Peter H Davis

US Patent:

7266715, Sep 4, 2007

Filed:

Apr 29, 2003

Appl. No.:

10/425787

Inventors:

John Bazzinotti - Norwood MA, US
Peter Scott Davis - Wakefield MA, US
Timothy Steven Champagne - Attleborough MA, US
Kenneth John Wante - Bellingham MA, US

Assignee:

Cisco Technology, Inc. - San Jose CA

International Classification:

G06F 11/00

US Classification:

714 4, 714 47

Abstract:

A client device establishes a virtual private network connection with a central site or network through a master concentrator. The master concentrator transmits state information, relating to the virtual private network connection, to a backup concentrator. In the event the master concentrator fails during a communications session between the client device and the network, the backup concentrator maintains the communication session between the client device and the network over the virtual private network connection using the connection state information received from the master concentrator. Such a configuration allows for failover of a virtual private network connection from the master concentrator to the backup concentrator without requiring the client device to re-establish the virtual private network connection with the central site or network. The configuration also allows the client device to maintain an existing communications session with the network.

US Patent:

7376743, May 20, 2008

Filed:

Oct 29, 2002

Appl. No.:

10/282816

Inventors:

John Bazzinotti - Norwood MA, US
Peter Scott Davis - Wakefield MA, US
Kenneth John Wante - Bellingham MA, US
Timothy Steven Champagne - South Attleborough MA, US
Dany J. Rochefort - Norfolk MA, US

Assignee:

Cisco Technology, Inc. - San Jose CA

International Classification:

G06F 15/16
G06F 15/177
G06F 15/173
G06F 3/00
G06F 5/00
G06F 11/00
G01R 31/08
G08C 15/00
H04J 1/16
H04J 3/14
H04L 1/00
H04L 12/26

US Classification:

709229, 709220, 709226, 710 38, 370236, 370237

Abstract:

In a virtual private network, a plurality of concentrators form an interface to provide client/remote site access to a private network over a public network. The plurality of concentrators are grouped into a virtual cluster. Each concentrator in the virtual cluster has an IP address and the virtual cluster has a virtual IP address. In operation, one of the plurality of concentrators assumes the virtual IP address and acts as the master device in the cluster. When a client attempts a connection to the private network, the client addresses an initial request to the virtual IP address. The master device responds to the client request by transmitting to the client the IP address of a concentrator in the cluster selected to handle the connection.

US Patent:

7444415, Oct 28, 2008

Filed:

Oct 29, 2002

Appl. No.:

10/282503

Inventors:

John Bazzinotti - Norwood MA, US
Peter Davis - Wakefield MA, US
Victor Volpe - Groton MA, US
Rashmi Pitre - Shrewsbury MA, US
Keith Mader - Raynham MA, US

Assignee:

Cisco Technology, Inc. - San Jose CA

International Classification:

G06F 15/16

US Classification:

709229, 709217, 709218, 709219, 709227, 709245, 709250

Abstract:

A virtual private network device enables individual machines at a remote subnet to be visible and addressable from a central site by establishing a private address range for the remote machines, forming a virtual private network tunnel from the virtual private network device to the central site, and communicating the private address range to the central site to enable connections from the central site to individual machines on the remote subnet.

US Patent:

7624437, Nov 24, 2009

Filed:

May 1, 2002

Appl. No.:

10/136480

Inventors:

Arturo Fagundo - Westborough MA, US
John Bazzinotti - Norwood MA, US
Peter Davis - Wakefield MA, US
Andrew Rodwin - Acton MA, US

Assignee:

Cisco Technology, Inc. - San Jose CA

International Classification:

G06F 15/16

US Classification:

726 15, 726 3, 726 14, 713153

Abstract:

In a hardware client for remote logon to a network, a two layer authentication protocol enables authorized users to log on while discouraging unauthorized users. The hardware client prevents logging on to the network if the hardware client is stolen. The hardware client itself is authenticated in the first authentication layer in order to establish a link to the network. Then a client computer authenticates in a second layer and further establishes a secure connection to the network. If the power of the hardware client goes off (as it would if or example it were unplugged for transport), then the authentication is not saved and therefore is lost. The hardware client must be reauthenticated before it can be used again.

US Patent:

7720942, May 18, 2010

Filed:

Sep 15, 2008

Appl. No.:

12/283717

Inventors:

John Bazzinotti - Norwood MA, US
Peter Davis - Wakefield MA, US
Victor Volpe - Groton MA, US
Rashmi Pitre - Shrewsbury MA, US
Keith Mader - Raynham MA, US

Assignee:

Cisco Technology, Inc. - San Jose CA

International Classification:

G06F 15/177

US Classification:

709221, 709220, 709227, 709228, 709229

Abstract:

A virtual private network device enables individual machines at a remote subnet to be visible and addressable from a central site by establishing a private address range for the remote machines, forming a virtual private network tunnel from the virtual private network device to the central site, and communicating the private address range to the central site to enable connections from the central site to individual machines on the remote subnet.

US Patent:

20200358770, Nov 12, 2020

Filed:

May 9, 2019

Appl. No.:

16/407808

Inventors:

- San Jose CA, US
Valentiu Vlad Santau - Littleton MA, US
Peter Scott Davis - Wakefield MA, US

International Classification:

H04L 29/06

Abstract:

Methods to securely remediate a captive portal are provided. In these methods, a processor of a user device detects a connection, via a network, to a captive portal. Based on the detected connection to the captive portal, the processor launches a dedicated secure web browser, and selectively restricts access of the user device to the network in order to only allow, via the dedicated secure web browser, communications related to remediation with the captive portal.

US Patent:

20180309658, Oct 25, 2018

Filed:

Jul 26, 2017

Appl. No.:

15/660208

Inventors:

- San Jose CA, US
Valentiu Vlad Santau - Littleton MA, US
Peter S. Davis - Wakefield MA, US

International Classification:

H04L 12/715
H04L 12/46
H04L 12/741

Abstract:

A computing device dynamically excludes/includes traffic from/in a secure tunnel based on the domain name of the destination of the traffic. The computing device establishes a secure tunnel from the computing device, and receives a request to access a remote resource at a domain name. The computing device resolves the domain name at a domain name server and receives a resolved network address associated with the domain name. The computing device determines whether to send the request inside the secure tunnel or outside the secure tunnel by comparing the domain name to a split tunneling policy. Based on the comparison with the split tunneling policy, the computing device sends the request to the resolved network address either outside the secure tunnel or inside the secure tunnel.