IP Library Granted Patent US 9,306,959
Granted Patent B2
US 9,306,959 · App. 13/034,736 · Granted Apr 5, 2016

Dual bypass module and methods thereof

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,306,959
App. No.
13/034,736
Granted
Apr 5, 2016
Kind
B2
Abstract

A dual bypass module for managing an integrated secured network environment is provided. The module includes network ports that receive and transmit data traffic flowing through the network. The module also includes a set of monitoring ports that is configured for transmitting the data traffic between the dual bypass module and a set of monitoring systems. The module further includes a set of relays configured for controlling the flow of data through the dual bypass module. The module yet also includes a configurable integrated circuit. The configurable integrated circuit includes at least one of a first logic arrangement for determining conditions of the set of monitoring systems, a second logic arrangement for redirecting the data traffic through a secured alternate path when a monitoring system is unavailable, and a third logic arrangement for redirecting the data traffic through a secured alternate path when a communication path becomes unavailable.

Claims (30)

1. A dual bypass module comprising a device for managing data traffic transmitted in an integrated secured network environment, the device comprising:

a set of network ports, said set of network ports including a set of input network ports for receiving data traffic from a network device and a set of output network ports for outputting said data traffic from said network device:

a set of monitoring ports, said set of monitoring ports being configured for transmitting said data traffic between said dual bypass module and a set of monitoring systems;

a set of relays configured for controlling the flow of data through said dual bypass module: and

a configurable integrated circuit, said configurable integrated circuit including:

a first logic arrangement for determining conditions of said set of monitoring systems, wherein said first logic arrangement includes a sequential heartbeat diagnostic test for:

generating a plurality of sets of sequential heartbeat packets, each set being associated with a respective diagnostic test condition and a respective counter, and inserting said plurality of sets of sequential heartbeat packets into said data traffic flowing between a network tap and a first monitoring system, and

receiving said data traffic from said first monitoring system and incrementing the counters for the diagnostic test conditions based on the presence or absence of the sets of sequential heartbeat packets; and

a second logic arrangement for redirecting said data traffic through a secured alternate path in response to determining that a failure condition exists for the first monitoring system based on the counters for the diagnostic test conditions.

2. The dual bypass module of claim 1 further including an interface for interacting with said dual bypass module.

3. The dual bypass module of claim 2 wherein said interface being at least one of a command Line interface, a web based device, and a system interface.

4. The dual bypass module of claim 1 wherein said configurable integrated circuit is a field-programmable gate array.

5. The dual bypass module of claim 1 wherein said set of monitoring systems being at least one of an intrusion prevention system, an instruction detection system, and a firewall management system.

6. The dual bypass module of claim 1 wherein said set of relays is configured for creating a secured alternate path for routing said data traffic when power disruption occurs.

7. The dual bypass module of claim 1 wherein said second logic arrangement includes said logic component redirecting said data traffic from said first monitoring system to a second monitoring system when said fail condition exists.

8. A dual bypass module comprising a device for managing data traffic transmitted in an integrated secured network environment, the device comprising:

a set of network ports, said set of network ports including a set of input network ports for receiving data traffic from a network device and a set of output network ports for outputting said data traffic from said network device;

a set of monitoring ports, said set of monitoring ports being configured for transmitting said data traffic between said dual bypass module and a set of monitoring systems, wherein said data traffic is configured to traverse network ports irrespective of whether power is provided to circuitry of said dual bypass module;

a first logic arrangement for identifying conditions of said set of monitoring systems, said first logic arrangement includes a sequential heartbeat diagnostic test for:

generating a plurality of sets of sequential heartbeat packets, each set being associated with a respective diagnostic test condition and a respective counter, and inserting said plurality of sets of sequential heartbeat packets into said data traffic flowing between a network tap and a first monitoring system, and

receiving said data traffic from said first monitoring system and incrementing the counters for the diagnostic test conditions based on the presence or absence of the sets of sequential heartbeat packets;

a second logic arrangement for redirecting said data traffic through a secured alternate path in response to determining that a failure condition exists for the first monitoring system based on the counters for the diagnostic test conditions providing a high availability secure environment; and

a third logic arrangement for establishing a redundant path arrangements.

9. The dual bypass module of claim 8 further including a set of relays configured for controlling the flow of data through said dual bypass module, wherein said set of relays is configured for creating a secured alternate path for routing said data traffic when power disruption occurs.

10. The dual bypass module of claim 8 further including an interface for interacting with said dual bypass module, wherein said interface being at least one of a command line interface, a web based device, and a system interface.

11. The dual bypass module of claim 8 wherein said first logic arrangement is a field-programmable gate array.

12. The dual bypass module of claim 8 wherein said second logic arrangement is a field-programmable gate array.

13. The dual bypass module of claim 8 wherein said third logic arrangement is a field-programmable gate array.

14. The dual bypass module of claim 8 wherein said set of monitoring systems being at least one of an intrusion prevention system, an instruction detection system, and a firewall management system.

15. The dual bypass module of claim 8 wherein said third logic arrangement includes redirecting said data traffic through a secured alternate path when a communication path becomes unavailable.

Assignments (7)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 19, 2018
From: KEYSIGHT TECHNOLOGIES SINGAPORE (HOLDINGS) PTE. LTD.
To: KEYSIGHT TECHNOLOGIES SINGAPORE (SALES) PTE. LTD.
Reel/Frame 048225/0065 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 18, 2017
From: IXIA
To: KEYSIGHT TECHNOLOGIES SINGAPORE (HOLDINGS) PTE. LTD.
Reel/Frame 044222/0695 →
RELEASE OF SECURITY INTEREST Recorded Apr 24, 2017
From: SILICON VALLEY BANK, AS SUCCESSOR ADMINISTRATIVE AGENT
To: NET OPTICS, INC.
Reel/Frame 042126/0749 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Nov 19, 2015
From: NET OPTICS, INC.
To: IXIA
Reel/Frame 037087/0622 →
NOTICE OF SUBSTITUTION OF ADMINISTRATIVE AGENT Recorded Feb 2, 2015
From: BANK OF AMERICA, N.A., RESIGNING ADMINISTRATIVE AGENT
To: SILICON VALLEY BANK, AS SUCCESSOR ADMINISTRATIVE AGENT
Reel/Frame 034870/0598 →
SECURITY AGREEMENT Recorded Feb 18, 2014
From: NET OPTICS, INC.
To: BANK OF AMERICA, N.A., AS ADMINISTRATIVE AGENT
Reel/Frame 032271/0151 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 10, 2011
From: MATITYAHU, ELDAD; SHAW, ROBERT; CARPIO, DENNIS; HUI, SIUMAN; LIAN, WEI
To: NET OPTICS, INC.
Reel/Frame 026429/0144 →