Cisco Technology, Inc.

Daniel Eckstein

Robert Edgar Barton

Stephan Edward Friedl

Norbert Heusser

Anoop Mohan

Yogesh Kumar Soni

Jerome Henry

Robert E Barton

Thomas Szigeti

Anthony Pisani

In one embodiment, an edge device of a network maintains intermediate certificates derived from root certificates of different cloud services that identify the edge device to those different cloud services. The edge device receives identity information for a particular device in the network. The edge device generates, using at least one of its intermediate certificates and the identity information for the particular device, one or more local digital identity certificates for the particular device. The edge device causes the particular device to be onboarded to a target cloud service from among the different cloud services, in part by providing the one or more local digital identity certificates to the particular device and to the target cloud service.

Automated, multi-cloud lifecycle management of digital identities of IoT data originators

In one embodiment, a service associates a plurality of descriptive tags with a node in a network, based on an inspection of packets sent by the node that is performed by one or more sensors deployed to the network. The service identifies, based on the plurality of descriptive tags, data to be extracted from traffic of the node by an edge device located at an edge of the network. The service determines, based on the plurality of descriptive tags, an external destination to which the data should be sent by the edge device after extraction. The service sends a data pipeline configuration to the edge device, wherein the data pipeline configuration causes the edge device to extract the data from the traffic sent by the node and to send the data to the external destination.

Data pipeline configuration using network sensors

In one embodiment, a networking device at an edge of a network enrolls with a controller that supervises operation of the networking device. The networking device sends a publication request to a cloud-based messaging service. The networking device provides, to the cloud-based messaging service, identification information that indicates the controller that supervises operation of the networking device. The networking device receives, from the cloud-based messaging service, authorization to publish messages to the cloud-based messaging service. The cloud-based messaging service uses the identification information to confirm an identity of the networking device with the controller that supervises operation of the networking device. The networking device sends, after receiving authorization to publish messages to the cloud-based messaging service, a message for publication to the cloud-based messaging service. The message comprises data sourced from an endpoint in the network.

Zero trust for edge devices

In one embodiment, a networking device at an edge of a network extracts data from traffic in the network using a plurality of protocol connectors of the networking device. The networking device normalizes the data extracted from the traffic in the network, to form normalized data. The networking device applies a data transformation to the normalized data, to form transformed data. The networking device identifies, based on a policy, one or more cloud providers as being authorized to receive the transformed data. The networking device sends the transformed data to the one or more cloud providers.

Growing community of inventors

Bonn, Germany

Daniel Eckstein