Architecture for network management in a multi-service network
AssigneeAT&T Intellectual Property I, L.P.
InventorDeron Ringen
Life of this patent
Estimating the term…
Abstract
A mechanism is provided for a non-converged network for a service provider. A core network is divided into individually managed domains, where each of the domains comprises multiprotocol label switching for packets. A management system is coupled to each of the domains. Network elements in each of the domains are restricted from directly transferring packets to network elements in another one of domains. Each of the domains has a domain firewall at an edge of the domains, and the domain firewall restricts packets from being received from other domains. To transfer packets from one domain to another domain, the management system receives the packets from one domain and transfers the packets to the other domain after authentication.
Claims18
A system for providing a non-converged network for a single service provider, the system comprising:
- a core network divided into individually managed domains, the individually managed domains comprising a television services domain and a cell phone services domain, wherein each of the individually managed domains comprises multiprotocol label switching for packets;
- and
- a management system, comprising a hardware processor and memory, coupled to each of the individually managed domains, the management system being a trusted host outside of the television services domain and outside the cell phone services domain;
- wherein network elements in each of the individually managed domains are restricted from directly transferring the packets to the network elements in other individually managed domains;
- wherein respective domain firewalls are at an edge of the individually managed domains in order to individually protect the cell phone services domain by a cell phone domain firewall in a first computing device, and to individually protect the television services domain by a television domain firewall in a second computing device;
- wherein the first and second computing devices are separate computing devices from one another;
- wherein the management system is outside of and not included the respective domain firewalls, the respective domain firewalls restricting the packets from being received from the other individually managed domains;
- and
- wherein, to transfer the packets from one individually managed domain to another individually managed domain, the management system receives the packets from the one individually managed domain in order to transfer the packets to the another individually managed domain after authentication.
A method for providing a non-converged network for a single service provider, comprising:
- dividing a core network into individually managed domains comprising a television services domain and a cell phone services domain, wherein each of the individually managed domains comprises multiprotocol label switching for packets;
- coupling a management system to each of the individually managed domains, the management system being a trusted host outside of the television services domain and outside the cell phone services domain;
- restricting network elements in each of the individually managed domains from directly transferring the packets to the network elements in other individually managed domains;
- configuring respective domain firewalls at an edge of the individually managed domains in order to individually protect the cell phone services domain by a cell phone domain firewall in a first computing device and to individually protect the television services domain by a television domain firewall in a second computing device;
- wherein the first and second computing devices are separate computing devices from one another;
- configuring the management system to be outside of and not include the respective domain firewalls, the respective domain firewalls restricting the packets from being received from the other individually managed domains;
- and
- to transfer the packets from one individually managed domain to another individually managed domain, receiving by the management system the packets from the one individually managed domain in order to transfer the packets to the another individually managed domain after authentication.
Dependencies are inferred from the claim text.