Method for operating a network and a network
AssigneeNEC Corporation
InventorsRoberto Bifulco, Ghassan Karame
Life of this patent
Estimating the term…
Abstract
A method for operating a network in which a Software-Defined Networking (SDN) functionality between at least some of a plurality of elements of the network is realized by at least one controller. The method includes providing a secure proof of at least one network property. The secure proof of the at least one network property is provided by the SDN functionality.
Claims22
A method for providing a guarantee of a network property from a network in which a domain governing controller governing a domain of a network user provides a Software-Defined Networking (SDN) functionality between a plurality of nodes, the method comprising:
- receiving, from the network user, a signature and a request for the network property, wherein the request for the network property includes a public key of the network user;
- verifying that the signature received from the network user matches the public key of the network user;
- demonstrating the capability of providing the network property by determining policies to be installed on nodes of the network so as to enable the network property to be provided;
- generating, in response to the demonstrating the capability of providing the network property, a secure certificate that contains a secure acknowledgment (ACK) of a commitment to provide the network property;
- and
- providing the secure certificate to the network user as a guarantee of the network property,
- wherein the requested network property is bound by at least one of time, size, or packet count, and
- wherein the policies to be installed include a temporary rule that will be deleted once reaching a bound of at least one of time, size, or packet count.
A network for providing a guarantee of a network property, the network comprising:
- a domain governing controller governing a domain of a network user configured to:
- provide a Software-Defined Networking (SDN) functionality between a plurality of nodes,
- receive, from the network user, a signature and a request for the network property, wherein the request for the network property includes a public key of the network user;
- verify that the signature received from the network user matches the public key of the network user;
- demonstrate the capability of providing the network property by determining policies to be installed on nodes of the network so as to enable the network property to be provided
- generate, in response to demonstrating the capability of providing the network property, a secure certificate that contains a secure acknowledgment (ACK) of a commitment to provide the network property;
- and
- provide the secure certificate to the network user as a guarantee of the network property,
- wherein the requested network property is bound by at least one of time, size, or packet count, and
- wherein the policies to be installed include a temporary rule that will be deleted once reaching a bound of at least one of time, size, or packet count.
Dependencies are inferred from the claim text.