知搜-全球专利检索

  1. Login
  2. Sign Up

Search Results

42 records (took 0.021 seconds)

    Systems and methods for addressing cryptoprocessor hardware scaling limitations
    2.
    发明授权
    Systems and methods for addressing cryptoprocessor hardware scaling limitations 有权

    公开(公告)号：US11665148B2

    公开(公告)日：2023-05-30

    申请号：US17208350

    申请日：2021-03-22

    Applicant: Cisco Technology Inc.

    Inventor： Sujal Sheth ,  Eric Voit

    IPC: H04L9/40 ,  G06F21/60

    CPC classification number: H04L63/08 ,  G06F21/602

    Abstract: The present disclosure is directed to systems and methods to address cryptoprocessor hardware scaling limitations, the method including the steps of establishing a communication path between a centralized server and a client device; generating, by the centralized server, a nonce for transmission to the client device, wherein the nonce is associated with an active time interval and corresponds to one of an existing nonce or a new nonce; transmitting the nonce to the client device; receiving a signed attestation result that includes the nonce from the client device, wherein, the signed attestation result comprises a previously-generated signed attestation result if the nonce corresponds to the existing nonce previously received by the client device; and the signed attestation result comprises a new signed attestation result if the nonce corresponds to the existing nonce newly received by the client device or corresponds to the new nonce.

    Systems and Methods for Addressing Cryptoprocessor Hardware Scaling Limitations
    3.
    发明申请
    Systems and Methods for Addressing Cryptoprocessor Hardware Scaling Limitations 有权

    公开(公告)号：US20220303256A1

    公开(公告)日：2022-09-22

    申请号：US17208350

    申请日：2021-03-22

    Applicant: Cisco Technology Inc.

    Inventor： Sujal Sheth ,  Eric Voit

    IPC: H04L29/06 ,  G06F21/60

    Abstract: The present disclosure is directed to systems and methods to address cryptoprocessor hardware scaling limitations, the method including the steps of establishing a communication path between a centralized server and a client device; generating, by the centralized server, a nonce for transmission to the client device, wherein the nonce is associated with an active time interval and corresponds to one of an existing nonce or a new nonce; transmitting the nonce to the client device; receiving a signed attestation result that includes the nonce from the client device, wherein, the signed attestation result comprises a previously-generated signed attestation result if the nonce corresponds to the existing nonce previously received by the client device; and the signed attestation result comprises a new signed attestation result if the nonce corresponds to the existing nonce newly received by the client device or corresponds to the new nonce.

    Discovering trustworthy devices using attestation and mutual attestation
    4.
    发明授权
    Discovering trustworthy devices using attestation and mutual attestation 有权

    公开(公告)号：US11411994B2

    公开(公告)日：2022-08-09

    申请号：US16839576

    申请日：2020-04-03

    Applicant: Cisco Technology, Inc.

    Inventor： Sujal Sheth ,  Shwetha Subray Bhandari ,  Eric Voit ,  William F. Sulzen ,  Frank Brockners

    IPC: H04L29/06 ,  H04L9/40

    Abstract: Systems, methods, and computer-readable media for discovering trustworthy devices through attestation and authenticating devices through mutual attestation. A relying node in a network environment can receive attestation information from an attester node in the network environment as part of a unidirectional push of information from the attester node according to a unidirectional link layer communication scheme. A trustworthiness of the attester node can be verified by identifying a level of trust of the attester node from the attestation information. Further, network service access of the attester node through the relying node in the network environment can be controlled based on the level of trust of the attester node identified from the attestation information.

    NETWORK SECURITY BY INTEGRATING MUTUAL ATTESTATION
    5.
    发明申请
    NETWORK SECURITY BY INTEGRATING MUTUAL ATTESTATION 有权

    公开(公告)号：US20220222347A1

    公开(公告)日：2022-07-14

    申请号：US17712499

    申请日：2022-04-04

    Applicant: Cisco Technology, Inc.

    Inventor： Sujal Sheth ,  Shwetha Subray Bhandari ,  Eric Voit ,  William F. Sulzen ,  Frank Brockners

    IPC: G06F21/57 ,  H04L9/08 ,  H04L9/32

    Abstract: Technologies for attestation techniques, systems, and methods to confirm the integrity of a device for establishing and/or maintaining a trustworthy encrypted network session. An example method can include sending, via a server and using a cryptographic security protocol, a message associated with establishing an encrypted network session; receiving a response from a client device; identifying a level of trust of the client device based on the response; determining whether to perform a next step in the cryptographic security protocol based on the level of trust, wherein the cryptographic security protocol comprises at least one of a Secure Shell (SSH) protocol, a Transport Layer Security (TLS) protocol, a Secure Sockets Layer (SSL) protocol, and an Internet Protocol Security (IPsec) protocol.

    AUTHENTICATION OF NETWORK DEVICES USING ACCESS CONTROL PROTOCOLS
    8.
    发明申请
    AUTHENTICATION OF NETWORK DEVICES USING ACCESS CONTROL PROTOCOLS 有权

    公开(公告)号：US20220239476A1

    公开(公告)日：2022-07-28

    申请号：US17659530

    申请日：2022-04-18

    Applicant: Cisco Technology, Inc.

    Inventor： Sujal Sheth ,  Shwetha Subray Bhandari ,  Eric Voit ,  William F. Sulzen ,  Frank Brockners

    IPC: H04L9/08 ,  H04L9/32 ,  H04L9/40

    Abstract: Systems, methods, and computer-readable media for authenticating access control messages include receiving, at a first node, access control messages from a second node. The first node and the second node including network devices and the access control messages can be based on RADIUS or TACACS+ protocols among others. The first node can obtain attestation information from one or more fields of the access control messages determine whether the second node is authentic and trustworthy based on the attestation information. The first node can also determine reliability or freshness of the access control messages based on the attestation information. The first node can be a server and the second node can be a client, or the first node can be a client and the second node can be a server. The attestation information can include Proof of Integrity based on a hardware fingerprint, device identifier, or Canary Stamp.

    Network security by integrating mutual attestation
    9.
    发明授权
    Network security by integrating mutual attestation 有权

    公开(公告)号：US11321465B2

    公开(公告)日：2022-05-03

    申请号：US16752488

    申请日：2020-01-24

    Applicant: Cisco Technology, Inc.

    Inventor： Sujal Sheth ,  Shwetha Subray Bhandari ,  Eric Voit ,  William F. Sulzen ,  Frank Brockners

    IPC: G06F21/57 ,  H04L9/32 ,  H04L9/08

    Abstract: Technologies for attestation techniques, systems, and methods to confirm the integrity of a device for establishing and/or maintaining a trustworthy encrypted network session. An example method can include sending, via a server and using a cryptographic security protocol, a message associated with establishing an encrypted network session; receiving a response from a client device; identifying a level of trust of the client device based on the response; determining whether to perform a next step in the cryptographic security protocol based on the level of trust, wherein the cryptographic security protocol comprises at least one of a Secure Shell (SSH) protocol, a Transport Layer Security (TLS) protocol, a Secure Sockets Layer (SSL) protocol, and an Internet Protocol Security (IPsec) protocol.

Patent Agency Ranking