Cisco Technology, Inc.

International Business Machines Corporation

Other

Pascal Thubert

Patrick Wetterwald

Eric Michel Levy-Abegnoli

Jean-Philippe Vasseur

Vincent Jean Ribiere

Jerome Henry

Huimin She

Marco Molteni

Patrice Bellagamba

Carlos M Pignataro

Nagendra Kumar Nainar

Domenico Ficara

Jonas Zaddach

Ijsbrand Wijnands

Charles Calvin Byers

Marc Lamberton

Amine Choukir

Dirk Anteunis

Alessandro Erta

Denis Esteve

Feiliang Wang

Eric Albin Voit

Robert Edgar Barton

Pradeep Kumar Kathail

Li Zhao

Hugo Latapie

Enzo Fenoglio

Akram Ismail Sheriff

David A Maluf

Chuanwei Li

Lionel Denecheau

Ole Troan

Srinath Gundavelli

Billy Gayle Moon

Robert E Barton

Alpesh S Patel

Pierre Secondo

Xiaoqing Zhu

Joseph T Friel

Andre Surcouf

Giovanna Carofiglio

Lele Zhang

Jakob Heitz

Gonzalo A Salgueiro

Kent Kinchu Leung

Brian Eliot Weis

Joseph Michael Clarke

Gregory J Shepherd

Sudhir Kumar Jain

Francois Le Faucheur

Pierre Pfister

Salvatore Valenza

Maik Guenter Seewald

Vincent Cuissard

Eliot Lear

Shmuel Shaffer

Ali Sajassi

John Albert Toebes

Alvaro E Retana

Flavio Giovanni Bonomi

Malcolm Muir Smith

Mankamana Prasad Mishra

Shwetha Subray Bhandari

Ralph Droms

Russell Ivan White

Arun G Khanna

Sateesh Kumar Addepalli

Stig Ingvar Venaas

Johannes Petrus Kruys

Andre Jean-Marie Surcouf

Ashok Krishnaji Moghe

Luca Bisti

Xuechen Yang

Krishnaswamy Muddenahally Ananthamurthy

David Delano Ward

Mark Grayson

Jonathan W Hui

Brian Donald Hart

Matthew Aaron Silverman

Norman William Finn

Robert J Friday

Rong Pan

Nancy Cam-Winget

Toerless Eckert

Dhananjaya Rao

Bretton Lee Douglas

Neal Dante Castagnoli

Abhay Kumar Roy

Chiu Ngok Eric Wong

Reshad Rahman

Andrew Frederick Myles

Arthur Gerald Howarth

Max Pritikin

Prasad Miriyala

Douglas Chan

Lillian Lei Dai

Jean-Claude Dispensa

Thomas Davies

Roland Arthur Saville

Preethi Natarajan

Techniques for using Network Address Translation (NAT), Mobile Internet Protocol (MIP), and/or other techniques in conjunction with Domain Name System (DNS) to anonymize server-side addresses in data communications. Rather than having DNS provide a client device with an IP address of an endpoint device, such as a server, the DNS instead returns a random IP address that is mapped to the client device and the endpoint device. In this way, IP addresses of servers are obfuscated by a random IP address that cannot be used to identify the endpoint device or service. The client device may then communicate data packets to the server using the random IP address as the destination address, and a gateway that works in conjunction with DNS can convert the random IP address to the actual IP address of the server using NAT and forward the data packet onto the server.

Randomizing server-side addresses

Personal network Software Defined-Wide Area Networks (SD-WANs) with attested permissions may be provided. A first one of a plurality Personal Area Network (PAN) devices in a PAN may seed a routing table entry for at least one application that the first one of the plurality PAN devices supports. The routing table entry may include at least one characteristic associated with an egress link between the first one of the plurality PAN devices and a device outside of the PAN. The routing table entry may be exchanged among the plurality of PAN devices in the PAN. Then data may be routed, based on the exchanged routing table entry, in the PAN through the first one of the plurality PAN devices through the egress link to the device outside of the PAN.

Personal network software defined-wide area networks (SD-WANs) with attested permissions

A single cluster formation technique for Ultra-Wideband (UWB) Time Difference of Arrival (TDoA) may be provided. A primary anchor may be elected from a plurality of anchors. Then a structure of a cluster formed by the plurality of anchors may be collected by the primary anchor. A Direction-Oriented Directed Acyclic Graph (DODAG) may be built for the cluster based on an uncontrolled time drift along the DODAG and weighted by a number of hops to the primary anchor.

Single cluster formation technique for ultra-wideband (UWB) time difference of arrival (TDoA)

In one embodiment, a method includes identifying, using a Static Context Header Compression (SCHC) rules engine, one or more packets matching a rule, selecting a firewall decision based on the identified one or more packets and the rule, and applying the firewall decision to the one or more identified packets.

System and method for providing SCHC-based edge firewalling

Techniques for using Network Address Translation (NAT), Mobile Internet Protocol (MIP), and/or other techniques in conjunction with Domain Name System (DNS) to anonymize server-side addresses in data communications and verify an authenticity of a client device attempting to use a virtual IP (VIP) address. Rather than having DNS provide a client device with an IP address of an endpoint device, such as a server, the DNS instead returns a VIP address that is mapped to the client device and the endpoint device. The client device may then communicate data packets to the server using the VIP address as the destination address, and a virtual network service that works in conjunction with DNS can verify an authenticity of the client device and convert the VIP address to the actual IP address of the server using NAT and forward the data packet onto the server.

Client device verification

Disclosed are systems, apparatuses, methods, and computer-readable media for identifying a location of a wireless device. A method for identifying a location of a wireless device includes transmitting a request message to the wireless device for identifying a position of the wireless device; receiving a response message from the wireless device; determining first time information based on a time of flight (ToF) of the request message and the response message, wherein the ToF corresponds to a distance of the wireless device from the AP; receiving a second message from a second AP that includes second time information associated with the request message and the response message; receiving a third message from a third AP that includes third time information associated with the request message and the response message; and transmitting location configuration information to the wireless device for the wireless device to determine a position of the wireless device.

Estimating position from reference signals received by coordinating access points

In one embodiment, a controller for an overhead mesh of access points in an area receives an indication from one or more access points of the overhead mesh that a client device is present in the area. The controller determines movements of the client device within the area. The controller selects a set of access points of the overhead mesh to support communications between the client device and the overhead mesh, based on the movements of the client device determined by the controller. The controller causes the controller, the set of access points to form communication schedules to support communications with the client device that do not require a prior association exchange with the client device.

Ceiling-controlled communication scheduling in an overhead mesh of access points

In one embodiment, a method is disclosed comprising monitoring dynamic locations of a plurality of mobile communication devices within a physical area covered by a wireless communication network, wherein keys are distributed to the mobile communication devices at association time; determining that a particular mobile communication device should have a relay for communication with the network based on a first location of the particular mobile communication device and inadequate wireless communication characteristics at the first location; selecting an opportunistic relay device from the mobile communication devices based on a second location of the opportunistic relay device and adequate wireless communication characteristics of the opportunistic relay device within the network and to the first location from the second location; and directing the opportunistic relay device to relay communications for the particular mobile communication device at the first location, wherein the communications are encrypted based on the keys.

Opportunistic relay among mobile communication devices

In one embodiment, a method comprises: creating, by a root network device in a wireless data network, a perimeter topology comprising a first distance vector-protocol path of a first group of perimeter devices and a second distance vector-protocol path of a second group of the perimeter devices, the creating comprising outputting first and second advertisement messages causing the perimeter devices to attach to only one parent of only one of the first or second distance vector-protocol paths and a junction device to attach at respective ends of the first and second distance vector-protocol paths; and causing the junction device to forward, from the first distance vector-protocol path, a data packet toward the root network device via the second distance vector-protocol path.

Perimeter formation and mobile device detection in a RPL network

In one embodiment, a device sends data traffic to a gateway of a backhaul mesh network via a first wireless access point of the backhaul mesh network. The device maintains, while associated with the first wireless access point, an association with a second wireless access point of the backhaul mesh network by sending a frame to the first wireless access point that is relayed by the first wireless access point to the second wireless access point. The device makes a determination that additional data traffic should be sent to the gateway of the backhaul mesh network via the second wireless access point. The device sends, based on the determination, the additional data traffic to the gateway of the backhaul mesh network via the second wireless access point.

Maintaining multiple wireless associations via an over-the-wire relay

Granular guard interval tuning may be provided. A delay profile for a plurality of sub-bands in a serving channel may be created. Then delay spread information from at least one calibration helper device for the plurality of sub-bands in the serving channel may be received. Next, a delay spread matrix based on the delay profile, the delay spread information, and a location of the calibration helper devices may be created. The delay spread matrix may then be used to determine optimal Guard Intervals (GIs).

Granular guard interval tuning

In one embodiment, a supervisory device in a network forms a virtual access point (VAP) for a node in the network. A set of access points (APs) in the network are mapped to the VAP as part of a VAP mapping and the node treats the APs in the VAP mapping as a single AP for purposes of communicating with the network. The supervisory device receives measurements from the APs in the VAP mapping regarding communications associated with the node. The supervisory device identifies a movement of the node based on the received measurements from the APs in the VAP mapping. The supervisory device adjusts the set of APs in the VAP mapping based on the identified movement of the node.

Transparent roaming in virtual access point (VAP) enabled networks

Described herein are devices, systems, methods, and processes for optimizing network traffic distribution across multiple paths in a manner that is energy-efficient and environmental sustainability-aware. This may be achieved by leveraging time-series analytics and capacity planning based on seasonalities. Data associated with the Layer 3 topology of the network can be collected. Bandwidth can be pre-reserved on an energy-aware traffic engineering tunnel. The time-series data can be used to build a capacity plan based on the seasonalities. Nodes may be clustered based on usage patterns and network utilization seasonality. The data can be used to make decisions about when and where to combine or shut down paths for energy efficiency, while maintaining optimal network performance. A hysteresis mechanism may be incorporated to avoid oscillation when changing active links. Power savings can be achieved by fully turning off or depowering certain network components when they are not needed.

Sustainable network-wide optimization service

Techniques for using Network Address Translation (NAT), Mobile Internet Protocol (MIP), and/or other techniques in conjunction with Domain Name System (DNS) to anonymize server-side addresses in data communications. Rather than having DNS provide a client device with an IP address of an endpoint device, such as a server, the DNS instead returns a virtual IP (VIP) address that is mapped to the client device and the endpoint device. In this way, IP addresses of servers are obfuscated by a virtual network of VIP addresses. The client device may then communicate data packets to the server using the VIP address as the destination address, and a virtual network service that works in conjunction with DNS can convert the VIP address to the actual IP address of the server using NAT and forward the data packet onto the server.

Anonymizing server-side addresses

In one embodiment, a method comprises: outputting, by a gateway device in a wireless data network comprising wireless network devices, a rule template for execution by any of the wireless network devices, the rule template comprising a device information variable for insertion of a device-specific value by a corresponding wireless network device executing the rule template, a context variable for insertion, by the wireless network devices, of a generic network context, and a compression rule specifying a compression operation and a corresponding decompression operation; and providing the generic network context to the wireless network devices, enabling each wireless network device to selectively execute the rule template, for execution of one of the compression operation on a network protocol data packet or the corresponding decompression operation for recovery of the network protocol data packet, based on the insertion of the corresponding device-specific value for the device information variable.

Dynamic compression context in a wireless data network based on applying generic network context and device-specific context to a rule template

Growing community of inventors

La Colle sur Loup, France

Pascal Thubert