ATUL BHASKAR MAHAMUNI
Pilots at San Sebastian Pl, Fremont, CA

2013021, Aug 22, 2013

Feb 21, 2012

13/400991

Atul B. Mahamuni - Fremont CA, US
Carol Barrett - Palo Alto CA, US
Jean-Philippe Vasseur - Saint Martin d'Uriage, FR

Cisco Technology, Inc. - San Jose CA

G06F 21/20

726 6

In one embodiment, a management device in a computer network determines when nodes of the computer network join any one of a plurality of field area routers (FARs), which requires a shared-media mesh security key for that joined FAR. The management device also maintains a database that indicates to which FAR each node in the computer network is currently joined, and to which FARs, if any, each node had previously joined, where the nodes are configured to maintain the mesh security key for one or more previously joined FARs in order to return to those previously joined FARs with the maintained mesh security key. Accordingly, in response to an updated mesh security key for a particular FAR of the plurality of FARs, the management node initiates distribution of the updated mesh security key to nodes having previously joined that particular FAR that are not currently joined to that particular FAR.

8630177, Jan 14, 2014

Feb 27, 2012

13/405828

Jean-Philippe Vasseur - Saint Martin d'Uriage, FR
Jonathan W. Hui - Foster City CA, US
Atul B. Mahamuni - Fremont CA, US

Cisco Technology, Inc. - San Jose CA

G01R 31/08

370232, 370229, 370230, 370231, 370254, 370255, 370256

In one embodiment, traffic flows through a root node of a primary directed acyclic graph (DAG) in a computer network are monitored to detect whether a particular traffic flow is above a path cost threshold. If so, then a corresponding source device may be instructed to cease using the primary DAG for the particular traffic flow, and specific action may be taken based on whether the particular traffic flow is point-to-point (P2P) or point-to-multipoint (P2MP). In particular, in response to the particular traffic flow being P2P, a source route may be computed and sent to the source device to cause the source device to use the source route for the particular traffic flow, while in response to the particular traffic flow being P2MP, the source device may be instructed to create a secondary DAG for the particular traffic flow with the source device as the secondary DAG root.

2012021, Aug 23, 2012

Feb 23, 2011

12/932456

Navindra Yadav - Cupertino CA, US
Atul Mahamuni - Fremont CA, US
Bora A. Akyol - Richland WA, US
Peirong Feng - Sunnyvale CA, US
Thomas J. Enderwick - La Jolla CA, US
Aji Joseph - San Jose CA, US
Shashi Kumar - San Jose CA, US
Sambasivam Valliappan - San Jose CA, US

CISCO TECHNOLOGY, INC. - San Jose CA

G06F 21/24, G06F 15/173

726 1

In one embodiment, a method includes receiving a communication from an endpoint device at a network access device located within a data path between the endpoint device and a network, identifying a network admission control policy for the endpoint device, enforcing at the network access device, the network admission control policy for traffic received from the endpoint device, and forwarding at the network access device, traffic from the endpoint device to the network in accordance with the network admission control policy. An apparatus is also disclosed.

2013001, Jan 10, 2013

Jul 6, 2011

13/176857

Navindra Yadav - Cupertino CA, US
Atul Mahamuni - Fremont CA, US
Jonathan Hui - Foster City CA, US
Alec Woo - Union City CA, US

CISCO TECHNOLOGY, INC. - San Jose CA

G06F 21/00, H04W 12/06

726 3

Techniques are provided for adaptive routing of authentication packets in a network, such as a wireless mesh network. At an authenticated device in the network, an authentication packet is received over the network from a device that is seeking authentication. The authentication packet is encapsulated for transmission in Layer 3 packets over an Internet Protocol (IP) tunnel to an authenticator device associated in the network. Similarly, for an authentication packet encapsulated in Layer 3 packets from the authenticator device over the IP tunnel, the authentication packet is decapsulated from the Layer 3 packets and transmitted over the network to the device seeking authentication.

2013003, Feb 7, 2013

Aug 3, 2011

13/196960

Navindra Yadav - Cupertino CA, US
Atul Mahamuni - Fremont CA, US
Jonathan Hui - Foster City CA, US
Wei Hong - Berkeley CA, US
Alec Woo - Union City CA, US

CISCO TECHNOLOGY, INC. - San Jose CA

H04L 9/32

713168

According to one embodiment, techniques are provided to enable secure communication among devices in a mesh network using a group temporal key. An authenticator device associated with a mesh network stores a pairwise master key for each of a plurality of devices in a mesh network upon authentication of the respective devices. Using the pairwise master key, the authenticator device initiates a handshake procedure with a particular device in the mesh network to mutually derive a pairwise temporal key from the pairwise master key. The authenticator device encrypts and signs a group temporal key using the pairwise temporal key for the particular device and sends the group temporal key encrypted and signed with the pairwise temporal key to the particular device.

2013004, Feb 14, 2013

Aug 9, 2011

13/206012

Atul Mahamuni - Fremont CA, US
Navindra Yadav - Cupertino CA, US
Jonathan Hui - Foster City CA, US
Alec Woo - Union City CA, US
Wei Hong - Berkeley CA, US

CISCO TECHNOLOGY, INC. - San Jose CA

G06F 21/20

726 3

Techniques are provided for the controlled scheduling of the authentication of devices in a lossy network, such as a mesh network. An authenticator device that is configured to authenticate devices in a lossy network receives an authentication start message from a particular device to be authenticated. The authenticator device determines a schedule for engaging in an authentication procedure for the particular device based on an indication of current network utilization.

2013005, Feb 28, 2013

Aug 29, 2011

13/219773

Navindra Yadav - Cupertino CA, US
Atul Mahamuni - Fremont CA, US

Cisco Technology, Inc. - San Jose CA

G06F 15/173

709224

Techniques are provided to facilitate monitoring of utility application traffic streams. At a network device that routes utility application traffic for utility devices, control information is received, where the control information is configured to cause the network device to monitor utility application traffic that passes through the network device. The network device monitors a header inserted into utility application traffic messages based on the control information.

2013018, Jul 25, 2013

Jan 25, 2012

13/358130

Kalyan Bade - Sunnyvale CA, US
Atul B. Mahamuni - Fremont CA, US
Carol Barrett - Palo Alto CA, US
Jean-Philippe Vasseur - Saint Martin d'Uriage, FR

Cisco Technology, Inc. - San Jose CA

H04L 12/24

370216

In one embodiment, a device in a computer network establishes a reliable map that defines a set of packet criteria for which reliability is desired over an unreliable link to a peer device. In response to receiving a first packet from the peer device over the unreliable link, the device acknowledges the first packet to the peer device when the first packet matches the packet criteria of the reliable map. Also, in response to receiving a second packet destined via the peer device over the unreliable link, the device buffers the second packet when the second packet matches the packet criteria of the reliable map and retransmits the buffered second packet over the unreliable link to the peer device until acknowledged by the peer device.