Cisco Patent Grants

Cooling fan assembly with air guider

Granted: January 21, 2025
Patent Number: 12207435
A fan assembly comprises: a fan having a fan intake and a fan exit downstream from the fan intake, wherein the fan is configured to draw air into the fan intake and propel the air downstream through the fan exit; a housing having a housing inlet coupled to the fan exit and a housing outlet downstream from the housing inlet; and an air guider, mounted inside the housing adjacent to the housing inlet, having a conical shape with a base adjacent to the housing inlet and an apex opposite the…

Facilitating services for devices in private mobile networks based on device authentications in an operator network

Granted: January 21, 2025
Patent Number: 12207354
In one illustrative example, a unified data management (UDM) of a mobile network is established in a UDM set with a plurality of private network UDMs instances of a plurality of private mobile networks. The UDM of the mobile network provides access to a plurality of subscription profiles associated with a plurality of subscribers of the mobile network, and each private network UDM instance provides access to a subset of the subscription profiles associated with a subset of the…

Mobile edge computing with low latency traffic segregation within a PDN using dedicated bearers

Granted: January 21, 2025
Patent Number: 12207125
Presented herein are embodiments that provide mobile edge computing (MEC) with low latency traffic segregation within a packet data network (PDN) using dedicated bearers. Techniques are provided that are performed at an edge user plane entity and a control plane entity to coordinate the directing of low latency traffic over a dedicated bearer broken out at the edge, and to communicate normal latency traffic over a default bearer that is centrally broken out.

Active speaker tracking using a global naming scheme

Granted: January 21, 2025
Patent Number: 12206715
A method includes, at a media bridge configured to distribute a plurality of media streams among a plurality of client devices connected to the media bridge over a network, receiving the plurality of media streams from the plurality of client devices via the media bridge. The media bridge connects the plurality of client devices. The method further includes assigning a pair of names for each of the plurality of media streams. The pair of names include a contribution name and a…

Dynamic management of security rules and policies

Granted: January 21, 2025
Patent Number: 12206709
A method of managing security rules may include extracting metadata from a data packet received at a first network device. The metadata including network metadata and network system metadata. The method may further include distributing the metadata to at least one service endpoint registered with the first network device, receiving from the at least one service endpoint, an indication as to how traffic associated with the data packet is to be handled, and enabling the traffic based at…

Graph-based detection of network security issues

Granted: January 21, 2025
Patent Number: 12206693
The disclosed techniques relate to a graph-based network security analytic framework to combine multiple sources of information and security knowledge in order to detect risky behaviors and potential threats. In some examples, the input can be anomaly events or simply regular events. The entities associated with the activities can be grouped into smaller time units, e.g., per day. The riskiest days of activity can be found by computing a risk score for each day and according to the…

Manufacturer usage description (MUD) extensions for secure access service edge (SASE) services

Granted: January 21, 2025
Patent Number: 12206646
Techniques for associating manufacturer usage description (MUD) security profiles for Internet-of-Things (IoT) device(s) with secure access service edge (SASE) solutions, providing for automated and scalable integration of IoT devices with SASE frameworks. A MUD controller may utilize a MUD uniform resource identifier (URI) emitted by an IoT device to fetch an associated MUD file from a MUD file server associated with a manufacturer of the IoT device. The MUD controller may determine…

Encoding end-to-end tenant reachability information in border gateway protocol (BGP) communities

Granted: January 14, 2025
Patent Number: 12199866
Techniques for using global virtual network instance (VNI) labels in a multi-domain network to route network data with a multi-tenant network overlay are described herein. A routing device provisioned in a network domain of the multi-domain network may register with a service discovery system of the network domain for use of network configuration data to establish routes through the multi-domain network with network nodes. Each network domain of the multi-domain network may include an…

Confidence scoring for detectors used to detect anomalous behavior

Granted: January 14, 2025
Patent Number: 12199996
A computer-implemented method of determining whether to configure a detection comprised within a query is disclosed. The method includes analyzing a query to determine clauses within the query that identify logs relevant to the detection comprised within the query. The method further includes determining a statistical distribution for modeling a likely hit rate of the detection. Additionally, the method includes updating the statistical distribution with information associated with an…

Optimizing IPSec for hierarchical SD-WAN

Granted: January 14, 2025
Patent Number: 12199868
According to some embodiments, a method is performed by a software defined wide area network (SD-WAN) edge router in a hierarchical SD-WAN network comprising a plurality of edge routers and a plurality of border routers. The method comprises: originating a SD-WAN system route for advertising reachability to the edge router, the system route comprising an encryption key associated with the edge router; and transmitting the system route to one or more SD-WAN border routers. The method may…

Method and apparatus for efficient synchronization of search heads in a cluster using digests

Granted: January 14, 2025
Patent Number: 12197394
Embodiments of the present disclosure provide techniques for efficiently and accurately performing propagation of search-head specific configuration customizations across multiple individual configuration files of search heads of a cluster for a consistent user experience. The cluster of search heads may be synchronized such that the search heads operate to receive the configuration or knowledge object customizations from one or more clients from a central or lead search head. To reduce…

Data network duplicate flow detection in hardware with line rate throughput

Granted: January 14, 2025
Patent Number: 12199859
Techniques for detecting duplicate data flows. A data packet of a data flow is received by computer hardware the data packet having a first five tuple, an ingress interface and a VLAN tag. Data is sent to a central processing unit. The central processing unit installs policy tiles into a policy tile database of the computer hardware, the policy tiles including the first five tuple, the first ingress interface and the first VLAN tag. A second data packet is received and compared with the…

Anomaly detection of model performance in an MLOps platform

Granted: January 14, 2025
Patent Number: 12199847
In one embodiment, a service tracks performance of a machine learning model over time. The machine learning model is used to monitor one or more computer networks based on data collected from the one or more computer networks. The service also tracks performance metrics associated with training of the machine learning model. The service determines that a degradation of the performance of the machine learning model is anomalous, based on the tracked performance of the machine learning…

Detecting application performance breaking points based on uncertainty and active learning

Granted: January 14, 2025
Patent Number: 12199839
In one embodiment, a device obtains path metrics for a network path via which traffic for an online application is conveyed. The device models uncertainty of an application experience metric predicted for the online application based on the path metrics. The device identifies, based on the uncertainty of the application experience metric modeled by the device, a breaking point in the path metrics at which the application experience metric predicted for the online application is expected…

Automatic generation of data analysis queries

Granted: January 14, 2025
Patent Number: 12198021
Disclosed herein is a computer-implemented tool that facilitates data analysis by use of machine learning (ML) techniques. The tool cooperates with a data intake and query system and provides a graphical user interface (GUI) that enables a user to train and apply a variety of different ML models on user-selected datasets of stored machine data. The tool can provide active guidance to the user, to help the user choose data analysis paths that are likely to produce useful results and to…

Ingest preview of events in a network computing environment

Granted: January 14, 2025
Patent Number: 12197968
A computing device receives an ingest preview request to preview events to be stored by at least one indexer. Responsive to the ingest preview request, the computing device sends a subscription request to the forwarders. The forwarders receive the subscription request and intercept the events that are being sent to at least one of the indexers. The forwarders then clone matching events to the subscription request and responds to the computing device with the matching events. When the…

Audio watermarking to prevent meeting howl

Granted: January 14, 2025
Patent Number: 12197810
Presented herein are techniques in which a first device connects to a communication session in which a plurality of devices communicates. The plurality of devices includes the first device and a second device. The first device outputs first audio that includes a first audio watermark associated with the communication session and the second device outputs second audio that includes a second audio watermark associated with the communication session. The first device detects the second…

Integration of cloud-based and non-cloud-based data in a data intake and query system

Granted: January 14, 2025
Patent Number: 12197442
A software module ingests data into a data intake and query system. At least a portion of the data is cloud data. The software module includes an event type definition that specifies a type of data to be ingested by the software module, a first tag that associates ingested data of the event type with a data model, and a second tag that designates ingested data of the event type as cloud data. The ingested data is stored in a data repository, and subsequently a search query that includes…

Distributed alert and suppression management in a cluster computing system

Granted: January 14, 2025
Patent Number: 12197431
A first processing node of a cluster of processing nodes issues a first alert when first event data satisfies a trigger condition, and sends, to an alert data store external to the cluster, a first alert record of the first alert and suppression information based at least in part on the first alert. A second processing node of the cluster determines that second event data satisfies the trigger condition, obtains, from the alert data store, the suppression information indicating that an…

Using persistent memory to enable restartability of bulk load transactions in cloud databases

Granted: January 14, 2025
Patent Number: 12197396
Systems, methods, and computer-readable media for managing storing of data in a data storage system using a client tag. In some examples, a first portion of a data load as part of a transaction and a client identifier that uniquely identifies a client is received from the client at a data storage system. The transaction can be tagged with a client tag including the client identifier and the first portion of the data load can be stored in storage at the data storage system. A first log…