Cisco Technology, Inc.

Jean-Philippe Champagne

James Anthony Aviani, Jr

Matthew Richard Gnagy

Wojciech Dec

Piyush Agarwal

Kenneth Earl Mueller, Ii

Bruce Arthur Lueckenhoff

Mark Ting

James W O'Toole, Jr

Earl Hardin Booth, Iii

Michael Todd Hall

Richard Manfred Pruss

Joshua Miles Chase

Ravishankar Ganesh Ithal

A method is provided in one example and includes receiving video data captured by a camera at a location; comparing a portion of the video data to security information characteristics stored in a policy; and identifying a violation of the policy when the portion of the video data does not match at least one of the security information characteristics stored in the policy. In more particular instances, the method can include triggering an alert when the violation of the policy is identified.

System and method for validating video security information

A system includes a multi-stack subscriber, a gateway, and a web portal. The web portal determines whether the subscriber is authenticated to access the Internet using a first Internet Protocol by receiving logon information from the subscriber. The subscriber requests to access the Internet using a second Internet Protocol. The gateway and/or the web portal determine whether the subscriber is authenticated to access the Internet using the second Internet Protocol without sending a second logon to the subscriber.

Multi-stack subscriber sign on

An apparatus includes a processor, an interface, and a memory. The interface is operable to receive a request from a subscriber to access network services, wherein the request includes a subscriber address from the set comprising: an IP address and a media access control (MAC) address. The processor is operable to generate a query requesting an address associated with the subscriber address. The interface is further operable to communicate the query to the subscriber address, and receive a response to the query, wherein the response includes an address associated with the subscriber address, wherein the associated address is from the set comprising: an IP address and a MAC address. The memory is operable to store the subscriber address and the received associated address.

Grouping multiple network addresses of a subscriber into a single communication session

In an example embodiment, a method is provided to receive a request message. A client that transmitted the request message then is identified. Here, the client is associated with a client identifier. The client identifier is inserted into a response message, and this response message includes a redirect to a portal. The response message then is transmitted.

Providing identity to a portal with a redirect

Embodiments of this invention can establish a communications path through a network device in a network for a stream of data served by a server. A host can request to receive the stream of data by sending a request through the network to the server. In response, the server creates a data distribution message and sends it onto the network towards the host. Each network device equipped with the invention receives the data distribution message via unicast communications, acknowledges the data distribution message, and creates a path table for the stream of data, and forwards the data distribution message to the next network device on route to the host. A network device that receives an acknowledgment of the data distribution message establishes at least one path through the network device in the path table for payload distribution messages that carry a stream of data. The stream of data can thus be propagated through a network with only one copy of portions (e.g., packets) of the stream traveling per path in the network, irrespective of the number of recipients served by a network device that receives the stream. Since the portions of data are propagated using standard routing protocols, they may pass or tunnel through network devices not equipped with the invention.

Methods and apparatus for transmitting information in a network

Mechanisms and techniques provide a system that operates in a data communications device such as a switch or a router to provide a technique for inserting data into packets associated with a communications session between a first and second computerized devices. The technique comprises receiving a first packet containing data being propagated from the first computerized device to the second computerized device in the communications session and inserting a first amount of extra data into the first packet to alter the size of the first packet and forwarding the first packet including the first amount of extra data to the second computerized device. By monitoring and adjusting sequence and acknowledgement information from with in the data communications device, data can be inserted into packets without disrupting connection state information maintained by and expected by each computerized device.

Methods and apparatus for inserting data into a communications session

A method and system for preventing the detection of an operating system by an intruder, the operating system installed on a host in a network, is provided. The intruder transmits a network probe for operating system detection. The network probe is identified and a response is generated to the network probe, generated by the operating system, is modified. The modified response provides the intruder with false information related to the operating system, thereby misleading the intruder about the type of operating system.

Method and system for preventing operating system detection

Techniques for providing reliable transport of data across a network between a server on a server device and a client on a client device include a process on the client device which determines a number of packets to be sent by the server device without an acknowledgement message from the client device. The number of packets is based on considerations of network problems. A data packet sent to a server device includes a first field holding data indicating the number of packets to be sent by the server device without an acknowledgement message from the client device. Accordingly, a transport layer process on a client device to download large amounts of content from a stateless transport layer process on a server device, substantially reducing the computational resources consumed by the server device in serving thousands of clients.

Method and apparatus for client-side flow control in a transport protocol

A method of communicating an encrypted data broadcast to a plurality of virtual private network receivers is disclosed. A first communication channel is established between a first one of the receivers and a network node. A private data stream is communicated to the first receiver on the first channel. A request is received from the first receiver to join a broadcast data stream that is directed to a plurality of receivers by a broadcast server. A second encrypted communication channel is established between the first receiver and the network node for purposes of carrying the broadcast data stream. Decryption information, which the first receiver can use to decrypt information that is sent on the second channel, is sent to the first receiver through the first channel. The broadcast data stream is then communicated to the first receiver on the second channel. As a result, a particular receiver can receive an encrypted broadcast that is encrypted as part of a single session for a large plurality of other receivers, without impacting separate, private encrypted communications conducted by the particular receiver.

Method and apparatus for communicating an encrypted broadcast to virtual private network receivers

Mechanisms and techniques provide a system that operates in a data communications device to provide automatic authentication of a client device to a server device. The mechanisms and techniques (i.e., the system) operate to detect a requirement for authentication of a request for data sent from a client device to a server device. In response, the system creates an authentication response in response to detecting the requirement for authentication. The authentication response contains authentication information required by the server device to allow the client device to access data via the server device. The system then automatically inserts the authentication response into the data communications session between the client device and the server device. The authentication response authenticates, to the server device, access to the data by the client device. The system also maintains the data communications session between the server device and the client device in the presence of authentication response information inserted into the data communications session between the client device and the server device.

Methods and apparatus providing automatic client authentication

Mechanisms and techniques provide a system that operates in a data communications device such as a switch or a router to provide a technique for load balancing packets between computer systems based on extra data inserted in the packets. The system receives a message containing extra data. The extra data was inserted into the message by a second data communications device existing in a network coupling the first data communications device to a first computerized device that originated the message. The system identifies, based on the extra data inserted into the message, a second computerized device that is to process the message and forwards the message to the second computerized device for processing. The extra data can include demographic data that can be used to select a demographic server, and for selection of a specific server from a group of servers associated with the demographic server.

Methods and apparatus for directing messages to computer systems based on inserted data

A URL re-writing system and method in a network examines and modifies HTML data and its embedded URLs. The re-writing system can be implemented in a router and can replace URLs found in the HTML data in order to accomplish more efficient routing for example to a close mirror site or for content routing. The re-writing system can also use URL replacement to insert important or emergency information to data received by users on a Web-based network.

System and method for generalized URL-rewriting

In a computerized device, a technique for communicating with an external transmission control protocol device involves operating in a stateless manner. In particular, the technique includes providing an acknowledgment message to the external transmission control protocol device in response to a synchronization message from the external transmission control protocol device, receiving a request message for content from the external transmission control protocol device, and sending, to the external transmission control protocol device, a reply message having at least a portion of the content, regardless of whether the computerized device received an acknowledgment message from the external transmission control protocol device in response to the acknowledgment message provided by the computerized device to the external transmission control protocol device.

Growing community of inventors

Goleta, CA, United States of America

Jean-Philippe Champagne