Intent-based network system with an interface to a large language model for the autonomous creation and enforcement of policies.

Abstract

An intent-based networking system (100) with an interface to a large language model for autonomous policy generation and enforcement, wherein the system (100) comprises: a large language model-based intent interface module (1) configured to receive a natural language network intent from an authorized user and convert the natural language network intent into a structured network intent object; an intent analysis and network knowledge graph module (2) configured to map the structured network intent object to network resources, users, applications, routes, security zones, cloud resources, and dependency relationships stored in a network knowledge graph;an autonomous policy creation and compliance validation engine (3) configured to generate at least one vendor-neutral network policy from the associated structured network intent object and to validate at least one vendor-neutral network policy against organizational guidelines, compliance rules, service-level requirements, and conflict detection rules; a real-time telemetry and context awareness module (4) configured to collect live network status information, including traffic, device status, link utilization, latency, packet loss, security events, configuration status, and application performance indicators;a policy simulation and digital twin security module (5) configured to test the at least one vendor-neutral network policy prior to live enforcement in a simulated network model and determine a security score that reflects the expected impact on reachability, performance, security, and availability; a multi-domain policy enforcement orchestration module (6) configured to translate a validated policy into device- or controller-specific enforcement instructions and deliver these enforcement instructions via network controllers, routers, switches, firewalls, wireless controllers, cloud gateways, edge gateways, or security service platforms;and a module (7) for closed-loop backup, drift detection and auditing, configured to compare an intended network state with an observed network state, detect policy deviations or enforcement failures, trigger corrective actions and store records of intent, policy, enforcement and verification in a tamper-proof audit ledger.