Cisco Technology, Inc.

International Business Machines Corporation

Other

Pascal Thubert

Patrick Wetterwald

Eric Michel Levy-Abegnoli

Jean-Philippe Vasseur

Vincent Jean Ribiere

Huimin She

Jerome Henry

Marco Molteni

Patrice Bellagamba

Carlos M Pignataro

Nagendra Kumar Nainar

Domenico Ficara

Ijsbrand Wijnands

Charles Calvin Byers

Marc Lamberton

Amine Choukir

Dirk Anteunis

Alessandro Erta

Denis Esteve

Feiliang Wang

Robert Edgar Barton

Li Zhao

Hugo Latapie

Eric Albin Voit

Pradeep Kumar Kathail

Enzo Fenoglio

Akram Ismail Sheriff

Chuanwei Li

Lionel Denecheau

Ole Troan

Billy Gayle Moon

Robert E Barton

Alpesh S Patel

Pierre Secondo

Xiaoqing Zhu

Joseph T Friel

David A Maluf

Andre Surcouf

Giovanna Carofiglio

Lele Zhang

Jakob Heitz

Srinath Gundavelli

Gonzalo A Salgueiro

Kent Kinchu Leung

Brian Eliot Weis

Joseph Michael Clarke

Gregory J Shepherd

Sudhir Kumar Jain

Francois Le Faucheur

Pierre Pfister

Salvatore Valenza

Maik Guenter Seewald

Vincent Cuissard

Eliot Lear

Shmuel Shaffer

Ali Sajassi

John Albert Toebes

Alvaro E Retana

Flavio Giovanni Bonomi

Malcolm Muir Smith

Shwetha Subray Bhandari

Mankamana Prasad Mishra

Ralph Droms

Russell Ivan White

Arun G Khanna

Sateesh Kumar Addepalli

Stig Ingvar Venaas

Johannes Petrus Kruys

Andre Jean-Marie Surcouf

Ashok Krishnaji Moghe

Luca Bisti

Xuechen Yang

Krishnaswamy Muddenahally Ananthamurthy

David Delano Ward

Mark Grayson

Jonathan W Hui

Brian Donald Hart

Matthew Aaron Silverman

Norman William Finn

Robert J Friday

Rong Pan

Nancy Cam-Winget

Toerless Eckert

Dhananjaya Rao

Bretton Lee Douglas

Neal Dante Castagnoli

Abhay Kumar Roy

Chiu Ngok Eric Wong

Reshad Rahman

Andrew Frederick Myles

Arthur Gerald Howarth

Max Pritikin

Prasad Miriyala

Douglas Chan

Lillian Lei Dai

Jean-Claude Dispensa

Thomas Davies

Roland Arthur Saville

Preethi Natarajan

Jerome Tollet

Disclosed are systems, apparatuses, methods, and computer-readable media for identifying a location of a wireless device. A method for identifying a location of a wireless device includes transmitting a request message to the wireless device for identifying a position of the wireless device; receiving a response message from the wireless device; determining first time information based on a time of flight (ToF) of the request message and the response message, wherein the ToF corresponds to a distance of the wireless device from the AP; receiving a second message from a second AP that includes second time information associated with the request message and the response message; receiving a third message from a third AP that includes third time information associated with the request message and the response message; and transmitting location configuration information to the wireless device for the wireless device to determine a position of the wireless device.

Estimating position from reference signals received by coordinating access points

In one embodiment, a controller for an overhead mesh of access points in an area receives an indication from one or more access points of the overhead mesh that a client device is present in the area. The controller determines movements of the client device within the area. The controller selects a set of access points of the overhead mesh to support communications between the client device and the overhead mesh, based on the movements of the client device determined by the controller. The controller causes the controller, the set of access points to form communication schedules to support communications with the client device that do not require a prior association exchange with the client device.

Ceiling-controlled communication scheduling in an overhead mesh of access points

In one embodiment, a method is disclosed comprising monitoring dynamic locations of a plurality of mobile communication devices within a physical area covered by a wireless communication network, wherein keys are distributed to the mobile communication devices at association time; determining that a particular mobile communication device should have a relay for communication with the network based on a first location of the particular mobile communication device and inadequate wireless communication characteristics at the first location; selecting an opportunistic relay device from the mobile communication devices based on a second location of the opportunistic relay device and adequate wireless communication characteristics of the opportunistic relay device within the network and to the first location from the second location; and directing the opportunistic relay device to relay communications for the particular mobile communication device at the first location, wherein the communications are encrypted based on the keys.

Opportunistic relay among mobile communication devices

In one embodiment, a method comprises: creating, by a root network device in a wireless data network, a perimeter topology comprising a first distance vector-protocol path of a first group of perimeter devices and a second distance vector-protocol path of a second group of the perimeter devices, the creating comprising outputting first and second advertisement messages causing the perimeter devices to attach to only one parent of only one of the first or second distance vector-protocol paths and a junction device to attach at respective ends of the first and second distance vector-protocol paths; and causing the junction device to forward, from the first distance vector-protocol path, a data packet toward the root network device via the second distance vector-protocol path.

Perimeter formation and mobile device detection in a RPL network

In one embodiment, a device sends data traffic to a gateway of a backhaul mesh network via a first wireless access point of the backhaul mesh network. The device maintains, while associated with the first wireless access point, an association with a second wireless access point of the backhaul mesh network by sending a frame to the first wireless access point that is relayed by the first wireless access point to the second wireless access point. The device makes a determination that additional data traffic should be sent to the gateway of the backhaul mesh network via the second wireless access point. The device sends, based on the determination, the additional data traffic to the gateway of the backhaul mesh network via the second wireless access point.

Maintaining multiple wireless associations via an over-the-wire relay

Granular guard interval tuning may be provided. A delay profile for a plurality of sub-bands in a serving channel may be created. Then delay spread information from at least one calibration helper device for the plurality of sub-bands in the serving channel may be received. Next, a delay spread matrix based on the delay profile, the delay spread information, and a location of the calibration helper devices may be created. The delay spread matrix may then be used to determine optimal Guard Intervals (GIs).

Granular guard interval tuning

In one embodiment, a supervisory device in a network forms a virtual access point (VAP) for a node in the network. A set of access points (APs) in the network are mapped to the VAP as part of a VAP mapping and the node treats the APs in the VAP mapping as a single AP for purposes of communicating with the network. The supervisory device receives measurements from the APs in the VAP mapping regarding communications associated with the node. The supervisory device identifies a movement of the node based on the received measurements from the APs in the VAP mapping. The supervisory device adjusts the set of APs in the VAP mapping based on the identified movement of the node.

Transparent roaming in virtual access point (VAP) enabled networks

Described herein are devices, systems, methods, and processes for optimizing network traffic distribution across multiple paths in a manner that is energy-efficient and environmental sustainability-aware. This may be achieved by leveraging time-series analytics and capacity planning based on seasonalities. Data associated with the Layer 3 topology of the network can be collected. Bandwidth can be pre-reserved on an energy-aware traffic engineering tunnel. The time-series data can be used to build a capacity plan based on the seasonalities. Nodes may be clustered based on usage patterns and network utilization seasonality. The data can be used to make decisions about when and where to combine or shut down paths for energy efficiency, while maintaining optimal network performance. A hysteresis mechanism may be incorporated to avoid oscillation when changing active links. Power savings can be achieved by fully turning off or depowering certain network components when they are not needed.

Sustainable network-wide optimization service

Techniques for using Network Address Translation (NAT), Mobile Internet Protocol (MIP), and/or other techniques in conjunction with Domain Name System (DNS) to anonymize server-side addresses in data communications. Rather than having DNS provide a client device with an IP address of an endpoint device, such as a server, the DNS instead returns a virtual IP (VIP) address that is mapped to the client device and the endpoint device. In this way, IP addresses of servers are obfuscated by a virtual network of VIP addresses. The client device may then communicate data packets to the server using the VIP address as the destination address, and a virtual network service that works in conjunction with DNS can convert the VIP address to the actual IP address of the server using NAT and forward the data packet onto the server.

Anonymizing server-side addresses

In one embodiment, a method comprises: outputting, by a gateway device in a wireless data network comprising wireless network devices, a rule template for execution by any of the wireless network devices, the rule template comprising a device information variable for insertion of a device-specific value by a corresponding wireless network device executing the rule template, a context variable for insertion, by the wireless network devices, of a generic network context, and a compression rule specifying a compression operation and a corresponding decompression operation; and providing the generic network context to the wireless network devices, enabling each wireless network device to selectively execute the rule template, for execution of one of the compression operation on a network protocol data packet or the corresponding decompression operation for recovery of the network protocol data packet, based on the insertion of the corresponding device-specific value for the device information variable.

Dynamic compression context in a wireless data network based on applying generic network context and device-specific context to a rule template

In one embodiment, an access point is configured with a plurality of resource units (RUs). Each RU is configured to use a frequency range that differs from frequency ranges used by the other RUs. The access point determines a pattern of recurring signal performance over time. For each RU of the plurality of RUs, the pattern indicates the recurring signal performance with respect to a station when the station is located in a given physical location. The access point allocates one or more of the RUs for communicating with the station. The pattern is used for avoiding allocation of any of the RUs for which the station is predicted to experience strong multipath fading or other destructive interference.

Allocating a resource unit to a station

A first address resolution request may be received by a first access switch from a first device and the address resolution request may be resolved by the first access switch with a central database of a network. Then a second address resolution request may be sent to a sensor by the first access switch in response to resolving the first address resolution request. An address resolution response may then be sent by the sensor to the first device in response to the sensor determining that the first device is a bad endpoint. A session may then be established between the sensor and the first device in response to the sensor sending the address resolution response. The first device may then be prompted by the sensor via the established session to resolve issues that lead the sensor to determine that the first device is a bad endpoint.

Network access control for devices in a software defined access (SDA) fabric

This disclosure describes techniques for device to device authentication. For instance, a first device may detect a second device, such as when a user physically attaches the second device to the first device or when the second device wireless communicates with the first device. A component of the first device and/or an authentication entity may then determine to authenticate the second device. In some instances, the component determines to authenticate the second device using information associated with an environment of the second device. To authenticate the second device, the authentication entity may send a request to a user, receive a response from the user, and then verify the response. After the authentication, the first device may determine that the second device includes a trusted device and establish a connection with the second device.

Techniques for device to device authentication

Techniques for adjusting a duration of an authenticated user device session. A baseline session duration is determined for a session for which a user account is authorized in response to a request for authentication. A first session is established on behalf of a user device associated with the user account based at least in part on the user account performing a first authentication. A posture associated with the user device is determined. The baseline duration is then adjusted to a dynamic duration based at least in part upon the posture associated with the user device. Based at least in part on the dynamic duration the user can be required to re-authenticate.

Determining session duration for device authentication

Systems, methods, and computer-readable media are provided for securely advertising autoconfigured prefixes in a cloud environment. In some examples, a method can include, receiving, by a first router, an indication of an available network address prefix. In some aspects, the method can also include selecting, by the first router, a first network address prefix that is within the available network address prefix, wherein the first network address prefix provides at least one route to one or more network elements associated with the first router. In some cases, the method may further include sending, to a second router, a message including a stub registration option that indicates the first network address prefix.

Secured advertisement of autoconfigured internet protocol prefixes in a cloud environment

Growing community of inventors

La Colle sur Loup, France

Pascal Thubert