Cisco Technology, Inc.

Robert Edgar Barton

Jerome Henry

Vishal Satyendra Desai

Indermeet Singh Gandhi

Maik Guenter Seewald

Matthew Aaron Silverman

Pascal Thubert

Gonzalo A Salgueiro

Akram Ismail Sheriff

Carlos M Pignataro

Thomas Szigeti

Malcolm Muir Smith

Bart A Brinckman

Shankar Ramanathan

Nagendra Kumar Nainar

Eric Michel Levy-Abegnoli

John George Apostolopoulos

M David Hanes

Russell Paul Gyurek

Vinay Saini

Stephen Michael Orr

John Martin Graybeal

Xiaoguang Jason Chen

Muhilan Natarajan

Michael Alan Kowal

Daniel Eckstein

Mark Grayson

Charles Calvin Byers

Rajesh S Pazhyannur

Joseph Michael Clarke

Frank Brockners

Muthurajah Sivabalan

Santosh Ramrao Patil

Jun Hui Liu

John Matthew Swartz

Stephan Edward Friedl

Norbert Heusser

Matthew William Gillies

Matthias Falkner

Anoop Mohan

Yogesh Kumar Soni

Edgard Vangeel

David Delano Ward

Santosh Ghanshyam Pandey

Sudhir Kumar Jain

Domenico Ficara

Ian James Wells

Elango Ganesan

Amine Choukir

Aamer Saeed Akhter

Sivadeep Reddy Kalavakuru

Vincent Cuissard

Swapna Anandan

Anirban Karmakar

Kedar Krishnanand Gaonkar

Simon Dyke

Patrick Grossetete

Cesar Obediente

Rupak Chandra

Marcelo Yannuzzi Sanchez

Chui-Tin Yen

Amjad Sayedrasul Inamdar

Darryl E Sladden

Frederic Detienne

Graham Bartlett

Olivier Pelerin

Shankar Vemulapalli

Tony Clifford Allen

Laurent Aubert

Ibrahim Mortada

Timothy Daniel Spiglanin

Gerard Ian McGarry

Joseph Bassaly

Vanessa Sulikowski

Presented herein are techniques for assigning Ultra-Wideband (UWB) anchors for client ranging. A location server can estimate a coarse location of a mobile device using a localization technique other than a UWB localization technique. The localization technique can involve multiple wireless access points or other radio devices. The location server can define an area around the coarse location to identify a set of candidate anchors for UWB ranging. The set of candidate anchors can be disposed within the area and include at least a subset of the radio devices. The location server can modify the set of candidate anchors to create a modified set of candidate anchors that includes only UWB-enabled devices. The location server can select a primary anchor from the modified set of candidate anchors and send a command to cause a UWB ranging procedure to be initiated between the primary anchor and the mobile device.

Assigning UWB anchors for client ranging

Presented herein are infrastructure triggering techniques for secure Ultra-Wideband (UWB) ranging. In one example, a method may include providing UWB ranging parameters to a mobile device via a first radio communication, wherein the first radio communication is a non-UWB radio communication; and triggering the mobile device to perform UWB ranging with a UWB anchor, wherein the triggering is performed using a second radio communication. In another example, a method may include, obtaining, by a mobile device, UWB ranging parameters for a geographic area; obtaining a UWB ranging instruction for the geographic area; and performing UWB ranging with a target UWB anchor based on the UWB ranging parameters and the UWB ranging instruction.

Infrastructure triggering techniques to facilitate secure ultra-wideband (UWB) ranging

A server that includes a graphics processing unit (GPU) may receive, from a first application that is remote from the server, a first request to reserve a first number of cores of the GPU for a first amount of time. The server may also receive, from a second application that is also remote from the server, a second request to reserve a second number of cores of the GPU for a second amount of time that at least partly overlaps the first amount of time. The server may determine that the first request is associated with a higher priority than the second request and, in response, may reserve the first number of cores for the first amount of time for the first application. The server may send, to the first application, an indication that the first number of cores have been reserved as requested by the first application.

Function-as-a-service (FAAS) model for specialized processing units

The disclosed technology provides solutions that enable scalable and secure data retrieval between microservices by using microservice attributes to encrypt container based data stores. A process of the technology can include steps for: instantiating a first microservice and a second microservice in a cloud environment, wherein the first microservice is associated with a first attribute label and the second microservice is associated with a second attribute label, generating a first key based on the first attribute label and a second key based on the second attribute label, associating a first data store with the first microservice, wherein the first data store is encrypted using the first key, and associating a second data store with the second microservice, wherein the second data store is encrypted using the second key. Systems and machine readable media are also provided.

Attribute-based encryption for microservices

Systems, methods, and computer-readable media for context-based transfer and access of data include a producer which receives a request from a consumer to access a data block. The producer verifies whether a context associated with the consumer will allow access the data block, by providing a challenge to the consumer and obtaining a response, the response including a certification that the context associated with the consumer will allow the consumer to access the data block. Upon verifying that the context allows the consumer to access the data block, the producer transfers a data capsule, the data capsule including an encrypted version of the data block and a micro agent for monitoring access to the data block. The micro agent can interact with an operating system at the consumer to allow decryption and local access of the data block upon the data capsule being transferred.

System and method for enforcing context-based data transfer and access

Aggregated health information for a managed network may be retrieved and processed in response to changes to the managed network topology, configuration, or software. In response to receiving notification that a change to a component of the managed network has occurred, a change audit analysis engine can retrieve performance indicator information from components along a traceroute including the component which underwent the change. The retrieved performance indicator information can be processed by a memory based neural network to predict an impact of the change on the aggregated health of the managed network. The predicted impact can be compared to network health information retrieved through an ongoing basis and issues can be determined based on a comparison of the predict impact and the retrieved health information.

Systems and methods for contextual network assurance based on change audits

Techniques for trusted roaming between identity federation based networks. A first wireless access point (AP) receives a roaming request from a wireless station (STA), to roam from the first AP to a second AP. The first AP is associated with a first access network provider (ANP), the second AP is associated with a second ANP, and the first ANP is different from the second ANP. Authentication information relating to the STA is transmitted from the first ANP to the second ANP using a trusted connection. The trusted connection was previously established between the first ANP and the second ANP based on a query to an identity federation to which both the first and second ANP belong. The STA is de-associated from the first AP. The STA is re-associated at the second AP using the transmitted authentication information.

Trusted roaming for federation-based networks

A location server collects from access points at known locations in a venue, which is represented by grid locations defined by parameters accessible to the location server, (i) ultra wideband (UWB) location measurements for a UWB location technology based on UWB transmissions from mobile devices in the venue, and (ii) non-UWB location measurements for non-UWB location technologies based on non-UWB transmissions from the mobile devices. The location server associates the non-UWB location measurements for the non-UWB location technologies with the grid locations, using the UWB location measurements as reference measurements. The location server populates location calibration records for the grid locations of the venue with the non-UWB location measurements associated with the grid locations. The location server calibrates the non-UWB location technologies at the grid locations based on the non-UWB location measurements in the location calibration records associated with the grid locations.

Location accuracy augmentation method with ultra wideband

Channel availability check optimization may be provided. A plurality of Pulse Repetition Intervals (PRIs) may be determined for a respective plurality of bursts on a respective plurality of frequencies. A list of at least a portion of the plurality of frequencies may be generated. The list may include a plurality of bias factors respectively indicating a probability that each of the respective plurality of bursts was a radar burst based on the respective plurality of PRIs. An Access Point (AP) may perform a plurality of preemptive Channel Availability Checks (CACs) on each of the respective plurality of frequencies on the list in order of highest probability to lowest probability based on the plurality of bias factors.

Channel availability check optimization

Coordinated radio fine time measurement is provided via sending, from a client device, a ranging request to a first radio; receiving a first response sent at a first time from the first radio over a first channel; receiving a second response sent at the first time from a second radio over a second channel; and calculating, based on times of flight for the first response and the second response, a location of the client device relative to the first radio and to the second radio. Coordinated radio fine time measurement is also proved via in response to receiving, at an Access Point (AP), a ranging request from a client device and determining to respond using multiple channels: sending, both at a first time, a first response from a first radio over a first channel a second response from a second radio over a different channel.

Coordinated radio fine time measurement

Embodiments herein describe techniques for dynamically negotiating an SLA between a roaming device and a VN in an identity federation. Instead of an IDP having to individually negotiate with a VN to decide on an SLA before a user device roams to the VN, the parties can dynamically negotiate the SLA after the user device has detected the VN (but before the device is permitted to connect or associate with the VN). In one embodiment, when a roaming user device comes within wireless range of a VN, the roaming device receives an advertisement from the VN that indicates the current SLA (or SLAs) offered by the VN. The roaming device can compare this offered SLA to a stored SLA in an identity profile the device received from the IDP to determine whether to accept the offer. In another embodiment, the SLA is instead negotiated between VN and the IDP.

Implementing service level agreements in an identity federation

In one embodiment, a service associates a plurality of descriptive tags with a node in a network, based on an inspection of packets sent by the node that is performed by one or more sensors deployed to the network. The service identifies, based on the plurality of descriptive tags, data to be extracted from traffic of the node by an edge device located at an edge of the network. The service determines, based on the plurality of descriptive tags, an external destination to which the data should be sent by the edge device after extraction. The service sends a data pipeline configuration to the edge device, wherein the data pipeline configuration causes the edge device to extract the data from the traffic sent by the node and to send the data to the external destination.

Data pipeline configuration using network sensors

Presented herein are methodologies for managing radio resources in a venue that implements a high density wireless infrastructure. The methodology includes detecting, using wireless access points, neighbor awareness networking (NAN) communications broadcast by a mobile device, determining a wireless channel on which the mobile device is sending the NAN communications, predicting a destination of the mobile device based on a path, through a predetermined venue, being taken by the mobile device, the path being detected using the wireless access points; and implementing a radio resource management remediation technique to reduce radio interference that is expected to be caused by the NAN communications broadcast by the mobile device at the destination based on the wireless channel and the destination.

Peer-to-peer networking interference remediation

Adaptive guard interval calibration may be provided. A computing device may receive a first plurality of delay spread values. Each of the first plurality of delay spread values may respectively comprise an amount of time between when each of a respective first plurality Access Points (APs) receives a first tuning symbol from a first calibrating AP and when each of the respective first plurality APs receives a final multipath reflection of the first tuning symbol. Next, a first Guard Interval (GI) may be determined based on the first plurality of delay spread values. The first calibrating AP may then be provisioned with the first GI.

Adaptive guard interval calibration

Service cognizant radio role assignments may be provided. A computing device may receive a beacon message associated with a tag. Then, based on information derived from the beacon message, an optimum radio in a network may be determined to monitor the tag. The optimum radio may be associated with an Access Point (AP) comprising one of a plurality of APs in the network. The optimum radio associated with the AP in the network may then be provisioned to monitor the tag.

Service cognizant radio role assignments

Growing community of inventors

Richmond, CA, United States of America

Robert Edgar Barton