Edge Gateway Multi-Tenancy Using Virtual LANs and Routers

The patent segments the network into multiple virtual networks (VNs) that are logically isolated but managed through a unified system. Each customer service is assigned to a separate VN with its own address space, achieving security and stability through isolation while avoiding the complexity of completely separate physical networks. The network management device maintains separate routing tables and address allocation for each VN, enabling independent management without increasing overall system complexity.

The patent implements a universal network management device that can manage multiple virtual networks simultaneously through a single interface. This device performs address allocation, routing, and security management for all customer services through unified mechanisms, reducing the need for separate management systems for each service while maintaining the security benefits of isolation.

The patent introduces a network management device as an intermediary that enables controlled communication between isolated virtual networks. This device maintains the security of isolation by default but can dynamically establish communication paths between VNs when needed, using mechanisms like address translation and selective routing. This allows services to maintain security while expanding their communication area through the mediator's coordination.

The patent adds a virtualization dimension to the network architecture, creating multiple layers of network organization. Services are isolated at the virtual network level but can communicate through the virtualization layer's routing and addressing mechanisms. This dimensional approach allows simultaneous security isolation and expanded connectivity by operating at different levels of the network hierarchy.