IP Library Granted Patent US 12,562,967
Granted Patent B2
US 12,562,967 · App. 17/726,230 · Granted Feb 24, 2026

Computer network platform for routing and virtualization

Inventors: Jared R Burdin (Westford, MA); Peter Malinovsky (Arlington, MA)
Assignee: The MITRE Corporation
H04L41/40H04L45/76
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,562,967
App. No.
17/726,230
Granted
Feb 24, 2026
Kind
B2
Abstract

Disclosed herein are system, method, and computer program product embodiments for instantiating virtual network functions (VNFs). In some embodiments, a computer network infrastructure device comprises a purpose-built router (e.g., a packet routing and forwarding device) and a virtual machine host. The virtual machine host instantiates VNFs and identifies a first function to be executed on the data packet based on an attribute associated with the data packet. Moreover, the virtual machine host identifies a first VNF from the VNFs that are instantiated based on a first function type executed by the first VNF and the first function to be executed on the data packet. The virtual machine host coordinates the first VNF to execute a first function on the data packet. The first VNF outputs a resultant data packet in response to executing the first function on the data packet.

Claims (54)

1 . A network device comprising:

a purpose-built router; and

a virtual machine host configured to:

instantiate, on the network device and based on an intended delivery time period, a plurality of virtual network functions (VNFs), wherein the plurality of VNFs comprise at least two function types;

identify at least a first function to be executed on a first data packet and a second function to be executed on a second data packet based on one or more attributes associated with the first data packet and the second data packet, wherein the one or more attributes comprise one or more of: a data type, a data size, or security policies of an originating network node;

identify a first VNF from the plurality of VNFs based on a first function type executed by the first VNF and the first function to be executed on the first data packet;

identify a second VNF from the plurality of VNFs based on a second function type executed by the second VNF and the second function to be executed on the second data packet;

identify a hierarchical order to execute the first function and the second function on the respective first data packet and the second data packet; and

coordinate, based on the hierarchical order and the intended delivery time period, at least the first VNF and the second VNF to execute, on the network device, the first function on the first data packet and execute the second function on the second data packet, wherein the first VNF outputs a first resultant data packet in response to executing the first function on the first data packet and the second VNF outputs a second resultant data packet in response to executing the second function on the second data packet.

2 . The network device of claim 1 , wherein the virtual machine host is further configured to allocate a set of VNFs from the plurality of VNFs to execute a plurality of functions on the second data packet based on the one or more attributes associated with the second data packet.

3 . The network device of claim 1 , wherein the network device is disposed at a network edge.

4 . The network device of claim 1 , wherein the network device is disposed at a network core.

5 . The network device of claim 1 , wherein the network device is disposed at a datacenter.

6 . The network device of claim 1 , wherein the virtual machine host is further configured to store the one or more attributes associated with the first data packet and the second data packet and the first function and the second function executed on respective ones of the first data packet and the second data packet in a data storage device.

7 . The network device of claim 1 , wherein the virtual machine host is further configured to:

instantiate an additional VNF to the plurality of VNFs based on the one or more attributes associated with the first data packet; and

coordinate the additional VNF and the first VNF to execute the first function.

8 . The network device of claim 1 , wherein the virtual machine host is further configured to delete a VNF from the plurality of VNFs.

9 . A computer-implemented method for instantiating virtual network functions (VNFs), the computer-implemented method comprising:

instantiating, on a network device and based on an intended delivery time period, a plurality of virtual network functions (VNFs), wherein the plurality of VNFs comprise at least two function types;

identifying at least a first function to be executed on a first data packet and a second function to be executed on a second data packet based on one or more attributes associated with the first data packet and the second data packet, wherein the one or more attributes comprise one or more of: a data type, a data size, or security policies of an originating network node;

identifying a first VNF from the plurality of VNFs based on a first function type executed by the first VNF and the first function to be executed on the first data packet;

identifying a second VNF from the plurality of VNFs based on a second function type executed by the second VNF and the second function to be executed on the second data packet;

identifying a hierarchical order to execute the first function and the second function on the respective first data packet and the second data packet; and

coordinating, based on the hierarchical order and the intended delivery time period, the first VNF and the second VNF to execute, on the network device, the first function on the first data packet and execute the second function on the second data packet, wherein the first VNF outputs a first resultant data packet in response to executing the first function on the first data packet and the second VNF outputs a second resultant data packet in response to executing the second function on the second data packet.

10 . The computer-implemented method of claim 9 , further comprising allocating a set of VNFs from the plurality of VNFs to execute a plurality of functions on the second data packet based on the one or more attributes associated with the second data packet.

11 . The computer-implemented method of claim 9 , wherein instantiating the plurality of VNFs comprises instantiating the plurality of VNFs at a network edge.

12 . The computer-implemented method of claim 9 , wherein instantiating the plurality of VNFs comprises instantiating the plurality of VNFs at a network core.

13 . The computer-implemented method of claim 9 , wherein instantiating the plurality of VNFs comprises instantiating the plurality of VNFs at a datacenter.

14 . The computer-implemented method of claim 9 , further comprising storing the one or more attributes associated with the first data packet and a plurality of functions executed on the first data packet in a data storage device.

15 . The computer-implemented method of claim 9 , further comprising transferring a VNF of the plurality of VNFs to another network device.

16 . The computer-implemented method of claim 15 , wherein the plurality of VNFs include state information associated with their operation.

17 . The computer-implemented method of claim 9 , further comprising:

instantiating an additional VNF to the plurality of VNFs based on the one or more attributes associated with the first data packet; and

coordinating the additional VNF and the first VNF to execute the first function.

18 . The computer-implemented method of claim 9 , further comprising deleting a VNF from the plurality of VNFs.

19 . A non-transitory computer-readable medium having instructions stored thereon that, when executed by at least one computing device, cause the at least one computing device to perform operations, the operations comprising:

instantiating, based on an intended delivery time period, a plurality of virtual network functions (VNFs) on a network device, wherein the plurality of VNFs comprise at least two function types;

identifying at least a first function to be executed on a first data packet and a second function to be executed on a second data packet based on one or more attributes associated with the first data packet and the second data packet, wherein the one or more attributes comprise one or more of: a data type, a data size, or security policies of an originating network node;

identifying a first VNF from the plurality of VNFs based on a first function type executed by the first VNF and the first function to be executed on the first data packet;

identifying a second VNF from the plurality of VNFs based on a second function type executed by the second VNF and the second function to be executed on the second data packet;

identifying a hierarchical order to execute the first function and the second function on the respective first data packet and the second data packet; and

coordinating, based on the hierarchical order and the intended delivery time period, the first VNF and the second VNF to execute, on the network device, the first function on the first data packet and execute the second function on the second data packet, wherein the first VNF outputs a first resultant data packet in response to executing the first function on the first data packet and the second VNF outputs a second resultant data packet in response to executing the second function on the second data packet.

20 . The non-transitory computer-readable medium of claim 19 , wherein the operations further comprise allocating a set of VNFs from the plurality of VNFs to execute a plurality of functions on the second data packet based on the one or more attributes associated with the second data packet.

21 . The non-transitory computer-readable medium of claim 19 , wherein the operations further comprise storing the one or more attributes associated with the first data packet and a plurality of functions executed to the first data packet in a data storage device.

22 . The non-transitory computer-readable medium of claim 19 , wherein the operations further comprise transferring a VNF of the plurality of VNFs to another network device.

23 . The non-transitory computer-readable medium of claim 19 , wherein the network device is a virtual machine host and the VNF includes state information associated with its operation.

24 . The non-transitory computer-readable medium of claim 19 , wherein instantiating the plurality of VNFs comprises instantiating the plurality of VNFs at a network edge.

25 . The non-transitory computer-readable medium of claim 19 , wherein instantiating the plurality of VNFs comprises instantiating the plurality of VNFs at a network core.

26 . The non-transitory computer-readable medium of claim 19 , wherein instantiating the plurality of VNFs comprises instantiating the plurality of VNFs at a datacenter.

27 . The non-transitory computer-readable medium of claim 19 , wherein the operations further comprise:

instantiating an additional VNF to the plurality of VNFs based on the one or more attributes associated with the first data packet; and

coordinating the additional VNF and the first VNF to execute the first function.

28 . The non-transitory computer-readable medium of claim 19 , wherein the operations further comprise deleting a VNF from the plurality of VNFs.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Nov 9, 2022
From: BURDIN, JARED R.; MALINOVSKY, PETER
To: THE MITRE CORPORATION
Reel/Frame 061710/0659 →
Continuity (1)
Related Publication 20230344727A1 · Oct 26, 2023
References Cited (12)
US 9384028B1 · Felstaine · 2016 [cited by examiner]
US 9860164B2 · Jilani et al. · 2018 [cited by applicant]
US 10257089B2 · Bays et al. · 2019 [cited by applicant]
US 10819573B2 · Maes · 2020 [cited by applicant]
US 10834004B2 · Yigit et al. · 2020 [cited by applicant]
US 20160043944A1 · Felstaine · 2016 [cited by examiner]
US 20180351874A1 · Abhigyan · 2018 [cited by examiner]
US 20190208553A1 · Chou · 2019 [cited by examiner]
US 20200195553A1 · Yigit et al. · 2020 [cited by applicant]
US 20220124547A1 · Young · 2022 [cited by examiner]
Ciena's Data Sheet 3906, accessible at URL as of Sep. 19, 2020; 5 pages. [cited by applicant]
Miano et al. “A framework for eBPF-based network functions in an era of microservices.” IEEE Transactions on Network and Service Management 18.1: 133-151, Jan. 29, 2021; 19 pages. [cited by applicant]