Distributed Network Rolling Updates with Secure Virtual Fabric
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing network solutions are inflexible due to proprietary hardware and software, requiring time-consuming and resource-intensive processes for adding new features, limiting network operators' ability to customize and innovate.
Innovation Solution
A Distributed Software Defined Network (dSDN) architecture that enables secure and flexible programmability across networks, allowing for seamless deployment and management of applications independent of hardware vendors, using a programmable network device and cloud device connected by a virtual fabric, with a sandboxing operating system for secure application hosting and management.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If proprietary hardware and software are used, then network infrastructure stability is maintained, but flexibility and ability to add customized features deteriorates
Solution Approach 1:
The patent segments the network infrastructure into independent virtualized network functions (VNFs) that can be deployed as separate software modules on standard hardware. This allows individual features to be added, modified, or removed without affecting the entire system, enabling customized features while avoiding proprietary hardware dependency.
Solution Approach 2:
The patent implements a universal hardware platform that can host multiple different network functions through virtualization. A single standardized hardware infrastructure can perform various network roles (routing, switching, firewalls, etc.) by loading different virtualized software components, providing both flexibility and cost efficiency.
2Adaptability or versatility
If new features are added through vendor requests or standardization processes, then network functionality is enhanced, but time consumption and resource intensity increases
Solution Approach 1:
The patent pre-configures virtualized network function templates that can be rapidly deployed without lengthy customization processes. New features can be added by instantiating pre-approved VNF templates, eliminating the need for time-consuming vendor request cycles or standardization processes.
Solution Approach 2:
The patent enables network operators to self-provision and manage virtualized network functions through automated orchestration systems. Operators can independently deploy, configure, and manage new features without requiring vendor intervention, significantly reducing the time and resources needed for feature addition.
3Adaptability or versatility
If distributed applications are deployed across network devices, then network programmability and flexibility are improved, but system complexity and security management deteriorates
Solution Approach 1:
The patent introduces a centralized application management platform that acts as an intermediary between distributed network applications and the underlying infrastructure. This platform provides unified deployment, monitoring, and security management for distributed applications, reducing the complexity of managing multiple independent components across different devices.
Solution Approach 2:
The patent standardizes the runtime environment and interface protocols for distributed applications across all network devices. By implementing homogeneous virtualization layers and communication standards, the system simplifies application deployment and management while maintaining high programmability and flexibility.
Data Source
AI summary
A system and method for performing rolling updates of distributed applications in a software-defined network environment. An application manager coordinates deployment of updated versions of fxDeviceApp and fxCloudApp components to isolated execution environments on distinct network elements, such as edge devices and cloud-based containers or virtual machines. During the update process, the system establishes secure communication tunnels between the updated components using a virtual messaging fabric, verifies the integrity of the updated components before activation, and maintains service continuity by activating the new versions only after successful validation. The original application instances are decommissioned after the updated components are fully operational. The system supports dynamic scaling of execution environments based on load conditions, policy-governed update concurrency and ordering, coordinated deployment across multiple zones, automatic rollback on failure, and audit logging of deployment events. These mechanisms enable secure, resilient, and minimally disruptive application lifecycle management in distributed and programmable networking environments.


