Network services API

• US 10,193,769 B2
• Filed: 12/05/2014
• Issued: 01/29/2019
• Est. Priority Date: 05/16/2014
• Status: Active Grant

• Current Assignee: CenturyLink Intellectual Property LLC (Lumen Technologies, Inc.)
• Original Assignee: CenturyLink Intellectual Property LLC (Lumen Technologies, Inc.)
• Inventors: Schwengler, Thomas, Casey, Steven M., McBride, Kevin M., Castro, Felipe
• Primary Examiner(s): Sison, June Y
• Application Number:
  US14/562,088
• Publication Number:
  US 20150333979A1
• Time in Patent Office: 1,516 Days
• CPC Class Codes: G06F 2009/45595 Network integration; Enabling network access in virtual machine instances
• CPC Class Codes: G06F 9/45558 Hypervisor-specific management and integration aspects
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising
• CPC Class Codes: G06Q 30/0277 Online advertisement
• CPC Class Codes: H04L 12/6418 Hybrid transport
• CPC Class Codes: H04L 41/5054 Automatic deployment of services triggered by the service manager, e.g. service implementation by automatic configuration of network components
• CPC Class Codes: H04L 47/70 Admission control; Resource allocation
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46

Abstract

Novel tools and techniques are provided for invoking virtualized network functions. In some embodiments, a programmable service backbone might comprise at least one virtualized network function, and might provide virtualized network functions required to provision a service offering. In some cases, at least one application programming interface might be configured to invoke the at least one virtualized network function of the programmable service backbone. An application programming interface gateway might be configured to manage access to the at least one application programming interface, and the application programming interface gateway might comprise a security layer. Virtualized service equipment, which might be in communication with the application programming interface gateway, might provide authentication indicative of selected virtualized network functions associated with the service offering, and the security layer might release an authorized subset of virtualized network functions of the at least one virtualized network function based on the authentication.

Claims

1. A system for invoking virtualized network functions, the system comprising:

a programmable network element configured to provide at least one virtualized network function, wherein the at least one virtualized network function associated with a service offering;

an application programming interface gateway comprising;

a processor;

a non-transitory computer readable medium having encoded thereon a set of instructions executable by the processor to;

provide a security layer;

manage access to an application programming interface;

invoke, via the application programming interface, the at least one virtualized network function of the programmable network element in response to a user selection of the service offering; and

a customer premises equipment associated with the user comprising a virtualized service equipment, wherein the virtualized service equipment is in communication with the application programming interface gateway,

wherein the virtualized service equipment is configured to send authentication indicative of selected virtualized network functions associated with the service offering to the security layer of the application programming interface gateway in response to the user selection of the service offering,

wherein the security layer releases, based on the authentication, an authorized subset of virtualized network functions including the at least one virtualized network function to provision the service offering, and wherein the security layer releases an authorized subset of application programming interfaces including the application programming interface to access the authorized subset of virtualized network functions.

2. The system of claim 1, wherein the service offering comprises one or more network services.

3. The system of claim 1, wherein the service offering comprises one or more app services.

4. The system of claim 1, wherein the at least one application programming interface is configured to be implemented in one or more integrated development environments.

5. The system of claim 1, wherein the at least one application programming interface includes one or more test suites, wherein the one or more test suites determine whether applications invoking the application programming interface comply with one or more network access and use policies.

6. The system of claim 1, further comprising:

an operating system, which is associated with the at least one application programming interface, configured to access the programmable service backbone, wherein the at least one application programming interface invokes the at least one virtualized network function via the operating system.

7. The system of claim 1, wherein the at least one application programming interface comprises a set of application programming interfaces, wherein the security layer releases an authorized subset of the set of application programming interfaces based on the authentication.

8. An apparatus, comprising:

an application programming interface gateway comprising;

a processor;

a non-transitory computer readable medium having encoded thereon a set of instructions executable by the processor to;

manage access to an application programming interface;

invoke, via the application programming interface, at least one virtualized network function of a programmable network element in response to a user selection of the service offering; and

provide a security layer that releases, based on the authentication, an authorized subset of virtualized network functions including the at least one virtualized network function to provision the service offering, and wherein the security layer releases an authorized subset of application programming interfaces including the application programming interface to access the authorized subset of virtualized network functions, wherein the authentication is sent by virtualized service equipment that is associated with a user and is incorporated in a device associated with the user.

9. The apparatus of claim 8, wherein the apparatus is an application programming interface gateway.

10. The apparatus of claim 8, wherein the service offering comprises one or more network services.

11. The apparatus of claim 8, wherein the service offering comprises one or more app services.

12. The apparatus of claim 8, wherein the at least one application programming interface includes one or more test suites, wherein the one or more test suites determine whether applications invoking the application programming interface comply with one or more network access and use policies.

13. The apparatus of claim 8, wherein the at least one application programming interface invokes the at least one virtualized network function via an operating system associated with the at least one application programming interface.

14. The apparatus of claim 8, wherein the security layer releases an authorized subset of the at least one application programming interface based on the authentication.

15. The apparatus of claim 14, wherein a service offering comprises a customer offering, wherein the authorized subset of the at least one application programming interface is configured to be invoked by the customer offering.

16. The apparatus of claim 15, wherein the authorized subset of the at least one application programming interface is configured to be made available in one or more integrated development environments.

17. A method for invoking virtualized network functions, the method comprising:

receiving an authentication indicative of virtualized network functions associated with provisioning a selected service offering, wherein the authentication is sent by virtualized service equipment that is associated with a user and is incorporated in a device associated with the user;

authorizing access to one or more virtualized network functions based on the authentication;

invoking the one or more virtualized network functions needed to provision the selected service offering via at least one application programming interface;

releasing, with a security layer, an authorized subset of virtualized network functions including the at one or more virtualized network functions to provision the service offering, based on an authentication; and

releasing, with the security layer, an authorized subset of application programming interfaces including the application programming interface to access the authorized subset of virtualized network functions.

18. The method of claim 17, further comprising:

testing calls to the one or more virtualized network functions for compliance with one or more network access and use policies.

19. The method of claim 17, wherein each of the one or more virtualized network functions is invoked via a system invocation in an operating system associated with the at least one application programming interface.

20. The method of claim 17, further comprising:

authorizing access to an authorized subset of the at least one application programming interface based on the authentication.

21. The method of claim 20, further comprising:

invoking the authorized subset of the at least one application programming interface via a customer offering, wherein the customer offering is a service offering the selection of which causes invocation of the one or more virtualized network functions.