IP Library Granted Patent US 12,185,092
Granted Patent B2
US 12,185,092 · App. 17/563,646 · Granted Dec 31, 2024

Root network device causing execution of network service operations on behalf of constrained wireless network device in a low power and lossy network

Inventors: Li Zhao (Shanghai, CN); Pascal Thubert (Roquefort les Pins, FR); Huimin She (Shanghai, CN); Haibo Dong (Shanghai, CN)
Assignee: Cisco Technology, Inc.
H04W40/02H04L63/0209H04W12/033H04W28/0284H04L63/0471
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,185,092
App. No.
17/563,646
Granted
Dec 31, 2024
Kind
B2
Abstract

In one embodiment, a method comprises: registering, by a root network device in a low power and lossy network, a constrained network device that is reachable within the low power and lossy network; obtaining, by the root network device, executable code associated with execution of a network service operation by the constrained network device; receiving a data packet from a source device and destined for the constrained network device; and causing execution on the data packet, by the root network device, of the network service operation on behalf of the constrained network device in response to reception of the data packet.

Claims (75)

1. A method comprising:

registering, by a root network device in a network, a network device that is reachable within the network;

obtaining, by the root network device, executable code associated with execution of a network service operation for the network device;

receiving a data packet from a source device and destined for the network device; and

causing, by the root network device, execution of the network service operation on the data packet on behalf of the network device based on the executable code.

2. The method of claim 1 , wherein:

registering includes receiving, by the root network device from the network device, a security key allocated exclusively to the network device;

causing includes:

determining the data packet is encrypted,

causing decryption of the data packet into a decrypted packet, and

sending the decrypted packet to the network device via the network.

3. The method of claim 2 , wherein causing further includes:

receiving an unencrypted message from the network device in response to the decrypted packet;

causing encryption of the unencrypted message into an encrypted message based on the security key; and

sending the encrypted message to a second network device.

4. The method of claim 1 , wherein causing includes:

forwarding the data packet to a locally-reachable computing device configured for executing the executable code associated with the network service operation on behalf of the network device;

receiving a response generated by the locally-reachable computing device having executed the network service operation; and

forwarding the response, by the root network device, to one of either the network device in the network or a second network device.

5. The method of claim 1 , wherein the network service operation includes any one or more of Internet Control Message Protocol (ICMP) error processing on the data packet, Secure Shell (SSH) processing on the data packet, or selective buffering of the data packet based on a determined delay in reaching the network device in the network.

6. The method of claim 1 , wherein causing includes:

determining a congestion condition associated with reaching the network device in the network;

selectively buffering the data packet until a determined abatement of the congestion condition; and

transmitting, into the network, the data packet for delivery to the network device, based on the determined abatement of the congestion condition.

7. An apparatus implemented as a physical machine, the apparatus comprising:

non-transitory machine readable media configured for storing executable machine readable code;

a device interface circuit configured for receiving a registration request from a network device that is reachable within a network; and

a processor circuit configured for executing the machine readable code, and when executing the machine readable code operable for:

registering, by the apparatus implemented as a root network device in the network, the network device in response to the registration request,

obtaining, by the root network device, executable code associated with execution of a network service operation for the network device,

receiving a data packet from a source device and destined for the network device, and

causing, by the root network device, execution of the network service operation on the data packet on behalf of the network device on the data packet based on the executable code.

8. The apparatus of claim 7 , wherein:

the processor circuit is configured for receiving, from the network device, a security key allocated exclusively to the network device;

the processor circuit further configured for causing execution based on:

determining the data packet is encrypted,

causing decryption of the data packet into a decrypted packet, and

causing the device interface circuit to send the decrypted packet to the network device via the network.

9. The apparatus of claim 8 , wherein the processor circuit further is configured for:

receiving an unencrypted message from the network device in response to the decrypted packet;

causing encryption of the unencrypted message into an encrypted message based on the security key; and

sending the encrypted message to a second network device.

10. The apparatus of claim 7 , wherein the processor circuit is configured for causing execution based on:

forwarding the data packet to a locally-reachable computing device configured for executing the executable code associated with the network service operation on behalf of the network device;

receiving a response generated by the locally-reachable computing device having executed the network service operation; and

forwarding the response, by the root network device, to one of either the network device in the network or a second network device.

11. The apparatus of claim 7 , wherein the network service operation includes any one or more of Internet Control Message Protocol (ICMP) error processing on the data packet, Secure Shell (SSH) processing on the data packet, or selective buffering of the data packet based on a determined delay in reaching the network device in the network.

12. The apparatus of claim 7 , wherein the processor circuit is configured for causing execution based on:

determining a congestion condition associated with reaching the network device in the network;

selectively buffering the data packet until a determined abatement of the congestion condition; and

transmitting, into the network, the data packet for delivery to the network device, based on the determined abatement of the congestion condition.

13. One or more non-transitory tangible media encoded with logic for execution by a machine and when executed by the machine operable for:

registering, by the machine implemented as a root network device in a network, a network device that is reachable within the network;

obtaining, by the root network device, executable code associated with execution of a network service operation for the network device;

receiving a data packet from a source device and destined for the network device; and

causing, by the root network device, execution of the network service operation on the data packet on behalf of the network device on the data packet based on the executable code.

14. The one or more non-transitory tangible media of claim 13 , wherein:

registering receiving, by the root network device from the network device, a security key allocated exclusively to the network device;

causing includes:

determining the data packet is encrypted,

causing decryption of the data packet into a decrypted packet, and

sending the decrypted packet to the network device via the network.

15. The one or more non-transitory tangible media of claim 14 , wherein causing further includes:

receiving an unencrypted message from the network device in response to the decrypted packet;

causing encryption of the unencrypted message into an encrypted message based on the security key; and

sending the encrypted message to a second network device.

16. The one or more non-transitory tangible media of claim 13 , wherein causing includes:

forwarding the data packet to a locally-reachable computing device configured for executing the executable code associated with the network service operation on behalf of the network device;

receiving a response generated by the locally-reachable computing device having executed the network service operation; and

forwarding the response, by the root network device, to one of either the network device in the network or a second network device.

17. The one or more non-transitory tangible media of claim 13 , wherein the network service operation includes any one or more of Internet Control Message Protocol (ICMP) error processing on the data packet, Secure Shell (SSH) processing on the data packet, or selective buffering of the data packet based on a determined delay in reaching the network device in the network.

18. The one or more non-transitory tangible media of claim 13 , wherein causing includes:

determining a congestion condition associated with reaching the network device in the network;

selectively buffering the data packet until a determined abatement of the congestion condition; and

transmitting, into the network, the data packet for delivery to the network device, based on the determined abatement of the congestion condition.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 28, 2021
From: ZHAO, LI; THUBERT, PASCAL; SHE, HUIMIN; DONG, HAIBO
To: CISCO TECHNOLOGY, INC.
Reel/Frame 058597/0396 →
Continuity (2)
Continuation 16432661 · Jun 5, 2019
Related Publication 20220124073A1 · Apr 21, 2022
Cited By (1)
US 12,604,183