Cisco Technology, Inc.

International Business Machines Corporation

Other

Pascal Thubert

Patrick Wetterwald

Eric Michel Levy-Abegnoli

Jean-Philippe Vasseur

Jerome Henry

Domenico Ficara

Carlos M Pignataro

Nagendra Kumar Nainar

Ijsbrand Wijnands

Charles Calvin Byers

Eric Albin Voit

Robert Edgar Barton

Pradeep Kumar Kathail

Hugo Latapie

Robert E Barton

Enzo Fenoglio

Srinath Gundavelli

Billy Gayle Moon

Alpesh S Patel

Pierre Secondo

Xiaoqing Zhu

Gonzalo A Salgueiro

Ali Sajassi

Kent Kinchu Leung

Brian Eliot Weis

Joseph Michael Clarke

Gregory J Shepherd

Sudhir Kumar Jain

Shmuel Shaffer

Mark Grayson

John Albert Toebes

Malcolm Muir Smith

Alvaro E Retana

Flavio Giovanni Bonomi

Mankamana Prasad Mishra

Shwetha Subray Bhandari

Ralph Droms

Russell Ivan White

David Delano Ward

Jonathan W Hui

Brian Donald Hart

Matthew Aaron Silverman

Norman William Finn

Juan Carlos Zuniga

Vincent Jean Ribiere

Huimin She

Marco Molteni

Patrice Bellagamba

Amine Choukir

Jonas Zaddach

Marc Lamberton

Alessandro Erta

Denis Esteve

Feiliang Wang

Li Zhao

Akram Ismail Sheriff

David A Maluf

Chuanwei Li

Lionel Denecheau

Ole Troan

Joseph T Friel

Andre Surcouf

Giovanna Carofiglio

Lele Zhang

Arun G Khanna

Pierre Pfister

Francois Le Faucheur

Salvatore Valenza

Maik Guenter Seewald

Vincent Cuissard

Eliot Lear

Sateesh Kumar Addepalli

Stig Ingvar Venaas

Johannes Petrus Kruys

Andre Jean-Marie Surcouf

Ashok Krishnaji Moghe

Luca Bisti

Robert J Friday

Rong Pan

Nancy Cam-Winget

Toerless Eckert

Dhananjaya Rao

Bretton Lee Douglas

Neal Dante Castagnoli

Indermeet Singh Gandhi

Abhay Kumar Roy

Chiu Ngok Eric Wong

Reshad Rahman

Andrew Frederick Myles

Arthur Gerald Howarth

Max Pritikin

Prasad Miriyala

Douglas Chan

Lillian Lei Dai

Jean-Claude Dispensa

Thomas Davies

Marcelo Yannuzzi

Sri Gundavelli

Roland Arthur Saville

Jerome Tollet

Techniques for using Home Addresses, Mobile Internet Protocol (MIP), and/or other techniques in conjunction with Domain Name System (DNS) to obfuscate server-side addresses in data communications. Rather than having DNS provide a client device with an IP address of an endpoint device, such as a server, the DNS instead returns a Home Address that is mapped to the client device and at least one server IP address of the endpoint device. In this way, IP addresses of servers are obfuscated by a network mapping of the Home Addresses and the server IP addresses. The client device may then communicate data packets to the server using the Home Addresses as the destination address, and a virtual network service that works in conjunction with DNS can encapsulate the data packet with the server IP addresses and forward the data packet onto the server.

Obfuscating server-side addresses

In one embodiment, an illustrative method herein may comprise: obtaining, by a process, operational performance metrics associated with one or more devices performing an operation and contemporaneous situational sensor data associated with the one or more devices performing the operation; establishing, by the process, a correlation between a health of the operational performance metrics and the contemporaneous situational sensor data for the one or more devices while performing the operation; determining, by the process, an adjustment to increase the health of the operational performance metrics for a particular device of the one or more devices based on the correlation; and communicating, by the process, the adjustment to a receiving device to facilitate adjusting of the particular device.

Method for adjusting computing device based on data fusion by obtaining operational health performance metrics and contemporaneous situational sensor data associated with the set of devices

In one embodiment, a method includes receiving a request from an access point to transmit to a TSN data payload to a wireless TSN station, identifying resource units (RUs) in a downlink channel, each RU comprising a set of RU tones, identifying access category (AC) queues, multiplexing the RUs and AC queues to generate RU and AC queue pairs, generating timing boundaries of the pairs, wherein each timing boundary represents a combination of an average airtime of each RU and an average wait time of each AC queue for transmitting a size of the TSN data payload, iteratively validating the timing boundaries with a TSN lookahead time, and determining a first RU tone from a first RU associated with a first timing boundary less than the TSN lookahead time to transmit the TSN data payload in a first AC queue to the wireless TSN station.

Implementing deterministic traffic delivery in a time-sensitive networking system

The present disclosure relates to simultaneous operation of Wi-Fi access points in a super cell mode and a standalone mode and controlling connectivity of end terminals thereto. In one aspect, a method includes receiving a configuration for a group of access points operating within a network, the configuration allowing each access point of the group to operate in a super cell mode over a shared frequency channel and a standalone mode over a non-shared frequency channel. The method further includes determining, for an end terminal, whether the end terminal is to connect to the network over the shared frequency channel or the non-shared frequency channel based on a network policy to yield a determination; and controlling connectivity of the end terminal to at least one access point of the group of access points over the shared frequency channel or the non-shared frequency channel based on the determination.

Dual mode Wi-Fi operation in shared and non-shared channels

A network of devices can be stabilized by administering an energy-aware topology that corresponds to a desired state derived in part from one or more sustainability metrics. Devices suitable for stabilization can include a processor, a memory, a plurality of elements, a communication port coupled with one or more neighboring devices, and an energy-aware topology logic. The energy-aware topology logic can monitor incoming traffic from one or more neighboring devices, receive current state data associated with the plurality of elements, and receive update data from the one or more neighboring devices via a sustainability-related augmented IGP. Also, the energy-aware topology logic can generate a desired state for the device based on at least the received current state data and update data. One or more of the plurality of elements may be modified in response to the generated desired state, wherein the modification involves changing one or more sustainability-related capabilities.

Energy-aware topology

Techniques for improving telemetry in resource-constrained device environments. In some examples, the techniques include gossiping telemetry information between peer devices of a wireless network to, among other things, reduce telemetry cost and/or an amount of telemetry data streamed to a telemetry collector. In some examples, the techniques may also include intelligently exporting telemetry data from resource-constrained devices towards backend systems without exhausting the resource-constrained devices and/or the backend systems. In examples, the telemetry data may be contextual information associated with an endpoint, an application, a network-device resource (e.g., CPU, battery, memory, storage, etc.), geographical constraints, and/or the like.

Resource-conserving telemetry for constrained devices

Techniques for using Prefix Address Translation (PAT), Mobile Internet Protocol (MIP), and/or other techniques to anonymize server-side addresses in data communications. Rather than allowing a server and/or endpoint have visibility of a client IP address of a client device accessing the server and/or endpoint, a virtual network service instead returns a PAT IP address that is mapped to the client device and/or the endpoint device. In this way, IP addresses of clients devices are obfuscated by the virtual network. The client device may then communicate data packets to the server and/or endpoint using the PAT IP address as the source address, and the virtual network service that works in conjunction with the server and/or endpoints can convert the PAT IP address to the actual IP address of the client for return packets using PAT and forward the return packet onto the client device.

Anonymizing client-side addresses

Techniques for using Network Address Translation (NAT), Mobile Internet Protocol (MIP), and/or other techniques in conjunction with Domain Name System (DNS) to anonymize server-side addresses in data communications. Rather than having DNS provide a client device with an IP address of an endpoint device, such as a server, the DNS instead returns a random IP address that is mapped to the client device and the endpoint device. In this way, IP addresses of servers are obfuscated by a random IP address that cannot be used to identify the endpoint device or service. The client device may then communicate data packets to the server using the random IP address as the destination address, and a gateway that works in conjunction with DNS can convert the random IP address to the actual IP address of the server using NAT and forward the data packet onto the server.

Randomizing server-side addresses

Personal network Software Defined-Wide Area Networks (SD-WANs) with attested permissions may be provided. A first one of a plurality Personal Area Network (PAN) devices in a PAN may seed a routing table entry for at least one application that the first one of the plurality PAN devices supports. The routing table entry may include at least one characteristic associated with an egress link between the first one of the plurality PAN devices and a device outside of the PAN. The routing table entry may be exchanged among the plurality of PAN devices in the PAN. Then data may be routed, based on the exchanged routing table entry, in the PAN through the first one of the plurality PAN devices through the egress link to the device outside of the PAN.

Personal network software defined-wide area networks (SD-WANs) with attested permissions

A single cluster formation technique for Ultra-Wideband (UWB) Time Difference of Arrival (TDoA) may be provided. A primary anchor may be elected from a plurality of anchors. Then a structure of a cluster formed by the plurality of anchors may be collected by the primary anchor. A Direction-Oriented Directed Acyclic Graph (DODAG) may be built for the cluster based on an uncontrolled time drift along the DODAG and weighted by a number of hops to the primary anchor.

Single cluster formation technique for ultra-wideband (UWB) time difference of arrival (TDoA)

In one embodiment, a method includes identifying, using a Static Context Header Compression (SCHC) rules engine, one or more packets matching a rule, selecting a firewall decision based on the identified one or more packets and the rule, and applying the firewall decision to the one or more identified packets.

System and method for providing SCHC-based edge firewalling

Techniques for using Network Address Translation (NAT), Mobile Internet Protocol (MIP), and/or other techniques in conjunction with Domain Name System (DNS) to anonymize server-side addresses in data communications and verify an authenticity of a client device attempting to use a virtual IP (VIP) address. Rather than having DNS provide a client device with an IP address of an endpoint device, such as a server, the DNS instead returns a VIP address that is mapped to the client device and the endpoint device. The client device may then communicate data packets to the server using the VIP address as the destination address, and a virtual network service that works in conjunction with DNS can verify an authenticity of the client device and convert the VIP address to the actual IP address of the server using NAT and forward the data packet onto the server.

Client device verification

Disclosed are systems, apparatuses, methods, and computer-readable media for identifying a location of a wireless device. A method for identifying a location of a wireless device includes transmitting a request message to the wireless device for identifying a position of the wireless device; receiving a response message from the wireless device; determining first time information based on a time of flight (ToF) of the request message and the response message, wherein the ToF corresponds to a distance of the wireless device from the AP; receiving a second message from a second AP that includes second time information associated with the request message and the response message; receiving a third message from a third AP that includes third time information associated with the request message and the response message; and transmitting location configuration information to the wireless device for the wireless device to determine a position of the wireless device.

Estimating position from reference signals received by coordinating access points

In one embodiment, a controller for an overhead mesh of access points in an area receives an indication from one or more access points of the overhead mesh that a client device is present in the area. The controller determines movements of the client device within the area. The controller selects a set of access points of the overhead mesh to support communications between the client device and the overhead mesh, based on the movements of the client device determined by the controller. The controller causes the controller, the set of access points to form communication schedules to support communications with the client device that do not require a prior association exchange with the client device.

Ceiling-controlled communication scheduling in an overhead mesh of access points

In one embodiment, a method is disclosed comprising monitoring dynamic locations of a plurality of mobile communication devices within a physical area covered by a wireless communication network, wherein keys are distributed to the mobile communication devices at association time; determining that a particular mobile communication device should have a relay for communication with the network based on a first location of the particular mobile communication device and inadequate wireless communication characteristics at the first location; selecting an opportunistic relay device from the mobile communication devices based on a second location of the opportunistic relay device and adequate wireless communication characteristics of the opportunistic relay device within the network and to the first location from the second location; and directing the opportunistic relay device to relay communications for the particular mobile communication device at the first location, wherein the communications are encrypted based on the keys.

Opportunistic relay among mobile communication devices

Growing community of inventors

La Colle sur Loup, France

Pascal Thubert