Virtual network generation system and method

• US 20020143960A1
• Filed: 12/04/2000
• Published: 10/03/2002
• Est. Priority Date: 08/02/2000
• Status: Abandoned Application

• Current Assignee: Emblaze-VCON Ltd. (Clearone Incorporated)
• Original Assignee: Emblaze-VCON Ltd. (Clearone Incorporated)
• Inventors: Salomon, Eyal, Haas, Yoram, Goren, Erez
• Application Number:
  US09/729,395
• Publication Number:
  US 20020143960A1
• Time in Patent Office: Days
• US Class Current: 709/229
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A virtual network generation system facilitates the dynamic establishment, maintenance and dissolution of private network communities (PNCs), which may include extended communication links between isolated and geographically dispersed wired and/or wireless electronic devices, as if the electronic devices were set in their own LAN. The virtual network generation system takes advantage of existing communication infrastructure, such as the Internet, Wide Area Networks (WANs), power-lines, telephone lines, and cable networks, and uses them as shared backbones providing dynamic PNC links. Electronic devices connected to the dynamic private network become virtual nodes relating to different PNCs.

Claims

1. A method of establishing a private network community (PNC) among a plurality of clients configured to be linked over one or more of a plurality of communication channels, said method comprising:

A. linking to a virtual network generation (VNG) system, having access to said communication channels, and establishing a set of PNC attributes, including establishing a set of client attributes associated with said clients and a set of network attributes;

B. accessing a VNG system data store including PNC information related to said plurality of clients and a plurality of network types;

C. authenticating each of said clients, as a function of said PNC information; and

D. establishing said PNC as a function of said set of PNC attributes, including designating a virtual PNC address for each of said clients and linking said clients as if they were connected via a LAN.

2. The method according to claim 1 wherein said plurality of clients is operated by a corresponding plurality of users and said data store includes identification information related to said plurality of users.

3. The method according to claim 1 wherein at least one of said plurality of clients is chosen from a group of network enabled devices comprising:

1) a personal computer;

2) a personal digital assistant;

3) a mobile cellular telephone;

4) a network appliance;

5) a digitally loadable music or video player;

6) an on-line video game; and

7) a home appliance.

4. The method according to claim 1 wherein at least one of said plurality of communication channels is chosen from a group comprising:

1) Internet;

2) a cable network;

3) metropolitan area networks (MAN);

4) a power-line network;

5) a telephone line;

6) a satellite link; and

7) wireless networks.

5. The method according to claim 1 wherein said client attributes include, for each client:

1) an identification attribute, identifying said client; and

2) a PNC address attribute, identifying a network location of said client.

6. The method according to claim 1 wherein said network attributes include:

1) a security management attribute, identifying a network security level to which said PNC must adhere.

7. The method of claim 1 further comprising:

E. selectively disestablishing said PNC in response to a termination event.

8. The method according to claim 7 wherein step E includes:

1) disassociating each of said designated addresses from said clients.

9. The method according to claim 7 wherein said termination event includes one of more of the following:

1) issuing a termination command by at least one of said clients to said VNG system;

2) detecting completion of a predefined set of tasks;

3) detecting a security violation; and

4) lapsing of a termination point in time.

10. The method according to claim 1 further comprising:

E. modifying said PNC attributes; and

F. modifying said client links as a function of said modified PNC attributes.

11. The method of claim 1, further comprising:

E. sending a packet across said PNC, from a first client to a second client, wherein said sending said packet includes;

1) grabbing a packet destined for the virtual network card;

2) identifying said packet;

3) wrapping said packet in a wrapper frame by said first client;

4) transmitting said packet from said first client and receiving said packet by said second client;

5) unwrapping said packet by said second client, and

6) injecting said packet into a networking driver interface system of said second client, as if said packet was received by a standard network card of said second client.

12. The method of claim 11 wherein sub-step 4) includes:

a) sending said packet to a VNG server of said VNG system; and

b) forwarding said packet by said VNG server to a set of destinations clients, including said second client, associated with said packet.

13. The method of claim 12, wherein said first client implements a first protocol and said second client implements a second protocol, and wherein sub-step 3 includes wrapping said packet in a frame compatible with said first protocol and sub-step b) includes:

i. unwrapping said packet; and

ii. re-wrapping said packet in a frame that is compatible with said second protocol.

iii. transmitting said re-wrapped packet to said second client.

14. The method of claim 11, wherein sub-step 3) includes compressing said message according to said network attributes and sub-step 5) includes decompressing of said message.

15. The method of claim 11, wherein sub-step 3) includes encrypting said message according to said network attributes and sub-step 5) includes decrypting said message.

16. The method of claim 1, wherein said VNG system includes a billing manager, said method further comprising:

E. monitoring usage of said PNC by said plurality of devices and generating, as a function of said usage, a corresponding usage bill.

17. The method of claim 1 wherein step B includes:

1) accessing a VNG system Web site.

19. A VNG system according to claim 18, further comprising:

D. a PNC termination manager, configured to selectively terminate said PNC in response to a termination event.

20. A VNG system according to claim 19 wherein said termination manager is configured to disassociate each of said designated addresses from said clients.

21. A VNG system according to claim 19 wherein said termination event includes at least one of the following:

1) issuing a termination command by at least one of said clients to said VNG system;

2) detecting completion of a predefined set of tasks;

3) detecting a security violation; and

4) lapsing of a termination point in time.

22. A VNG system according to claim 18 wherein said plurality of clients is operated by a corresponding plurality of users and said data store includes identification information related to said plurality of users.

23. A VNG system according to claim 18 wherein at least one of said plurality of clients is chosen from a group of network enabled devices comprising:

1) a personal computer;

2) a personal digital assistant;

3) a mobile cellular telephone;

4) a network appliance;

5) a digitally loadable music or video player;

6) an on-line video game; and

7) a home appliance.

24. A VNG system according to claim 18 wherein at least one of said plurality of communication channels is chosen from a group comprising:

1) Internet;

2) a cable network;

3) metropolitan area networks (MAN);

4) a power-line network;

5) a telephone line;

6) a satellite link; and

7) wireless networks.

25. A VNG system according to claim 18 wherein said client attributes include, for each client:

1) an identification attribute, identifying said client; and

2) a PNC address attribute, identifying a network location of said client.

26. A VNG system according to claim 18, further including:

D. a front end VNG system Web site.

27. A VNG system according to claim 18 wherein said network attributes include:

1) a security management attribute, identifying a network security level to which said PNC must adhere.

28. A VNG system according to claim 18 wherein said PNC manager includes configured to:

a) PNC attribute modifier; and

b) PNC client link modifier, configured to modify said client links as a function of a set of modified PNC attributes.

29. A VNG system according to claim 18, wherein each client in said PNC includes:

D. a client module configured to wrap packets to be transmitted in a wrapper frame, wherein said wrapper frame is compatible with at least one of said plurality of communication channels and a corresponding communication protocol.

30. A VNG system according to claim 18, wherein message traffic within said PNC is encrypted.

31. A VNG system according to claim 18, wherein said VNG processing device further includes a usage monitor configured to monitor usage of said PNC by said plurality of clients and generate corresponding usage information;

and

6) a billing manager, configured to generate a corresponding invoice, as a function of said usage information.

18. A virtual network generation (VNG) system configured to establish and manage a plurality of PNCs among a plurality of clients and over a plurality of communication channels, said VNG system comprising:

A. a data store including PNC information related to said clients and a plurality of network types;

B. a VNG processing device coupled to said data store, said VNG processing device including;

1) an authentication manager, configured to receive, store and selectively authenticate a PNC workgroup of clients from said plurality of clients, as a function of a client identification;

2) a PNC manager, configured to receive and store a set of PNC attributes related to a PNC to be established, wherein said PNC attributes identify the PNC workgroup and a set of PNC security requirements;

3) a PNC routing manager, configured to generate a PNC address for each client; and

4) a communication manager, configured to link said clients, as if they were connected via a LAN, as a function of said PNC attributes; and

C. a network interface system coupling said VNG processing device to at least one of said plurality of communication channels.