Cisco Technology, Inc.

Muthu Arul Mozhi Perumal

Ram Mohan Ravindranath

Daniel George Wing

K Tirumaleswar Reddy

William C VerSteeg

Ram Mohan R

Modern day user applications leverages new communication technologies such as WebRTC, WebEx, and Jabber allow devices to connect and exchange media content including audio streams, video streams, and data stream/channels. The present disclosure describes mechanisms for a Port Control Protocol (PCP) server to provide feedback to PCP clients to enforce certain policies on the transport of such media content for a network. A policy may include a traffic handling policy for enforcing differentiated quality of service characteristics for different types of media streams. Another policy may include a security policy ensuring a data files being transmitted over a data channel from one endpoint travels to a security application via a relay element before the packets reaches another endpoint. The mechanisms are transparent to the endpoints, and advantageously preserve the user experience for these user applications.

Smarter policy decisions based on metadata in data flows

A Trusted Routing Point (TROP) generates a signaling message that includes an authorization token used to authorize a firewall to open a pinhole. The signaling message contains a first indicator that indicates whether a data field in the signaling message represents a source address of a media flow. The signaling message also includes a second indicator that indicates whether the firewall should derive the source address of the media flow from the data field. The authorization token is generated using a one-way hash function over information that may be included in the signaling message, including the first indicator and the second indicator.

Method and apparatus to scale authenticated firewall traversal using trusted routing point

A method for inter-working between an alternative network address type (ANAT) endpoint and an interactive connectivity establishment (ICE) is provided. The method may include identifying one or more network addresses operable to be used to communicate with a alternative network address type (ANAT) endpoint. One or more candidates operable to be used for interactive connectivity establishment (ICE) traversal may also be identified. A preferred network address may be determined from the one or more network addresses based on an ANAT endpoint preference. A corresponding candidate may be determined based on the ANAT endpoint preference. The corresponding candidate may use a candidate address to communicate. A media stream may be established between the preferred network address and the corresponding candidate address.

Growing community of inventors

Bengaluru, India

Muthu Arul Mozhi Perumal