-
公开(公告)号:US11240246B2
公开(公告)日:2022-02-01
申请号:US16572995
申请日:2019-09-17
Applicant: Cisco Technology, Inc.
Inventor: Xuechen Yang , Nancy Cam-Winget
Abstract: In one embodiment, functionality is disclosed for commissioning a target device based, at least in part, on providing identifying information that identifies a target device, where that identifying information is configured to be included in a request for authorization to commission the target device, and that request for authorization to commission the target device comprises one or more requested commissioning actions; receiving a commissioning authorization, where the commissioning authorization comprises information regarding one or more authorized commissioning actions for which a license is available, where the one or more authorized commissioning actions were selected from among the one or more requested commissioning actions; and performing the one or more authorized commissioning actions.
-
公开(公告)号:US10243926B2
公开(公告)日:2019-03-26
申请号:US15094177
申请日:2016-04-08
Applicant: Cisco Technology, Inc.
Inventor: Pascal Thubert , Xuechen Yang , Rudolph B. Klecka, III , Patrick Wetterwald , Eric Levy-Abegnoli
Abstract: In one embodiment, a virtual firewall is installed on a port of a device that communicates across a zone boundary within an industrial network. The virtual firewall is then configured based on operation of the industrial network, such that the port may then communicate via the firewall to a remote virtual firewall of a remote port of a remote device across the zone boundary.
-
公开(公告)号:US10462137B2
公开(公告)日:2019-10-29
申请号:US15010939
申请日:2016-01-29
Applicant: Cisco Technology, Inc.
Inventor: Xuechen Yang , Nancy Cam-Winget
Abstract: In one embodiment, a system and method are disclosed for receiving a request for authorization to commission a target device based, at least in part, on a plurality of requested commissioning actions; determining whether each of the requested commissioning actions is authorized; sending a commissioning authorization, which includes information identifying the one or more authorized commissioning actions; receiving a commissioning complete confirmation message, which includes information identifying one or more completed commissioning actions; validating the commissioning complete confirmation message, in order to ensure that each of the completed actions had been previously authorized; and if all of the completed commissioning actions were previously authorized, sending an acknowledgement message.
-
公开(公告)号:US10389825B2
公开(公告)日:2019-08-20
申请号:US15720973
申请日:2017-09-29
Applicant: Cisco Technology, Inc.
Inventor: Xuechen Yang , Rudy Klecka
IPC: G06F15/177 , H04L29/08 , H04L29/12
Abstract: In one embodiment, a system and method are disclosed for receiving, at a first network routing element, a discovery message sent via a network, where the discovery message comprises identifying information that identifies a physical location of a first network device. The method modifies the identifying information in the discovery message by adding additional information to the identifying information, where the additional information can, for example, identify a physical location of the first network routing element. Subsequent to modifying the identifying information, the method forwards the discovery message to a network element, where the network element can be, for example, either a second network routing element or a server.
-
公开(公告)号:US09819748B2
公开(公告)日:2017-11-14
申请号:US14597800
申请日:2015-01-15
Applicant: Cisco Technology, Inc.
Inventor: Xuechen Yang , Rudy Klecka
IPC: G06F15/177 , H04L29/08 , H04L29/12
CPC classification number: H04L67/16 , H04L61/2015 , H04L61/3025 , H04L61/609
Abstract: In one embodiment, a system and method are disclosed for sending a discovery message, via a network, from a first network device. The sending is performed in response to the first network device being associated with a first machine. The method involves receiving an offer message via the network, where the offer message includes network name information that indicates a physical location of the device within a topology of the network. The method also involves using the network name information to communicate with a second network device via the network.
-
公开(公告)号:US20170295141A1
公开(公告)日:2017-10-12
申请号:US15094177
申请日:2016-04-08
Applicant: Cisco Technology, Inc.
Inventor: Pascal Thubert , Xuechen Yang , Rudolph B. Klecka, III , Patrick Wetterwald , Eric Levy-Abegnoli
CPC classification number: H04L63/0272 , H04L63/0209 , H04L67/12
Abstract: In one embodiment, a virtual firewall is installed on a port of a device that communicates across a zone boundary within an industrial network. The virtual firewall is then configured based on operation of the industrial network, such that the port may then communicate via the firewall to a remote virtual firewall of a remote port of a remote device across the zone boundary.
-
公开(公告)号:US20170295063A1
公开(公告)日:2017-10-12
申请号:US15094122
申请日:2016-04-08
Applicant: Cisco Technology, Inc.
Inventor: Xuechen Yang , Rudolph B. Klecka, III
IPC: H04L12/24
CPC classification number: H04L41/0893 , H04L41/0853 , H04L41/12
Abstract: In one embodiment, a device receives control logic programmed within at least one controller included within an industrial network. The device also determines a network topology of the industrial network, and derives a network policy for the industrial network based upon, at least in part, the control logic and the network topology.
-
公开(公告)号:US10447540B2
公开(公告)日:2019-10-15
申请号:US15094122
申请日:2016-04-08
Applicant: Cisco Technology, Inc.
Inventor: Xuechen Yang , Rudolph B. Klecka, III
IPC: G06F15/177 , H04L12/24
Abstract: In one embodiment, a device receives control logic programmed within at least one controller included within an industrial network. The device also determines a network topology of the industrial network, and derives a network policy for the industrial network based upon, at least in part, the control logic and the network topology.
-
公开(公告)号:US20200014696A1
公开(公告)日:2020-01-09
申请号:US16572995
申请日:2019-09-17
Applicant: Cisco Technology, Inc.
Inventor: Xuechen Yang , Nancy Cam-Winget
IPC: H04L29/06
Abstract: In one embodiment, functionality is disclosed for commissioning a target device based, at least in part, on providing identifying information that identifies a target device, where that identifying information is configured to be included in a request for authorization to commission the target device, and that request for authorization to commission the target device comprises one or more requested commissioning actions; receiving a commissioning authorization, where the commissioning authorization comprises information regarding one or more authorized commissioning actions for which a license is available, where the one or more authorized commissioning actions were selected from among the one or more requested commissioning actions; and performing the one or more authorized commissioning actions.
-
公开(公告)号:US10122589B2
公开(公告)日:2018-11-06
申请号:US15094230
申请日:2016-04-08
Applicant: Cisco Technology, Inc.
Inventor: Xuechen Yang , Rudolph B. Klecka, III , Pascal Thubert , Patrick Wetterwald , Eric Levy-Abegnoli
Abstract: In one embodiment, a device receives a network policy based upon, at least in part, a physical network, and configures a design of an industrial network overlay on the physical network based upon, at least in part, the network policy. The configuring, according to the techniques herein, may generally include: determining a number of virtual local area networks (VLANs) within the industrial network overlay; determining which devices of the physical network are on which VLAN; determining placement of at least one virtual firewall within the industrial network overlay; and determining at least one communication path for the industrial network overlay between at least two devices.
-
-
-
-
-
-
-
-
-