US 12,341,819 B2
Method and apparatus for policy attributes exchange between security policy management platforms and 5G as a service platforms
Timothy P. Stammers, Raleigh, NC (US); Bhavik Adhvaryu, San Jose, CA (US); and Irfan Ali, Palo Alto, CA (US)
Assigned to Cisco Technology, Inc., San Jose, CA (US)
Filed by Cisco Technology, Inc., San Jose, CA (US)
Filed on Sep. 1, 2022, as Appl. No. 17/929,040.
Claims priority of provisional application 63/351,066, filed on Jun. 10, 2022.
Prior Publication US 2023/0412643 A1, Dec. 21, 2023
Int. Cl. H04L 9/40 (2022.01)
CPC H04L 63/20 (2013.01) [H04L 63/0876 (2013.01); H04L 63/104 (2013.01)] 18 Claims
OG exemplary drawing
 
1. A computer-implemented method comprising:
detecting that a device has connected to a private cellular network, wherein the device is associated with a device group, and wherein the device group is associated with an access policy applicable within an enterprise network and the private cellular network;
in response to the detecting, generating a determination corresponding to a policy effectiveness associated with the access policy implemented in the device group, wherein the determination is generated based on a version of the access policy implemented in the enterprise network and a version of the access policy implemented in the device group, wherein the private cellular network was notified of the version of the access policy implemented in the enterprise network as an update that has not yet been applied to the device group;
determining whether the version of the access policy implemented in the enterprise network matches the version of the access policy implemented at the device;
in response to the determining resulting in a mismatch:
obtaining the version of the access policy implemented in the enterprise network; and
applying the version of the access policy implemented in the enterprise network for the device and other devices associated with the device group;
in response to the determining resulting in a match:
applying the version of the access policy implemented in the enterprise network to the other devices associated with the device group;
determining an effectiveness of the version of the access policy implemented in the enterprise network on the private cellular network; and
providing, to the enterprise network, a recommendation for a policy exception to be applied at the device group based on the effectiveness.