Cisco Technology, Inc.

Zaheer Aziz

Balaji Sundararajan

Kiran Desai

Jawhny X Cooke

Ravid Sagy

Chris A Dunn

Laure F Andrieux

Basavaraju Halappa

Yifan Gao

Hymed Besrour

Lei Tian

Azharuddin Mohammed

A method of creating a connection between a controller and plurality of edge devices may include reading, by a data plane development kit (DPDK) of the controller, a plurality of packets having a common destination port from the plurality of edge devices, and demuxing, by the DPDK, a number of frames of the plurality of packets based on a hash of the plurality of packets, the hash altering the common destination port of the plurality of packets with a corresponding number of sham destination ports. The method may also include, with a TUNTAP interface, injecting the plurality of packets into a network kernel, and with the network kernel, delivering the plurality of packets to a respective one of a plurality of daemon instances.

Scalable creation of connections

In one embodiment, a method includes establishing, by an identity agent installed on a device, a connection to a browser installed on the device and generating, by the identity agent, first device information, a public key, and a private key. The method also includes communicating, by the identity agent, the first device information and the public key to an authentication service and receiving, by the identity agent, a unique identifier from the authentication service. The method further includes generating, by the identity agent, a first signature of the first device information and communicating, by the identity agent, the first signature, the first device information, and the unique identifier to the browser.

Systems and methods for extending application-aware routing to improve site encryption throughput performance

To select an appropriate multipoint control unit (MCU) for hosting an upcoming video meeting, video meeting data of previous meetings is stored, including time and location data associated with meetings conducted on a bridge ID and attended by participants located in different regions. The schedule time of an upcoming video meeting using the bridge ID is compared with the time data of previous video meetings on the bridge ID to identify related video meetings among the previous video meetings, the related video meetings being time correlated with the scheduled time of the upcoming video meeting. One of a number of MCUs in the network is selected to be a host MCU to host the upcoming video meeting based on the location data of the related video meetings, in which the host MCU is selected as a function of its proximity to locations of participants of the related video meetings.

Selection of a Multipoint Control Unit (MCU) for a video meeting on a network

A method is provided in one example implementation and the method includes receiving a query for a policy (e.g., a multi-media session) that pertains to a selected one of first and second endpoints. Each endpoint interfaces with their respective session initiation protocol entity, which interacts with a session border controller (SBC). The method further includes negotiating credentials via a policy element and a selected SBC and determining, via a selected policy within the policy element, whether a requested communication session is prohibited or conducted between the endpoints. In more specific embodiments, each SBC makes a mapping between signaling entity information and pre-configured SBC virtual private network (VPN) information used for dynamic configuration of the communication session, and wherein a SIP [or other communication protocol] adjacency configuration is created, where adjacency characteristics are defined for each enterprise in which the endpoints reside.

System and method for enabling communication sessions in a network environment

A method for identifying conference media traffic includes receiving a plurality of dummy packets and matching a series of the plurality of dummy packets to a signature key. The method also includes extracting a first identification from one or more of the plurality of dummy packets in response to matching a series of the plurality of dummy packets to a signature key and determining that a second identification associated with one or more encrypted media packets matches the first identification. The method also includes associating one or more encrypted media packets with a conference in response to determining that the first identification matches the second identification.

Growing community of inventors

Murphy, TX, United States of America

Zaheer Aziz