APPLYING NETWORK POLICIES ON A PER-USER BASIS

    公开(公告)号:US20220182826A1

    公开(公告)日:2022-06-09

    申请号:US17112264

    申请日:2020-12-04

    Abstract: In one example, an Access Point (AP) configures a first mapping of a first cellular network connection to a first local access network group, and further configures a second mapping of a second cellular network connection to a second local access network group. The AP determines whether a user device is authorized to use the first cellular network connection or the second cellular network connection. If the user device is authorized to use the first cellular network connection, the AP associates, for the user device, a first user device identifier with the first local access network group. If the user device is authorized to use the second cellular network connection, the AP associates, for the user device, a second user device identifier with the second local access network group.

    Large Scale Residential Cloud Based Application Centric Infrastructures
    3.
    发明申请
    Large Scale Residential Cloud Based Application Centric Infrastructures 有权
    大规模住宅云应用中心基础设施

    公开(公告)号:US20160352632A1

    公开(公告)日:2016-12-01

    申请号:US14726875

    申请日:2015-06-01

    Abstract: A first customer edge network device receives an encapsulated packet that includes inner headers comprising source address information for a first service running on a first computing apparatus in a first home cloud and destination address information for a second service running on a second computing apparatus in a second home cloud. The customer edge network device inserts a predetermined portion of bits of a virtual domain identifier of the encapsulated packet into a label to form a virtual domain label for label-based routing. The virtual domain label is appended to the encapsulated packet. The encapsulated packet is sent to a first provider edge network device of a provider network. The first provider edge network device appends an virtual private network label to the encapsulated packet, and sends the encapsulated packet to a provider network device for label-based routing in the provider network.

    Abstract translation: 第一客户边缘网络设备接收包含内部报头的封装分组,所述内部报头包括在第一家庭云中的第一计算设备上运行的第一服务的源地址信息和在第二家庭云中的第二计算设备上运行的第二服务的目的地地址信息 家庭云。 客户边缘网络设备将封装分组的虚拟域标识符的预定部分位置插入到标签中以形成用于基于标签的路由的虚拟域标签。 虚拟域标签附加到封装的数据包。 封装的分组被发送到提供商网络的第一提供商边缘网络设备。 第一个提供商边缘网络设备向封装的分组附加虚拟专用网络标签,并将封装的分组发送到提供商网络设备,以在提供商网络中进行基于标签的路由。

    OPTIMIZED CONTENT ROUTING DISTRIBUTION USING PROXIMITY BASED ON PREDICTIVE CLIENT FLOW TRAJECTORIES
    4.
    发明申请
    OPTIMIZED CONTENT ROUTING DISTRIBUTION USING PROXIMITY BASED ON PREDICTIVE CLIENT FLOW TRAJECTORIES 有权
    基于预测客户端流量的优化内容路由分配

    公开(公告)号:US20150146722A1

    公开(公告)日:2015-05-28

    申请号:US14087061

    申请日:2013-11-22

    CPC classification number: H04L45/742 H04L45/04 H04L45/122

    Abstract: System, method, and computer program product to perform an operation, the operation comprising capturing, at one or more peering routers, parameters for a plurality of data packets sent by a client device and specifying a destination network address, identifying which peering router captured the parameters for each of the plurality of data packets, determining, based on the identified peering routers, a first peering router nearest to the client, relative to the other peering routers, identifying a first content cache, of a plurality of content caches in a content distribution network, nearest to the first peering router, and fulfilling a content request from the client device using content stored on the first content cache.

    Abstract translation: 用于执行操作的系统,方法和计算机程序产品,所述操作包括在一个或多个对等路由器处捕获由客户端设备发送的多个数据分组的参数并指定目的地网络地址,识别哪个对等路由器捕获 对于所述多个数据分组中的每一个的参数,基于所识别的对等路由器,相对于其他对等路由器最近的第一对等路由器识别内容中的多个内容高速缓存的第一内容高速缓存 分发网络,最接近第一对等路由器,以及使用存储在第一内容高速缓存上的内容从客户端设备完成内容请求。

    Encryption for gateway tunnel-based VPNs independent of wan transport addresses

    公开(公告)号:US10904217B2

    公开(公告)日:2021-01-26

    申请号:US15994590

    申请日:2018-05-31

    Abstract: A source virtual private network (VPN) gateway supports a local source subnet and communicates over a wide area network (WAN) with a destination VPN gateway that supports a local destination subnet. The source VPN gateway receives from the local source subnet an Internet Protocol (IP) packet destined for the local destination subnet, determines a security association (SA) based on a source IP address and a destination IP address of the IP packet, and encapsulates the IP packet with tunnel encapsulation including a tunnel protocol header and a tunnel outer IP header, to produce a clear-text tunnel packet. The source VPN gateway encrypts the IP packet and the tunnel protocol header but not the tunnel outer IP header using an encryption key and a security parameter index for the SA, to produce an encrypted tunnel packet, and tunnels it to the destination VPN gateway over the WAN.

    Optimized content routing distribution using proximity based on predictive client flow trajectories
    8.
    发明授权
    Optimized content routing distribution using proximity based on predictive client flow trajectories 有权
    基于预测客户端流动轨迹优化内容路由分布

    公开(公告)号:US09503370B2

    公开(公告)日:2016-11-22

    申请号:US14087061

    申请日:2013-11-22

    CPC classification number: H04L45/742 H04L45/04 H04L45/122

    Abstract: System, method, and computer program product to perform an operation, the operation comprising capturing, at one or more peering routers, parameters for a plurality of data packets sent by a client device and specifying a destination network address, identifying which peering router captured the parameters for each of the plurality of data packets, determining, based on the identified peering routers, a first peering router nearest to the client, relative to the other peering routers, identifying a first content cache, of a plurality of content caches in a content distribution network, nearest to the first peering router, and fulfilling a content request from the client device using content stored on the first content cache.

    Abstract translation: 用于执行操作的系统,方法和计算机程序产品,所述操作包括在一个或多个对等路由器处捕获由客户端设备发送的多个数据分组的参数并指定目的地网络地址,识别哪个对等路由器捕获 对于所述多个数据分组中的每一个的参数,基于所识别的对等路由器,相对于其他对等路由器最近的第一对等路由器识别内容中的多个内容高速缓存的第一内容高速缓存 分发网络,最接近第一对等路由器,以及使用存储在第一内容高速缓存上的内容从客户端设备完成内容请求。

    Group member recovery techniques
    9.
    发明授权
    Group member recovery techniques 有权
    小组成员恢复技术

    公开(公告)号:US09444796B2

    公开(公告)日:2016-09-13

    申请号:US14248399

    申请日:2014-04-09

    Abstract: Techniques are presented for optimizing secure communications in a network. A first router receives from a second router an encrypted packet with an unknown security association. The first router examines the packet to determine whether the counter value is in a range of predicted counter values. Additionally, a key server is configured to provision routers that are part of a virtual private network. The key server selects a counter value that is part of a security association and calculates a key value. The key server sends the key value together with the security association to enable routers to exchange encrypted packets with each other in the virtual private network using the key value and the security association. The key server increments the counter value to a value within a range of counter values capable of being predicted by the routers.

    Abstract translation: 呈现技术来优化网络中的安全通信。 第一路由器从第二路由器接收具有未知安全关联的加密分组。 第一个路由器检查数据包,以确定计数器值是否在预测计数器值的范围内。 另外,密钥服务器被配置为配置作为虚拟专用网络一部分的路由器。 密钥服务器选择作为安全关联的一部分的计数器值,并计算密钥值。 密钥服务器将密钥值与安全关联一起发送,以使路由器能够使用密钥值和安全关联在虚拟专用网络中彼此交换加密的数据包。 密钥服务器将计数器值递增到可由路由器预测的计数器值范围内的值。

Patent Agency Ranking