Location services on a data exchange layer

• US 10,609,088 B2
• Filed: 09/28/2014
• Issued: 03/31/2020
• Est. Priority Date: 09/28/2013
• Status: Active Grant

• Current Assignee: Musarubra US LLC (Musarubra US SellCo LLC)
• Original Assignee: McAfee, LLC
• Inventors: Arkin, Ofir
• Primary Examiner(s): Doan, Duyen M
• Application Number:
  US14/913,101
• Publication Number:
  US 20160212228A1
• Time in Patent Office: 2,011 Days
• Field of Search: 709203, 709219
• CPC Class Codes: G06F 13/4265 on a point to point bus G06F13/4247, G06F13/4282 take precedence
• CPC Class Codes: H04L 63/0263 Rule management
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 63/1425 Traffic logging, e.g. anomaly detection
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 63/205 involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved negotiation of communication capabilities H04L69/24
• CPC Class Codes: H04L 67/51 Discovery or management thereof, e.g. service location protocol [SLP] or web services
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal

Abstract

In an example, a security-connected platform is provided on a data exchange layer (DXL), which provides messaging on a publish-subscribe model. The DXL provides a plurality of DXL endpoints connected via DXL brokers. DXL endpoints communicate via DXL messages divided by topics. An asset management engine may be provided to use DXL messaging to query DXL endpoints so as to logically and physically map a network.

Claims

1. A domain services controller apparatus for a data exchange layer (DXL), comprising:

a hardware platform;

a network interface operable for communicatively coupling the domain services controller apparatus to the DXL;

first instructions to instruct the hardware platform to register the domain services controller apparatus with a DXL broker via the network interface, wherein the DXL broker is to provide a publish-subscribe fabric and brokered request-response communication over the publish-subscribe fabric via a private DXL topic;

instructions to instruct the hardware platform to provide an asset management engine operable for;

subscribing to a DXL location services topic;

receiving a DXL location services query from a DXL endpoint via the DXL location services topic;

providing network location data to the DXL endpoint via the DXL location services topic.

2. The apparatus of claim 1, wherein providing network location data comprises providing logical network location data.

3. The apparatus of claim 1, wherein providing network location data comprises providing physical network location data.

4. The apparatus of claim 1, wherein providing network location data comprises:

receiving information about a DXL client via a DXL query;

determining a logical location of the DXL client based on the information about the DXL client; and

publishing a DXL response comprising the logical location.

5. The apparatus of claim 4, wherein a topic of the DXL response is a private destination topic of the DXL client.

6. The apparatus of claim 1, wherein the asset management engine further comprises a physical network topology engine operable for mapping physical network locations.

7. The apparatus of claim 1, wherein the asset management engine is further operable to interoperate with a physical network topology engine operable for mapping physical network locations.

8. The apparatus of claim 1, wherein the asset management engine is further operable for:

subscribing to a DXL device detected topic;

receiving a DXL device detected message comprising an identifier for a detected device and an identifier for a broker for the detected device;

building a list of switches to the detected device; and

building a logical location of the detected device.

9. The apparatus of claim 8, wherein the asset management engine is further operable for publishing the logical location of the detected device as a detected device DXL message.

10. The apparatus of claim 1, wherein the asset management engine is operable for providing both logical and physical location services.

11. The apparatus of claim 10, wherein the asset management engine is operable for receiving manual user input for updating the location services.

12. The apparatus of claim 1, wherein the apparatus is further configured to act as a producer in a DXL producer-consumer architecture.

13. The apparatus of claim 1, wherein the apparatus is further configured to act as a producer of DXL location services messages.

14. One or more tangible, non-transitory computer-readable mediums having stored thereon first instructions for instructing a processor to register a domain services controller with a DXL broker via a network interface, wherein the DXL broker is to provide a publish-subscribe fabric and brokered request-response communication over the publish-subscribe fabric via a private DXL topic;

and

second instructions to instruct the processor to provide an asset management engine operable for;

subscribing to a DXL location services topic;

receiving a DXL location services query from a DXL endpoint via the DXL location services topic; and

providing network location data to the DXL endpoint via the DXL location services topic.

15. The one or more tangible, non-transitory computer-readable mediums of claim 14, wherein providing network location data comprises providing logical network location data.

16. The one or more tangible, non-transitory computer-readable mediums of claim 14, wherein providing network location data comprises providing physical network location data.

17. The one or more tangible, non-transitory computer-readable mediums of claim 14, wherein providing network location data comprises:

receiving information about a DXL client via a DXL query;

determining a logical location of the DXL client based on the information about the DXL client; and

publishing a DXL response comprising the logical location.

18. The one or more tangible, non-transitory computer-readable mediums of claim 17, wherein a topic of the DXL response is a private destination topic of the DXL client.

19. The one or more tangible, non-transitory computer-readable mediums of claim 14, wherein the asset management engine further comprises a physical network topology engine operable for mapping physical network locations.

20. The one or more tangible, non-transitory computer-readable mediums of claim 14, wherein the asset management engine is further operable to interoperate with a physical network topology engine operable for mapping physical network locations.

21. The one or more tangible, non-transitory computer-readable mediums of claim 14, wherein the asset management engine is further operable for:

subscribing to a DXL device detected topic;

receiving a DXL device detected message comprising an identifier for a detected device and an identifier for a broker for the detected device;

building a list of switches to the detected device; and

building a logical location of the detected device.

22. The one or more tangible, non-transitory computer-readable mediums of claim 21, wherein the asset management engine is further operable for publishing the logical location of the detected device as a detected device DXL message.

23. The one or more tangible, non-transitory computer-readable mediums of claim 14, wherein the asset management engine is operable for receiving manual user input for updating DXL location services.

24. A computer-implemented method of providing location services on a data exchange layer (DXL) comprising:

registering a domain services controller with a DXL broker via a network interface, wherein the DXL broker is to provide a publish-subscribe fabric and brokered request-response communication over the publish-subscribe fabric via a private DXL topic; and

providing an asset management engine operable for;

subscribing to a DXL location services topic;

receiving a DXL location services query from a DXL endpoint via the DXL location services topic; and

providing network location data to the DXL endpoint via the DXL location services topic.

25. The computer-implemented method of claim 24, further comprising:

subscribing to a DXL device detected topic;

receiving a DXL device detected message comprising an identifier for a detected device and an identifier for a broker for the detected device;

building a list of switches to the detected device; and

building a logical location of the detected device.