System, method, and apparatus to support mixed network communications on a vehicle
An example system includes a vehicle having a first network zone and a second network zone of a different type than the first network zone, a converged network device (CND) interposed between the zones, where the CND includes a policy management circuit that interprets a policy including a network regulation description, a configuration circuit that configures network interface circuit(s) in response to the policy, and the interface circuit(s) that regulate communications between end points of the network zones.
1. A method, comprising:
interpreting a policy comprising a network regulation description; and
regulating communications between end points of a first network zone of a mobile system and end points of a second network zone of the mobile system in response to the network regulation description;
wherein:
the second network zone is of a different type than the first network zone;
the policy further comprises a permission value corresponding to at least one end point of the first network zone or the second network zone; and
the permission value comprises at least one permission value selected from the values consisting of:
a data collection permission value;
a service publication permission value;
a service subscription permission value; or
an external communication permission value.
2. The method of claim 1 further comprising:
receiving a policy communication from an external device; and
performing one of storing the policy or updating the policy in response to the policy communication.
3. The method of claim 2 further comprising:
verifying the policy before performing the one of the storing the policy or updating the policy.
4. The method of claim 3 further comprising:
providing a notification to the external device in response to the verifying the policy cannot be applied.
5. The method of claim 4 , wherein verifying the policy cannot be applied comprises at least one operation selected from the operations consisting of:
determining that the policy violates a security criteria of a previously stored policy or the policy communication;
determining that the policy cannot be implemented;
determining that the policy cannot be implemented due to a network communication limit;
determining that the policy cannot be implemented due to a data storage limit; or
determining that the policy cannot be implemented due to an external communication limit.
6. The method of claim 1 further comprising:
regulating external communications of end points of each of the first network zone and the second network zone in response to the policy.
7. The method of claim 1 further comprising:
regulating communications between a first end point of the first network zone and a second end point of the first network zone in response to the policy.
8. The method of claim 1 further comprising:
updating a local configuration file of a configurable ethernet switch in response to one of an implementation of the policy or an update of the policy.
9. The method of claim 1 further comprising:
updating a local configuration file of a configurable edge gateway in response to one of an implementation of the policy or an update of the policy.
10. The method of claim 1 , wherein regulating the communication between a first end point of the first network zone and a second end point of the second network zone comprises:
performing one of an up-sampling operation or a down-sampling operation on the communication.
11. The method of claim 1 wherein regulating the communication between a first end point of the first network zone and a second end point of the first network zone comprises:
performing one of an up-sampling operation or a down-sampling operation on the communication.
12. An apparatus comprising:
a policy manager circuit structured to interpret a policy comprising a network regulation description;
at least one network interface circuit structured to regulate communications between end points of a first network zone of a mobile system and end points of a second network zone of the mobile system; and
a configuration circuit structured to configure the at least one network interface circuit in response to the network regulation description;
wherein:
the second network zone is of a different type than the first network zone;
the policy further comprises a permission value corresponding to at least one end point of the first network zone or the second network zone; and
the permission value comprises at least one permission value selected from the values consisting of:
a data collection permission value;
a service publication permission value;
a service subscription permission value; or
an external communication permission value.
13. The apparatus of claim 12 , wherein the policy manager circuit is further structured to:
receive a policy communication from an external device; and
interpret the policy by performing, in response to the policy communication, one of storing the policy or updating a stored policy.
14. The apparatus of claim 13 , wherein the external device is communicatively coupled to the policy manager circuit through at least one of the first network zone or the second network zone.
15. The apparatus of claim 13 , wherein the external device is communicatively coupled to the policy manager circuit via at least one of a wireless network connection or a cellular network connection.
16. The apparatus of claim 13 , wherein the policy manager circuit is further structured to:
verify the policy before performing the one of storing the policy or updating the stored policy.
17. The apparatus of claim 16 , wherein the policy manager circuit is further structured to:
provide a notification to the external device in response to the verifying the policy.
18. The apparatus of claim 12 , wherein the policy further comprises at least one data collection parameter.
19. The apparatus of claim 12 , wherein the policy is communicated to the policy manager circuit from an external device.