IP Library Granted Patent US 9,425,986
Granted Patent B2
US 9,425,986 · App. 14/139,594 · Granted Aug 23, 2016

System and method for multiple concurrent virtual networks

Inventor: Charles Dunelm Gargett (Lathlain, AU)
Assignee: iWebGate Technology Limited
H04L12/4641H04L12/4612H04L12/4633H04L12/4658H04L45/66
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,425,986
App. No.
14/139,594
Granted
Aug 23, 2016
Kind
B2
Abstract

Techniques are provided for establishment of multiple concurrent virtual networks. In one example, there is provided a method operable by a message management unit (MMU) or the like. The method may involve establishing communication handles with a plurality of virtual network interfaces (VNIs) operatively coupled to an operating system, and establishing a network communications socket (NCS) operatively connected to a plurality of virtual layered networks. The method may involve establishing data channels that couple the MMU and its components with the respective VNIs of the MMU, and allowing the virtual layered networks to be concurrently transported on top of physical network(s). The method may involve facilitating communication between the operating system and the virtual layered networks via the combination of the established data channels, the established handles and a network software stack of the operating system.

Claims (41)

1. A software-implemented method operable by a network system comprising a processor and a memory storing instructions which, when executed by the processor, cause the processor to implement a message management unit (MMU), the MMU performing the method comprising:

establishing communication handles with a plurality of virtual network interfaces (VNIs) operatively coupled to an operating system;

establishing a network communications socket (NCS) operatively connected to a plurality of virtual layered networks;

establishing data channels that operatively couple the MMU and its components with the respective VNIs of the MMU;

allowing the virtual layered networks to be concurrently transported on top of one or more physical networks; and

facilitating communication between the operating system and the virtual layered networks via the combination of the established data channels, the established handles and a network software stack of the operating system.

2. The method of claim 1 , wherein at least one of the virtual layered networks comprises a virtual network (VN) that is tunneled through or layered over the physical network.

3. The method of claim 1 , wherein at least one of the virtual layered networks represents a virtual local area network (VLAN).

4. The method of claim 1 , wherein at least one of the VLANs further comprises a layered encryption zone (LENZ).

5. The method of claim 1 , further comprising establishing a virtual routing module within the MMU or a link to a virtual routing unit between a network entity and the operating system.

6. The method of claim 1 , further comprising allowing the virtual layered networks to communicate with other virtual layered networks of a second group via a virtual routing module of the MMU.

7. The method of claim 1 , wherein the physical network comprises at least one wide area network (WAN).

8. The method of claim 1 , wherein the physical network comprises at least one local area network (LAN).

9. A system of multiple concurrent virtual networks, comprising:

a plurality of virtual layered networks operatively coupled to a network communications socket (NCS);

a processor;

a memory storing instructions which, when executed by the processor, cause the processor to implement a message management unit (MMU) in operative communication with the NCS and at least one virtual network interface (VNI);

an operating system operatively coupled to the at least one VNI; and

a virtual routing module within at least one of the MMU or a virtual routing unit adjacent to and linked to the MMU;

wherein the the memory is further configured to store instructions which, when executed by the processor cause the processor to implement the MMU via:

allowing the virtual layered networks to be concurrently transported on top of one or more physical networks; and

facilitating communication between the operating system and the virtual layered networks concurrently via the NCS.

10. The system of claim 9 , wherein at least one of the virtual layered networks comprises a virtual network (VN) that is tunneled through or layered over the physical network.

11. The system of claim 9 , wherein at least one of the virtual layered networks represents a virtual local area network (VLAN).

12. The system of claim 9 , wherein at least one of the VLANs further comprises a layered encryption zone (LENZ).

13. The system of claim 9 , wherein the MMU comprises a message payload encapsulation module (MPEM), wherein the MPEM is configured to read a message payload from a virtual network interface, tag the payload with virtual layered network identification data, and return the resulting message to the MMU for writing to the network communications socket.

14. The system of claim 9 , wherein the MMU comprises a message payload encapsulation module (MPEM), wherein the MPEM is configured to read a message from the NCS, nseparate a tag from the message, and return the resulting payload and tag structure to the MMU for inspection and writing the payload to a VNI.

15. The system of claim 9 , wherein the at least one VNI is configured as a wildcard Node.

16. The system of claim 9 , wherein:

the virtual layered networks belong to a first group; and

the virtual routing module is configured to allow the virtual layered networks to communicate with other virtual layered networks of a second group.

17. The system of claim 9 , wherein the system is implemented as a software process.

18. The system of claim 9 , wherein the physical network comprises at least one wide area network (WAN).

19. The system of claim 9 , wherein the physical network comprises at least one local area network (LAN).

20. A computer program product, comprising:

a non-transitory computer-readable medium comprising code for causing a computer to:

establish communication handles with a plurality of virtual network interfaces (VNIs) operatively coupled to an operating system;

establish a network communications socket (NCS) operatively connected to a plurality of virtual layered networks;

establish data channels that operatively couple a message management unit (MMU) and its components with the respective VNIs of the MMU;

allow the virtual layered networks to be concurrently transported on top of one or more physical networks; and

facilitate communication between the operating system and the virtual layered networks via the combination of the established data channels, the established handles and a network software stack of the operating system.

Assignments (2)
CHANGE OF NAME Recorded Dec 21, 2017
From: IWEBGATE TECHNOLOGY PTY LTD
To: NETLINKZ TECHNOLOGY PTY LTD
Reel/Frame 044938/0906 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jan 23, 2014
From: GARGETT, CHARLES DUNELM
To: IWEBGATE TECHNOLOGY LIMITED
Reel/Frame 032033/0323 →
Continuity (3)
Continuation In Part 13039027 · Mar 2, 2011
Provisional Application 61309875 · Mar 3, 2010
Related Publication 20140112347A1 · Apr 24, 2014