Network Insight System for Formal Verification of Intent Compliance
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Manual interpretation of loosely defined organizational requirements in industrial networks hinders the adoption of formal verification tools, as network operators struggle to formally state network-wide intents, making it difficult to verify network changes effectively.
Innovation Solution
A network insight system that captures snapshots of a network before and after changes, generating models to identify differential flow nodes and verify network changes based on specified intents, ensuring that only intended modifications are implemented.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If manual interpretation of organizational requirements is used, then network operators can understand requirements, but formal verification cannot be effectively performed
Solution Approach 1:
The patent introduces an intermediary system that automatically translates informal organizational requirements into formal intent specifications. This intermediary layer bridges the gap between human-understandable requirements and machine-verifiable formal specifications, enabling both ease of operation and verification correctness simultaneously
Solution Approach 2:
The system enables self-service by automatically generating formal intent specifications from captured network data and organizational requirements without requiring manual formalization by operators. This automation eliminates the difficulty of specifying intents while maintaining verification reliability
2Measurement precision
If formal verification tools are adopted, then verification accuracy improves, but operator burden increases due to difficulty in stating network-wide intents
Solution Approach 1:
The patent creates simplified copies or abstractions of network-wide intents that can be easily stated and verified. Instead of requiring operators to deal with complex formal specifications directly, the system works with simplified intent representations that maintain verification accuracy while reducing operational complexity
3Productivity
If network changes are verified manually, then flexibility is maintained, but verification efficiency decreases
Solution Approach 1:
The patent replaces manual mechanical verification processes with automated computational verification. The system automatically captures network data, generates intent specifications, performs verification, and compares results - substituting human manual operations with automated mechanisms that improve efficiency while maintaining operational simplicity through user-friendly interfaces
Data Source
AI summary
A network insight system that performs intent verification of network changes is provided. The system generates a first model of a network comprising a first set of one or more rule tables, each rule table described by one or more flow nodes. The system generates a second model of the network comprising a second set of one or more rule tables. Each rule table is described by one or more flow nodes. Each flow node specifies a set of packets and an action to be taken on the specified set of packets. They system determines a set of differential flow nodes for the second model based on the flow nodes of the first model and the flow nodes of the second model. Each differential flow node is classified as being one of (i) newly removed, (ii) newly added, and (iii) unaffected. The system verifies a network change based on the determined differential flow nodes.