Cisco Technology, Inc.

Huawei Technologies Co., Limited

Sonicwall Inc.

Li Zhao

Lele Zhang

Huimin She

Chuanwei Li

Pascal Thubert

Chunhua You

Haibo Dong

Qufang Huang

Xiaoying Xu

Feiliang Wang

Yajun Xia

Qinghai Zeng

Xing Liu

Akram Ismail Sheriff

Dong Xiang

Yanjun Yang

Yicheng He

Patrick Wetterwald

Mingzeng Dai

Hongping Zhang

Chong Lou

Le Yan

Zhong Chen

Qiang Fan

Yinghao Guo

Nan Yi

Yihua Dai

A random access method and apparatus are provided. The method includes: A terminal device receives first information sent by a network device, wherein the first information includes a priority value of a first parameter used for a random access procedure. The terminal device initiates the random access procedure based on the priority value. According to the application, the terminal device can preferentially select, based on the priority value of the first parameter, a two-step random access procedure or send a message in the random access procedure by using high power, to quickly access a network and reduce an access delay.

Random access method and apparatus

In one embodiment, a method comprises: creating, by a root network device in a wireless data network, a perimeter topology comprising a first distance vector-protocol path of a first group of perimeter devices and a second distance vector-protocol path of a second group of the perimeter devices, the creating comprising outputting first and second advertisement messages causing the perimeter devices to attach to only one parent of only one of the first or second distance vector-protocol paths and a junction device to attach at respective ends of the first and second distance vector-protocol paths; and causing the junction device to forward, from the first distance vector-protocol path, a data packet toward the root network device via the second distance vector-protocol path.

Perimeter formation and mobile device detection in a RPL network

In one embodiment, a method comprises: outputting, by a gateway device in a wireless data network comprising wireless network devices, a rule template for execution by any of the wireless network devices, the rule template comprising a device information variable for insertion of a device-specific value by a corresponding wireless network device executing the rule template, a context variable for insertion, by the wireless network devices, of a generic network context, and a compression rule specifying a compression operation and a corresponding decompression operation; and providing the generic network context to the wireless network devices, enabling each wireless network device to selectively execute the rule template, for execution of one of the compression operation on a network protocol data packet or the corresponding decompression operation for recovery of the network protocol data packet, based on the insertion of the corresponding device-specific value for the device information variable.

Dynamic compression context in a wireless data network based on applying generic network context and device-specific context to a rule template

This application provides a random access method and apparatus. The method includes: sending, to a network device, a random access signal and first information used for contention resolution; monitoring a first response and a second response, where the first response is a response to the random access signal and includes an uplink grant, and the second response is a response to the first information used for contention resolution; and when detecting the first response, and detecting the second response before a time domain position of the uplink grant, determining that random access succeeds; or when detecting the first response, sending second information used for contention resolution by using the uplink grant, and when detecting the second response or a third response, determining that random access succeeds, where the third response is a response to the second information used for contention resolution.

A method includes determining a number of drops of a plurality of messages sent to a first node of a plurality of nodes within a mesh network. Based at least in part on the number of drops of the plurality of messages exceeding a threshold number of drops for a time period, decrementing a first rating assigned to the first node to a second rating assigned to the first node. Based at least in part on the second rating being below a rating threshold, determining that the first node is a potentially malicious node. Based at least in part on a first distance to the first node being larger than a distance threshold, identifying that the first node is a malicious node. The method may further include ending communications with the first node.

Malicious black hole node detection and circumvention

In one embodiment, a method comprises: registering, by a root network device in a low power and lossy network, a constrained network device that is reachable within the low power and lossy network; obtaining, by the root network device, executable code associated with execution of a network service operation by the constrained network device; receiving a data packet from a source device and destined for the constrained network device; and causing execution on the data packet, by the root network device, of the network service operation on behalf of the constrained network device in response to reception of the data packet.

Root network device causing execution of network service operations on behalf of constrained wireless network device in a low power and lossy network

The present disclosure provides a hierarchical method of identifying unauthorized network traffic in a network by applying, at one of a first plurality of nodes of a network, a first level of network traffic analysis to identify received network traffic as one of authorized or suspicious network traffic, the one of the first plurality of nodes having a first path for traffic routing and a second path to one of a second plurality of nodes of the network, the second path being used for forwarding the suspicious network traffic to the one of the second plurality of nodes; tagging the received network traffic as the suspicious network traffic; and sending the suspicious network traffic to the one of the second plurality of nodes over the second path, the second network node applying a second level of network analysis to determine if the received network traffic is authorized, unauthorized or remains suspicious.

SASE based method of preventing exhausting attack in wireless mesh networks

This application provides a random access method and a communications apparatus. The method includes: determining at least one random access preamble from at least one 2-step random access preamble, or determining one type of random access preamble from at least one 2-step random access preamble and at least one 4-step random access preamble, and performing random access by using the determined random access preamble. According to the application, the terminal device can determine a type of random access to be performed, thereby reducing an access latency.

Random access method and communications apparatus

An uplink transmission method and a communications apparatus, the method including when transmitting, in a subframe in which an autonomous uplink transmission resource is configured, uplink data by using a first hybrid automatic repeat request (HARQ) process, considering that a new data indicator (NDI) for the first HARQ process is toggled, where the first HARQ process is a HARQ process that can be used for autonomous uplink transmission, and before the subframe, there is no uplink grant for the first HARQ process delivered to a HARQ entity, and performing new uplink data transmission in the subframe by using the first HARQ process.

Uplink transmission method and communications apparatus

Techniques for distributed sub-controller permission for control of data-traffic flow within software-defined networking (SDN) mesh networks to limit control plane traffic of the network are described herein. A technique described herein includes a network node of a data-traffic path of an SDN mesh network obtaining SDN sub-controller permission from a border controller of the SDN mesh network. Further, the technique includes suppression of data traffic from sibling and children nodes of data-traffic path allied nodes to the data-traffic path allied nodes. The data-traffic path allied nodes include network nodes that are part of the data-traffic path of the SDN mesh network. Further still, the technique includes the transmission of data across the data-traffic path.

Distributed sub-controller permission for control of data-traffic flow within software-defined networking (SDN) mesh network

In one embodiment, a method comprises: joining, by a network device, a network topology rooted by a root network device in a data network, and in response transmitting an advertisement indicating a position of the network device in the network topology; suppressing a second transmission based on initiating a deferred transmission operation in response to transmitting the advertisement; maintaining the deferred transmission operation to enable a prescribed minimum number of other network devices to join the network topology at respective identified lower positions than the position of the network device; and changing, by the network device, from the deferred transmission operation to an accelerated operation in response to expiration of a prescribed deferral interval or detecting the prescribed minimum number of other network devices having the respective identified lower positions, the accelerated operation enabling the network device to initiate transmission of a data packet before the other network devices.

Reclaiming transmission priority following network topology formation

Embodiments of this application provide a communication method and apparatus, and a computer storage medium, to reduce communication latency between a terminal and a base station, and improve a capability of adapting to a latency-sensitive scenario. The method provided in this application includes a terminal that receives at least one uplink configuration and at least one random access configuration from a network device. The uplink configuration is used to indicate a parameter for sending uplink data, and the random access configuration is used to indicate a parameter for sending a preamble. The at least one uplink configuration includes a first uplink configuration, the at least one random access configuration includes a first random access configuration, and there is a correspondence between the first uplink configuration and the first random access configuration.

Communication method and apparatus, and computer storage medium

A method includes identifying a potentially malicious node using a rating assigned to nodes within the network and decrementing the rating based on detected dropped messages to identify a potentially malicious node. The malicious node is identified based on location information obtained from the nodes within the network and comparable distances from the potentially malicious node. The method further includes ending communications with the malicious node and selecting a new parent node based on a presumption that any of the plurality of nodes other than the malicious node are non-malicious.

Techniques are described for managing devices using multiple virtual personal area networks (VPANs). A border router can receive a first request to join a network from a first device. The first device may be assigned to a first virtual personal area network (VPAN), which has an associated first group temporal key (GTK). The first GTK can be distributed to the first virtual device. The border router can also receive a second request to join a network from a second device. The second device may be assigned to a second VPAN, which has an associated second GTK. The second GTK can be distributed to the second virtual device.

Secure device management

Systems, methods, and computer-readable media for identifying a deployment scheme for forming a wireless mesh network based on environmental characteristics and an optimum deployment scheme. In some examples, a geographical area for deployment of a wireless mesh network is identified. Additionally, environmental information of the geographical area can be collected. Network characteristics of an optimum deployment scheme for forming the wireless mesh network can be defined. As follows, a deployment scheme for forming the wireless mesh network can be identified based on the network characteristics of the optimum deployment scheme and the environmental information of the geographical area.

Growing community of inventors

Shanghai, China

Li Zhao