Back to results
US 10,320,613 B1Granted
Configuring contextually aware IoT policies
AssigneeCisco Technology, Inc.
InventorsNancy Cam-Winget, Dieter Derek Weber, Srikanth Ranganamyna
Life of this patent
Estimating the term…
Abstract
In one embodiment, a device in a network loads a selectable lexicon. The device receives a command that uses the loaded lexicon. The device interprets the command using the loaded lexicon. The device generates a configuration for one or more network nodes in the network based on the interpreted command. The device causes the one or more network nodes to implement the configuration.
Claims18
A method, comprising:
- loading, by a device in a network, a selectable lexicon associated with an operational technology (OT) policy manager;
- receiving, at the device, a command that uses the loaded lexicon and specifies an OT policy;
- interpreting, by the device, the command using the loaded lexicon by translating the received command from the loaded lexicon into an intermediate representation of the receive command that maps one or more tokens from the selectable lexicon to a network infrastructure;
- dynamically generating, by the device, a network configuration for one or more network nodes in the network based on the intermediate representation of the received command and a topology of the one or more network nodes in the network obtained by a network topology discovery service, wherein the generated network configuration translates, via a compiler, the OT policy into network policy definitions and configurations to be applied dynamically to the network;
- and
- sending, by the device, the network configuration to the one or more network nodes via an application programming interface (API) to cause the one or more network nodes to implement the generated network configuration.
3 more elements
An apparatus, comprising:
- one or more network interfaces to communicate with a network;
- a processor coupled to the network interfaces and configured to execute one or more processes;
- and
- a memory configured to store a process executable by the processor, the process when executed configured to:
- load a selectable lexicon associated with an operational technology (OT) policy manager;
- receive a command that uses the loaded lexicon and specifies an OT policy;
- interpret the command using the loaded lexicon by translating the received command from the loaded lexicon into an intermediate representation of the receive command that maps one or more tokens from the selectable lexicon to a network infrastructure;
- dynamically generate a network configuration for one or more network nodes in the network based on the intermediate representation of the received command and a topology of the one or more network nodes in the network obtained by a network topology discovery service, wherein the generated network configuration translates, via a compiler, the OT policy into network policy definitions and configurations to be applied dynamically to the network;
- and
- send the network configuration to the one or more network nodes via an application programming interface (API) the one or more network nodes to implement the network configuration.
7 more elements
A tangible, non-transitory, computer-readable medium storing program instructions that, when executed by a device in a network, causes the device to:
- load a selectable lexicon associated with an operational technology (OT) policy manager;
- receive a command that uses the loaded lexicon and specifies an OT policy;
- interpret the command using the loaded lexicon by translating the received command from the loaded lexicon into an intermediate representation of the receive command that maps one or more tokens from the selectable lexicon to a network infrastructure;
- dynamically generate a network configuration for one or more network nodes in the network based on the intermediate representation of the received command and a topology of the one or more network nodes in the network obtained by a network topology discovery service, wherein the generated network configuration translates, via a compiler, the OT policy into network policy definitions and configurations to be applied dynamically to the network;
- and
- send the network configuration to the one or more network nodes via an application programming interface (API) the one or more network nodes to implement the network configuration.
3 more elements
Dependencies are inferred from the claim text.