Cisco Technology, Inc.

Robert E Gleichauf

Shmuel Shaffer

Joseph Khouri

Robert T Bell

Scott Vaughn Waddell

Gerald S Lathem

Kevin L Wiley

Daniel M Teal

Kenneth Durazzo

Paul M Quinn

Richard Mandfred Pruss

Steven Dale Shanklin

Kevin J Ziese

Mohamed Khalid

Joseph Salowey

Michael E Knappe

Andrew George Harvey

Frederick Juergens Baker

Saravanakumar Rajendran

Satish K Gannu

Ian Foo

Michael Todd Hall

Hao Zhou

Dean Cheng

Susan Elizabeth Thomson

Venkateswara Rao Yarlagadda

Dany J Rochefort

Ellis Roland Dobbins

Craig Allen Huegen

Barry Raveendran Greene

William A Randall

Russell E Rice

Fan Wu

A computerized device transmits an access request to a data communications device of a network in an attempt to access network resources within the network. The data communications device, in response and in real-time, transmits a challenge request to the computerized device that directs the computerized device to retrieve configuration, or posture, credentials associated with the computerized device. A policy server receives the challenge response and, based upon a real-time analysis of the posture credentials of the computerized device, determines a security state of the computerized device and either provides some level or denies the computerized device access to the network resources based upon the analysis of posture. The data communications device detects the real-time security state of the computerized device prior to providing the computerized device with controlled access to the network resources, thereby limiting vulnerable computerized devices from accessing the network resources and minimizing the risk that the network resources receive or transmit malware.

Controlling access to resources in a network

In one embodiment, an apparatus can include a service broker configured to: (i) register a service classifier, and to provide context information to the service classifier; and (ii) register a plurality of service nodes. The service broker can also receive capability and service requests from the service classifier. Further, the context information can include a service header, a reachability indication, and an encapsulation, where the service header and the encapsulation may be attached or related to a packet in the service classifier. In addition, the service classifier can use this information to redirect the packet to a first service node.

Service insertion architecture

A method and apparatus for real-time insertion of services into an IP telephony call session are disclosed. A client initiates a service request message to a second server. The service request message includes the client identity and a requested service available from a second server. The first server determines if the client is authorized to use the requested service. If the client is authorized to use the requested service, the second server delivers the requested service to the client.

Method and system for real-time insertion of services during a call session over a communication network

Link layer authentication information is supplied by a link layer authentication device to an access router for tracking IP address usage by a client device. The authentication information supplied to the access router includes an authenticated client identifier and a corresponding authenticated link identifier for the client device that attached to the network based on the authenticated link identifier. The access router, in response to receiving a message that specifies the authenticated link identifier and a source IP address, adds the source IP address to a cache entry that specifies the authenticated client identifier and the corresponding authenticated link identifier, and outputs to an audit resource a record that specifies the source IP address and the authenticated link identifier.

Arrangement for tracking IP address usage based on authenticated link identifier

In one embodiment, a method can include: selecting an operation, administration, and maintenance (OAM) type for a destination, where the destination is enabled for a service insertion architecture (SIA); encapsulating an OAM packet with the OAM type indicated in a service header therein; and sending the OAM packet to the destination.

Operation, administration and maintenance (OAM) in a service insertion architecture (SIA)

The invention describes a system and method for arranging to provide power to a power monitor device. The disclosure describes the system and method receiving a request for power for at least one device specified by a power monitor device. The disclosure describes receiving at least one proposal from an entity desiring to supply power according to the request for power. A best proposal of the at least one proposal is determined. And the system and method command the power monitor device to supply power in accordance with the best proposal.

Apparatus and method for centralized power management

In a communications system, a network provides multiple physical paths for communicating packets between participants of communication sessions. During a communication session, elements of the network route packets such that the packets are separated for communication to a destination using multiple physical paths.

Packet routing to reduce susceptibility to disturbances

A method for detecting an infective element in a network environment is provided that includes detecting, by a first computer, an infective element within a second computer. A signal is generated and communicated that identifies the second computer as being associated with the infective element. The signal includes an address associated with the second computer. The signal is received and, in response to the signal, a communicating capability of the second computer is disabled.

System and method for detecting an infective element in a network environment

According to one embodiment of the invention, a computerized method for addressing intrusion attacks directed at a computer includes receiving a data stream corresponding to a potential attack on the computer and calculating an event risk rating for the data stream. Calculating the event risk rating includes determining at least one component risk rating. In one embodiment, the component risk ratings are: a signature fidelity rating indicative of the likelihood the potential attack will affect the computer in the absence of knowledge regarding the computer, an attack relevance rating indicative of the relevance of the potential attack to the computer, and a target value rating indicative of the perceived value of the computer. The method also includes responding to the potential attack based on the calculated risk rating.

Method and system for addressing intrusion attacks on a computer system

Method and system for real-time insertion of service during a call session over a communication network

A method for adaptively improving voice quality during a communication session includes monitoring voice quality parameters associated with a communication session at one or more network components of a communication network. At least one of the network components is selected to perform packet replication, if a value of the voice quality parameters deviates from a predetermined range. In accordance with a particular embodiment, replicated packets are transmitted from the selected network component along an alternate communication path. In accordance with another embodiment, an improvement in performance associated with transmission of the replicated communication packets along the alternate communication path is assessed. Transmission of the replicated communication packets may be discontinued if the improvement is below a predetermined minimum.

System and method for adaptively improving voice quality throughout a communication session

A communication system includes an endpoint that performs codec selection based on at least one network parameter. In a particular embodiment, a communication session exchanges voice information, and the codec selection improves the overall voice quality of the communication session.

Codec selection to improve media communication

Growing community of inventors

San Antonio, TX, United States of America

Robert E Gleichauf