Cisco Technology, Inc.

Nagendra Kumar Nainar

Carlos M Pignataro

Rajiv Asati

Jerome Henry

Joseph Michael Clarke

David John Zacks

Pascal Thubert

Ijsbrand Wijnands

Robert E Barton

Jaganbabu Rajamanickam

Gonzalo A Salgueiro

Frank Brockners

Shwetha Subray Bhandari

Akram Ismail Sheriff

Madhan Sankaranarayanan

James Neil Guichard

Zafar Ali

Chidambaram Arunachalam

Clarence Filsfils

Gregory J Shepherd

Bart A Brinckman

Faisal Iqbal

Paul M Quinn

Vinay Saini

Richard Furr

David Delano Ward

Syed Kamran Raza

Nobushige Akiya

Eric Albin Voit

Thomas Szigeti

Rakesh Gandhi

Rajesh Indira Viswambharan

Robert Edgar Barton

Mankamana Prasad Mishra

John Matthew Swartz

Luca Muscariello

Ram Mohan Ravindranath

Ahmed Refaat Bashandy

Reshad Rahman

Shankar Ramanathan

Bhupendra Yadav

Srinath Gundavelli

Charles Calvin Byers

Timothy Peter Stammers

Vimal Srivastava

Stewart Frederick Bryant

Keith Griffin

Benoit Claise

Neale D R Ranns

Daniel C Frost

Craig Thomas Hill

Eric Chen

Mark Grayson

Matthew Aaron Silverman

Stefano Benedetto Previdi

Kyle Andrew Donald Mestery

Muthurajah Sivabalan

Om Prakash Suthar

George Swallow

K Tirumaleswar Reddy

Hugo Latapie

Ian James Wells

Enzo Fenoglio

Giovanna Carofiglio

Christian J Martin

Avraham A Poupko

Sagar Soni

Alberto Compagno

Deepak Kumar

Cesar Obediente

Arvind Tiwari

Paul Brian Giralt

Kondaveeti Lakshmi Ganesh

Alejandro Alberto Eguiarte Salazar

Eric Michel Levy-Abegnoli

Nitin Kumar

Hendrikus G P Bosch

Louis Gwyn Samuel

Yi Yang

Malcolm Muir Smith

Prashanth Patil

Prakash C Jain

Tarek Saad

Peter Psenak

Darren Russell Dukes

Lionel Florit

Eric G Vyncke

Marcelo Yannuzzi

Hazim Hashim Dahir

Edward Albert Warnicke

Reinaldo Penno

Pawel Piotr Sowinski

Vengada Prasad Govindan

Hans F Ashlock

Matthew Stephen MacPherson

Neale David Raymond Ranns

Luc De Ghein

Srihari Raghavan

Justin James Muller

Walter Hulick

Techniques for determining an optimal connection path by a NHNaaS are described. The techniques may include receiving a registration from an IPS that includes service ISP service parameters, and storing the registration in a NaaS database. A request to connect to a remote service from a user device, including user parameters required is received. ISPs having respective service parameters compatible with the user parameters are identified in the NaaS database. Multiple paths offered by the service providers between the user device and the remote service are determined. Network performance data for each path is received from a network monitoring service. Using the network performance data, an optimal path for establishing the connection is identified. A request to instantiate a tunnel between the user device and remote service is transmitted to the service providers along the optimal path and the tunnel information is transmitted to the user device.

End-to-end neutral host network-as-a-service

Techniques for optimizing routing decisions based on security metrics within a network environment are described herein. In some cases, by using various security metrics, such as encryption indicators, attestation indicators, secureness metrics, and reliability metrics, an exemplary system can assess the security level and reliability of network paths. These metrics may provide valuable insights into the trustworthiness and integrity of participating nodes and links and enable informed decision-making regarding path selection.

Routing techniques for enhanced network security

A method, computer system, and computer program product are provided for decentralized machine learning. A plurality of computing networks are identified by determining that each computing network of the plurality of computing networks satisfies a predetermined number of criteria. A decentralized learning agent is provided to each computing network, wherein the decentralized learning agent is provided with input parameters for training and is trained using training data associated with a computing network to which the decentralized learning agent is provided. A plurality of learned parameters are obtained from the plurality of computing networks, wherein each learned parameter of the plurality of learned parameters is obtained by training the decentralized learning agent provided to each respective computing network. A global model is generated based on the plurality of learned parameters.

Decentralized machine learning across similar environments

A method is described that involves a method for application performance in a cross-domain network using multi-controller coordination. The method includes receiving a request at a first controller from an application within an enterprise network, wherein the request seeks to monitor a network path. The first controller identifies one or more additional controllers within the enterprise network capable of monitoring the network path. These additional controllers include a first one within the same domain as the first controller (first domain) and a second one within a different domain (second domain). A token, encompassing authentication details and monitoring requirements linked to the request, is sent to the second additional controller from the first domain. Subsequently, direct communication is established with a resource of the second controller, allowing monitoring of the request and its associated operation.

Conveying operator intent to remote agents in an administrative-constrained cross-domain multi-controller FSO network

Methods for providing spanning content tree for generating on-demand, persona-based, and journey-aware support content using machine learning. The methods involve obtaining input data related to a configuration or an operation of one or more assets in an enterprise network and based on the input data, obtaining network information about the one or more assets of the enterprise network and base support content that includes information about configuring or operating the one or more assets in the enterprise network. The methods further involve performing generative artificial intelligence learning on the base support content using the network information to generate targeted support content specific to the input data and the one or more assets of the enterprise network. The methods further involve providing the targeted support content for changing the configuration or the operation of the one or more assets in the enterprise network.

Spanning content tree for intellectual capital creation and configuration completion function through generative artificial intelligence prompt pipeline

Devices and methods that incorporate sustainability data within a header of a data packet to allow for the generation of sustainable configurations for various network devices are disclosed. Power efficiency is obtained at a node-level by including metadata to existing network flows, in an in-band/in-situ configuration. This information may be used for optimum flow placement. Received data packets may be formatted with sustainability data within a metadata shim. The received data packets are processed, and a sustainable configuration is generated for the one or more network devices. The generated sustainable configuration is transmitted to the one or more network devices to enable efficient and effective management of network devices by incorporating sustainability data into the data packets.

In-band sustainable packet management

Provided herein are techniques to facilitate enhanced cloud access security broker (CASB) functionality via in-band application observability in which a CASB can be implemented in-line between the client device and an embedded application security service. In one instance, a method may include, obtaining, by a CASB from a client device, a first message for an application transaction involving an application operating via the client device. The first message can be augmented to include first security metadata and can be forwarded to trigger one or more actions by an embedded application security service associated with the application. The CASB may obtain a second message from the embedded application security service that includes second security metadata, and one or more actions can be triggered at the CASB based, at least in part, on the second security metadata included in the second message.

Enhanced cloud access security broker functionality utilizing in-band application observability

The present disclosure describes a system and method for secure energy harvesting. An access point includes a memory and a processor communicatively coupled to the memory. The processor receives, from a wireless device, a token and an identifier for a first access point that generated the token and requests the first access point to validate the token. The processor also, in response to the first access point validating the token, wirelessly communicates a first charging frame to the wireless device.

Secure energy harvest system

A method of orchestrating one or more radio resources among various services executing within a container. The method includes obtaining, by an orchestration engine executing on a network device, a request, from a first service of a plurality of services, for use of a physical/hardware resource that connects a container running on the network device to a network. The request from the first service has a particular priority. The plurality of services execute within the container. The method further includes determining whether to connect the first service to the network via the physical/hardware resource based on the priority and an availability status of the physical/hardware resource and establishing, at a kernel level, a connection between the first service and the physical/hardware resource based on the determining.

Resource orchestration for multiple services

In one embodiment, a device may obtain a media topology of nodes involved in a collaboration session. The device may cause each of a plurality of probes to be provisioned to a corresponding node of the nodes involved in the collaboration session to perform a test of a corresponding segment of the media topology, and each of the plurality of probes may be associated to a session identifier of the collaboration session. The device may determine observability information based on results of the plurality of probes for each segment of the media topology, and the results may include an indication of the session identifier. The device may correlate the observability information to the collaboration session based on the indication of the session identifier.

Testing media topology for collaboration sessions

In one embodiment, an illustrative method herein may comprise: obtaining, by a device, a plurality of indications of errors experienced by a bot performing tasks, wherein each of the plurality of indications includes contextual information of a corresponding error; determining, by the device, correlated errors among the errors experienced by the bot; aggregating, by the device, contextual information of each of the correlated errors into aggregated contextual data; and providing, by the device, the aggregated contextual data with an error notification for a particular correlated error.

Error context for bot optimization

In one embodiment, a service chain data packet is instrumented as it is communicated among network nodes in a network providing service-level and/or networking operations visibility. The service chain data packet includes a particular header identifying a service group defining one or more service functions, and is a data packet and not a probe packet. A network node adds networking and/or service-layer operations data to the particular service chain data packet, such as, but not limited to, in the particular header. Such networking operations data includes a performance metric or attribute related to the transport of the particular service chain packet in the network. Such service-layer operations data includes a performance metric or attribute related to the service-level processing of the particular service chain data packet in the network.

Segment routing network signaling and packet processing

Described herein are devices, systems, methods, and processes for optimizing network traffic distribution across multiple paths in a manner that is energy-efficient and environmental sustainability-aware. This may be achieved by leveraging time-series analytics and capacity planning based on seasonalities. Data associated with the Layer 3 topology of the network can be collected. Bandwidth can be pre-reserved on an energy-aware traffic engineering tunnel. The time-series data can be used to build a capacity plan based on the seasonalities. Nodes may be clustered based on usage patterns and network utilization seasonality. The data can be used to make decisions about when and where to combine or shut down paths for energy efficiency, while maintaining optimal network performance. A hysteresis mechanism may be incorporated to avoid oscillation when changing active links. Power savings can be achieved by fully turning off or depowering certain network components when they are not needed.

Sustainable network-wide optimization service

Techniques are described for providing secure audio calls between a calling party and a receiving party. Upon receiving a call request from a call initiating party, a notification is sent to the intended call recipient. The call recipient can send a request for a secure call. Upon receiving the request for a secure call, a bi-directional multifactor authentication is performed to authenticate the identity of both the call initiating party and the call receiving party. In response to successfully authenticating both parties, a secure call between the parties is established. One or more secure key tokens or other metadata can be embedded in the call to ensure security of the call.

Authenticated secure audio calling and digitally signed metadata for integrity verification

Techniques for initiator-based data-plane validation of segment routed, multiprotocol label switched (MPLS) networks are described herein. In examples, an initiating node may determine to validate data-plane connectivity associated with a network path of the MPLS network. The initiating node may store validation data in a local memory of the initiating node. In examples, the initiating node may send a probe message that includes a request for identification data associated with a terminating node. The terminating node may send a probe reply message that includes the identification data, as well as, in some examples, a code that instructs the initiating node to perform validation. In examples, the initiating node may use the validation data stored in memory to compare to the identification data received from the terminating node to validate data-plane connectivity. In some examples, the initiating node may indicate a positive or negative response after performing the validation.

Initiator-based data-plane validation for segment routed, multiprotocol label switched (MPLS) networks

Growing community of inventors

Morrisville, NC, United States of America

Nagendra Kumar Nainar