Lightweight Ring Manager for OT Network Resilience
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Operational Technology (OT) networks with ring topologies face connectivity issues due to remote network manager unreachability, particularly in environments like underground mines where physical disruptions can sever connections, hindering centralized network management and device onboarding.
Innovation Solution
A lightweight ring manager is deployed on networking devices within the network, allowing them to take over management functions and onboard new devices locally when the supervisory service is unreachable, utilizing telemetry data and pre-defined policies to ensure network operations continue uninterrupted.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If centralized network management is implemented, then network control and oversight are improved, but connectivity reliability deteriorates due to single point of failure
Solution Approach 1:
The patent segments the centralized network management function into distributed ring manager nodes. Each ring manager can independently perform management functions for its local ring segment, eliminating the single point of failure at the remote network manager while maintaining centralized-like control through distributed decision-making.
Solution Approach 2:
The ring manager acts as an intermediary between the remote network manager and devices in the ring. It receives policies from the remote manager and enforces them locally, while also serving as a backup manager that can take over if the remote manager becomes unreachable, thus mediating between centralized control and local autonomy.
2Extent of automation
If remote network manager is used, then centralized policy deployment is improved, but network operation continuity deteriorates when connectivity is lost
Solution Approach 1:
The ring manager is pre-configured with backup management capabilities and local policy caches before connectivity issues occur. When the remote network manager becomes unreachable, the ring manager can immediately continue policy enforcement and device onboarding using pre-stored policies and cached information, ensuring uninterrupted network operations.
Solution Approach 2:
The system dynamically changes the operational mode of the ring manager based on connectivity status. When connected to the remote manager, it operates in centralized mode receiving real-time policies. When disconnected, it transitions to autonomous mode using cached policies and local decision-making, thus adapting to maintain productivity under varying connectivity conditions.
3Reliability
If centralized control is implemented, then network security is improved, but device onboarding flexibility deteriorates in isolated networks
Solution Approach 1:
The patent implements local quality by enabling the ring manager to perform device onboarding with centralized security policies when connected, and with autonomous security enforcement when isolated. Different parts of the system (centralized remote manager vs. distributed ring manager) have different capabilities tailored to their operational context, maintaining security while adapting to connectivity conditions.
Data Source
AI summary
According to one or more embodiments of the disclosure, a particular networking device located in a ring of networking devices of a network receives an indication from a supervisory service that the particular networking device has been designated a ring manager for the ring of networking devices. The particular networking device determines that the supervisory service is unreachable by the ring of networking devices. The particular networking device obtains telemetry data regarding a new device connected to the ring of networking devices. The particular networking device onboards, based on the telemetry data, the new device to the network, when the supervisory service is unreachable by the ring of networking devices.