Jason D Frazier

US Patent:

7539189, May 26, 2009

Filed:

Oct 17, 2006

Appl. No.:

11/582786

Inventors:

Susan M. Sauter - Murphy TX, US
Jason D. Frazier - Raleigh NC, US
Cynthia D. Melter - Santa Cruz CA, US
Gregory Alan Moore - Sedalia MI, US
Ian Foo - Raleigh NC, US

Assignee:

Cisco Technology, Inc. - San Jose CA

International Classification:

H04L 12/28

US Classification:

370389, 709225, 713153

Abstract:

Disclosed are apparatus and methods for authenticating a device to access a network through an access control port. In one embodiment, one or more first authentication packets for authenticating a first device or user to access a first network domain via a particular access port of a network device are received, for example, by an access control port. The particular access port is configured to control access for packets attempting to ingress into one or more network domains. When the first device or user is authorized to access the first domain, a first binding between the first device and the first domain is formed. The first binding specifies that the first device is allowed to access the first domain and the first binding is associated with the particular access port of the network device. When a packet is received that is attempting to ingress into the first domain and the ingressing packet matches the first binding, the ingressing packet is allowed to access the first domain. In contrast, when a packet is received that is attempting to ingress into the first domain and the ingressing packet does not match the first binding, the ingressing packet is blocked from accessing the first domain.

US Patent:

7865727, Jan 4, 2011

Filed:

Aug 24, 2006

Appl. No.:

11/467002

Inventors:

Shengyou Zeng - Concord MA, US
Jason Frazier - Raleigh NC, US
Joshua B. Littlefield - Wellesley MA, US
Joseph A. Salowey - Seattle WA, US

Assignee:

Cisco Technology, Inc. - San Jose CA

International Classification:

H04L 9/00
G06F 21/00

US Classification:

713168, 726 3, 726 4, 726 5, 726 6, 726 7, 725111

Abstract:

An extensible authentication framework is used in cable networks such as Data Over Cable Service Interface Specification (DOCSIS) cable networks. The authentication scheme allows for centralized authentication of cable modems, as well as authentication of the cable network by cable modems. Additionally, the authentication scheme allows a Cable Modem Termination System (CMTS) to authenticate devices downstream from cable modems, such as Customer Premise Equipment (CPE) devices.

US Patent:

7930734, Apr 19, 2011

Filed:

Apr 28, 2006

Appl. No.:

11/414540

Inventors:

Ian Foo - Raleigh NC, US
Jeremy Stieglitz - Menlo Park CA, US
Arthur Zavalkovsky - Netanya, IL
Jeevan S. Patil - San Jose CA, US
Partha Bhattacharya - Cupertino CA, US
Jason Frazier - Raleigh NC, US
Ellis Roland Dobbins - San Jose CA, US

Assignee:

Cisco Technology, Inc. - San Jose CA

International Classification:

H04L 9/32
G06K 9/00

US Classification:

726 5, 726 6, 726 7, 726 19, 709228

Abstract:

A method and system is disclosed for creating and tracking network sessions. A request to access a network is received from an entity. The entity is authenticated after the request is received. Authenticated identity information associated with the entity, network address information associated with the entity, and network location information associated with the entity is collected. An information set is created. The information set comprises and binds together the authenticated identity information, the network address information, and the network location information. The information set indicates a present association among the authenticated identity information, the network address information, and the network location information. The information set is stored in a session record in a centralized database. The session record represents a session in which the entity accesses the network.

US Patent:

8108673, Jan 31, 2012

Filed:

Apr 29, 2005

Appl. No.:

11/119244

Inventors:

Jason D. Frazier - Raleigh NC, US
Ramesh V N Ponnapalli - Bangalore, IN
Shyam Kaluve - Bangalore, IN
Rajasekhar Manam - Bangalore, IN
Jacob F. Jensen - Mountain View CA, US

Assignee:

Cisco Technology, Inc. - San Jose CA

International Classification:

H04L 9/32

US Classification:

713168, 709220

Abstract:

Configuring an interface of a switch includes sending an authentication request requesting authentication for an endpoint from a switch to an authentication server. The switch comprises interfaces and is operable to access templates, where a template is operable to generate one or more interface commands for an interface. An instruction is received from the authentication server. The instruction instructs the switch to apply an identified template to an interface, where the identified template is identified by the authentication server as associated with the endpoint. The identified template is applied to configure the interface according to the instruction.

US Patent:

8189600, May 29, 2012

Filed:

Apr 10, 2006

Appl. No.:

11/400855

Inventors:

Khalil Jabr - Austin TX, US
S. Scott Van De Houten - Geneva FL, US
Jason Frazier - Raleigh NC, US
Victor Moreno - Carlsbad CA, US

Assignee:

Cisco Technology, Inc. - San Jose CA

International Classification:

H04L 12/28
H04L 12/56

US Classification:

37039553, 370351, 370389, 370397, 370399, 370409, 370419

Abstract:

A method, apparatus and computer program product for providing IP Routing when using dynamic virtual local area networks (VLANs) with web based authentication. A downstream VLAN is assigned to a first switch port of a first network device. A first upstream VLAN is also assigned to the first switch port of the first network device. The first upstream VLAN is changed to a second upstream VLAN upon authentication, and the downstream VLAN is maintained.

US Patent:

8397278, Mar 12, 2013

Filed:

Dec 13, 2011

Appl. No.:

13/323885

Inventors:

Jason R. Frazier - Raleigh NC, US
Ramesh V. N. Ponnapalli - Bangalore, IN
Shyam Kaluve - Bangalore, IN
Rajasekhar Manam - Bangalore, IN
Jacob F. Jensen - Mountain View CA, US

Assignee:

Cisco Technology, Inc. - San Jose CA

International Classification:

G06F 7/04
G06F 15/16
G06F 17/30
H04L 29/06

US Classification:

726 3

Abstract:

Configuring an interface of a switch includes sending an authentication request requesting authentication for an endpoint from a switch to an authentication server. The switch comprises interfaces and is operable to access templates, where a template is operable to generate one or more interface commands for an interface. An instruction is received from the authentication server. The instruction instructs the switch to apply an identified template to an interface, where the identified template is identified by the authentication server as associated with the endpoint. The identified template is applied to configure the interface according to the instruction.

US Patent:

8453216, May 28, 2013

Filed:

Nov 22, 2010

Appl. No.:

12/951285

Inventors:

Shengyou Zeng - Concord MA, US
Jason Frazier - Raleigh NC, US
Joshua B. Littlefield - Wellesley MA, US
Joseph A. Salowey - Seattle WA, US

Assignee:

Cisco Technology, Inc. - San Jose CA

International Classification:

G06F 21/00

US Classification:

726 4, 713168, 725111

Abstract:

An extensible authentication framework is used in cable networks such as Data Over Cable Service Interface Specification (DOCSIS) cable networks. The authentication scheme allows for centralized authentication of cable modems, as well as authentication of the cable network by cable modems. Additionally, the authentication scheme allows a Cable Modem Termination System (CMTS) to authenticate devices downstream from cable modems, such as Customer Premise Equipment (CPE) devices.

US Patent:

20060209705, Sep 21, 2006

Filed:

Mar 17, 2005

Appl. No.:

11/083434

Inventors:

Susan Sauter - Murphy TX, US
Jason Frazier - Raleigh NC, US
Ian Foo - Raleigh NC, US
Gregory Moore - Sedalia MO, US
Troy Sherman - San Jose CA, US

International Classification:

H04J 1/16
H04L 12/66

US Classification:

370252000, 370352000

Abstract:

According to one embodiment, a method for removing authentication of a supplicant includes monitoring communication between the supplicant and an authenticator. The method also includes determining, based on the monitored communication, the MAC address for the supplicant and an attachment port of the supplicant to the intermediate network device disposed between the supplicant and the authenticator through which the monitored communication occurs. The method also includes determining that the supplicant no longer has a link connection with the intermediate network device, and in response, sending via the intermediate network device a logoff message having a spoofed source address of the supplicant to the authenticator.