IP Library Granted Patent US 9,813,448
Granted Patent B2
US 9,813,448 · App. 13/944,795 · Granted Nov 7, 2017

Secured network arrangement and methods thereof

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,813,448
App. No.
13/944,795
Granted
Nov 7, 2017
Kind
B2
Abstract

A high density network arrangement for managing an integrated secured multiple networks arrangement is provided. The arrangement includes a power module for providing power to a circuitry of the high density network arrangement. The arrangement also includes a plurality of network interfaces, wherein each network interface of the plurality of network interfaces is configured for coupling with a network arrangement. The arrangement further includes a processor for providing processing capability to the high density network arrangement. The arrangement yet also includes logic arrangement for managing data traffic flowing through the plurality of network interfaces, wherein the data traffic is configured to traverse the high density network arrangement between the plurality of network arrangement interfaces irrespective whether the power is provided to the circuitry of the high density network arrangement.

Claims (33)

1. A high density network arrangement for managing an integrated secured multiple networks arrangement, comprising:

a plurality of network interfaces, wherein each network interface of said plurality of network interfaces is configured for coupling with a network arrangement;

a dual bypass module for protecting data traffic flowing through said plurality of network interfaces while providing network access by: tapping, at a network tap, said data traffic and sending tapped data traffic to a monitoring system on a path between the network tap and the monitoring system; testing a condition of the monitoring system and the path between the network tap and the monitoring system by sending one or more sets of sequential heartbeat packets to the monitoring system; and bypassing the monitoring system in response to detecting a negative condition of the monitoring system or the path between the network tap and the monitoring system based on a negative response or lack of response from the monitoring system to the one or more sets of sequential heartbeat packets; and

a logic module for managing policies for setting a security mode between said high density network arrangement and the monitoring system and for modifying a heartbeat packet of the one or more sets of sequential heartbeat packets sent to the monitoring system for a diagnostic test by adding network information, to the heartbeat packet, about data traffic flowing through said high density network, wherein the network information comprises an alarm status based on a utilization rate of the high density network arrangement.

2. The high density network arrangement of claim 1 wherein said logic module is a field programmable gate array (FPGA).

3. The high density network arrangement of claim 2 wherein said logic module is configurable.

4. The high density network arrangement of claim 1 wherein said security mode includes a bypass mode and a normal mode.

5. The high density network arrangement of claim 4 wherein a data path is established between said high density network arrangement and each network arrangement thereby enabling resource sharing between said high density network arrangement and said each network arrangement.

6. The high density network arrangement of claim 4 wherein a set of data paths is provided between at least two network arrangements when said at least two network arrangements are coupled to said high density network arrangement, thereby enabling resource sharing between said at least two network arrangements.

7. The high density network arrangement of claim 1 wherein said network information includes a status field, wherein said status field specifies the security mode between said high density network arrangement and the monitoring system.

8. The high density network arrangement of claim 1 wherein said network information includes a command field, wherein said command field provides at least a direct communication path between said monitoring system and said plurality of network interfaces, and wherein the logic module is configured for receiving a responsive heartbeat packet from the monitoring system and retrieving, from a matching command field of the responsive heartbeat packet, instructions for handling a problematic heartbeat packet.

9. The high density network arrangement of claim 1 further comprises, logic arrangement for managing said data traffic flowing through said plurality of network interfaces, wherein said logic arrangement includes grouping between ports of different network arrangement of said integrated secured multiple networks arrangement, wherein said grouping provides for minimizing time delay for deactivating a set of links between a first network arrangement and a second network arrangement of said integrated secured multiple networks arrangement when a data path between said first network arrangement and said second network arrangement is unavailable.

10. A method for integrating multiple network arrangements into a single integrated secured arrangement, comprising:

providing a high density network arrangement for managing said single integrated secured arrangement;

directing data traffic through a set of network interfaces, each network interface of said set of network interfaces enabling a network device to couple with said high density network arrangement;

protecting said data traffic through said set of network interfaces while providing network access by using a dual bypass module for: tapping, at a network tap, said data traffic and sending tapped data traffic to a monitoring system on a path between the network tap and the monitoring system; testing a condition of the monitoring system and the path between the network tap and the monitoring system by sending one or more sets of sequential heartbeat packets to the monitoring system; and bypassing the monitoring system in response to detecting a negative condition of the monitoring system or the path between the network tap and the monitoring system based on a negative response or lack of response from the monitoring system to the one or more sets of sequential heartbeat packets;

managing policies for setting a security mode between said high density network arrangement and the monitoring system by modifying a heartbeat packet of the one or more sets of sequential heartbeat packets sent to the monitoring system for a diagnostic test by adding network information, to the heartbeat packet, about said data traffic flowing through said high density network, wherein the network information comprises an alarm status based on a utilization rate of the high density network arrangement; and

utilizing logic arrangement for sharing resources across said high density network arrangement and said multiple network arrangements, wherein said sharing including at least one of

establishing a set of control paths between said high density network arrangement and said multiple network arrangements; and

establishing a set of data paths between said high density network arrangement and said multiple network arrangements.

11. The method of claim 10 wherein said setting said security mode includes switching said security mode between a normal mode and a bypass mode.

12. The method of claim 11 wherein said security mode is set automatically based on the network information provided to said monitoring system, wherein said network information includes a status field and a command field.

13. The method of claim 10 wherein said directing of said data traffic through said set of network interfaces includes performing grouping between ports of different network arrangement of said single integrated secured arrangement, wherein said grouping provides for minimizing time delay for deactivating a set of links between a first network arrangement and a second network arrangement of said multiple networks arrangement when a data path between said first network arrangement and said second network arrangement is unavailable.

14. A high density network arrangement for enabling network resource sharing within an integrated secured network environment, comprising:

a plurality of network interfaces configured for coupling with a set of network arrangements, wherein said plurality of network interfaces being configured for receiving and sending data traffic within said integrated secured network environment;

a dual bypass module for protecting said data traffic flowing through said plurality of network interfaces while providing network access by: tapping, at a network tap, said data traffic and sending tapped data traffic to a monitoring system on a path between the network tap and the monitoring system; testing a condition of the monitoring system and the path between the network tap and the monitoring system by sending one or more sets of sequential heartbeat packets to the monitoring system; and bypassing the monitoring system in response to detecting a negative condition of the monitoring system or the path between the network tap and the monitoring system based on a negative response or lack of response from the monitoring system to the one or more sets of sequential heartbeat packets; and

a configurable logic arrangement, said configurable logic arrangement being configured for at least:

managing and processing said data traffic flowing through said high density network arrangement,

enabling network resource sharing between said high density network arrangement and said set of network arrangements, and

implementing policies for automatically setting a security mode between said high density network arrangement and the monitoring system by modifying a heartbeat packet of the one or more sets of sequential heartbeat packets sent to the monitoring system for a diagnostic test by adding network information, to the heartbeat packet, about said data traffic flowing through said high density network, wherein the network information comprises an alarm status based on a utilization rate of the high density network arrangement.

15. The high density network arrangement of claim 14 , wherein said security mode includes a bypass mode and a normal mode.

16. The high density network arrangement of claim 14 wherein a priority level for said policies is provided to prevent conflict between said policies.

17. The high density network arrangement of claim 14 wherein said configurable logic arrangement is configured for performing grouping between ports of different network arrangement of said integrated secured network environment, wherein said grouping provides for minimizing time delay when a data path between a first network arrangement of said integrated secured network environment and a second network arrangement of said integrated secured network environment is unavailable.

Assignments (7)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 19, 2018
From: KEYSIGHT TECHNOLOGIES SINGAPORE (HOLDINGS) PTE. LTD.
To: KEYSIGHT TECHNOLOGIES SINGAPORE (SALES) PTE. LTD.
Reel/Frame 048225/0065 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 18, 2017
From: IXIA
To: KEYSIGHT TECHNOLOGIES SINGAPORE (HOLDINGS) PTE. LTD.
Reel/Frame 044222/0695 →
RELEASE OF SECURITY INTEREST Recorded Apr 24, 2017
From: SILICON VALLEY BANK, AS SUCCESSOR ADMINISTRATIVE AGENT
To: NET OPTICS, INC.
Reel/Frame 042126/0749 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Nov 19, 2015
From: NET OPTICS, INC.
To: IXIA
Reel/Frame 037087/0622 →
NOTICE OF SUBSTITUTION OF ADMINISTRATIVE AGENT Recorded Feb 2, 2015
From: BANK OF AMERICA, N.A., RESIGNING ADMINISTRATIVE AGENT
To: SILICON VALLEY BANK, AS SUCCESSOR ADMINISTRATIVE AGENT
Reel/Frame 034870/0598 →
SECURITY AGREEMENT Recorded Feb 18, 2014
From: NET OPTICS, INC.
To: BANK OF AMERICA, N.A., AS ADMINISTRATIVE AGENT
Reel/Frame 032271/0151 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 12, 2013
From: MATITYAHU, ELDAD; SHAW, ROBERT; CARPIO, DENNIS; HUI, SIUMAN; LIAN, WEI
To: NET OPTICS, INC.
Reel/Frame 031196/0753 →