Cisco Technology, Inc.

Amjad Sayedrasul Inamdar

Lionel Florit

Eric Albin Voit

Sujal Sheth

Chennakesava Reddy Gaddam

David A McGrew

Robert Edgar Barton

Scott Roy Fluhrer

Patrick Grossetete

Syed Arslan Ahmed

Jagadeesh Maiya

Frederic Detienne

Graham Bartlett

Abhinesh Mishra

Ritu Singh

Shishir Kumar

Donald Frederick Schriner, Jr

Laurent Aubert

Anoop V A

A method of implementing controller-based distributed remote access may include connecting a plurality of edge devices to a controller via a network. The plurality of edge devices may perform hole punching to traverse a network address translation (NAT) gateway to create a NAT hole. The method may also include connecting a client device to the controller. The client device may be directly connected to one of the plurality of edge devices via the NAT hole in the network. The method may further include directly connecting the client device to one of the plurality of edge devices by receiving a query from the client device and returning public IP/ports of a most relevant edge device to the client device, the most relevant edge device being based on attributes of the client device, attributes of the plurality of edge devices, or combinations thereof.

Controller-based distributed remote access with static public IP avoidance

An intelligent forward error correction (iFEC) method and system are automatically triggered and started for providing forward error correction for applications when packet loss is predicted to be more than a threshold packet loss level during a prescribed interval and the actual packet loss is more than a threshold level. Similarly, the intelligent FEC method and system may be automatically disabled when packet loss is predicted to be less than the threshold level during a prescribed interval. If prescribed bandwidth of a transmission uplink through which application data packets will pass will be slowed or choked by use of iFEC, then iFEC may be disabled or stopped to prevent further congestion in the uplink. That is, according to examples, iFEC is started and stopped based on predicted packet loss and uplink/bandwidth health as opposed to simply operating forward error correction in a 'always on' or manually provisioned manner.

Intelligent management of forward error correction

Systems and methods are provided for quantum-resistant secure key distribution between a peer and an EAP authenticator by using an authentication server. The systems and methods include receiving requests for a COMMON-SEED and a quantum-safe public key from a peer and an EAP authenticator. The COMMON-SEED is encrypted using the quantum-safe public key of the peer and the quantum-safe public key of the EAP authenticator, and the encrypted COMMON-SEED is sent to the peer along with a request for a PPK_ID from the peer to complete authentication of the peer. The PPK_ID is received from the peer, and the encrypted COMMON-SEED and PPK_ID is sent to the EAP authenticator. A quantum-resistant secure channel is established between the peer and the EAP authenticator when the peer and the EAP authenticator share the same COMMON-SEED and the same PPK-ID.

Set up and distribution of post-quantum secure pre-shared keys using extendible authentication protocol

Systems and methods are provided for quantum-resistant secure key distribution between a peer and an EAP authenticator by using an authentication server. The systems and methods include receiving requests for a COMMON-SEED and a quantum-safe public key from a peer and an EAP authenticator. The COMMON-SEED is encrypted using the quantum-safe public key of the peer and the quantum-safe public key of the EAP authenticator, and the encrypted COMMON-SEED is sent to the peer along with a request for a PPK ID from the peer to complete authentication of the peer. The PPK ID is received from the peer, and the encrypted COMMON-SEED and PPK ID is sent to the EAP authenticator. A quantum-resistant secure channel is established between the peer and the EAP authenticator when the peer and the EAP authenticator share the same COMMON-SEED and the same PPK-ID.

Presented herein are methodologies for establishing secure communications in a post-quantum computer context. The methodology includes receiving, from a first communications device, at a second communications device, a secret seed value, or otherwise obtaining the secret seed value; initializing a session key service with the secret seed value; receiving, from the first communications device, at the second communications device, a pre-shared key identifier; querying the session key service for a pre-shared key corresponding the pre-shared key identifier; receiving, from the session key service, the pre-shared key; deriving a session key based, at least in part, on the pre-shared key; receiving from the first communications device, at the second communications device, data encrypted with the session key; and decrypting the data at the second communications device using the session key.

Session key distribution independent of third parties

A method is described and in one embodiment includes identifying at an initiator element a list of Internet protocol ('IP') prefixes corresponding to routes designated as interesting routes, wherein the IP prefixes are included in a Routing Information Base ('RIB') of the initiator; monitoring the RIB for a change in the list of IP prefixes; and, responsive to detection of a change in the list of IP prefixes, injecting at least a portion of the changed list of IP prefixes into a payload of an IKEv2 NOTIFY message and sending the IKEv2 NOTIFY message to a responder element peered with the initiator element, wherein the responder element updates an RIB of the responder element using the IP prefixes included in the received IKEv2 NOTIFY message.

Providing dynamic routing updates in field area network deployment using Internet Key Exchange v2

In one embodiment, a method to exchange Q-bit data packets between TCP/IP and X.25 devices includes receiving an incoming packet sequence and translating the incoming packet sequence into at least one outgoing packet. A Q-bit indicator in the first packet of the incoming packet sequence is passed to the outgoing packets to indicate control information in the incoming packet sequence. To ensure backward compatibility, the method further includes enabling RBP Q-bit support and disabling Q-bit support by default.

Growing community of inventors

Bijapur, India

Amjad Sayedrasul Inamdar