Cisco Technology, Inc.

Christopher Martin Lonvick

Eliot Lear

Matthew A Laherty

Donald Schriner

Luis Orlando Suau

Charles J Duffy

Charles Duffy

Intelligent powered device (PD) control system including a switch system, state detector (SD), intelligent control device (ICD), and a PD. The switch system includes one or more conventional electrical switches. Each switch includes an interface to receive selection of a switch system state change between conductive and non-conductive states. The switch system includes a conductor pair(s) indicative of switch system state based on the selection. The SD signals the detected state to the ICD. The switch system output is in electrical connection with the detector such that, in the conductive state a loopback is formed in the switch system and SD, and in the non-conductive state no loopback is formed. The ICD receive the message from the state detector and transmits a fixture control command based on the message. The PD receives the command from the ICD via the data communications network, and controls its state based on the command.

Controlling intelligent powered devices

A method and apparatus for selectively enforcing network security policy using group identifiers are disclosed. One or more access controls are created and stored in a policy enforcement point that controls access to the network, wherein each of the access controls specifies that a named group is allowed access to a particular resource. A binding of a network address to an authenticated user of a client, for which the policy enforcement point controls access to the network, is created and stored. The named group is updated to include the network address of the authenticated user at the policy enforcement point. A packet flow originating from the network address is permitted to pass from the policy enforcement point into the network only if the network address is in the named group identified in one of the access controls that specifies that the named group is allowed access to the network. Accordingly, network security may be implemented in the form of abstract groups that include specific network addresses; as a result, users may be allowed or denied access to network addresses by updating membership of the groups to include or delete the network addresses of the users, rather than by creating or deleting access controls that specifically identify the users.

Method and apparatus for selectively enforcing network security policies using group identifiers

Growing community of inventors

San Jose, CA, United States of America

Christopher Martin Lonvick