Stephen P James

US Patent:

7694021, Apr 6, 2010

Filed:

Oct 21, 2003

Appl. No.:

10/690182

Inventors:

Lee Shombert - Herndon VA, US
Stephen James - South Riding VA, US
Jennifer Carle - Vienna VA, US
David Friedman - Roseville CA, US

Assignee:

Cisco Technology, Inc. - San Jose CA

International Classification:

G06F 15/16

US Classification:

709249, 709227

Abstract:

Techniques for implementing a firewall in a gateway network element between two IP based networks is provided. Packets can be filtered out that specify the gateway network element as the source, where the packet comes from the network that is not visible to the other network. For example, if a packet on DCC going to the gateway network element specifies the gateway network element as the source, the packet can be discarded.

US Patent:

20060280175, Dec 14, 2006

Filed:

Jun 10, 2005

Appl. No.:

11/149681

Inventors:

Krishna Kanakasapapathi - Herndon VA, US
Lee Shombert - Herndon VA, US
Stephen James - South Riding VA, US
Alec Hothan - Sacramento CA, US
Thomas Hoffman - Fairfax VA, US
Jin Huai - Petaluma CA, US

Assignee:

CISCO TECHNOLOGY, INC. - San Jose CA

International Classification:

H04L 12/56

US Classification:

370389000, 370401000

Abstract:

A method and system for providing network management communication between a plurality of network elements are disclosed. A method includes creating a tunnel configured for transmitting data between the network elements and transmitting network management information over the tunnel using a network management protocol. The tunnel passes through a gateway network element configured to communicate with the network elements utilizing the network management protocol.

US Patent:

20170222974, Aug 3, 2017

Filed:

Jan 29, 2016

Appl. No.:

15/010155

Inventors:

- Reston VA, US
Stephen Daniel James - South Riding VA, US

International Classification:

H04L 29/06
H04L 29/12
H04L 29/08

Abstract:

A method, system, apparatus, and computer-readable memory containing instructions include receiving, at an agent operating on a client device, a (domain name system) DNS resolution request for a domain name. The DNS resolution request is transmitted to a first DNS server including a firewall service and a second DNS server within a local network to the client device. Responses to the DNS resolution request from the first and second DNS server are received. The agent determines how to resolve the DNS resolution request based on one or more of the received responses.

US Patent:

20170222978, Aug 3, 2017

Filed:

Feb 3, 2016

Appl. No.:

15/014647

Inventors:

- Reston VA, US
Stephen Daniel James - South Riding VA, US

International Classification:

H04L 29/06
H04L 12/46
H04L 29/12

Abstract:

Embodiments relate to systems, devices, and computing-implemented methods for resolving DNS requests by sending, from a device, a first DNS request for a domain name associated with a local service device to a DNS firewall server. The DNS firewall server can send a response that includes a status indicating a server failure in response to determining that the first DNS request is associated with a customer of a DNS firewall service and determining that a record associated with the domain name cannot be found. The device can receive the response and send a second DNS request to an internal DNS server in response to the status indicating the server failure.

US Patent:

20160337181, Nov 17, 2016

Filed:

May 6, 2016

Appl. No.:

15/148990

Inventors:

- Reston VA, US
Andrew FREGLY - Herndon VA, US
Stephen D. JAMES - South Riding VA, US

International Classification:

H04L 12/24
H04L 29/08
H04L 29/06
H04L 29/12

Abstract:

In one embodiment, a delegation engine automatically provisions a device connected to a network to securely identify and interact with external services. As a device boots in a deployment environment, the delegation engine generates a search domain name based on a manufacturer-supplied domain name and a domain name associated with the deployment environment. The delegation engine then searches a Domain Name System (DNS) to retrieve a delegation record stored at the search domain name. After verifying a manufacturer signature associated with the delegation record, the delegation engine configures the device based on service discovery information included in the delegation record. Because the delegation engine automates the provisioning process, the time required to provision devices is acceptable irrespective of the number of the devices. Further, because the delegation engine verifies the delegation record, the delegation engine does not expose the device to security risks during the provisioning process.

US Patent:

20160205097, Jul 14, 2016

Filed:

Jan 12, 2015

Appl. No.:

14/595178

Inventors:

- Reston VA, US
Stephen Daniel James - South Riding VA, US

International Classification:

H04L 29/06
H04L 29/12
H04L 29/08

Abstract:

Provided is a method for establishing ownership of a component of an internet of things (“IoT”) device. The method comprises receiving, at a registration service, a request to register the component of the IoT device, the request comprising a public key of the component of the IoT device, an identifier of the component of the IoT device, and a public key of an owner of the component of the IoT device; determining a qualified name for the component of the IoT device based on a name associated with the owner of the component of the IoT device; generating one or more domain name system (“DNS”) records for the component of the IoT device, the one or more DNS records comprising an authentication file that identifies a chain of ownership of the component of the IoT device; and storing the one or more DNS records in a registry.

US Patent:

20160205106, Jul 14, 2016

Filed:

Jan 12, 2015

Appl. No.:

14/595190

Inventors:

- Reston VA, US
Regis Piccand - Bulle, CH
Daniel Schonfeld - Reston VA, US
Stephen Daniel James - South Riding VA, US
Andrew Fregly - Reston VA, US

International Classification:

H04L 29/06
H04L 12/58
H04L 29/12

Abstract:

Provided is a method for subscribing to a data feed from an internet of things (“IoT”) device. The method comprises obtaining, by a subscribe application program interface (“API”) of a container, a subscription request to subscribe to the data feed from a requestor, wherein the container is operable to provide one or more services to an internet of things (“IoT”) device through one or more application programming interfaces (“APIs”), wherein subscription request is associated with data stored in one or more domain name system (“DNS”) records; determining that the subscription request is permissible based on a list of approved requestors; and providing the data feed to the requestor, wherein the requestor is another container or another IoT device.