Patrick Lionel Tate

US Patent:

8006091, Aug 23, 2011

Filed:

Jan 10, 2005

Appl. No.:

11/032353

Inventors:

Eric A. Fritzges - Marietta GA, US
Larry D. Bisel - Canton GA, US
Edward C. Kersey - Alpharetta GA, US
Patrick D. Tate - Dunwoody GA, US
Bruce F. Wong - Athens GA, US
Bradley D. Dike - Glen Allen VA, US
Andre Justin Pecqueur - Roswell GA, US
Shaheed Bacchus - Athens GA, US

Assignee:

Cisco Technology, Inc. - San Jose CA

International Classification:

H04L 9/00

US Classification:

713171

Abstract:

A method, apparatus and computer program product for providing failover capability of cached secure sessions is presented. A cached secure session involving a first device and a second device is identified. The cached secure session is encrypted and replicated to a failover device. The encrypted session is then decrypted on the failover device. An occurrence of a hot failover involving the second device is detected, and processing resumes between the first device and the failover device.

US Patent:

8224966, Jul 17, 2012

Filed:

Aug 24, 2004

Appl. No.:

10/925396

Inventors:

Patrick Darrell Tate - Dunwoody GA, US
Alexander S. Waterman - Los Gatos CA, US
Martin David Grimm - Snoqualmie WA, US
Anurag Kahol - Fremont CA, US

Assignee:

Cisco Technology, Inc. - San Jose CA

International Classification:

G06F 15/16
G06F 15/173
G06F 11/00
G01R 31/08
G08C 15/00
H04J 1/16
H04J 3/14
H04L 1/00
H04L 12/26

US Classification:

709227, 709207, 709217, 709218, 709219, 709228, 709229, 709239, 370235, 370236

Abstract:

A method is disclosed for reproxying connections. According to one aspect, a first connection is established between a client and a proxy device. A second connection is established between the proxy device and a server. The first connection comprises a first endpoint at the client and a second endpoint at the proxy device. The second connection comprises a third endpoint at the proxy device and a fourth endpoint at the server. The first and second connections are unproxied by dissolving the second and third endpoints while maintaining the first and fourth endpoints. After the connections have been unproxied, a packet is received at the proxy device. In response, the first and second connections are reproxied by creating fifth and sixth endpoints at the proxy device, so that the first connection comprises the fifth endpoint and the second connection comprises the sixth endpoint.

US Patent:

8332625, Dec 11, 2012

Filed:

Aug 22, 2011

Appl. No.:

13/215183

Inventors:

Eric A. Fritzges - Marietta GA, US
Larry D. Bisel - Canton GA, US
Edward C. Kersey - Alpharetta GA, US
Patrick D. Tate - Dunwoody GA, US
Bruce F. Wong - Athens GA, US
Bradley D. Dike - Glen Allen VA, US
Andre Justin Pecqueur - Roswell GA, US
Shaheed Bacchus - Athens GA, US

Assignee:

Cisco Technology, Inc. - San Jose CA

International Classification:

H04L 29/06

US Classification:

713151, 713171

Abstract:

A method, apparatus and computer program product for providing failover capability of cached secure sessions is presented. A cached secure session involving a first device and a second device is identified. The cached secure session is encrypted and replicated to a failover device. The encrypted session is then decrypted on the failover to device. An occurrence of a hot failover involving the second device is detected, and processing resumes between the first device and the failover device.

US Patent:

8452956, May 28, 2013

Filed:

Feb 20, 2009

Appl. No.:

12/390113

Inventors:

Edward C. Kersey - Alpharetta GA, US
Bradley Dale Dike - Marietta GA, US
Patrick Darrell Tate - Dunwoody GA, US
Eric A. Fritzges - Austell GA, US
Andre Justin Pecqueur - Roswell GA, US
Bruce F. Wong - Athens GA, US
Hema M. Prasad - Alpharetta GA, US
Shaheed Bacchus - Athens GA, US
Larry David Bisel - Canton GA, US

Assignee:

Cisco Technology, Inc. - San Jose CA

International Classification:

H04L 29/06

US Classification:

713153, 713156, 726 12

Abstract:

A data security device for providing a network transport connection via a transparent network proxy that employs different encryption security mediums along a communications session between two endpoints by emulating one of the endpoints at an intermediate node such that the communication session appears as an atomic, secure connection to the endpoints yet provides appropriate security over the end-to-end connection. A sender node sends a connection request to establish a secure communication session with an intended receiver node. A transparent proxy on an intermediate node receives the request and establishes the link employing an encryption mechanism. The transparent proxy establishes a second link with the intended receiver, and applies a second, less expensive encryption mechanism. The transparent proxy combines the two links to form the trusted, secure connection but incurring only the mitigated expense over the second link.

US Patent:

7506368, Mar 17, 2009

Filed:

Feb 13, 2003

Appl. No.:

10/365940

Inventors:

Edward C. Kersey - Alpharetta GA, US
Bradley Dale Dike - Marietta GA, US
Patrick Darrell Tate - Dunwoody GA, US
Eric A. Fritzges - Austell GA, US
Andre Justin Pecqueur - Roswell GA, US
Bruce F. Wong - Athens GA, US
Hema M. Prasad - Alpharetta GA, US
Shaheed Bacchus - Athens GA, US
Larry David Bisel - Canton GA, US

Assignee:

Cisco Technology, Inc. - San Jose CA

International Classification:

G06F 9/00
G06F 15/16
G06F 17/00

US Classification:

726 12

Abstract:

A data security device for providing a network transport connection via a transparent network proxy that employs different encryption security mediums along a communications session between two endpoints by emulating one of the endpoints at an intermediate node such that the communication session appears as an atomic, secure connection to the endpoints yet provides appropriate security over the end-to-end connection. A sender node sends a connection request to establish a secure communication session with an intended receiver node. A transparent proxy on an intermediate node receives the request and establishes the link employing an encryption mechanism. The transparent proxy establishes a second link with the intended receiver, and applies a second, less expensive encryption mechanism. The transparent proxy combines the two links to form the trusted, secure connection but incurring only the mitigated expense over the second link.