IP Library Granted Patent US 10,014,937
Granted Patent B1
US 10,014,937 · App. 15/067,619 · Granted Jul 3, 2018

Timing synchronization and intrusion detection via an optical supervisory channel (OSC)

Inventors: Domenico Di Mola (Fremont, CA); Gert Grammel (Ditzingen, DE)
Assignee: Juniper Networks, Inc.
H04B10/0795H04L7/0075H04L63/1416
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,014,937
App. No.
15/067,619
Granted
Jul 3, 2018
Kind
B1
Abstract

A device may receive, via a first optical supervisory channel, a first timing signal from a first network node. The first timing signal may be generated by a first clock, of the first network node, and may be used to synchronize the first clock, of the first network node, and a second clock of a second network node. The device may determine a parameter value based on the first timing signal, and may determine whether the parameter value satisfies a threshold value. The device may selectively transmit, via a second optical supervisory channel, a second timing signal to the second network node based on determining whether the parameter value satisfies the threshold value. The second timing signal may be used to synchronize the second clock, of the second network node, with the first clock of the first network node.

Claims (71)

1. A device, comprising:

a memory; and

a processor to:

receive, via a first optical supervisory channel, a first timing signal from a first network node,

the first timing signal being generated by a first clock, of the first network node, and being used to synchronize the first clock, of the first network node, and a second clock of a second network node;

determine a parameter value based on the first timing signal;

determine whether the parameter value satisfies a threshold value; and

selectively transmit:

a second timing signal, via a second optical supervisory channel, to the second network node based on determining that the parameter value satisfies the threshold value,

the second timing signal being used to synchronize the second clock, of the second network node, with the first clock of the first network node, or

a notification regarding a network intrusion based on determining that the parameter value does not satisfy the threshold value.

2. The device of claim 1 , where the first network node is a first routing device, the second network node is a second routing device, and the device is an amplifying device.

3. The device of claim 1 , where the processor, when determining whether the parameter value satisfies the threshold value, is to:

compare the parameter value and the threshold value,

the parameter value indicating a received power of the first timing signal,

the threshold value indicating an expected received power of the first timing signal.

4. The device of claim 1 , where the processor, when selectively transmitting the second timing signal, is to:

prevent transmission of the second timing signal to the second network node based on determining that the parameter value does not satisfy the threshold value.

5. The device of claim 1 , where the notification includes information that identifies the device and the first network node.

6. The device of claim 1 , where the first timing signal is programmed based on a reference time.

7. The device of claim 1 , where the parameter value includes a time of transmission of the first timing signal.

8. A system comprising:

a first network node to:

receive, via a first optical supervisory channel, a first timing signal from a second network node,

the first timing signal being generated by a first clock, of the second network node, and being used to synchronize the first clock, of the second network node, and a second clock of a third network node;

determine a parameter value based on the first timing signal;

determine whether the parameter value satisfies a threshold value; and

selectively transmit:

a second timing signal, via a second optical supervisory channel, to the third network node based on determining that the parameter value satisfies the threshold value,

the second timing signal being used to synchronize the second clock, of the third network node, with the first clock of the second network node, or

a notification regarding a network intrusion based on determining that the parameter value does not satisfy the threshold value.

9. The system of claim 8 , where the first network node, when

selectively transmitting the second timing signal, is to:

transmit another notification to the second network node based on determining that the parameter value does not satisfy the threshold value,

the other notification including an instruction for the second network node to not transmit network traffic to the first network node.

10. The system of claim 8 , where:

the threshold value includes a threshold power value; and

the parameter value includes a power value differing by a threshold amount from the threshold power value when the parameter value does not satisfy the threshold value.

11. The system of claim 8 , where:

the threshold value includes a threshold timing value; and

the parameter value includes a timing value greater than the threshold timing value when the parameter value does not satisfy the threshold value.

12. The system of claim 8 , where the first timing signal includes a key that expires based on the first clock of the second network node, and

where the key is associated with a channel that is different than the first optical supervisory channel and the second optical supervisory channel.

13. The system of claim 8 , where the second timing signal and the first timing signal are a same signal.

14. The system of claim 8 , where the threshold value indicates at least one of:

an expected network propagation delay value,

an expected packet latency value,

an expected packet delay variation value, or

an expected jitter value.

15. A method comprising:

receiving, by a first network node, a first timing signal, via an optical supervisory channel, from a second network node,

the first timing signal being generated by a first clock, of the second network node, and being used to synchronize the first clock, of the second network node, and a second clock of a third network node;

determining, by the first network node, a parameter value based on the first timing signal;

determining, by the first network node, whether the parameter value satisfies a threshold value; and

selectively outputting, by the first network node,

a second timing signal, via a second optical supervisory channel, based on determining that the parameter value satisfies the threshold value,

or

a notification regarding a network intrusion,

the notification being output based on determining that the parameter does not satisfy the threshold value.

16. The method of claim 15 , where determining whether the parameter value satisfies the threshold value comprises:

comparing the parameter value with the threshold value,

the parameter value including a transmission duration of the first timing signal between the first network node and the second network node, and

the threshold value including an expected transmission duration of the first timing signal between the first network node and the second network node.

17. The method of claim 15 , where determining whether the parameter value satisfies the threshold value comprises:

comparing the parameter value with the threshold value,

the parameter value including a received power of the first timing signal, and

the threshold value including an expected received power of the first timing signal.

18. The method of claim 15 , where the optical supervisory channel directly connects the first network node and the second network node.

19. The method of claim 15 , where the threshold value is received from a network management device.

20. The method of claim 15 , where selectively outputting the notification comprises:

outputting the notification to a network management device based on determining that the parameter value does not satisfy the threshold value.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Mar 11, 2016
From: DI MOLA, DOMENICO; GRAMMEL, GERT
To: JUNIPER NETWORKS, INC.
Reel/Frame 037956/0451 →
Cited By (11)
US 12,216,489 US 12,289,388 US 12,289,389 US 12,294,469 US 12,375,199 US 12,445,196 US 12,524,038 US 12,615,130 US 12,645,251 US 12,669,843 US 12,712,703