US 12,267,357 B2
Verifying the trust-worthiness of ARP senders and receivers using attestation-based methods
Sujal Sheth, Gujarat (IN); Shwetha Subray Bhandari, Bangalore (IN); William F. Sulzen, Apex, NC (US); and Frank Brockners, Cologne (DE)
Assigned to Cisco Technology, Inc., San Jose, CA (US)
Filed by Cisco Technology, Inc., San Jose, CA (US)
Filed on Feb. 15, 2022, as Appl. No. 17/672,502.
Application 17/672,502 is a continuation of application No. 16/712,584, filed on Dec. 12, 2019, granted, now 11,277,442.
Claims priority of provisional application 62/830,162, filed on Apr. 5, 2019.
Prior Publication US 2022/0174091 A1, Jun. 2, 2022
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 9/40 (2022.01); H04L 61/103 (2022.01)
CPC H04L 63/1466 (2013.01) [H04L 61/103 (2013.01); H04L 63/126 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A method comprising:
receiving, at an Address Resolution Protocol (ARP) responder, an ARP request from an ARP requestor for performing address resolution between the ARP requestor and the ARP responder in a network environment, wherein the ARP request includes requestor attestation information of the ARP requestor for verifying trustworthiness of one or more of hardware and software associated with the ARP requestor;
verifying trustworthiness of the ARP requestor using the requestor attestation information of the ARP requestor included in the ARP request;
performing the address resolution between the ARP requestor and the ARP responder based on whether the ARP requestor is verified as trustworthy or untrustworthy;
building, by the ARP responder, an ARP response including attestation information of the ARP responder;
providing, from the ARP responder to the ARP requestor, the ARP response and the attestation information of the ARP responder for verifying the ARP responder using the ARP response and the attestation information of the ARP responder; and
verifying the ARP responder based on at least one or more attestation information of the ARP responder that is verified before the ARP request is received.