logo

For the Inventor, By the Inventor

The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Patent No.:

US 12764094 B1

PDFFull Text
Date of Patent:
Oct. 13, 2026

Filed:

Jul. 22, 2024

Determining security actions at policy-enforcement points using metadata representing a security chain for a data flow

Applicant:

Cisco Technology, Inc., San Jose, CA (US);

Inventors:

Vincent Parla, North Hampton, NH (US);

Kyle Andrew Donald Mestery, Woodbury, MN (US);

Stephen Craig Connors, Jr., Nashville, TN (US);

Assignee:

Cisco Technology, Inc., San Jose, CA (US);

Attorney:

Polsinelli P.C.

Primary Examiner:

Scott B Christensen

Int. Cl.
CPC ...
H04L 9/40 (2022.01); H04L 9/32 (2006.01); H04L 41/0806 (2022.01); H04L 41/0816 (2022.01); H04L 41/082 (2022.01); H04L 41/0869 (2022.01); H04L 41/0895 (2022.01); H04L 43/50 (2022.01); H04L 45/24 (2022.01); H04L 45/80 (2022.01);
U.S. Cl.
CPC ...
H04L 63/0236 (2013.01); H04L 9/3247 (2013.01); H04L 41/0806 (2013.01); H04L 41/0816 (2013.01); H04L 41/082 (2013.01); H04L 41/0869 (2013.01); H04L 41/0895 (2022.05); H04L 43/50 (2013.01); H04L 45/24 (2013.01); H04L 45/80 (2022.05); H04L 63/0218 (2013.01); H04L 63/0263 (2013.01); H04L 63/0435 (2013.01); H04L 63/123 (2013.01); H04L 63/1425 (2013.01); H04L 63/1433 (2013.01); H04L 63/145 (2013.01); H04L 63/166 (2013.01); H04L 63/20 (2013.01);
Abstract

A system and method are provided that use metadata encoded in a data flow to determine security actions to perform at a policy-enforcement point based on the security-chain context for the data flow that is provided by metadata (e.g., the security-chain context can include which security operations have been performed upstream on which data packets). The policy-enforcement point receives the data flow and the metadata, including attestations of the security operations that have previously (e.g., upstream) been applied to the data flow. Based on the attested to security operations, the policy-enforcement point selects what security actions to apply next to the data flow, e.g., additional security operations to apply, allow the data flow into a workload or trust zone, drop the workload, perform dynamic load balancing.

Find Patent Forward Citations

Parla, Vincent. (2026). Determining security actions at policy-enforcement points using metadata representing a security chain for a data flow (U.S. Patent No. 12764094). U.S. Patent and Trademark Office. https://idiyas.com/patent/badge/12764094

Data source: USPTO (United States Patent and Trademark Office) public patent records. Weekly synchronization. How IDiyas builds this profile

Loading…