logo

For the Inventor, By the Inventor

The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Patent No.:

US 12771669 B1

PDFFull Text
Date of Patent:
Oct. 20, 2026

Filed:

Apr. 01, 2024

Using dpu devices and ebpf programs to add metadata for security and observability

Applicant:

Cisco Technology, Inc., San Jose, CA (US);

Inventors:

Kyle Andrew Donald Mestery, Woodbury, MN (US);

Vincent Parla, North Hampton, NH (US);

Assignee:

Cisco Technology, Inc., San Jose, CA (US);

Attorney:

Polsinelli P.C.

Primary Examiner:

Kevin Bechtel

Int. Cl.
CPC ...
H04L 9/40 (2022.01); H04L 9/32 (2006.01); H04L 41/0806 (2022.01); H04L 41/0816 (2022.01); H04L 41/082 (2022.01); H04L 41/0869 (2022.01); H04L 41/0895 (2022.01); H04L 43/50 (2022.01); H04L 45/24 (2022.01); H04L 45/80 (2022.01);
U.S. Cl.
CPC ...
H04L 63/0236 (2013.01); H04L 9/3247 (2013.01); H04L 41/0806 (2013.01); H04L 41/0816 (2013.01); H04L 41/082 (2013.01); H04L 41/0869 (2013.01); H04L 41/0895 (2022.05); H04L 43/50 (2013.01); H04L 45/24 (2013.01); H04L 45/80 (2022.05); H04L 63/0218 (2013.01); H04L 63/0263 (2013.01); H04L 63/0435 (2013.01); H04L 63/123 (2013.01); H04L 63/1425 (2013.01); H04L 63/1433 (2013.01); H04L 63/145 (2013.01); H04L 63/166 (2013.01); H04L 63/20 (2013.01);
Abstract

A system and method are provided for adding in-band metadata with a data flow. The in-band metadata can be based on observations by an extended Berkley packet filter (eBPF) of an application running in a datacenter, for example. A processor executes the application to generate data that is encoded in the payloads of packets in a data flow to be transmitted via a network to a destination. The eBPF is also executed on the processor and generates observations of the application (e.g., OSI layer 7 observations). Metadata is generated based on the observations and encoded into headers of the packets of the data flow. The metadata can then be used at the destination to determine the next processing steps for the data flow (e.g., is the data flow trusted and allowed into another workload).

Find Patent Forward Citations

Mestery, Kyle Andrew Donald. (2026). Using dpu devices and ebpf programs to add metadata for security and observability (U.S. Patent No. 12771669). U.S. Patent and Trademark Office. https://idiyas.com/patent/badge/12771669

Data source: USPTO (United States Patent and Trademark Office) public patent records. Weekly synchronization. How IDiyas builds this profile

Loading…