Configurable Modular Networking System and Method Thereof

• US 20070168499A1
• Filed: 07/07/2006
• Published: 07/19/2007
• Est. Priority Date: 07/07/2005
• Status: Abandoned Application

• Current Assignee: Acenet Technology Incorporated
• Original Assignee: Acenet Technology Incorporated
• Inventors: Chu, Jing-Long
• Application Number:
  US11/456,185
• Publication Number:
  US 20070168499A1
• Time in Patent Office: Days
• US Class Current: 709/224
• CPC Class Codes: G06F 21/629 to features or functions of an application
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

In one embodiment according to the principle of this present invention, a communication IC embeds a plurality of network function modules; at least one hardware module interface provides a plurality of interfaces where a plurality of hardware modules can be coupled, said hardware modules comprise secret keys corresponding to their functionalities: a second memory device stores a plurality of software modules and at least one software key, said software key corresponds to at least one function of said software modules: a general network module couples to said bus and comprises general module key corresponding to their functionalities in the system: and/or a first memory device stores at least one hardware key, said hardware key corresponds to at least one of said network function modules. By varying the combination of said hardware modules, network function modules, general module key, and software modules that are configured and enabled or disabled by said secret keys, hardware key, general module and software key, the network may expand or contract according to the need of a networking environment on a single platform.

Claims

1. A configurable modular networking system is a network appliance system that not only configured by the embedded software or keys but also the keys from any of physically plugged in module. Where, said key is the short information pre-stored in the non-vaporized memory such as flash memory of system and/or physically plugged-in modules before system power up and used to determine the system functions by configuring part or whole of the network appliance system including physically plugged-in modules. Such configuration technology is called, by AceNet, as Deterministic Notification Attachment (DNA) Technology.

2. The keys, which could be encrypted, of those physically plugged-in modules and/or said system can be updated through internet.

3. A configurable modular networking system, comprising:

at least one CPU coupling to a bus, said CPU being adapted to manage said networking system;

at least one communication IC coupling to said bus, said communication IC being adapted for embedding a plurality of network function modules;

at least one hardwaremodule interface coupling to said communication IC, said hardware module interface being adapted to provide a plurality of interfaces where a plurality of hardware modules can be coupled, each of said hardware modules comprising at least one secret key;

wherein said hardware modules can be configured by said secret keys; and

a first memory device which is either embedded in the system or a physically plugged in hardware key module couples, directly or indirectly, to said communication IC and/or said CPU (through said bus). Said first memory device being adapted to store at least one hardware key, each of said keys corresponds to at least one of said network function modules and/or any other software modules in the whole system and enables the corresponding network function modules and/or said software modules in the whole system.

4. The configurable modular networking system of claim 3 further comprises:

a second memory device coupling to said CPU, said second memory device being adapted to store a plurality of software modules and at least one software key, each of said software keys corresponds to at least one of said software modules and enables the corresponding software modules.

5. The configurable modular networking system of claim 4 further comprises:

at least one general network module can be coupled to said bus of claim 3, each general network module comprising at least one general module key,

wherein said general network modules can be configured by said general module keys.

6. The configurable modular networking system of claim 4 further comprises:

Said bus could be a standard CPU bus such as PCI bus, PCI-express, CPCI bus, SP13 bus, etc.

7. The combination of said secret keys of claim 3, said hardware keys of claim 3, said general module keys of claim 5 and said software keys of claim 4, may also configure the software modules of claim 4, hardware modules of claim 3, general network module of claim 5 and/or network function modules of claim 3. The priority and configuring rules of said keys above can be determined in advance.

8. The configurable modular networking system of claim 7 further comprises:

each of said software keys of claim 4 may further corresponds to at least one of said hardware modules, said software modules, said general network modules and/or said network function modules;

each of said general module keys of claim 5 may further corresponds to at least one of said hardware modules, said software modules, said general network modules and/or said network function modules;

each of said hardware keys of claim 3 may further corresponds to at least one of said hardware modules, said software modules, said general network modules and/or said network function modules; and

each of said secret keys of claim 3 may further corresponds to at least one of said hardware modules, said software modules, said general network modules and/or said network function modules;

such that

each of said software modules, network function modules, general network modules and hardware modules is enabled and configured while at least one corresponding software key, one corresponding hardware key, general module key and/or one corresponding secret key are presented and valid in the system.;

9. The configurable modular networking system of claim 5 further comprises:

Each of said software modules, network function modules, general network modules and hardware modules could be added to said system as necessary and be enabled or disabled according to at least one of th said software keys, hardware keys, general module keys and/or secret keys in said system.

10. The configurable modular networking system of claim 3, wherein said hardware module interface may be implemented with a group of interfaces, a bus bridge chip, a switch chip or a switching fabric.

11. The configurable modular networking system of claim 4, wherein the corresponding tirmware and/or driver information of said hardware modules can be embedded in said communication IC.

12. The configurable modular networking system of claim 9, wherein an interface within a plurality of access interfaces is coupled to said communication IC, said interface is adapted to couple to a network and transmit packets to said network and receive packets from said network.

13. The configurable modular networking system of claim 3, wherein said communication IC can be networking ASIC chipsets.

14. The configurable modular networking system of claim 9, wherein each of said software keys, said hardware keys, said general module keys and said secret keys may be time expiring and/or encrypted.

15. The configurable modular networking system of claim 9, wherein said hardware modules, general network modules can be selected from a group comprising:

a Wireless LAN module, said Wireless LAN module being adapted to provide a wireless access interface which transmits packets to and receives packets from said wireless network;

an optical fiber module, said optical fiber module being adapted to provide an optical fiber access interface which transmits packets to and receives packets from said network;

an Ethernet access module, said optical fiber module being adapted to provide an Ethernet access interface which transmits packets to and receives packets from said network;

a network expansion module with Ethernet access interface, wireless access interface, optical fiber interfaces and/or any other network interfaces, said network expansion module being adapted to provide access interfaces which transmits packets to and receives packets from said network;

a content filter module, said content fiber module is adapted to provide analysis and isolation as well as further operation of packets according to their content;

a virtual private network module, said virtual private network module being adapted to implement a virtual private network.; and

a second CPU module, said second CPU module being adapted to implement any other functions.

16. The configurable modular networking system of claim 9, wherein one or more co-processor may be coupled to said CPU to assist said CPU managing said networking system.

17. The configurable modular networking system of claim 9, wherein said network function modules embedded in said communication IC comprises at least one of the following:

Firewall, Application Firewall, VPN, DoS/DDoS prevention, IDS/IPS, Content Security, Policy-based AAA (Authorization, Authentication, Accounting), Anti-Virus, Anti-Spam, URI blocking, WLAN Security, NAT/NAPT, Policies, policy-based subscriber authorization and authentication, bandwidth management, multi-ISP supporting, switching and routing, flow control, flow monitoring, load balancing, QoS, customization of billing policy based on service, wire-speed layer two to layer four switching/policy routing, rate control, multi-policy of QoS, flow classification, flow control/management, session rate control/management, multicast routing, policy routing and redirection, and remote monitoring.

18. A method of configuring the networking system of claim 9, comprising the following steps:

coupling the modules to the system as necessary;

searching all the keys including said secret keys, said hardware keys, said general module keys and said software keys;

configuring said software modules, networking function modules, general network modules and hardware modules according to said software keys, hardware keys, general module keys and secret keys.; and

enabling said software modules, networking function modules, general network modules and hardware modules according to said software keys, hardware keys, general module keys and secret keys.

19. A method of configuring the networking system of claim 18, comprising the priority and operations among said software keys, hardware keys, general module keys and secret keys.

20. The configurable modular networking system of claim 9 comprising that the physically plugged-in module of said system could be, on a single physical board, the single or composition of said first memory device, said hardware module, said general network module and said second memory device.

21. A networking platform, comprising:

a system core managing the operation of said platform;

a network chipset providing a plurality of networking functions;

a first backplane coupling to said system core, said first backplane being adapted to deliver information from said system core to said network chipset and vice versa; and

at least one key which said system core enables or disables said networking functions according to all keys coupling to said platform.

22. The networking platform according to claim 21, wherein said first backplane further providing a plurality of interfaces such that a plurality of standard modules is able to be coupled to said platform.

23. The networking platform according to claim 21, further comprises a second backplane coupling to said network chipset, said second backplane provides a plurality of interfaces such that a plurality of traffic interface modules are able to be coupled to said platform and provide different types of network traffic interfaces.

24. The networking platform according to claim 23, wherein each of said traffic interface modules comprises at least one key such that said system core enables or disables said networking functions according to all keys coupling to said platform.

25. The networking platform according to claim 21 further comprising a third backplane coupling to said network chipset and/or said first backplane such that a plurality function modules may be coupled to said system platform, said function modules compensate the insufficiency of the capability of said network chipset.

26. The networking platform according to claim 25, wherein each of said function modules comprises at least one key such that said system core enables or disables said networking functions according to all keys coupling to said platform.

27. A method of configuring a modular networking system with at least one key which stores configuration information comprising:

searching keys stored in a networking platform for said configuration information;

searching keys stored in all modules for configuration information; and

configuring said modular networking system according to found configuration data.

28. The method of claim 27, said networking platform comprises:

a first backplane providing interfaces for at least one hardware key module being able to couple to said system;

a second backplane providing interfaces for at least one traffic interface module being able to couple to said system; and

a third backplane providing interfaces for at least one function module being able to couple to said system;

wherein;

said hardware key module, said traffic interface module and said function module are capable of storing at least one said key.