Back to results
US 8,429,396 B1Granted
Peer discovery and secure communication in failover schemes
AssigneeJuniper Networks, Inc.
InventorsAtul Narendra Trivedi, Steven Malmskog
Life of this patent
Estimating the term…
Abstract
A system discovers peer nodes in a failover system, establishes a secure channel between at least two of the peer nodes, and exchanges state information over the secure channel.
Claims28
A method performed by a peer node, of a plurality of peer nodes, in a network, the method comprising:
- performing, by the peer node, a first discovery technique for discovering local peer nodes, of the plurality of peer nodes, the first discovery technique including sending a broadcast discovery message, via a local area network, to dynamically discover the local peer nodes;
- performing, by the peer node, a second discovery technique for discovering remote peer nodes, of the plurality of peer nodes, the second discovery technique being different from the first discovery technique and including sending a unicast discovery message, via a wide area network, to statically discover the remote peer nodes;
- negotiating, by the peer node, a secure channel for exchanging state information, the peer node negotiating the secure channel with each of the local peer nodes and each of the remote peer nodes, negotiating the channel with one of the local peer nodes or one of the remote peer nodes including:
- offering, by the peer node and to the one of the local peer nodes or the one of the remote peer nodes one or more forms of secure communication to be used to exchange the state information, and
- determining, by the peer node, whether the peer node and the one of the local peer nodes or the one of the remote peer nodes support a common form of secure communication based on offering the one or more forms of secure communication,
- establishing, by the peer node, the secure channel using the common form of secure communication when the peer node and the one of the local peer nodes or the one of the remote peer nodes support the common form of secure communication,
- establishing, by the peer node, an unsecure channel between the peer node and the one of the local peer nodes or the one of the remote peer nodes when the peer node and the one of the local peer nodes or the one of the remote peer nodes do not support the common form of secure communication;
- and
- exchanging the state information over the secure channel or the unsecure channel.
6 more elements
A system comprising:
- one or more devices to:
- discover a first peer node, of a plurality of peer nodes, using a first discovery technique, of a plurality of discovery techniques, where the first discovery technique includes sending a broadcast discovery message to discover the first peer node on a local network,
- discover a second peer node, of the plurality of peer nodes, using a second discovery technique, of the plurality of discovery techniques, where the second discovery technique includes sending a unicast discovery message to discover the second peer node on a remote network, where the second peer node is different from the first peer node,
- negotiate with the first peer node to identify a first form of secure communication, when negotiating with the first peer node, the one or more devices begin to:
- offer one or more forms of secure communication to the first peer node, and
- determine, based on offering the one or more forms of secure communication, whether the one or more devices and the first peer node support a common form of secure communication,
- negotiate with the second peer node to identify a second form of secure communication,
- establish, via the local area network, a first secure channel with the first peer node when the one or more devices support the common form of communication,
- establish, via the local area network, an unsecure channel between the one or more devices and the first peer node when the one or more devices and the first peer node do not support the common form of communication,
- establish, via the remote network, a second secure channel with the second peer node based on the identified second form of communication, and
- transmit state information over the first secure channel or the unsecure channel to the first peer node and over the second secure channel to the second peer node.
8 more elements
A failover system, comprising:
- a plurality of first peer nodes;
- and
- a second peer node to:
- discover one of the plurality of first peer nodes by sending a broadcast discovery message to the one of the plurality of first peer nodes via a first network,
- discover another one of the plurality of first peer nodes by sending a unicast discovery message to the other one of the plurality of first peer nodes via a second network that is different from the first network,
- negotiate a form of secure communication with the one of the plurality of first peer nodes and the other one of the plurality of first peer nodes, when negotiating the form of secure communication, the second peer node begin to:
- offer one or more forms of secure communication to the one of the plurality of first peer nodes, and
- determine, based on offering the one or more forms of secure communication, whether the second peer node and the one of the plurality of first peer nodes support a common form of secure communication,
- establish a first secure channel between the second peer node and the one of the plurality of first peer nodes when the second peer node and the one of the plurality of first peer nodes support the common form of secure communication,
- establish an unsecure channel between the second peer node and the one of the plurality of first peer nodes when the second peer node and the one of the plurality of first peer nodes do not support the common form of secure communication,
- establish a second secure channel between the second peer node and the other one of the plurality of first peer nodes,
- receive state information over the first secure channel or the unsecure channel from the one of the plurality of first peer nodes and over the second secure channel from the other one of the plurality of first peer nodes, and
- determine whether a failover event has occurred based on the received state information.
10 more elements
A system, comprising:
- a first peer node to:
- send a broadcast discovery message to dynamically discover a local peer node, of a plurality of second peer nodes, where the local peer node connects to the first peer node via a local area network,
- send a unicast discovery message to statically discover a remote peer node, of the plurality of second peer nodes, where the remote peer node connects to the first peer node via a wide area network,
- negotiate a form of secure communication with the local peer node and the remote peer node, when negotiating the form of secure communication with one of the local peer node or the remote peer node, the first peer node begin to:
- offer one or more forms of secure communication to the one of the local peer node or the remote peer node, and
- determine, based on offering the one or more forms of secure communication to the one of the local peer node or the remote peer node, whether the first peer node and the one of the local peer node or the remote peer node support a common form of secure communication,
- establish separate communication channels to the local peer node and the remote peer node, at least one of the channels comprising an unsecure channel when the first peer node and the one of the local peer node or the remote peer node do not support the common form of communication, and
- receive state information from the local peer node and the remote peer node via the separate communication channels.
5 more elements
A method, comprising:
- sending, by a first peer node, a broadcast discovery message to discover a local peer node, the local peer node connecting to the first peer node via a local area network;
- sending, by the first peer node, a unicast discovery message to discover a remote peer node, the remote peer node connecting to the first peer node via a wide area network;
- negotiating a form of secure communication with the local peer node and the remote peer node, negotiating the form of secure communication with one of the local peer node or the remote peer node including:
- offering one or more forms of secure communication to the one of the local peer node or the remote peer node, and
- determining, based on offering the one or more forms of secure communication to the one of the local peer node or the remote peer node, whether the first peer node and the one of the local peer node or the remote peer node support a common form of secure communication,
- establishing, by the first peer node, channels to the local peer node and the remote peer node, at least one of the channels comprising an unsecure channel when the first peer node and the one of the local peer node or the remote peer node do not support the common form of communication;
- receiving, by the first peer node, state information from the local peer node and the remote peer node via the established channels;
- and
- determining whether a failover event has occurred based on the received state information.
6 more elements
Dependencies are inferred from the claim text.