Non-overlapping secured topologies in a distributed network fabric
AssigneeNant Holdings IP, LLC
InventorThomas M. Wittenschlaeger
Life of this patent
Estimating the term…
Abstract
Networks comprising multiple non-overlapping communication topologies are presented. The networks can include a fabric of interconnected network nodes capable of providing multiple communication paths among edge devices. A topology manager constructs communication topologies according to restriction criteria based on required security levels (e.g., top secret, secret, unclassified, etc.). Established topologies do not have overlapping networking infrastructure to within the bounds of the restriction criteria as allowed by the security levels.
Claims20
A method of configuring a network fabric, the method comprising:
- assigning, by a topology manager, at least one node of a plurality of interconnected networking nodes in a network fabric to communicate in a first physical network topology of a common networking infrastructure at a first time slice,
- wherein each node has ports connected to at least one other node via physical communication links,
- wherein the common networking infrastructure includes a plurality of possible physical communication paths between a first port pair and at least a second port pair, the first port pair comprising a first pair of edge devices and the second port pair comprising a second pair of edge devices that is different from the first pair of edge devices, and
- wherein a second physical network topology of the common networking infrastructure does not include the at least one node at the first time slice, a first security level is associated with the first physical network topology and a second security level is associated with the second physical network topology;
- determining whether the first security level associated with the first physical network topology has a higher priority than the second security level associated with the second physical network topology;
- in response to a determination that the first security level has the higher priority, reconfiguring the at least one node to stop communicating in the first physical network topology;
- and
- at a second time slice subsequent to the first time slice and subsequent to reconfiguring the at least one node to stop communicating in the first physical network topology, reassigning the at least one node to communicate in the second physical network topology, wherein the first physical network topology does not include the at least one node at the second time slice.
A method of configuring a network fabric, the method comprising:
- establishing first and second non-overlapping physical network topologies in a common networking infrastructure according to overlapping restriction criteria operating as a function of topology security levels, by distributing a time synchronized table to at least one node of multiple interconnected networking nodes of a network fabric,
- wherein each node includes ports connected to at least one other node via physical communication links, the network fabric comprises the common networking infrastructure characterized by a plurality of possible physical communication paths between a first port pair and at least a second port pair, the first port pair is communicatively coupled to a first pair of edge devices and the second port pair is communicatively coupled to a second pair of edge devices, and each edge device of the first pair of edge devices is different from each edge device of the second pair of edge devices,
- wherein a first security level is associated with a first topology and a second security level is associated with a second topology, the first pair of edge devices are at the first security level, and the second pair of edge devices are at the second security level,
- wherein the first topology comprises a first communication infrastructure within the network fabric between the first pair of edge devices and the second topology comprises a second communication infrastructure within the network fabric between the second pair of edge devices, and
- wherein the second topology does not overlap the first topology within bounds defined by the restriction criteria.
Dependencies are inferred from the claim text.