Network Controller GUI and API Wrapper for SDN Configuration

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing network security systems are complex and require technical expertise to configure and manage, making it difficult for non-technical users, such as senior executives, to control network traffic and rules, and lack mechanisms to automatically adapt to changing network conditions, which can lead to security vulnerabilities.

Innovation Solution

A system that uses a graphical user interface and application program interface wrappers for software-defined networking to allow less technical users to manage network configurations and rules, while also employing a network controls engine to dynamically adjust virtual private network connections based on network conditions, using a tamper-evident, immutable data repository to log configurations and rule violations.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If network configuration is made accessible to non-technical users through simplified interfaces, then ease of operation is improved, but device complexity increases due to the need for graphical user interfaces and API wrappers

Engineering Contradiction:
Improveease of network configurationVSAvoidsystem complexity
Core Design Contradiction:
Ease of operationVSDevice complexity

Solution Approach 1:

The patent introduces a graphical user interface and API wrapper as intermediary layers between non-technical users and the complex network configuration system. These intermediaries translate simple user actions into complex routing rule modifications, allowing users to configure networks without understanding underlying complexity while the system handles the technical transformation automatically

Inventive Principle:
Principle #24Intermediary (Mediator)

2Productivity

If manual configuration of network rules is replaced with automated systems, then productivity is improved, but device complexity increases due to the need for network controllers and controls engines

Engineering Contradiction:
Improvenetwork configuration efficiencyVSAvoidautomation system complexity
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The network controller and controls engine are designed to automatically monitor network conditions, detect threats, and reconfigure routing rules without human intervention. The system self-adjusts network configurations based on real-time conditions, eliminating the need for manual rule management while automatically handling the complexity of security policy enforcement and dynamic route optimization

Inventive Principle:
Principle #25Self-service

3Reliability

If dynamic adaptation to network conditions is implemented, then reliability is improved, but device complexity increases due to continuous monitoring and automatic adjustment mechanisms

Engineering Contradiction:
Improvenetwork securityVSAvoidmonitoring system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system implements continuous feedback loops where the controls engine monitors network traffic patterns, threat indicators, and performance metrics in real-time. Based on this feedback, the network controller automatically adjusts routing rules and security policies dynamically. This closed-loop feedback mechanism ensures reliable security adaptation while the system autonomously manages the complexity of continuous monitoring and decision-making

Inventive Principle:
Principle #23Feedback

Data Source

PatentUS10129097B2GUI and high-level API wrapper for software defined networking and software defined access for controlling network routing and rules
Publication Date: 2018.11.13 ALTR SOLUTIONS INC
  • US10129097B2 patent drawing
  • US10129097B2 patent drawing
  • US10129097B2 patent drawing

AI summary

Provided is a process including: obtaining, with a network controller, a current state of a network; causing, with the network controller, a graphical user interface to be presented that depicts at least part of the network graph and includes user-inputs by which a user requests changes to the network graph; receiving, with the network controller, a request input to modify the network graph; and modifying, with the network controller, the network graph and enforcing the modification.