# US 10,454,891 B2 · Context-aware network and situation management for crypto-partitioned networks > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,454,891 B2 - Document ID: US10454891B2 - Status: Granted - Kind: B2 - Application number: 15/639,045 - Filed: 2017-06-30 - Published: 2017-10-26 - Granted: 2019-10-22 - Earliest claimed: 2013-12-19 - Assignees: Architecture Technology Corporation - Applicants: Architecture Technology Corporation - Inventors: Benjamin L. Burnett; Deborah K. Charan; Fabio Pozzo; Ranga Ramanujan - Web page: https://patentgrep.com/patent/US10454891B2 ## CPC - H04L 63/02: {for separating internal from external traffic, e.g. firewalls} - H04L 41/0853: by actively collecting configuration information or by backing up configuration information - H04L 41/0856: {by backing up or archiving configuration information} - H04L 41/22: comprising specially adapted graphical user interfaces [GUI] - H04L 41/28: Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration - H04L 63/0272: {Virtual private networks} - H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract This disclosure describes a context aware scalable dynamic network whereby network information concerning network elements in an untrusted (Black) network are gathered by network sensors, stored at a network sensor collector, and sent to another network sensor collector in a trusted (Red) network through a one-way guard. At the Red network, the network information from the Black network may be combined with network information from one or more Red networks. The combined network information may then be used to visualize a cross-domain network topology of both Red and Black networks, and to implement network management functions. ## Claims ### Claim 1 A method for providing network management, the method comprising: gathering first network information from first network elements in one or more trusted networks; receiving second network information through a one-way guard, the second information from second network elements in one or more untrusted networks; correlating one or more data flows associated with the first network information to one or more encrypted data tunnels associated with the second network information to form fused network information; generating a cross-domain network topology for the one or more trusted networks and the one or more untrusted networks based on the fused network information, wherein the cross-domain network topology depicts at least one of the one or more data flows in the trusted network as being contained in at least one of the one or more encrypted data tunnels based on the correlation of the one or more data flows in the trusted network to the one or more encrypted data tunnels in the untrusted network; and managing at least one of the second network elements identified in the cross-domain topology. ### Claim 2 (depends on 1) The method of claim 1, wherein managing the at least one of the second network elements identified in the cross-domain topology comprises: querying data from the at least one of the second network elements. ### Claim 3 (depends on 2) The method of claim 2, further comprising: querying data from the at least one of the second network elements using simple network management protocol (SNMP). ### Claim 4 (depends on 1) The method of claim 1, wherein managing the at least one of the second network elements identified in the cross-domain topology comprises: setting network management data at the at least one of the second network elements identified in the cross-domain topology. ### Claim 5 (depends on 4) The method of claim 4, further comprising: setting network management data at the at least one of the second network elements identified in the cross-domain topology using simple network management protocol (SNMP). ### Claim 6 (depends on 1) The method of claim 1, further comprising: managing at least one of the first network elements identified in the cross-domain topology. ### Claim 7 (depends on 1) The method of claim 1, further comprising: storing the first network information and the second network information in a database located in a first trusted network of the one or more trusted networks. ### Claim 8 (depends on 7) The method of claim 7, further comprising: sending the first network information and the second network information from the database to a second trusted network of the one or more trusted networks. ### Claim 9 (depends on 1) The method of claim 1, wherein the first network elements and the second network elements may be one or more of an inline network encryptor, a router, or a switch. ### Claim 10 An apparatus comprising: a computing device located in a first trusted network of one or more trusted networks, the computing device executing a network management system, the computing device comprising: a database configured to store network information; and one or more processors configured to: gather first network information from first network elements in the one or more trusted networks; receive second network information through a one-way guard, the second information from second network elements in one or more untrusted networks; correlate one or more data flows associated with the first network information to one or more encrypted data tunnels associated with the second network information to form fused network information; generate a cross-domain network topology for the one or more trusted networks and the one or more untrusted networks based on the fused network information, wherein the cross-domain network topology depicts at least one of the one or more data flows in the trusted network as being contained in at least one of the one or more encrypted data tunnels based on the correlation of the one or more data flows in the trusted network to the one or more encrypted data tunnels in the untrusted network; and manage at least one of the second network elements identified in the cross-domain topology. ### Claim 11 (depends on 10) The apparatus of claim 10, wherein to manage the at least one of the second network elements identified in the cross-domain topology, the one or more processors are further configured to: query data from the at least one of the second network elements. ### Claim 12 (depends on 11) The apparatus of claim 11, wherein the one or more processors are further configured to: query data from the at least one of the second network elements using simple network management protocol (SNMP). ### Claim 13 (depends on 10) The apparatus of claim 10, wherein to manage the at least one of the second network elements identified in the cross-domain topology, the one or more processors are further configured to: set network management data at the at least one of the second network elements identified in the cross-domain topology. ### Claim 14 (depends on 13) The apparatus of claim 13, wherein the one or more processors are further configured to: set network management data at the at least one of the second network elements identified in the cross-domain topology using simple network management protocol (SNMP). ### Claim 15 (depends on 10) The apparatus of claim 10, wherein the one or more processors are further configured to: manage at least one of the first network elements identified in the cross-domain topology. ### Claim 16 (depends on 10) The apparatus of claim 10, wherein the one or more processors are further configured to: store the first network information and the second network information in the database. ### Claim 17 (depends on 16) The apparatus of claim 16, wherein the one or more processors are further configured to: send the first network information and the second network information from the database to a second trusted network of the one or more trusted networks. ### Claim 18 A computer-readable storage medium storing instructions that, when executed, cause one or more processors to: gather first network information from first network elements in one or more trusted networks; receive second network information through a one-way guard, the second information from second network elements in one or more untrusted networks receive at least the second network information through a one-way guard; correlate one or more data flows associated with the first network information to one or more encrypted data tunnels associated with the second network information to form fused network information; generate a cross-domain network topology for the one or more trusted networks and the one or more untrusted networks based on the fused network information, wherein the cross-domain network topology depicts at least one of the one or more data flows in the trusted network as being contained in at least one of the one or more encrypted data tunnels based on the correlation of the one or more data flows in the trusted network to the one or more encrypted data tunnels in the untrusted network; and manage at least one of the second network elements identified in the cross-domain topology. ### Claim 19 (depends on 18) The computer-readable storage medium of claim 18, wherein the instructions further cause the one or more processors to: query data from the at least one of the second network elements. ### Claim 20 (depends on 18) The computer-readable storage medium of claim 18, wherein the instructions further cause the one or more processors to: set network management data at the at least one of the second network elements identified in the cross-domain topology.