Context-aware network on a data exchange layer

• US 10,447,714 B2
• Filed: 10/17/2018
• Issued: 10/15/2019
• Est. Priority Date: 09/28/2013
• Status: Active Grant

• Current Assignee: Musarubra US LLC (Musarubra US SellCo LLC)
• Original Assignee: McAfee, LLC
• Inventors: Nadkarni, Hemang Satish, Das, Sudeep
• Primary Examiner(s): Arani, Taghi T
• Assistant Examiner(s): Champakesan, Badridot
• Application Number:
  US16/163,362
• Publication Number:
  US 20190052657A1
• Time in Patent Office: 363 Days
• Field of Search: 726 23
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 21/56 Computer malware detection or handling, e.g. anti-virus arrangements
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04L 67/01 Protocols

Abstract

There is disclosed in one example a data exchange layer (DXL) broker, including: a hardware platform including a processor; and instructions encoded in a memory to instruct the processor to communicatively couple to a DXL fabric configured to operate a one to-many (1:N, N>1) publish-subscribe fabric; provide an interface to authenticate and register DXL endpoints with the DXL broker; and provide DXL messaging, including maintaining a routing table of registered DXL endpoints; receiving from a first registered DXL endpoint a one-to-one (1:1) request for an endpoint of the DXL fabric, wherein the endpoint is not a registered DXL endpoint of the broker; and publishing the 1:1 request to the DXL fabric.

Claims

1. A data exchange layer (DXL) broker, comprising:

a hardware platform comprising a processor; and

instructions encoded in a memory to instruct the processor to;

communicatively couple to a DXL fabric configured to provide loose integration of network elements via a one-to-many publish-subscribe fabric, comprises operating a two-layer protocol, wherein a bottom layer is a secure, low-latency data transport fabric and a top layer is an extensible data exchange framework;

provide an interface to authenticate and register DXL endpoints with the DXL broker; and

provide DXL messaging, comprising maintaining a routing table of registered DXL endpoints;

receiving from a first registered DXL endpoint a one-to-one request for an endpoint of the DXL fabric, wherein the endpoint is not a registered DXL endpoint of the broker; and

publishing the request to the DXL fabric, to provide loose integration of network elements.

2. The DXL broker of claim 1, wherein providing DXL messaging further comprises:

receiving a one-to-one response to the request;

identifying the first registered DXL endpoint as a destination for the one-to-one response; and

forwarding the one-to-one response to the first registered DXL endpoint.

3. The DXL broker of claim 1, wherein the instructions are further to instruct the processor to provide message queueing telemetry transport (MQQT) messaging to support the DXL messaging.

4. The DXL broker of claim 1, wherein the instructions are further to discover a client property of the first registered DXL endpoint.

5. The DXL broker of claim 4, wherein the client property is selected from the group consisting of client IP address, client operating system, and logged-in username.

6. The DXL broker of claim 1, wherein the instructions are further to:

receive a subscription of a second registered DXL endpoint to a topic;

receive a DXL message of the topic; and

forward the message to the second registered DXL endpoint.

7. The DXL broker of claim 1, wherein the interface is a plug-and-play application programming interface (API) comprising support for loose integration of heterogeneous devices.

8. One or more tangible, non-transitory computer-readable mediums having stored thereon executable instructions to:

communicatively couple to a DXL fabric configured to provide loose integration of network elements via a one-to-many publish-subscribe fabric, comprising operating a two-layer protocol, wherein a bottom layer is a secure, low-latency data transport fabric and a top layer is an extensible data exchange framework;

provide an application programming interface (API) to register DXL endpoints with a DXL broker; and

maintain a routing table of registered DXL endpoints;

receive from a registered DXL endpoint a one-to-one request for a remote endpoint of the DXL fabric; and

publish the one-to-one request for the remote endpoint to the DXL fabric, to provide loose integration of network elements, wherein the request is posted to a DXL topic specific to the remote endpoint.

9. The one or more tangible, non-transitory computer-readable mediums of claim 8, wherein the instructions are further to:

receive a one-to-one response to the request;

identify the registered DXL endpoint as a destination for the one-to-one response according to a topic specific to the registered DXL endpoint; and

forward the one-to-one response to the registered DXL endpoint.

10. The one or more tangible, non-transitory computer-readable mediums of claim 8, wherein the instructions are further to provide message queueing telemetry transport (MQQT) messaging to support DXL messaging.

11. The one or more tangible, non-transitory computer-readable mediums of claim 8, wherein the instructions are further to discover a client property of the registered DXL endpoint.

12. The one or more tangible, non-transitory computer-readable mediums of claim 11, wherein the client property is selected from the group consisting of client IP address, client operating system, and logged-in username.

13. The one or more tangible, non-transitory computer-readable mediums of claim 8, wherein the instructions are further to:

receive a subscription of the registered DXL endpoint to a topic;

receive a DXL message of the topic; and

forward the message to a second registered DXL endpoint.

14. The one or more tangible, non-transitory computer-readable mediums of claim 8, wherein the API is a plug-and-play API comprising support for loose integration of heterogeneous devices.

15. A computer-implemented method of providing a DXL broker, comprising:

communicatively coupling to a DXL fabric configured to provide loose integration of network elements via a one-to-many publish-subscribe fabric by operating a two-layer protocol, wherein a bottom layer is a secure, low-latency data transport fabric and a top layer is an extensible data exchange framework;

providing an application programming interface (API) to register DXL endpoints with the DXL broker; and

maintaining a routing table of registered DXL endpoints;

receiving from a registered DXL endpoint a one-to-one request for a remote endpoint of the DXL fabric; and

publishing the one-to-one request for the remote endpoint to the DXL fabric, to provide loose integration of network elements.

16. The method of claim 15, further comprising:

receiving a one-to-one response to the request;

identifying the registered DXL endpoint as a destination for the one-to-one response according to a topic specific to the registered DXL endpoint; and

forwarding the one-to-one response to the registered DXL endpoint.

17. The method of claim 15, further comprising providing message queueing telemetry transport (MQQT) messaging to support DXL messaging.

18. The method of claim 15, further comprising discovering a client property of the registered DXL endpoint.

19. The method of claim 18, wherein the client property is selected from the group consisting of client IP address, client operating system, and logged-in username.

20. The method of claim 15, further comprising:

receiving a subscription of the registered DXL endpoint to a topic;

receiving a DXL message of the topic; and

forwarding the message to a second registered DXL endpoint.