Back to results
US 12,052,157 B2Granted
Non-overlapping secured topologies in a distributed network fabric
AssigneeNant Holdings IP, LLC
InventorThomas M. Wittenschlaeger
Life of this patent
Estimating the term…
Abstract
Networks comprising multiple non-overlapping communication topologies are presented. The networks can include a fabric of interconnected network nodes capable of providing multiple communication paths among edge devices. A topology manager constructs communication topologies according to restriction criteria based on required security levels (e.g., top secret, secret, unclassified, etc.). Established topologies do not have overlapping networking infrastructure to within the bounds of the restriction criteria as allowed by the security levels.
Claims20
A network fabric comprising:
- a plurality of interconnected networking nodes, each node having ports connected to at least one other node via physical communication links;
- a common networking infrastructure including a plurality of possible physical communication paths between a first port pair and at least a second port pair, the first port pair comprising a first pair of edge devices and the second port pair comprising a second pair of edge devices that is different from the first pair of edge devices;
- and
- a topology manager configured to,
- assign at least one node of the plurality of interconnected networking nodes in the network fabric to communicate in a first physical network topology of the common networking infrastructure at a first time slice, wherein a second physical network topology of the common networking infrastructure does not include the at least one node at the first time slice, a first security level is associated with the first physical network topology and a second security level is associated with the second physical network topology;
- determine whether the first security level associated with the first physical network topology has a higher priority than the second security level associated with the second physical network topology;
- in response to a determination that the first security level has the higher priority, reconfigure the at least one node to stop communicating in the first physical network topology;
- and
- at a second time slice subsequent to the first time slice and subsequent to reconfiguring the at least one node to stop communicating in the first physical network topology, reassign the at least one node to communicate in the second physical network topology, wherein the first physical network topology does not include the at least one node at the second time slice.
6 more elements
Dependencies are inferred from the claim text.