SDN Controller PCI Data Distribution via Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The distribution of Proxy Correlation Index (PCI) data within Software-Defined Networks (SDNs) is inefficient, hindering effective machine learning deployment and poor handling of PCI breach data across the SDN data-plane.
Innovation Solution
A centralized SDN controller intelligently distributes PCI information by selecting target SDN controllers and data-plane machines based on PCI threshold breaches, using a data structure to generate a distribution list that includes geographic areas, subnetworks, and user groups, enabling SDN-wide PCI configurations for load balancing, security, and service quality enforcement.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If PCI data is distributed across the SDN data-plane, then network performance monitoring is improved, but the distribution efficiency is poor and machine learning deployment is inhibited
Solution Approach 1:
The patent segments the PCI data distribution into targeted groups based on geographic area, subnetwork, and user group characteristics. By dividing the SDN data-plane into these segments, the system can efficiently distribute PCI data only to relevant targets rather than broadcasting to all devices, thereby improving distribution efficiency while maintaining comprehensive monitoring capability.
Solution Approach 2:
The patent introduces an intermediary mechanism where the SDN controller acts as a mediator between PCI data generation and distribution. The controller receives PCI data, processes it through a data structure that defines distribution criteria, and selectively forwards it to target SDN switches. This intermediary approach enables efficient, intelligent distribution that supports machine learning deployment while maintaining reliable network performance monitoring.
2Reliability
If PCI breach data is handled across the SDN data-plane, then security enforcement is improved, but the handling effectiveness is poor
Solution Approach 1:
The patent applies local quality by tailoring PCI breach data handling to specific geographic areas, subnetworks, and user groups. Instead of uniform handling across the entire SDN, the system customizes breach response strategies for each local segment based on its specific characteristics and requirements, thereby improving both security enforcement and handling effectiveness.
Solution Approach 2:
The patent implements dynamic handling of PCI breach data by enabling the system to adapt its response based on real-time conditions. The data structure allows flexible configuration of breach handling procedures that can be dynamically adjusted for different scenarios, making the system more effective in responding to security threats while maintaining ease of operation through automated adaptive behavior.
Data Source
AI summary
In a Software Defined Network (SDN), a source SDN switch in a source geographic area generates switch performance data. The source SDN switch detects when its switch performance reaches a switch performance threshold based on its switch performance data, and in response, the source SDN switch transfers source switch information. An SDN controller receives the source switch information and selects a target SDN switch in a target geographic area based on the switch performance threshold and the source geographic area. The SDN controller transfers the source switch information to the target SDN switch in the target geographic area. The target SDN switch generates switch performance data and detects when SDN performance reaches a network performance threshold based on its switch performance data and the source switch information. The target SDN transfers SDN performance information to the SDN controller.


