Cisco Technology, Inc.

International Business Machines Corporation

Other

Pascal Thubert

Patrick Wetterwald

Eric Michel Levy-Abegnoli

Jean-Philippe Vasseur

Jerome Henry

Carlos M Pignataro

Nagendra Kumar Nainar

Domenico Ficara

Ijsbrand Wijnands

Charles Calvin Byers

Eric Albin Voit

Robert Edgar Barton

Pradeep Kumar Kathail

Hugo Latapie

Enzo Fenoglio

Srinath Gundavelli

Billy Gayle Moon

Robert E Barton

Alpesh S Patel

Pierre Secondo

Xiaoqing Zhu

Gonzalo A Salgueiro

Kent Kinchu Leung

Ali Sajassi

Brian Eliot Weis

Joseph Michael Clarke

Gregory J Shepherd

Sudhir Kumar Jain

Shmuel Shaffer

John Albert Toebes

Malcolm Muir Smith

Alvaro E Retana

Flavio Giovanni Bonomi

Shwetha Subray Bhandari

Mankamana Prasad Mishra

Ralph Droms

Russell Ivan White

David Delano Ward

Mark Grayson

Jonathan W Hui

Brian Donald Hart

Matthew Aaron Silverman

Norman William Finn

Juan Carlos Zuniga

Vincent Jean Ribiere

Huimin She

Marco Molteni

Patrice Bellagamba

Jonas Zaddach

Amine Choukir

Marc Lamberton

Alessandro Erta

Denis Esteve

Feiliang Wang

Li Zhao

David A Maluf

Akram Ismail Sheriff

Chuanwei Li

Lionel Denecheau

Ole Troan

Joseph T Friel

Andre Surcouf

Giovanna Carofiglio

Lele Zhang

Jakob Heitz

Arun G Khanna

Pierre Pfister

Francois Le Faucheur

Salvatore Valenza

Maik Guenter Seewald

Vincent Cuissard

Eliot Lear

Sateesh Kumar Addepalli

Stig Ingvar Venaas

Johannes Petrus Kruys

Andre Jean-Marie Surcouf

Ashok Krishnaji Moghe

Luca Bisti

Robert J Friday

Rong Pan

Nancy Cam-Winget

Toerless Eckert

Dhananjaya Rao

Bretton Lee Douglas

Neal Dante Castagnoli

Abhay Kumar Roy

Indermeet Singh Gandhi

Chiu Ngok Eric Wong

Reshad Rahman

Andrew Frederick Myles

Arthur Gerald Howarth

Prasad Miriyala

Max Pritikin

Douglas Chan

Lillian Lei Dai

Jean-Claude Dispensa

Thomas Davies

Sri Gundavelli

Roland Arthur Saville

Preethi Natarajan

The present disclosure relates to simultaneous operation of Wi-Fi access points in a super cell mode and a standalone mode and controlling connectivity of end terminals thereto. In one aspect, a method includes receiving a configuration for a group of access points operating within a network, the configuration allowing each access point of the group to operate in a super cell mode over a shared frequency channel and a standalone mode over a non-shared frequency channel. The method further includes determining, for an end terminal, whether the end terminal is to connect to the network over the shared frequency channel or the non-shared frequency channel based on a network policy to yield a determination; and controlling connectivity of the end terminal to at least one access point of the group of access points over the shared frequency channel or the non-shared frequency channel based on the determination.

Dual mode Wi-Fi operation in shared and non-shared channels

A network of devices can be stabilized by administering an energy-aware topology that corresponds to a desired state derived in part from one or more sustainability metrics. Devices suitable for stabilization can include a processor, a memory, a plurality of elements, a communication port coupled with one or more neighboring devices, and an energy-aware topology logic. The energy-aware topology logic can monitor incoming traffic from one or more neighboring devices, receive current state data associated with the plurality of elements, and receive update data from the one or more neighboring devices via a sustainability-related augmented IGP. Also, the energy-aware topology logic can generate a desired state for the device based on at least the received current state data and update data. One or more of the plurality of elements may be modified in response to the generated desired state, wherein the modification involves changing one or more sustainability-related capabilities.

Energy-aware topology

Techniques for improving telemetry in resource-constrained device environments. In some examples, the techniques include gossiping telemetry information between peer devices of a wireless network to, among other things, reduce telemetry cost and/or an amount of telemetry data streamed to a telemetry collector. In some examples, the techniques may also include intelligently exporting telemetry data from resource-constrained devices towards backend systems without exhausting the resource-constrained devices and/or the backend systems. In examples, the telemetry data may be contextual information associated with an endpoint, an application, a network-device resource (e.g., CPU, battery, memory, storage, etc.), geographical constraints, and/or the like.

Resource-conserving telemetry for constrained devices

Techniques for using Prefix Address Translation (PAT), Mobile Internet Protocol (MIP), and/or other techniques to anonymize server-side addresses in data communications. Rather than allowing a server and/or endpoint have visibility of a client IP address of a client device accessing the server and/or endpoint, a virtual network service instead returns a PAT IP address that is mapped to the client device and/or the endpoint device. In this way, IP addresses of clients devices are obfuscated by the virtual network. The client device may then communicate data packets to the server and/or endpoint using the PAT IP address as the source address, and the virtual network service that works in conjunction with the server and/or endpoints can convert the PAT IP address to the actual IP address of the client for return packets using PAT and forward the return packet onto the client device.

Anonymizing client-side addresses

Techniques for using Network Address Translation (NAT), Mobile Internet Protocol (MIP), and/or other techniques in conjunction with Domain Name System (DNS) to anonymize server-side addresses in data communications. Rather than having DNS provide a client device with an IP address of an endpoint device, such as a server, the DNS instead returns a random IP address that is mapped to the client device and the endpoint device. In this way, IP addresses of servers are obfuscated by a random IP address that cannot be used to identify the endpoint device or service. The client device may then communicate data packets to the server using the random IP address as the destination address, and a gateway that works in conjunction with DNS can convert the random IP address to the actual IP address of the server using NAT and forward the data packet onto the server.

Randomizing server-side addresses

Personal network Software Defined-Wide Area Networks (SD-WANs) with attested permissions may be provided. A first one of a plurality Personal Area Network (PAN) devices in a PAN may seed a routing table entry for at least one application that the first one of the plurality PAN devices supports. The routing table entry may include at least one characteristic associated with an egress link between the first one of the plurality PAN devices and a device outside of the PAN. The routing table entry may be exchanged among the plurality of PAN devices in the PAN. Then data may be routed, based on the exchanged routing table entry, in the PAN through the first one of the plurality PAN devices through the egress link to the device outside of the PAN.

Personal network software defined-wide area networks (SD-WANs) with attested permissions

A single cluster formation technique for Ultra-Wideband (UWB) Time Difference of Arrival (TDoA) may be provided. A primary anchor may be elected from a plurality of anchors. Then a structure of a cluster formed by the plurality of anchors may be collected by the primary anchor. A Direction-Oriented Directed Acyclic Graph (DODAG) may be built for the cluster based on an uncontrolled time drift along the DODAG and weighted by a number of hops to the primary anchor.

Single cluster formation technique for ultra-wideband (UWB) time difference of arrival (TDoA)

In one embodiment, a method includes identifying, using a Static Context Header Compression (SCHC) rules engine, one or more packets matching a rule, selecting a firewall decision based on the identified one or more packets and the rule, and applying the firewall decision to the one or more identified packets.

System and method for providing SCHC-based edge firewalling

Techniques for using Network Address Translation (NAT), Mobile Internet Protocol (MIP), and/or other techniques in conjunction with Domain Name System (DNS) to anonymize server-side addresses in data communications and verify an authenticity of a client device attempting to use a virtual IP (VIP) address. Rather than having DNS provide a client device with an IP address of an endpoint device, such as a server, the DNS instead returns a VIP address that is mapped to the client device and the endpoint device. The client device may then communicate data packets to the server using the VIP address as the destination address, and a virtual network service that works in conjunction with DNS can verify an authenticity of the client device and convert the VIP address to the actual IP address of the server using NAT and forward the data packet onto the server.

Client device verification

Disclosed are systems, apparatuses, methods, and computer-readable media for identifying a location of a wireless device. A method for identifying a location of a wireless device includes transmitting a request message to the wireless device for identifying a position of the wireless device; receiving a response message from the wireless device; determining first time information based on a time of flight (ToF) of the request message and the response message, wherein the ToF corresponds to a distance of the wireless device from the AP; receiving a second message from a second AP that includes second time information associated with the request message and the response message; receiving a third message from a third AP that includes third time information associated with the request message and the response message; and transmitting location configuration information to the wireless device for the wireless device to determine a position of the wireless device.

Estimating position from reference signals received by coordinating access points

In one embodiment, a controller for an overhead mesh of access points in an area receives an indication from one or more access points of the overhead mesh that a client device is present in the area. The controller determines movements of the client device within the area. The controller selects a set of access points of the overhead mesh to support communications between the client device and the overhead mesh, based on the movements of the client device determined by the controller. The controller causes the controller, the set of access points to form communication schedules to support communications with the client device that do not require a prior association exchange with the client device.

Ceiling-controlled communication scheduling in an overhead mesh of access points

In one embodiment, a method is disclosed comprising monitoring dynamic locations of a plurality of mobile communication devices within a physical area covered by a wireless communication network, wherein keys are distributed to the mobile communication devices at association time; determining that a particular mobile communication device should have a relay for communication with the network based on a first location of the particular mobile communication device and inadequate wireless communication characteristics at the first location; selecting an opportunistic relay device from the mobile communication devices based on a second location of the opportunistic relay device and adequate wireless communication characteristics of the opportunistic relay device within the network and to the first location from the second location; and directing the opportunistic relay device to relay communications for the particular mobile communication device at the first location, wherein the communications are encrypted based on the keys.

Opportunistic relay among mobile communication devices

In one embodiment, a method comprises: creating, by a root network device in a wireless data network, a perimeter topology comprising a first distance vector-protocol path of a first group of perimeter devices and a second distance vector-protocol path of a second group of the perimeter devices, the creating comprising outputting first and second advertisement messages causing the perimeter devices to attach to only one parent of only one of the first or second distance vector-protocol paths and a junction device to attach at respective ends of the first and second distance vector-protocol paths; and causing the junction device to forward, from the first distance vector-protocol path, a data packet toward the root network device via the second distance vector-protocol path.

Perimeter formation and mobile device detection in a RPL network

In one embodiment, a device sends data traffic to a gateway of a backhaul mesh network via a first wireless access point of the backhaul mesh network. The device maintains, while associated with the first wireless access point, an association with a second wireless access point of the backhaul mesh network by sending a frame to the first wireless access point that is relayed by the first wireless access point to the second wireless access point. The device makes a determination that additional data traffic should be sent to the gateway of the backhaul mesh network via the second wireless access point. The device sends, based on the determination, the additional data traffic to the gateway of the backhaul mesh network via the second wireless access point.

Maintaining multiple wireless associations via an over-the-wire relay

Granular guard interval tuning may be provided. A delay profile for a plurality of sub-bands in a serving channel may be created. Then delay spread information from at least one calibration helper device for the plurality of sub-bands in the serving channel may be received. Next, a delay spread matrix based on the delay profile, the delay spread information, and a location of the calibration helper devices may be created. The delay spread matrix may then be used to determine optimal Guard Intervals (GIs).

Granular guard interval tuning

Growing community of inventors

La Colle sur Loup, France

Pascal Thubert