Method for geolocating logical network addresses

• US 20020087666A1
• Filed: 12/29/2000
• Published: 07/04/2002
• Est. Priority Date: 12/29/2000
• Status: Active Grant

• Current Assignee: Government Of The United States, As Represented By Dir. Nat. Security Agency, The Nsa General Counsel (Ip&T)
• Original Assignee: Government Of The United States, As Represented By Dir. Nat. Security Agency, The Nsa General Counsel (Ip&T)
• Inventors: Reifer, Michael Henry, Huffman, Stephen Mark
• Granted Patent: US 6,947,978 B2
• Time in Patent Office: Days
• US Class Current: 709/220
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 43/0852 Delays
• CPC Class Codes: H04L 61/00 Network arrangements, protocols or services for addressing or naming
• CPC Class Codes: H04L 61/50 Address allocation

Abstract

Method for geolocating logical network addresses on electronically switched dynamic communications networks, such as the Internet, using the time latency of communications to and from the logical network address to determine its location. Minimum round-trip communications latency is measured between numerous stations on the network and known network addressed equipment to form a network latency topology map. Minimum round-trip communications latency is also measured between the stations and the logical network address to be geolocated. The resulting set of minimum round-trip communications latencies is then correlated with the network latency topology map to determine the location of the network address to be geolocated.

Claims

1. A method for geolocating network equipment associated with a logical network address on a communications network, comprising the steps of:

measuring a network latency from a plurality of network stations to a plurality of network endpoints of known physical location by

pinging said network endpoints from said network stations multiple times over a calibration period,

determining round-trip propagation times between each of said network stations and each of said network endpoints over the calibration period from said pinging, and

setting the network latency for each combination of said network stations and said network endpoints to the corresponding minimum round-trip propagation time determined for each of said combination of said network stations and said network endpoints;

measuring the network latency from each of said network stations to said network equipment by

pinging said network equipment from said network stations,

determining the minimum round-trip propagation time between each of said network stations and said network equipment, and

setting the network latency between each of said network stations and said network equipment to the corresponding minimum round-trip propagation time determined;

for each of said network endpoints arranging the network latency from the network endpoint to each of said network stations in turn, in a particular order, as vector elements in an endpoint vector;

arranging the network latency from said network equipment to each of said network stations in turn, in said particular order, as vector elements in a network equipment vector;

determining a distance between the network equipment vector and each of the endpoint vectors; and

identifying the physical location of the network equipment as proximate to said known physical location of the network endpoint corresponding to the endpoint vector having said distance to the network equipment vector not greater than the distance from any other of the endpoint vectors to the target equipment vector.

3. A method for geolocating network equipment associated with a logical network address on a communications network as recited in claim 1, further comprising the additional step of determining if said distance to the network equipment vector not greater than the distance from any other of the endpoint vectors to the target equipment vector is within a user defined threshold.

4. A method for geolocating network equipment associated with a logical network address on a communications network as recited in claim 3, wherein said steps of:

measuring a network latency from a plurality of network stations to a plurality of network endpoints of known physical location;

measuring the network latency for each of said network stations to said network equipment;

for each of said network endpoints arranging the network latency from the network endpoint to each of said network stations in turn, in a particular order, as vector elements in an endpoint vector;

arranging the network latency from said network equipment to each of said network stations in turn, in said particular order, as vector elements in a network equipment vector; and

determining a distance between the network equipment vector and each of the endpoint vectors;

are repeated in iteration using additional of said network endpoints until said distance to the network equipment vector not greater than the distance from any other of the endpoint vectors to the target equipment vector is within said user defined threshold.

5. A method for geolocating network equipment associated with a logical network address on a communications network as recited in claim 3, wherein said steps of:

measuring a network latency from a plurality of network stations to a plurality of network endpoints of known physical location;

measuring the network latency for each of said network stations to said network equipment;

for each of said network endpoints arranging the network latency from the network endpoint to each of said network stations in turn, in a particular order, as vector elements in an endpoint vector;

arranging the network latency from said network equipment to each of said network stations in turn, in said particular order, as vector elements in a network equipment vector; and

determining a distance between the network equipment vector and each of the endpoint vectors;

are repeated in iteration using a different set of said network endpoints until said distance to the network equipment vector not greater than the distance from any other of the endpoint vectors to the target equipment vector is within said user defined threshold.

6. A method for geolocating network equipment associated with a logical network address on a communications network as recited in claim 3, wherein said steps of:

measuring a network latency from a plurality of network stations to a plurality of network endpoints of known physical location;

for each of said network endpoints arranging the network latency from the network endpoint to each of said network stations in turn, in a particular order, as vector elements in an endpoint vector;

arranging the network latency from said network equipment to each of said network stations in turn, in said particular order, as vector elements in a network equipment vector; and

determining a distance between the network equipment vector and each of the endpoint vectors;

are repeated in iteration until said distance to the network equipment vector not greater than the distance from any other of the endpoint vectors to the target equipment vector is within said user defined threshold.

7. A method for geolocating network equipment associated with a logical network address on a communications network as recited in claim 3, wherein said steps of:

measuring the network latency for each of said network stations to said network equipment;

arranging the network latency from said network equipment to each of said network stations in turn, in said particular order, as vector elements in a network equipment vector; and

determining a distance between the network equipment vector and each of the endpoint vectors;

are repeated in iteration until said distance to the network equipment vector not greater than the distance from any other of the endpoint vectors to the target equipment vector is within said user defined threshold.

8. A method for geolocating network equipment associated with a logical network address on a communications network as recited in claim 1, wherein said calibration period extends to all previous measuring of said network latency.

9. A method for geolocating network equipment associated with a logical network address on a communications network as recited in claim 1, wherein said calibration period extends back only a user determined amount of time.

10. A method for geolocating network equipment associated with a logical network address on a communications network as recited in claim 1, wherein said communications network is the Internet.

11. A method for geolocating network equipment associated with a logical network address on a communications network as recited in claim 1, wherein said steps of:

measuring a network latency from a plurality of network stations to a plurality of network endpoints of known physical location; and

for each of said network endpoints arranging the network latency from the network endpoint to each of said network stations in turn, in a particular order, as vector elements in an endpoint vector;

are performed based on particular sets of user defined external factors and also further comprising the additional step of saving said arranged endpoint vector.

2. A method for verifying that the geolocation of network equipment associated with a logical network address on a communications network is consistent with network equipments associated with vetted geolocations, comprising the steps of:

measuring a network latency from a plurality of network stations to at least one piece of network equipment associated with vetted geolocations by

pinging each of said network equipments associated with vetted geolocations from said network stations multiple times over a calibration period,

determining round-trip propagation times between each of said network stations and each of said network equipments associated with vetted geolocations over the calibration period from said pinging, and

setting the network latency for each combination of said network stations and said network equipments associated with vetted geolocations to the corresponding minimum round-trip propagation time determined for each of said combination of said network stations and said network equipments associated with vetted geolocations;

measuring the network latency from each of said network stations to said network equipment by

pinging said network equipment from said network stations,

determining the minimum round-trip propagation time between each of said network stations and said network equipment, and

setting the network latency between each of said network stations and said network equipment to the corresponding minimum round-trip propagation time determined;

for each of said network equipments associated with vetted geolocations arranging the network latency from each of said network equipments associated with vetted geolocations to each of said network stations in turn, in a particular order, as vector elements in a vetted equipment vector;

arranging the network latency from said network equipment to each of said network stations in turn, in said particular order, as vector elements in a network equipment vector;

determining a distance between the network equipment vector and each of the vetted equipment vectors; and

determining if the physical location of the network equipment is proximate to one of said network equipments associated with vetted geolocations.