95 results about "Programmable networking" patented technology

System and method for providing service-agnostic network resources is provided. An embodiment receives an indication that a user is requesting services at a new location, retrieves an access profile, which includes service parameters for services to which the user subscribes, and causes the access network and the programmable network to be reconfigured to provide to the user's services at the new location. The indication may be generated automatically or manually. A network control database that stores network topology information and / or configuration instructions may be used to reconfigure the network resources. In this manner, the access network and the programmable network may be reconfigured to allow the user to move from location to location and from device to device and continue to receive a consistent set of transport services, even involving multiple forms of transport.

A virtualization framework provides security between multiple virtual machines with respect to network communications between the virtual machines and between the virtual machines and a physical network coupled to the underlying physical computer platform. The virtualization framework includes a network interface controller driver that provides an interface to the platform network interface controller and supports execution of a plurality of virtual machines. Each virtual machine includes a virtual network interface controller that provides a network communications path between the virtual machines and to the network interface controller driver. Each virtual network interface controller further contains a programmable network packet filter that controls the selective transfer of network packets with respect to a corresponding virtual machine.

A system and method process data elements on multiple processing elements. A first processing element processes a task. A second processing element, coupled to the first processing element, is associated with a task. The first processing element sends a critical-section end signal to the second processing element while processing the task at the first processing element. The second processing element resumes the task in response to receiving the critical-section end signal.

Methods for determining cyber-attack targets include collecting and storing network event information from sensors to extract information regarding an attacker; forming an attack scenario tree that encodes network topology and vulnerability information including paths from known compromised nodes to a set of potential targets; calculating a likelihood for each of the paths using a processor; calculating a probability distribution for the set of potential targets to determine which potential targets are most likely pursued by the attacker; calculating a probability distribution over a set of nodes and node vulnerability types already accessed by the attacker; determining a network graph edge to remove which minimizes a defender's expected uncertainty over the potential targets; and removing the determined network graph edge.

An architecture that achieves high speed performance in a network protocol handler combines parallelism and pipelining in multiple programmable processors, along with specialized front-end logic at the network interface that handles time critical protocol operations. The multiple processors are interconnected via a high-speed interconnect, using a multi-token counter protocol for data transmission between processors and between processors and memory. Each processor's memory is globally accessible by other processors, and memory synchronization operations are used to obviate the need for “spin-locks”. Each processor has multiple threads, each capable of fully executing programs. Each processor contains embedded dynamic random access memory (DRAM). Threads within a processor are assigned the processing of various protocol functions in a parallel / pipelined fashion. Data frame processing is done by one or more of the threads to identify related frames. Related frames are dispatched to the same thread so as to minimize the overhead associated with memory accesses and general protocol processing. The high-speed protocol handler may also provide built-in monitors for examining the activity of its hardware resources and reallocating the workload to the resources that are not heavily used, thus balancing the resource utilization and increasing the workload throughput.

An interface connection is described for joining a host device, such as a Network Processor, to peripherals such as modems, printers, local area networks, Ethernets and Token-Ring interfaces. The connection is particularly useful for joining portable computers, such as laptops, to these peripherals. The connector utilizes a programmable Network Processor (NP) either in the host device or in an external fan-out box. This programmable Network Processor adapts the host device to a variety of peripheral devices utilizing different protocols and I / O speeds. The NP can use a Digital Signal Processor to provide programmable services to the physical layers. The host device may contain a high-speed communication interface with the NP contained in the external connection box.

An improvement to the prior-art extends an intelligent solution beyond simple IP packet switching. It intersects with computing, analytics, storage and performs delivery diversity in an efficient intelligent manner. A flexible programmable network is enabled that can store, time shift, deliver, process, analyze, map, optimize and switch flows at hardware speed. Multi-layer functions are enabled in the same node by scaling for diversified data delivery, scheduling, storing, and processing at much lower cost to enable multi-dimensional optimization options and time shift delivery, protocol optimization, traffic profiling, load balancing, and traffic classification and traffic engineering. An integrated high performance flexible switching fabric has integrated computing, memory storage, programmable control, integrated self-organizing flow control and switching.

A method and apparatus for scheduling the processing of commands by a plurality of cryptographic algorithm cores in a network processor.

A virtualization framework provides security between multiple virtual machines with respect to network communications between the virtual machines and between the virtual machines and a physical network coupled to the underlying physical computer platform. The virtualization framework includes a network interface controller driver that provides an interface to the platform network interface controller and supports execution of a plurality of virtual machines. Each virtual machine includes a virtual network interface controller that provides a network communications path between the virtual machines and to the network interface controller driver. Each virtual network interface controller further contains a programmable network packet filter that controls the selective transfer of network packets with respect to a corresponding virtual machine.

A parser engine programming tool configured to receive an input file representing a directly connected cyclical graph or tree of decision points for parsing a range of incoming packet headers, automatically generate all possible paths within the graph and thereby the associated possible headers, and convert the determined paths / headers into a proper format for programming memory of a parser engine to parse the determined headers (represented by the paths).

The present invention provides a field programmable network application specific integrated circuit and a method of operation thereof. In one advantageous embodiment, the field programmable network application specific integrated circuit includes a media access controller and a programmable logic core having an array of dynamically configurable arithmetic logic units. The programmable logic core configured to interface with the media access controller and implement at least one application level function capable of generating meta-data. The media access controller and the programmable logic controller form at least a portion of a MP-block.

A programmable digital signal processor includes a plurality of memory units, a plurality of accelerator units and a processor core. The digital signal processor also includes a programmable network that may be configured to selectively provide connectivity between the memory units, the accelerator units, and the processor core. Each of the accelerator units may be configured to perform one or more dedicated functions. The processor core may include an execution unit that may be configured to execute instructions that are associated with datapath flow control. The programmable network may be configured to selectively provide the connectivity in response to execution of particular instructions.

The invention provides a device for testing the elasticity of the carbon brush of a motor brush rocker dynamically and a testing method thereof. The device for testing the elasticity of the carbon brush of a motor brush rocker dynamically consists of a bottom plate, a stander, a vertical cylinder, left and right linear guide rails, front and back linear guide rails, a positioning and fixing pressure gripper, a positioning tooling, left and right linear bearings, front and back linear bearings, a damping curb pin, a pressure sensor, a screw mandrel, a servo motor, a shaft coupling, a displacement sensor and a programmable network digital monitor. The test device can test the change of the elasticity curvilinear of a tested work-piece.

A system and method for providing automatic closed loop control of a network using a dynamic control loop. The system includes one or more collectors and a remote network manager. The one or more collectors are configured to receive network traffic data from a plurality of network elements in the network. The remote network manager computes an initial control policy to the programmable network elements using (1) high-level policies, security requirements, and any anomalous traffic behavior; (2) configuration capability and current configuration of underlying network elements; (3) network topology, statistics, and tolerable configuration change; and (4) control loop parameters including stability, oscillation, and timescale. The remote network manager sends control policy parameters to the programmable network elements, observes the network, measures effectiveness of the initial control policy with respect to the high-level policy, and computes an updated control policy to send to the programmable network elements.

The embodiment of the invention provides a computing power scheduling system, method and device and a storage medium, relates to the technical field of computers, and can realize scheduling of computing power resources under the condition of considering network conditions, the system comprises a scheduler and at least one programmable network connected with the scheduler, the scheduler is used for executing the following steps: acquiring a computing power resource request which comprises service feature information of a target service and is used for requesting to allocate computing power resources for the target service; determining feature information of a target computing power resource required by the target service based on the service feature information; according to the feature information of the target computing power resource, the idle computing power conditions of the plurality of computing power nodes and the network condition information of the at least one programmable network, determining a scheduling strategy from the plurality of computing power nodes, the scheduling strategy comprising a target computing power node and a mode of calling the target computing power node; and the target computing power node is used for executing the target business.

Systems and methods for integrating ultra-fast programmable networks in microgrid are disclosed to provide flexible and easy-to-manage communication solutions, thus enabling resilient microgrid operations in face of various cyber and physical disturbances. The system is configured to establish a novel software-defined networking (SDN) based communication architecture which abstracts the network infrastructure from the upper-level applications to significantly expedite the development of microgrid applications, develop three functions of the SDN controller for microgrid emergency operations, including time delay guarantee, failover reconfiguration and rate limit and create a hardware-in-the-loop cyber-physical platform for evaluating and validating the performance of the presented architecture and control techniques.

The invention discloses a check system for a LabVIEW-based automobile instrument. The check system for the LabVIEW-based automobile instrument comprises an upper computer, a national instruments corporation PCI extensions for instrumentation-6624 (NIPXI-6624) board card, two NIPXI-6528 board cards, a programmable network resistor, a controller area network (CAN) communication board card, an NIPXI case, a serial port to universal serial bus (USB) data line and a LabVIEW human-computer interface software program. The upper computer communicates with the NIPXI case by the serial port to USB data line; the NIPXI board cards are inserted into corresponding slots in the NIPXI case; the NIPXI-6624 board card is respectively connected with a speedometer and a tachometer; one of the two NIPXI-6528 board cards is connected with a fuel meter and a water-thermometer by the programmable network resistor; the other NIPXI-6528 board card is connected with various switching value signal indicating lamps; the upper computer, the NIPXI board cards and various instruments communicate with the switching value signal indicating lamps by a CAN bus of the CAN communication board card; and the LabVIEW human-computer interface software program is a software platform of the check system. The portable automobile instrument check system is compact and flexible and is high in reliability, and the real-time feedback of automobile state information can be realized by aiming at different automobiles.

Disclosed is a server farm or MetaServer environment in which thin servers or server appliances each include a programmable network interface card providing logic required for implementing service processor functions. The combined implementation of the network interface and service processor hardware and software substantially eliminates redundancies, which previously existed when both were separate components. Service processor functions that are provided on the programmable network interface card includes gathering sensor data about the hardware, forwarding alerts regarding hardware state, initiating shutdown and restart on command, and responding to operating system service processor inquiries and commands. Additionally, other low-level management and control functions are provided on the programmable network interface card. Also, in one embodiment, a re-partitioning of the functions between the service processor (or probes) and the network interface is provided.

A network architecture is used for the communication between elementary calculus units or nodes of a supercomputer to execute a super-calculus processing application, partitionable and scalable at the level of calculus power in the range of PetaFLOPS. The supercomputer comprises a plurality of modular structures, each of which comprises a plurality of elementary calculus units or nodes defined by node cards, a backplane, a root card, and a node communication network of the switched fabric fat tree type; ii) a synchronization architecture comprising a plurality of distinct node communication networks, configured for the communication of specific synchronization information different from network to network and with different characteristics; iii) a re-configurable Programmable Network Processor that implements the nodes both of the n-toroidal network and those of the synchronization networks.The node communication networks of the n-toroidal type and of the switched fabric fat tree type can be used alternately or simultaneously for the transmission between the calculus nodes of the same type of data and information also in a configuration of system partitions in order to achieve the desired interconnection topology of the nodes.

A method and apparatus for scheduling the processing of commands by a plurality of cryptographic algorithm cores in a network processor.

The invention relates to a method and apparatus for software defining satellite networking based on OpenFlow extended protocol. The invention is designed for addressing problems in software defining satellite networking and establishing end-to-end service data transmission applied to service requirement. According to the invention, the method and apparatus introduce programmable characteristics of satellite assembly, through software defining OpenFlow extended protocol mechanism of a network, is capable of intelligentization integrated communication transmission exchange, forms uniform control function, dynamic changes of a suitable invoking strategy, and enhanced satellite network task connection rapid responding speed, uses the programmable networking technology of the spatial satellite assembly, and increases flexibility of satellite network networking and reliable transmission rate.

Sensitive data is sent through insecure network regions across different software defined networks (SDNs) over an encrypted path without requiring encryption applications at the source or destination hosts. One or more special-purpose encryptors are strategically placed within each SDN, which can act as an encryptor or decryptor, of both the data packet content and the header. Using the controller and a special encryption service application, the encrypted IP packets are forwarded from an encryptor, closest to the source, towards a decryptor, closest to the destination, utilizing a tagging method. Each encryptor has a static and globally unique tag. Each controller advertises to other controllers its encryptor information: IP of the encryptor, the IP block of the users the encryptor is responsible for and the unique encryptor tag(s). Each forwarder along the flow path is instructed by its respective controller how to forward packets towards the destination according to the tag.

In a network environment in which pieces of heterogeneous network equipment interwork, a system receives a request including configuration information regarding a network operation with respect to at least one piece of a network equipment. The system verifies whether the request is in conflict with a network configuration and property managed by the system, and when an error does not occur according to verification results, the system transfers the verification results including configuration information to the network equipment.

A method and apparatus for monitoring and control of a system is disclosed. The method and apparatus include providing a plurality of sensors, a table, and a network processor. The sensors monitor attributes of the system. The table includes a plurality of entries. Each of the entries indicates at least one action to be taken in response to a portion attributes having particular values. The network processor is coupled with the sensors and with the table. The network processor receives from the sensors a plurality of statuses for the attributes. The network processor further determines at least one entry of the entries to access based upon the statuses and accesses the at least one entry to determine a corresponding action.

A method and system for detecting attempted intrusions into a network, including: providing a network processor for monitoring packets transmitted over a communications link of the network; receiving a plurality of packets from the communications link by the network processor; and pre-filtering the plurality of packets by the network processor to identify packets potentially with patterns of interest. These packets are forwarded to a NIDS. The NIDS then examines the forwarded packets to identify the packets that have the pattern of interest. By using the network processor to pre-filter the packets, the number of packets examined by the NIDS is significantly reduced. Also, the capacity of the NIDS can be increased without requiring changes in the NIDS.

The invention provides a data transmission method, device and system based on programmable network switching technology, a storage medium and equipment. The method comprises the following steps of receiving a data packet packaged by a tunnel protocol; analyzing header information of the data packet based on the format of the tunnel protocol to form analyzed metadata; analyzing a metadata value corresponding to a matching field configured in the flow table in the metadata; querying a flow table item of the flow table, the flow table item comprising a field value of a matching field and a parameter value of an action configured in the flow table, the matching field comprising a user ID and an inner layer quintuple, and the action being that a data packet matched with the flow table item is output to a port corresponding to the parameter value; and outputting the data packet to a port corresponding to the parameter value according to the flow table item.

A programmable netwok component for use in a plurality of network devices with a shared architecture. The programmable network component includes an interface with an external processing unit to provide management interface control between the external processing unit and a network device. The programmable network component also includes an interface with a plurality of internal busses each of which is coupled to the programmable network component and to at least one network component. The order of the at least one network component does not impact a protocol used by the programmable network component on the internal busses.