Cisco Technology, Inc.

Other

Venugopal Hemige

Praveen Raju Kariyanahalli

Syed Khalid Raza

Atif Khan

David Mark Carrel

Rameshbabu Prabagaran

Ravi Konduri

A method for securing communications for a given network is provided. The method comprises by at least one node(i) of the network configured to utilize pairwise keys: generating a set of encryption keys; and transmitting the set of encryption keys to a controller for the network; by the controller, executing a key selection process wherein for each node(j) in the network an encryption key J is selected from the set of encryption keys; assigning the encryption key J to the node(j); and transmitting the selected encryption key J to the node(j); by each node(j), generating an encryption key I to the node(i); and sending the encryption key I to the node(i) via the controller.

Hash-based key distribution

A method may include transmitting a first public encryption key from to a control device and encrypting a first packet for a remote network device utilizing a first private encryption key correlated with the first public encryption key. The method may also include generating a second public encryption key and a second private encryption key and transmitting the second public encryption key to the control device. The method may additionally include receiving a first message from the remote network device that the remote network device received the second public encryption key from the control device, and after receiving the first message from the remote network device that the remote network device received the second public encryption key, encrypting a second packet utilizing the second private encryption key.

Secure network communication

A method of routing network traffic may include determining a first data link preference configuration indicating a first preference order for a first plurality of data links over which a first network device communicates. The method may also include receiving a second data link preference configuration indicating a second preference order for a second plurality of data links over which a second network device communicates. The method may additionally include, based on a combination of the first data link preference configuration and the second data link preference configuration, determining a preferred data link to transmit data from the first network device to the second network device. The method may include transmitting data over the preferred data link from the first network device to the second network device.

Network load balancing

A method for securing communications for a given network is provided. The method comprises by at least one node(i) of the network configured to utilize pairwise keys: generating a set of encryption keys; and transmitting the set of encryption keys to a controller for the network; by the controller, executing a key selection process wherein for each node(j) in the network an encryption key J is selected from the set of encryption keys; assigning the encryption key J to the node(j); and transmitting the selected encryption key J to the node(j); by each node(j), generating an encryption key I for the node(i); and sending the encryption key I to the node(i) via the controller.

A method for routing a multicast stream is disclosed. The method comprises providing an overlay network comprising at least one controller; and a plurality of routers communicatively coupled to the at least one controller; receiving by the controller, multicast control information from each of the plurality of routers; creating by the controller, a routing tree based on the multicast control information; receiving by a first router, a request to join a multicast stream from a first receiver; locating a route to a replication point for the stream within the overlay network based on the routing tree; creating a secure communications path between the first router and the replication point over a unicast transport network; receiving, by the first receiver, a multicast stream from the replication point via the secure communications path; and de-encapsulating the multicast stream and forward it to the first receiver.

Growing community of inventors

San Ramon, CA, United States of America

Venugopal Hemige