Ian S Foo, 50Raleigh, NC

7447166, Nov 4, 2008

Nov 2, 2004

10/979536

Ian Foo - Raleigh NC, US
Shyam Murthy - Santa clara CA, US
Ramesh Ponnapalli - Bangalore, IN
Rajasekhar Manam - Bangalore, IN

Cisco Technology, Inc. - San Jose CA

H04L 12/26

370254, 370465

A technique optimizes the distribution of authenticated users among a plurality of broadcast domains, such as virtual local area networks (VLAN). Users are dynamically assigned to different broadcast domains based on various factors, including but not limited to the number of authenticated users already participating in each broadcast domain, the available bandwidth in each broadcast domain, user classes associated with users participating in each broadcast domain, etc. Based on one or more of these factors, authenticated users are optimally distributed (“load balanced”) among the plurality of broadcast domains, thereby reducing the amount of broadcast traffic and configuration within each domain.

7539189, May 26, 2009

Oct 17, 2006

11/582786

Susan M. Sauter - Murphy TX, US
Jason D. Frazier - Raleigh NC, US
Cynthia D. Melter - Santa Cruz CA, US
Gregory Alan Moore - Sedalia MI, US
Ian Foo - Raleigh NC, US

Cisco Technology, Inc. - San Jose CA

H04L 12/28

370389, 709225, 713153

Disclosed are apparatus and methods for authenticating a device to access a network through an access control port. In one embodiment, one or more first authentication packets for authenticating a first device or user to access a first network domain via a particular access port of a network device are received, for example, by an access control port. The particular access port is configured to control access for packets attempting to ingress into one or more network domains. When the first device or user is authorized to access the first domain, a first binding between the first device and the first domain is formed. The first binding specifies that the first device is allowed to access the first domain and the first binding is associated with the particular access port of the network device. When a packet is received that is attempting to ingress into the first domain and the ingressing packet matches the first binding, the ingressing packet is allowed to access the first domain. In contrast, when a packet is received that is attempting to ingress into the first domain and the ingressing packet does not match the first binding, the ingressing packet is blocked from accessing the first domain.

7650387, Jan 19, 2010

Nov 15, 2005

11/280556

Ian Foo - Raleigh NC, US
Jeremy E. Stieglitz - Menlo Park CA, US
Frederick J. Baker - Santa Barbara CA, US

Cisco Technology, Inc. - San Jose CA

G06F 15/167

709214, 709216, 709217, 709219, 709223

A method, a system, a machine-readable medium, and an apparatus for managing storage on a shared storage space, for example, on an email server, are provided. A plurality of emails is compared. If the content of each of the plurality of emails is the same, then a single copy is stored on the email server. Further, each recipient of the plurality of emails is enabled access to the stored email via a link to the single copy. Additionally, one or more attachments of the plurality of emails are compared. If an attachment is the same in each of the plurality of emails, then it is stored as a single copy. Further, a link is inserted in each of the plurality of emails, enabling access to the attachment from the single copy.

7788720, Aug 31, 2010

May 16, 2006

11/435123

Jeevan Patil - San Jose CA, US
Jeremy E. Stieglitz - Menlo Park CA, US
Shripati Acharya - Fremont CA, US
Ian Foo - Raleigh NC, US

Cisco Technology, Inc. - San Jose CA

G06F 21/00
G06F 11/30
G06F 15/16

726 22, 726 1, 709224

Techniques for security protection of a wireless network are provided. An access point is operated in a first mode. The first mode is a mode of operation that allows access to resources of a network. A security event for a client is detected while operating the access point in the first mode. Then, the access point is changed from the first mode of operation to a second mode of operation. The second mode is a restricted mode of operation that restricts access to resources of the network. Analysis may then be performed to determine if the client is an unauthorized client or valid client.

7903639, Mar 8, 2011

Mar 24, 2006

11/388477

Ian Foo - Raleigh NC, US
Armin Current - Danville NH, US
Kenneth Durazzo - San Ramon CA, US

Cisco Technologies, Inc. - San Jose CA

H04L 12/66

370352, 370349, 370401, 370464, 370466, 370467, 709219, 709230, 709231, 709245, 709246, 4554121, 4554141, 4554144, 455415, 455424

A system for interfacing different types of network communications. In one embodiment, the system includes one or more gateways capable of converting messages from messages that are adapted for a first type of network and/or destination device to messages that are adapted for a second type of network and/or destination device. The second type of network and/or destination device includes a first Voice Over Internet Protocol (VOIP) communications device. A message-analysis module is adapted to employ an address associated with the message to selectively forward the message to one or more of the one or more gateways and/or to a destination device. In a more specific embodiment, the first type of network includes a packet-switched network in communication with the first VOIP phone. The destination device includes a mobile phone in communication with a cellular network. In the specific embodiment, the first type of destination device includes a user option to selectively transition a text-based communications session to a voice-based communications session.

7930734, Apr 19, 2011

Apr 28, 2006

11/414540

Ian Foo - Raleigh NC, US
Jeremy Stieglitz - Menlo Park CA, US
Arthur Zavalkovsky - Netanya, IL
Jeevan S. Patil - San Jose CA, US
Partha Bhattacharya - Cupertino CA, US
Jason Frazier - Raleigh NC, US
Ellis Roland Dobbins - San Jose CA, US

Cisco Technology, Inc. - San Jose CA

H04L 9/32
G06K 9/00

726 5, 726 6, 726 7, 726 19, 709228

A method and system is disclosed for creating and tracking network sessions. A request to access a network is received from an entity. The entity is authenticated after the request is received. Authenticated identity information associated with the entity, network address information associated with the entity, and network location information associated with the entity is collected. An information set is created. The information set comprises and binds together the authenticated identity information, the network address information, and the network location information. The information set indicates a present association among the authenticated identity information, the network address information, and the network location information. The information set is stored in a session record in a centralized database. The session record represents a session in which the entity accesses the network.

8068414, Nov 29, 2011

Aug 9, 2004

10/913363

Craig Allen Huegen - Bartelso IL, US
Ellis Roland Dobbins - San Jose CA, US
Ian Foo - Raleigh NC, US
Robert Eric Gleichauf - San Antonio TX, US

Cisco Technology, Inc. - San Jose CA

H04L 12/22

370230, 370389

Link layer authentication information is supplied by a link layer authentication device to an access router for tracking IP address usage by a client device. The authentication information supplied to the access router includes an authenticated client identifier and a corresponding authenticated link identifier for the client device that attached to the network based on the authenticated link identifier. The access router, in response to receiving a message that specifies the authenticated link identifier and a source IP address, adds the source IP address to a cache entry that specifies the authenticated client identifier and the corresponding authenticated link identifier, and outputs to an audit resource a record that specifies the source IP address and the authenticated link identifier.

8483191, Jul 9, 2013

Feb 21, 2006

11/359753

William D. Erdman - Cupertino CA, US
Jeremy Stieglitz - Menlo Park CA, US
Patrick Che' Gilbreath - Santa Clara CA, US
Ian Foo - Raleigh NC, US

Cisco Technology, Inc. - San Jose CA

H04W 4/00

370338, 37039521, 4554522, 455453, 455512, 37911401

A system and method for selectively controlling traffic in a network to improve network performance. The system includes a network controller that includes a first control-traffic prioritizer. An Access Point (AP) includes a second control-traffic prioritizer and communicates with the network controller. One or more clients communicate with the AP. The communications behavior of the client is affected by operations of the first control-traffic prioritizer and the second control-traffic prioritizer.