SECURE LOAD BALANCING IN A NETWORK

• US 20070214266A1
• Filed: 07/30/2004
• Published: 09/13/2007
• Est. Priority Date: 07/30/2004
• Status: Abandoned Application

• Current Assignee: Telefonaktiebolaget LM Ericsson
• Original Assignee: Telefonaktiebolaget LM Ericsson
• Inventors: Axelsson, Stefan, Boman, Krister, Hellberg, Jan
• Application Number:
  US11/572,159
• Publication Number:
  US 20070214266A1
• Time in Patent Office: Days
• US Class Current: 709/226
• CPC Class Codes: H04L 63/1458 Denial of Service
• CPC Class Codes: H04L 67/1001 for accessing one among a plurality of replicated servers
• CPC Class Codes: H04L 67/1023 based on a hash applied to IP addresses or costs

Abstract

The present invention relates to a system comprising at least two resources (3) and a hash function (4), which system is arranged for distributing external users (1) to the resources (3), where the number of users (1) is larger than the number of resources (3). Further, the system comprises means (5) for, at least to a part, creating a uniform distribution. Preferably, the uniformness of the distribution is created by means of an encryption algorithm (5). The present also elates to a method according to the above.

Claims

1. A system comprising at least two resources and a hash function, which system is arranged for distributing external users to the resources, where the number of users is larger than the number of resources, characterized in that the system further comprises means for, at least to a part, creating a uniform distribution.

2. A system according to claim 1, characterized in that the uniformness of the distribution is created by means of an encryption algorithm.

3. A system according to claim 2, characterized in that the encryption algorithm encrypts a unique user identification code or number and sends the cipher output to the hash function.

4. A system according to claim 3, characterized in that the hash function output is arranged to be linked to a certain resource.

5. A system according to claim 2, characterized in that the hash function is arranged to be fed at its input with a unique user identification code or number, and sends the hash function output to the encryption algorithm.

6. A system according to claim 5, characterized in that the cipher output is arranged to be linked to a certain resource.

7. A system according to claim 2, characterized in that the encryption algorithm is a part of the hash function, which hash function thus constitutes a so-called keyed hash function.

8. A system according to claim 1, characterized in that the users are pieces of mobile equipment handled by mobile equipment owners, and that the system is a mobile equipment system node, and where the resources are services provided at the mobile equipment system node.

9. A system according to claim 1, characterized in that the users are computers, where the system is a computer network, and where the resources are computer system resources to which the computers are directed.

10. A method for distributing external users to at least two resources in a system, where the number of users is larger than the number of resources, which method comprises the steps:

inputting a unique user identification code or number into the system; and

creating a uniform distribution of the users to the resources, where the distribution is accomplished by using a hash function.

11. A method according to claim 10, characterized in that the uniformness of the distribution is created by means of an encryption algorithm.

12. A method according to claim 11, characterized in that the encryption algorithm encrypts a unique user identification code or number and sends the cipher output to the hash function.

13. A method according to claim 12, characterized in that the hash function output is linked to a certain resource.

14. A method according to claim 11, characterized in that the hash function is fed at its input with the unique user identification code or number, and sends the hash function output to the encryption algorithm.

15. A method according to claim 14, characterized in that the cipher output is linked to a certain resource.

16. A method according to claim 11, characterized in that the encryption algorithm is a part of the hash function, which hash function thus constitutes a so-called keyed hash function.

17. A method according to claim 10, characterized in that the users are pieces of mobile equipment handled by mobile equipment owners, and that the system is a mobile equipment system node, and where the resources are services provided at the mobile equipment system node.

18. A method according to claim 10, characterized in that the users are computers, where the system is a computer network, and where the resources are computer system resources to which the computers are directed.