Transparent satellite routing system and method

• US 10,454,816 B2
• Filed: 12/12/2017
• Issued: 10/22/2019
• Est. Priority Date: 12/12/2017
• Status: Active Grant

• Current Assignee: Mastercard International Incorporated (MasterCard Incorporated)
• Original Assignee: Mastercard International Incorporated (MasterCard Incorporated)
• Inventors: Carney, Kevin S.
• Primary Examiner(s): Chery, Dady
• Application Number:
  US15/839,219
• Publication Number:
  US 20190182148A1
• Time in Patent Office: 679 Days
• CPC Class Codes: H04B 7/18515 Transmission equipment in satellites or space-based relays
• CPC Class Codes: H04B 7/18517 Transmission equipment in earth stations
• CPC Class Codes: H04B 7/18519 Operations control, administration or maintenance
• CPC Class Codes: H04L 45/306 Route determination based on the nature of the carried application
• CPC Class Codes: H04L 45/52 Multiprotocol routers
• CPC Class Codes: H04W 40/02 Communication route or path selection, e.g. power-based or shortest path routing

Abstract

In one aspect, a SR computing device is provided, including a first network interface connected to a dynamically routed transport network, and a second network interface connected to a statically routed transport network. The SR computing device receives a first network data packet including a first destination address and a first data payload over the first network interface, and retrieves transport network routing information from a routing table stored by the SR computing device, based on the first destination address. The SR computing device generates a first transport packet for the first network data packet, where the transport network routing information includes instructions for the first transport packet to be routed over at least one satellite link, and transmits the first transport packet to the transport network over the second network interface, based on the transport network routing information.

Claims

1. A satellite routing (SR) computing device comprising:

a first network interface communicatively coupled to a first production network, wherein the first production network is routed based on border gateway protocol;

a second network interface communicatively coupled to a transport network, wherein the transport network is routed based on multiprotocol label switching;

a processor and a memory in communication with the processor, the processor programmed to;

receive a first network data packet including a first destination IP address and a first data payload over the first network interface, wherein the first destination IP address is associated with a second production network;

retrieve transport network routing information from a routing table stored within the memory based at least in part on the first destination IP address included in the first network data packet, wherein the routing table includes destination address rules and transport network routing information;

encrypt the first data payload and the first destination IP address, as a first encrypted payload, using an encryption key associated with the first and second production network;

generate a first transport packet for the first network data packet, the first transport packet including the first encrypted payload and the transport network routing information, wherein the transport network routing information includes instructions for the first transport packet to be routed over at least one satellite link; and

transmit the first transport packet to the transport network over the second network interface, based at least in part on the transport network routing information.

2. The satellite routing (SR) computing device of claim 1, wherein the processor is further programmed to:

receive a second transport packet from the transport network over the second network interface, wherein the second transport packet includes a second encrypted payload;

decrypt, using the encryption key associated with the first and second production network, the second encrypted payload as a second network data packet, including a second destination IP address and a second data payload, wherein the second destination address is associated with the first production networks segment; and

transmit the second network data packet, including the decrypted second data payload, over the first network interface associated with the first production network segment, based at least in part on the second destination IP address included in the second network data packet.

3. The satellite routing (SR) computing device of claim 1, wherein the second network interface is a virtual network interface.

4. The satellite routing (SR) computing device of claim 1, wherein generating a first transport packet includes generating a compressed data payload.

5. A computer-implemented method for satellite data routing, the method implemented by a satellite routing (SR) computing device, the method comprising:

receiving a first network data packet including a first destination IP address and a first data payload over a first network interface communicatively coupled to a first production network, wherein the first destination IP address is associated with a second production network and the first production network is routed based on border gateway protocol;

retrieving transport network routing information from a routing table stored within a memory based at least in part on the first destination IP address included in the first network data packet, wherein the routing table includes destination IP address rules and transport network routing information;

encrypting the first data payload and the first destination IP address, as a first encrypted payload, using an encryption key associated with the first and second production network;

generating a first transport packet for the first network data packet, the first transport packet including the first encrypted payload, and the transport network routing information, wherein the transport network routing information includes instructions for the first transport packet to be routed over at least one satellite link; and

transmitting the first transport packet through a second network interface communicatively coupled to a transport network based at least in part on the transport network routing information, wherein the transport network is routed based on multiprotocol label switching.

6. The computer-implemented method of claim 5 further comprising:

receiving a second transport packet from the transport network over the second network interface, wherein the second transport packet includes a second encrypted payload;

decrypting, using the encryption key associated with the first and second production network, the second encrypted payload as a second network data packet, including a second destination IP address and a second data payload, wherein the second destination IP address is associated with the first production networks segment; and

transmitting the second network data packet, including the decrypted second data payload, over the first network interface associated with the first production network segment, based at least in part on the second destination IP address included in the second network data packet.

7. The computer-implemented method of claim 5, wherein the second network interface is a virtual network interface.

8. The computer-implemented method of claim 5, wherein generating a first transport packet includes generating a compressed data payload.

9. A non-transitory computer-readable storage media for satellite data routing, the computer-readable storage media having computer-executable instructions embodied thereon, wherein, when executed by at least one processor, the computer-executable instructions cause the processor to:

receive a first network data packet including a first destination IP address and a first data payload over a first network interface communicatively coupled to a first production network, wherein the first destination IP address is associated with a second production network and the first production network is routed based on border gateway protocol;

retrieve transport network routing information from a routing table stored within a memory based at least in part on the first destination IP address included in the first network data packet, wherein the routing table includes destination IP address rules and transport network routing information;

encrypting the first data payload and the first destination IP address, as a first encrypted payload, using an encryption key associated with the first and second production network;

generate a first transport packet for the first network data packet, the first transport packet including the first encrypted payload, and the transport network routing information, wherein the transport network routing information includes instructions for the first transport packet to be routed over at least one satellite link; and

transmit the first transport packet through a second network interface communicatively coupled to a transport network based at least in part on the transport network routing information, wherein the transport network is routed based on multiprotocol label switching.

10. The non-transitory computer-readable storage media of claim 9, wherein the computer-executable instructions further cause the processor to:

receive a second transport packet from the transport network over the second network interface;

decode the second transport packet as a second network data packet, including a destination IP address and a second data payload, wherein the destination IP address is associated with the first production networks segment; and

transmit the second network data packet over the first network interface associated with the first production network segment, based at least in part on the second destination IP address included in the second network data packet.

11. The non-transitory computer-readable storage media of claim 9, wherein the second network interface is a virtual network interface.

12. The non-transitory computer-readable storage media of claim 9, wherein generating a first transport packet includes generating a compressed data payload.