Broadcom Corporation

Avago Technologies International Sales Pte. Limited

Avago Technologies General IP (singapore) Pte. Ltd.

Digital Equipment Corporation

Compaq Computer Corporation, Inc.

Avago Technologies General IP Pte, Ltd.

Philippe Klein

Yitshak Ohana

Avi Kliger

Avraham Kliger

Xuemin Chen

Nicholas Ilyadis

Simoni Ben-Michael

Gordon Li

Stephen Ray Palm

Jacob Mendel

Shlomo Markel

Avraham Menachem

Kumaran David Siva

Sarit Shvimmer

Mohan V Kalkunte

Yong Li

Ariel Hendel

Glen Kramer

Shee-Yen Tan

Abbas Saadat

Aviad Wertheimer

Gideon Paul

Rui Pedro De Moura Alves Pimenta

Eyal Abrahamov

Jouni Korhonen

A method is provided that includes receiving a data request from a requesting device requesting data from a data source, looking up, in a blockchain ledger, a transaction corresponding to the data request to validate the data request, forwarding the validated data request to a data server, receiving a data response from the data server in response to the data request, wherein the data response comprises the requested data from the data source, and forwarding the data response to the requesting device.

Blockchain-enforced data access control

Various embodiments of the present disclosure improve existing multi-layer and other network technologies by routing and processing client requests that require machine learning based on the machine learning capabilities of each network device and/or other computer resource characteristics of different network devices. This ensures that network latency and throughput, among other computer resource consumption characteristics, will be improved as machine learning processing can occur at the most suitable network device or be distributed among various suitable network devices.

Distributed machine-learning resource sharing and request routing

A network may include multiple allocations. The allocations may include: a first allocation encompassing central infrastructure, such as central office servers, data centers, or other core infrastructure; an second allocation encompassing gateway elements or other central consumer premises network infrastructure; and a third allocation encompassing nodes, such as client devices, terminals, or other nodes. A virtualization management engine may coordinate resources from the various allocations to support virtual functions distributed over multiple allocations of the network. The virtualization management engine may determine the distribution across the allocations for the virtual functions. The virtualization management engine may be implemented as a virtual function and be distributed across the allocations of the network.

System for network-based reallocation of functions

Implementations provide for extending an authentication protocol to dynamically create a per user end to end encryption over a multi-hop path for data traffic, which provides an automatic triggering of authentication on each hop of a path when a client joins the network. A device includes a processor that is configured to, in response to receipt of a request for authentication from an end device, perform an authentication protocol to authenticate with an authentication server via an authenticator device. When the authentication protocol is successfully performed, the processor is configured to receive a message indicating that the device was successfully authenticated by the authentication server. The processor is configured to create a pairwise master key (PMK) from the parameters, and derive a pairwise temporary key (PTK) from a key derivation function seeded by the PMK. The processor is configured to encrypt, using the PTK, a message from the end device.

Home network traffic isolation

A system includes service management circuitry to dynamically deploy a plurality of service agents in response to dynamic assembly of a corresponding chain of services that each provide different service functionality. The different service functionality can be provided to an operational network device by different respective network devices over a network. The system can include network interface circuitry to transmit the service agents over the network to monitor performance of the respective network devices providing respective services included in the chain of services. The network interface circuitry can receive service performance information from each of the service agents. The performance information can include information indicative of the performance of the respective network devices. The service management circuitry can analyze the received service performance information and manage the chain of services.

Network function virtualization management system

A device may include a processor circuit configured to transmit, over a network medium, a request for transmission of a data communication to a first device of a network, and receive, over the network medium, a grant of the request. When the first device is associated with a first security profile, the processor circuit may be configured to encrypt the data communication based at least on a first password associated with the first security profile. When the first device is associated with a second security profile, the processor circuit may be configured to encrypt the data communication based at least on a second password associated with the second security profile. The second password may be associated with a higher password strength than the first password. The processor circuit may be configured to transmit, over the network medium, the encrypted data communication to the first device in response to the grant.

Security in mixed networks

A network function virtualization security and trust system includes a network device that operates as a virtualized network device with virtualized services provided on the network device by network nodes included in the system. Security and trust within the system can include hardware authentication of the network nodes and the network device to obtain a level of security of the hardware provisioning the operation of the virtualized services. Security and trust can also include authentication of the services being used on the virtualized network device. Services authentication can be based on monitoring and analysis of the cooperative operation of the services in the virtualized network device. The virtualized services can be dynamically changed, added or stopped. Hardware authentication and dynamic services authentication in accordance with changes in the virtualized services can dynamically maintain a level of security across the devices and the virtualized services.

Network function virtualization security and trust system

A network architecture includes a gateway that terminates broadband service at a particular location, e.g., at the entry to a house or business. The gateway may execute a MoCA network controller (NC) that manages a network of MoCA nodes connected by cable connections. The gateway distributes content to the MoCA nodes on the network, using a logical star topology over the physical tree topology connections. The NC allocates greater downlink (gateway to MoCA node) bandwidth compared to uplink (node to gateway) bandwidth. Because the gateway terminates the broadband service, the network architecture frees very significant spectrum over the cable connections, permitting, for instance, the transmission of hundreds of Mbps of broadband content streams to the MoCA nodes.

Function virtualization for multimedia network topology adaptation

A secured communication network can include a server including an authentication backend, the authentication backend configured to communicate with an authentication front end of a communication device. A server applet can be associated with the authentication backend. The server applet can authenticate an access right associated with the communication device and establish a security level for the communication with the communication device based on information received from the authentication front end.

Methods and systems for secured authentication of applications on a network

A device for network discovery and selection includes at least one processor circuit that is configured to determine a number of networks available for connection within a configurable set of frequency bands. The at least one processor circuit is further configured to, when a single network is available for connection, and the single network being open, automatically connect to the single network. The at least one processor circuit is further configured to, when multiple networks are available for connection, the multiple networks comprising at least one open network and at least one private network: initiate a timer. The at least one processor circuit is further configured to initiate a connection with the at least one private network when a protected setup is initiated for the connection prior to the timer reaching a timeout value, otherwise connect to the at least one open network.

Network discovery and selection

In some aspects, the disclosure is directed to methods and systems for management of path selection and reservation between layer 3 devices, as well as path selection and reservation across L2/L3 boundaries. In one implementation, path selection can be managed by separating independent but 'cooperating' layers, with layer 3 topology and non-adjacent layer 2 topologies handled separately. A first layer 3 router can be identified as a path computation engine (PCE), while other layer 3 routers can be implemented as path control clients (PCC(s)). One layer 2 PCE can be assigned per layer 2 topology, preventing competing path assignments and reservations.

Managing path selection and reservation for time sensitive networks

A network device includes one or more memories and one or more processor circuits coupled to the one or more memories. The one or more processor circuits are configured to cause providing for transmission a request directed to a network controller to change a power state of the network device, receiving a grant from the network controller in response to the request, and changing the power state of the network device in response to receiving the grant. The power state of the network device includes a running power state and a standby power state, where the standby power state includes an active mode and an idle mode. A network controller for granting a request from the network device to change a power state of the network device is also disclosed.

Growing community of inventors

Jerusalem, Israel

Philippe Klein