Patent ID: 11956221
Assignee: CISCO TECHNOLOGY, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC H

Claim 10:
11. A computing device, comprising:
a processor; and
a non-transitory computer-readable media storing instructions that, when executed by the processor, causes the processor to perform operations comprising:
providing, from a network device, a first encrypted data packet to a trusted application (TA) handling application located outside a trusted execution environment (TEE) of the network device;
receiving, from the TA handling application, packet-forwarding data that defines processing instructions for the first encrypted data packet;
in response to receiving a second encrypted data packet, executing an extended Berkeley packet filter (eBPF) application at an express data path (XDP) hook point located within a kernel space of the network device;
analyzing the second encrypted data packet by the eBPF application; and
determining that the second encrypted data packet is to be processed via a trusted application (TA) within the TEE based at least in part on the analyzing by the eBPF application and the processing instructions.