Applying attestation to segment routing
AssigneeCisco Technology, Inc.
InventorsFrancois Clad, Pablo Camarillo Garvia, Clarence Filsfils
Life of this patent
Estimating the term…
Abstract
In one embodiment, a method by an apparatus of a segment routing (SR) network includes receiving a data packet and accessing an attestation token for the apparatus. The method further includes determining a location within a header of the received data packet for the attestation token and creating an updated header by encoding the attestation token in the determined location of the header. The method further includes sending the updated header with the encoded attestation token to another apparatus of the SR network.
Claims17
An apparatus of a segment routing (SR) network, the apparatus comprising:
- one or more processors;
- and
- one or more non-transitory computer-readable storage media coupled to the one or more processors and comprising instructions operable when executed by the one or more processors to cause the one or more processors to perform operations comprising:
- receiving a data packet;
- accessing an attestation token for the apparatus;
- determining a location within a header of the received data packet for the attestation token;
- creating an updated header by encoding the attestation token in the determined location of the header, wherein encoding the attestation token in the determined location of the header comprises writing the attestation token in a Type-Length-Value (TLV);
- and
- sending the updated header with the encoded attestation token to another apparatus of the SR network.
A method by an apparatus of a segment routing (SR) network, the method comprising:
- receiving a data packet;
- accessing an attestation token for the apparatus;
- determining a location within a header of the received data packet for the attestation token;
- creating an updated header by encoding the attestation token in the determined location of the header, wherein encoding the attestation token in the determined location of the header comprises writing the attestation token in a Type-Length-Value (TLV);
- and
- sending the updated header with the encoded attestation token to another apparatus of the SR network.
One or more non-transitory computer-readable storage media embodying software that is operable when executed to:
- receive a data packet at an apparatus of a segment routing (SR) network;
- access an attestation token for the apparatus;
- determine a location within a header of the received data packet for the attestation token, wherein determining the location within the header of the received data packet for the attestation token comprises computing a new offset value using an existing offset value stored in the header;
- create an updated header by encoding the attestation token in the determined location of the header, wherein creating the updated header comprises writing the new offset value in the header;
- and
- send the updated header with the encoded attestation token to another apparatus of the SR network.
Dependencies are inferred from the claim text.