Systems and methods for micro network segmentation
A wireless communication system includes an external provider subsystem and an electronic network subsystem in operable communication with the external provider subsystem. The electronic network subsystem is configured to provide a first microservice and a second microservice different from the first microservice. The wireless communication system further includes an in-home subsystem (i) separate from the external provider subsystem, (ii) in operable communication with the electronic network subsystem, and (iii) including a first micronet and a second micronet different from the first micronet. The first micronet is configured to operably interact with the first microservice, and the second micronet is configured to operably interact with the second microservice. The wireless communication system further includes at least one electronic device configured to operably connect with one of the first micronet and the second micronet.
1. A micronet-enabled gateway for a communication system having a micronets platform, the gateway configured to:
(a) automatically organize a plurality of devices connected to the gateway within a plurality of trust domains;
(b) operably communicate with (i) a micronets manager of the communication system configured to orchestrate service delivery between the plurality of devices and the system, and (ii) a plurality of micronets; and
(c) implement a software defined networking (SDN) switch for automatically segmenting an on-premises network into the plurality of micronets according to two or more of the plurality of trust domains.
2. The gateway of claim 1 , wherein the micronet manager is further in communication with an intelligent services and business logic layer of the communication system, and wherein the intelligent services and business logic layer is configured to provide advanced services including one or more of (i) a machine learning powered application, (ii) a neural network powered application, (iii) business logic, (iv) an artificial intelligence-enabled service, (v) a security service, and (vi) a device fingerprinting service.
3. The gateway of claim 1 , wherein the gateway is further configured to receive advance service information from the system, through the micronets manager, to arrange traffic routing and connectivity between the plurality of devices and the system.
4. The gateway of claim 1 , further comprising at least one of a modem, a virtual switch, a micronet application layer, an access point, a router, and an ethernet.
5. The gateway of claim 4 , further configured to support at least one of a wired environment and a wireless environment.
6. The gateway of claim 4 , further comprising the virtual switch, and wherein the virtual switch is configured to be controlled by SDN to implement a flow table pipeline.
7. The gateway of claim 1 , wherein the plurality of micronets includes at least one system-managed micronet and at least one user-managed micronet separate from the system-managed micronet.
8. The gateway of claim 7 , wherein the micronet manager is further configured to manage one or more of an SDN controller microservice, a dynamic host configuration protocol (DHCP) server microservice, a domain name system (DNS) server microservice, and an authentication, authorization, and accounting (AAA) server microservice.
9. The gateway of claim 7 , further comprising an SDN switch.
10. The gateway of claim 9 , wherein the SDN switch is configured to automatically establish the at least one system-managed micronet and the at least one user-managed micronet.
11. The gateway of claim 10 , wherein the SDN switch is further configured to automatically establish the at least one system-managed micronet into a first trust domain of the plurality of trust domains, and the at least one user-managed micronet into a second trust domain of the plurality of trust domains different from the first trust domain.
12. The gateway of claim 11 , wherein the micronet manager is further configured to communicate with a provider subsystem through a multiple service operator (MSO) application programming interface (API) layer.
13. The gateway of claim 12 , wherein the SDN switch is configured to automatically establish a third trust domain of the plurality of trust domains different from the first trust domain and the second trust domain.
14. The gateway of claim 13 , wherein the on-premises network includes a specialized device provisioned by the provider subsystem, and wherein the gateway is further configured to establish a direct secure connection between the provider subsystem and the specialized device.
15. The gateway of claim 2 , wherein the intelligent services and business logic layer is further configured to interpret certificates from a plurality of ecosystems to identify the plurality of devices connected to the gateway.
16. The gateway of claim 15 , wherein the intelligent services and business logic layer is further configured to identify that a particular device of the plurality of devices does not have an ecosystem certificate, and wherein the gateway is further configured to establish a segregated micronet for operation of the particular device within the communication system based on the identification from the intelligent services and business logic layer.
17. The gateway of claim 1 , further configured to enable operable communication of the on-premises network with the micronets manager through an access and core network.
18. The gateway of claim 17 , further configured to cooperate with the micronets manager to segment the on-premises network into one or more of (i) a plurality of micro-networks, (ii) separate trust domains for the segmented micro-networks, (iii) extended secure connectivity beyond the on-premises network, (iv) leveraged artificial intelligence and machine learning, (v) privacy protection, dynamic rules and policy management, (vi) an identity of each end device or endpoint connecting to the communication system through the gateway, and (vii) standardized interfaces.
19. The gateway of claim 1 , further configured to enable the on-premises network is to temporarily remove a suspected device of the plurality of devices into an isolated, secure micro-network trust domain until a condition giving rise to suspicion of the suspected device is removed.
20. The gateway of claim 1 , further configured to dynamically to place the plurality of connected devices into individualized separate respective trust domains based on one or more of (i) a device type, (ii) use of a device by a user, (iii) capabilities of the on-premises network, and (iv) traffic flow to and from the communication system.