Systems and method for micro network segmentation
A wireless communication system includes an external provider subsystem and an electronic network subsystem in operable communication with the external provider subsystem. The electronic network subsystem is configured to provide a first microservice and a second microservice different from the first microservice. The wireless communication system further includes an in-home subsystem (i) separate from the external provider subsystem, (ii) in operable communication with the electronic network subsystem, and (iii) including a first micronet and a second micronet different from the first micronet. The first micronet is configured to operably interact with the first microservice, and the second micronet is configured to operably interact with the second microservice. The wireless communication system further includes at least one electronic device configured to operably connect with one of the first micronet and the second micronet.
1. A communication network, comprising:
a first micronetwork defining a first segmented trust domain of the communication network;
a second micronetwork defining a second segmented trust domain of the communication network different from the first segmented trust domain; and
a software defined network (SDN) controller configured to (i) operate according to a data model application, and (ii) enable communication packets from a first device configured within the first micronetwork to be delivered to a second device configured within the second micronetwork according to the data model application,
wherein the first segmented trust domain enables a first set of security characteristics for the first device within the communication network,
wherein the second segmented trust domain enables a second set of security characteristics for the second device within the communication network.
2. The communication network of claim 1 , wherein the data model application comprises an OpenDayLight modular platform for SDN and network functions virtualization (NFV).
3. The communication network of claim 2 , wherein the OpenDayLight modular platform comprises an OpenFlow communications protocol.
4. The communication network of claim 2 , wherein the OpenDayLight modular platform comprises an Micronets OpenDaylight YANG model.
5. The communication network of claim 2 , wherein at least one of the SDN controller and the OpenDayLight modular platform comprises an OpenDaylight model-driven service abstraction layer (MD-SAL) data store.
6. The communication network of claim 2 , wherein the OpenDayLight modular platform comprises a Northbound Notification data model.
7. The communication network of claim 1 , wherein the SDN controller is further configured to enable intra-micronet routing for communication packets between a third device configured within the first micronetwork and the first device.
8. The communication network of claim 7 , wherein the SDN controller is further configured to prevent inter-micronet routing between the third device and the second device.
9. The communication network of claim 7 , wherein the SDN controller is further configured to dynamically establish a first level of access for the first device within the first micronetwork based on a first trust level of the first device with respect to the first micronetwork.
10. The communication network of claim 9 , wherein the SDN controller is further configured to dynamically establish a second level of access for the third device within the first micronetwork based on a second trust level of the third device with respect to the first micronetwork, wherein the second level of access is different than the first level of access.
11. The communication network of claim 10 , wherein the SDN controller is further configured to dynamically establish a third level of access for the third device within the second micronetwork based on a third trust level of the third device with respect to the second micronetwork.
12. The communication network of claim 11 , wherein the third level of access of the third device within the second micronetwork is different than the second level of access of the third device within the first micronetwork.
13. The communication network of claim 9 , wherein the SDN controller is further configured to automatically assign the first device to the first segmented trust domain of the first micronetwork based on the first trust level of the first device.
14. A software defined network (SDN) controller for a communication network, the SDN controller comprising:
an SDN-controlled switch configured to dynamically establish within the communication network (i) a first micronetwork having a first IP subnetwork and a first security profile, and (ii) a second micronetwork having a second IP different than the first micronetwork and having a second security profile different than the first security profile; and
a micronet manager configured to (i) detect a first device attempting to connect the communication network, (ii) detect a second device attempting to connect the communication network, (iii) configure a server of the communication network to provide the first and second IP subnetworks and the first and second levels of security access, respectively, and (iv) assign the first device to the first micronetwork based on the first security profile and the second device to the second micronetwork based on the second security profile.
15. The SDN controller of claim 14 , further comprising an Open vSwitch (OVS) bridge disposed between (i) the communication network, and (ii) the first and second devices.
16. The SDN controller of claim 15 , wherein the micronet manager is further configured to detect the first and second devices through first and second notifications, respectively, from the OVS bridge.
17. The SDN controller of claim 16 , wherein the micronet manager is further configured to assign the first and second devices according to a data model application.
18. The SDN controller of claim 17 , wherein the data model application is configured to dynamically implement flow tables to control routing of data packets to and from the first and second devices within the communication network.
19. The SDN controller of claim 18 , wherein the routing of data packets to and from the first device within the first micronetwork is different than the routing of data packets to and from the second device within the second micronetwork.
20. The SDN controller of claim 14 , wherein the micronet manager is further configured to (i) monitor operation of the first device within the first micronetwork, and (ii) dynamically reassign the first device to a third micronetwork, different than the first micronetwork, within the communication network based on monitored operation of the first device.