Virtual Link Abstraction for Network Topology Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current network topology virtualization techniques fail to effectively link virtualized topologies with actual resources within a domain, leading to difficulties in resource utilization management and connection availability guarantees, as they do not provide meaningful information about resource status and utilization without advertising the full domain topology.
Innovation Solution
A system and method that abstract network topology into virtual links, supporting both generic and instantiated virtualized links to link virtualized topologies with actual resources, providing security and control over resource allocation while reducing advertising complexity by only advertising the virtual topology, using a control domain with nodes, routing controllers, and path computation selectors to manage resource utilization.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of information
If the full domain topology is advertised to external networks, then meaningful information about resource status and utilization can be provided, but security over network topology information is compromised and advertising complexity increases
Solution Approach 1:
The patent segments topology information into two distinct types: virtual topology information (advertised to external networks) and physical topology information (kept private). Virtual links are introduced as abstract representations that segment the actual physical resource information from the advertised topology, allowing resource status to be communicated without exposing the true network structure.
Solution Approach 2:
Virtual links serve as intermediaries between external networks and actual physical resources. These virtual links act as a mediator that conveys resource availability and status information to external networks without directly exposing the physical topology. The virtual link advertisement mechanism provides an intermediate layer that protects sensitive topology information while still enabling meaningful resource status communication.
2Loss of information
If the full domain topology is advertised to external networks, then resource utilization information can be provided, but the complexity of advertising increases
Solution Approach 1:
The patent extracts only the essential resource status and availability information from the full topology and advertises it through virtual links. Instead of advertising the complete physical topology with all its complexity, the system extracts and advertises only the necessary operational status information through simplified virtual link representations, reducing advertising complexity while maintaining resource utilization visibility.
3Device complexity
If virtual topology is advertised without linking to actual resources, then advertising complexity is reduced, but control over resource allocation is lost
Solution Approach 1:
The patent introduces dynamic mapping between virtual links and physical resources. Virtual links are dynamically associated with actual physical resources based on current network state and policies. This dynamic association enables the system to maintain simple virtual topology advertisements while preserving control over resource allocation, as the mapping can be adjusted in real-time to reflect resource availability and policy requirements.
Solution Approach 2:
The system changes the parameters of virtual links to encode resource allocation control information. By modifying attributes of virtual links (such as capacity, status, and availability parameters), the system can control resource allocation without exposing the underlying physical topology complexity. These parameter changes allow the virtualized representation to convey control information while maintaining advertising simplicity.
Data Source
AI summary
The present invention provides systems and methods for abstracting a network topology into virtual links and supporting both generic and instantiated virtualized links for linking a virtualized topology with actual resources within a domain, providing security over network topology information, providing control over the allocation of resources, and reducing the complexity of advertising.