IP Library › Granted Patent US 8,898,782
Granted Patent B2
US 8,898,782 · App. 13/461,112 · Granted Nov 25, 2014

Systems and methods for spontaneously configuring a computer network

Inventor: Wayne B. Smith (Melbourne Beach, FL)
Assignee: Harris Corporation
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 8,898,782
App. No.
13/461,112
Granted
Nov 25, 2014
Kind
B2
Abstract

Systems ( 100 ) and methods ( 1300, 1400 ) for spontaneously configuring operations of a Computer Network (“CN”). The methods involve: configuring CN to operate in accordance with a first Mission Plan (“MP”); and detecting a reactive trigger event. The first MP specifies a manner in which an assigned value for an IDentity Parameter (“IDP”) is to be dynamically modified by a node ( 105 - 107, 113, 114 ) of CN. The reactive trigger event is a spontaneous event for causing a change to occur in relation to the dynamic modification of IDP. In response to the detection of the reactive trigger event, a second MP is selected. Thereafter, the operations of CN are automatically modified in accordance with the second MP plan such that IDP is dynamically modified in a manner that is different than that specified in the first MP.

Claims (47)

1. A method for spontaneously configuring operations of a computer network, the method comprising:

communicating a plurality of data packets among a plurality of nodes within a computer network using a plurality of identity parameters contained in each respective data packet to identify source and destination nodes for each said data packet;

configuring said computer network to operate in accordance with a first mission plan of a plurality of mission plans, each said mission plan specifying a manner in which an assigned value for at least one identity parameter of a plurality of identity parameters contained in each said data packet is to be dynamically modified by at least one said node of said computer network to specify false identity parameter information in place of true identity parameter information;

detecting a reactive trigger event within said computer network, said reactive trigger event comprising a spontaneous event for causing a change to occur in relation to said dynamic modification of said at least one identity parameter;

selecting a second mission plan from said plurality of mission plans in response to said detection of said reactive trigger event; and

automatically reconfiguring operations of said computer network in accordance with said second mission plan such that said manner as specified by said second mission plan is different than said manner specified in said first mission plan;

wherein said manner is defined in accordance with at least one variable selected from the group consisting of (a) a selection of said at least one identity parameter from among said plurality of identity parameters, (b) a pseudo-random process used to dynamically modify said at least one identity parameter, (c) a seed value for said pseudo-random process, and (d) a selection of said at least one node in said computer network where said dynamic modification is to be performed.

2. The method according to claim 1 , wherein said reactive trigger event is defined by at least one pre-defined rule stored within said computer network.

3. The method according to claim 2 , wherein said pre-defined rule implements at least one of a packet inspection based scheme, a congestion level based scheme, a heuristic algorithm based scheme and a Network-Based Attack (“NBA”) analysis based scheme.

4. The method according to claim 3 , wherein said packet inspection based scheme comprises analyzing a packet to obtain an identifier identifying an origin of said packet, a destination of said packet, a group to which said origin or destination belong, or a type of information contained in a payload of said packet.

5. The method according to claim 4 , wherein said reactive trigger event occurs when a value of said identifier matches a pre-defined value.

6. The method according to claim 3 , wherein said packet inspection based scheme comprises analyzing said packet to determine if a code word is contained therein or absent therefrom.

7. The method according to claim 6 , wherein said reactive trigger event occurs when said code word is present within said packet.

8. The method according to claim 3 , wherein said packet inspection based scheme comprises selecting a timing scheme in accordance with content of a packet, said timing scheme defining at least one trigger event as occurring at an expiration of every N second time interval.

9. The method according to claim 3 , wherein said congestion level based scheme comprises:

determining a level of congestion within said computer network; and

comparing said level of congestion with a threshold value.

10. The method according to claim 9 , wherein said reactive trigger event occurs when said level of congestion is equal to, greater than, or less than said threshold value.

11. The method according to claim 3 , wherein said heuristic algorithm based scheme comprises monitoring traffic patterns, protocol patterns and entropy patterns of said computer network.

12. The method according to claim 11 , wherein said reactive trigger event occurs when at least one of a particular traffic pattern, a particular protocol pattern and a particular entropy pattern exists within said computer network.

13. The method according to claim 3 , wherein said NBA analysis based scheme comprises determining at least one of a level of an NBA, a type of an NBA, and a number of NBA attacks being waged on said computer network.

14. The method according to claim 13 , wherein said reactive trigger event occurs when said NBA is of a particular level or type.

15. The method according to claim 13 , wherein said reactive trigger event occurs when said number of NBA attacks is equal to or greater than a pre-defined value.

16. A system, comprising:

at least one electronic circuit operative to:

communicate a plurality of data packets among a plurality of nodes within a computer network using a plurality of identity parameters contained in each respective data packet to identify source and destination nodes for each said data packet;

configure said computer network to operate in accordance with a first mission plan of a plurality of mission plans, each said mission plan specifying a manner in which an assigned value for at least one identity parameter of a plurality of identity parameters in each said data packet is to be dynamically modified by at least one said node of said computer network to specify false identity parameter information in place of true identity parameter information;

detect a reactive trigger event within said computer network, said reactive trigger event comprising a spontaneous event for causing a change to occur in relation to said dynamic modification of said at least one identity parameter;

select a second mission plan from said plurality of mission plans in response to said detection of said reactive trigger event; and

automatically reconfigure operations of said computer network in accordance with said second mission plan such that manner as specified by said second mission plan is different than said manner specified in said first mission plan;

wherein said manner is defined in accordance with at least one variable parameter selected from the group consisting of (a) a selection of said at least one identity parameter from among said plurality of identity parameters, (b) a pseudo-random process used to dynamically modify said at least one identity parameter, (c) a seed value for said pseudo-random process, and (d) a selection of said at least one node in said computer network where said dynamic modification is to be performed.

17. The system according to claim 16 , wherein said reactive trigger event is defined by at least one pre-defined rule stored within said computer network.

18. The system according to claim 17 , wherein said pre-defined rule implements at least one of a packet inspection based scheme, a congestion level based scheme, a heuristic algorithm based scheme and a Network-Based Attack (“NBA”) analysis based scheme.

19. The system according to claim 18 , wherein said packet inspection based scheme comprises analyzing a packet to obtain an identifier identifying an origin of said packet, a destination of said packet, a group to which said origin or destination belong, or a type of information contained in a payload of said packet.

20. The system according to claim 19 , wherein said reactive trigger event occurs when a value of said identifier matches a pre-defined value.

21. The system according to claim 18 , wherein said packet inspection based scheme comprises analyzing said packet to determine if a code word is contained therein or absent therefrom.

22. The system according to claim 21 , wherein said reactive trigger event occurs when said code word is present within said packet.

23. The system according to claim 18 , wherein said packet inspection based scheme comprises selecting a timing scheme in accordance with content of a packet, said timing scheme defining at least one trigger event as occurring at an expiration of every N second time interval.

24. The system according to claim 18 , wherein said congestion level based scheme comprises:

determining a level of congestion within said computer network; and

comparing said level of congestion with a threshold value.

25. The system according to claim 24 , wherein said reactive trigger event occurs when said level of congestion is equal to, greater than, or less than said threshold value.

26. The system according to claim 18 , wherein said heuristic algorithm based scheme comprises monitoring traffic patterns, protocol patterns and entropy patterns of said computer network.

27. The system according to claim 26 , wherein said reactive trigger event occurs when at least one of a particular traffic pattern, a particular protocol pattern and a particular entropy pattern exists within said computer network.

28. The system according to claim 18 , wherein said NBA analysis based scheme comprises determining at least one of a level of an NBA, a type of an NBA, and a number of NBA attacks being waged on said computer network.

29. The method according to claim 28 , wherein said reactive trigger event occurs when said NBA is of a particular level or type.

30. The method according to claim 28 , wherein said reactive trigger event occurs when said number of NBA attacks is equal to or greater than a pre-defined value.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 29, 2012
From: SMITH, WAYNE B.
To: HARRIS CORPORATION
Reel/Frame 028470/0770 →
Continuity (1)
Related Publication 20130298237A1 · Nov 7, 2013