US14687622

申请日：2015-04-15

申请人： Cisco Technology, Inc.

发明人： Lucas Siba ,  Scott Cressman

IPC分类号： H04L29/12

CPC分类号： H04L61/2007 ,  H04L29/12066 ,  H04L41/0893 ,  H04L61/1511 ,  H04L63/0281 ,  H04L63/20 ,  H04L67/28

摘要： Internet protocol addressing to uniquely identify clients and destinations across computer networks is provided. Communication between a proxy service and a DNS nameserver is facilitated to permit the DNS nameserver to send a subscriber identifier to the proxy service in response to a DNS request for a flagged domain name. The proxy service selects a unique IP address from a pool of IP addresses assigned to the proxy service. The proxy service associates the selected IP address with the subscriber identifier and optionally, the target domain name of the DNS request. The proxy service provides the unique IP address to the DNS nameserver which returns the unique IP address to the client device for the target domain name. The subscriber can then be authenticated at the proxy service transparently without input from the subscriber or client device based on the unique IP address provided by the client device to the proxy service.

摘要翻译： 提供了通过计算机网络独特地识别客户端和目的地的互联网协议寻址。 代理服务和DNS名称服务器之间的通信便于允许DNS名称服务器响应于对被标记的域名的DNS请求而向代理服务发送订户标识符。 代理服务器从分配给代理服务的IP地址池中选择唯一的IP地址。 代理服务将所选择的IP地址与订户标识符和可选地，DNS请求的目标域名相关联。 代理服务为DNS名称服务器提供唯一的IP地址，该名称服务器将目标域名的唯一IP地址返回给客户端设备。 然后可以在代理服务处透明地对用户进行身份验证，而无需根据客户端设备向代理服务提供的唯一IP地址从用户或客户端设备进行输入。

公开(公告)号：US20190199678A1

公开(公告)日：2019-06-27

申请号：US16286128

申请日：2019-02-26

申请人： Cisco Technology, Inc.

发明人： Geoff Townsend ,  Michael Ellery ,  Lucas Siba ,  Brian Somers

IPC分类号： H04L29/12 ,  H04L29/06

CPC分类号： H04L61/20 ,  H04L61/1511 ,  H04L63/0884 ,  H04L67/2804 ,  H04L67/327

摘要： A DNS nameserver processes requests for domain name information based on subscriber identifiers, and optionally subscriber information. Based on a subscriber identifier, requests for a target domain name may generate a DNS response with domain name information for a proxy service. Techniques are provided to seamlessly and transparently authenticate a subscriber at the proxy service. The proxy service generates a redirect with a unique domain name including a tracking identifier in response to requests for a target domain name. The nameserver receives a request associated with the unique domain name. The nameserver responds with domain name information of the proxy service and generates a message to the proxy service mapping the tracking identifier to the subscriber identifier. The client then generates a request to the proxy service that includes the tracking identifier. The proxy service uses the mapping from the nameserver to authenticate the corresponding subscriber identifier.