Cisco Technology, Inc.

Cisco Systems Inc.

Selsius Systems Inc.

Intecom, Inc.

Robert T Bell

Shmuel Shaffer

Joseph Khouri

Richard B Platt

James Rodgers Tighe

Robert E Gleichauf

Daniel George Wing

Michael E Knappe

Paul S Hahn

Ronald D Higgins

William C Forsythe

Richard J Platt

Labhesh Patel

Robert Charles Meier

Shantanu Sarkar

Plamen Nedeltchev

Nancy Cam Winget

Michael H McClung

Max Pritikin

Steven Joseph Rich

Subbiah Kandasamy

Larry William Truesdale

Douglas Q Dexter

David A McGrew

Fabio Rodolfo Maino

David C White, Jr

Pere Monclus

Chirag Shroff

Anthony H Grieco

Rohit Dewan

Jared B Pendleton

Amar Chand Amar

Richard Brian Livingston

Graham Geoffrey Gudgin

Mark W Eklund

Eddie B Soliman

Steven Robert Ochmanski

Shisen Chang

Catherine Leslie Kilcrease

Jan L Dukes-Schlossberg

Annie Wong

David A Mcgrew

In one embodiment, an apparatus may include a memory and a processor. The processor may be operable to create a wireless connection to a wireless device. The processor may be operable to form a pairing with the wireless device based on a unique identifier of the wireless device. The unique identifier may be received from the wireless device. The unique identifier may identify the wireless device in the pairing. The processor may be operable to receive user data associated with the unique identifier from a database. The processor may be operable to initiate configuration of an IP telephony service, where the configuration based, at least in part, on the user data.

System for utilizing identity based on pairing of wireless devices

A client application of a device queries/interrogates a secure device identity module of the device to obtain a device identifier of the device and a signed string generated by the security device identity module using a private key unique to the device. The client application of the device sends to an authorization server a request containing the device identifier and the signed string. Depending on an authentication result obtained for the device based on the device identity, the authorization server sends to the device an access token that enables the client application to access a resource.

Securely authorizing client applications on devices to hosted services

In one embodiment, a Manufacturer Installed Certificate (MIC) and a personal identification number are sent to a call controller to request a configuration profile. When the configuration file is received, the IP phone is provisioned according to the configuration profile.

Secure network deployment

In one embodiment, a secure computer telephony integration (CTI) connection is established between a call analysis and/or screening device and a call control agent. The call analysis device sniffs secure media packets between the endpoints and receives CTI events from the call control agent via the secure CTI connection. The device correlates the CTI events with the secure media packets, enabling the device to decrypt the packets to perform voice quality troubleshooting or call screening in real-time.

Secure call analysis and screening of a secure connection

The present disclosure describes techniques evaluating compute and/or thermal loads (among other things) to aid in managing a collection of one or more containerized or modular data centers. For example, forecasts (or real-time measurements) of environmental factors (as well as projected computing demands) may be used to tailor the compute loads, cooling strategies or other metric of data center operations for a network of containerized or modular data centers. Doing so allows an operator of such a data center network to manage specific operational goals in real time.

Method and apparatus for securing CPUS booted using attached flash memory devices

A system for, and method for, performing state-based signaling on behalf of a stateless client. In one embodiment, the system includes a controller, couplable to a state-based terminal, that translates at least one stateless signaling message received from the stateless client to at least one state-based signaling message for presentation to the state-based terminal thereby facilitating a media stream communications session between the stateless client and the state-based terminal over an Internet Protocol (IP)-based network.

System and method for performing signaling on behalf of a stateless client

Intercepting a secure communication session includes distributing a key from a key distribution point to establish a secure communication session between a first endpoint and a second endpoint. A secure channel is established between the key distribution point and an intercepting point. The intercepting endpoint may be determined to be authorized to intercept the secure communication session. The key is provided to the intercepting endpoint only if the intercepting endpoint is authorized to intercept the secure communication session, where the key provides the intercepting endpoint with access to intercept the secure communication session.

Intercepting a communication session in a telecommunication network

According to one embodiment of the present invention, a method of establishing a digital certificate on an endpoint includes establishing a connection between a proxy function module and the endpoint. The proxy function module is remotely located from the endpoint and operable to communicate with the endpoint and a certificate authority. Authentication information is generated at the endpoint. A portion of the authentication information is transmitted to the proxy function module. The proxy function module obtains a digital certificate based on the portion of the authentication information. The digital certificate is received at the endpoint from the proxy function module.

System and method for obtaining a digital certificate for an endpoint

Techniques are described for securely booting and executing a virtual machine (VM) image in an untrusted cloud infrastructure. A multi-core processor may be configured with additional hardware components&#x2014;referred to as a trust anchor. The trust anchor may be provisioned with a private/public key pair, which allows the multi-core CPU to authenticate itself as being able to securely boot and execute a virtual machine (VM) image in an untrusted cloud infrastructure.

Secure virtual machine bootstrap in untrusted cloud infrastructures

An example method is provided and includes providing an encrypted image to a central processing unit of an integrated circuit and decrypting the encrypted image using a cryptographic key element. The cryptographic key element is embedded within the integrated circuit. The method also includes evaluating the decrypted image in order to verify its authenticity, and executing the decrypted image if the decrypted image is successfully verified. In more particular embodiments, the verification includes utilizing an executable and linkable format (ELF) to signify that encryption has been enabled for at least a portion of the encrypted image. A processor within the integrated circuit can be provided with the cryptographic key element that corresponds to a product family of devices. The method can also include providing a corresponding image of the decrypted image to an external memory of the integrated circuit.

System and method for executing encrypted binaries in a cryptographic processor

A device specific key is generated within an electronic device by providing a challenge to a physically unclonable function (PUF) structure integrated within the electronic device, where the PUF structure outputs a specific response based upon a specific challenge provided to the PUF structure. The PUF response is provided to a cryptographic module integrated within the electronic device, and a device specific key is generated by the cryptographic module utilizing a cryptographic key generation algorithm. The device specific key is generated based upon a combination of input data including the PUF response and data that is specific to the electronic device.

Utilizing physically unclonable functions to derive device specific keying material for protection of information

A method for recording automatic call distributor calls includes receiving from a caller a call for distribution to one of a plurality of agents and distributing the call to a first agent of the plurality of agents for handling. The method includes creating a call signature associated with the call for recording verification and recording communications of the call to a recording file. The method also includes embedding the call signature in the recording file.

Method and system for recording automatic call distributor calls

According to one embodiment of the present invention, a method of updating a certificate trust list on a first endpoint includes receiving an initial certificate trust list at the first endpoint. The initial certificate trust list includes authentication data for at least a second endpoint. Digitally signed information is received at the first endpoint and authentication is initiated against the authentication data for the at least a second endpoint. The authentication occurs only if the digital signature is complementary to the authentication data for the at least a second endpoint. After successful authentication, the initial certificate trust list is updated with the information to yield an updated certificate trust list.

System and method for installing trust anchors in an endpoint

Growing community of inventors

Bountiful, UT, United States of America

Robert T Bell