Dynamic reconfigurable embedded compression common operating environment

• US 20070291791A1
• Filed: 06/16/2006
• Published: 12/20/2007
• Est. Priority Date: 06/16/2006
• Status: Abandoned Application

• Current Assignee: The Boeing Co.
• Original Assignee: The Boeing Co.
• Inventors: King, Jeffrey G., King, Thomas G., English, Kent L.
• Application Number:
  US11/454,461
• Publication Number:
  US 20070291791A1
• Time in Patent Office: Days
• US Class Current: 370/469
• CPC Class Codes: H04L 45/00 Routing or path finding of packets in data switching networks routing or path finding in wireless networks H04W40/00
• CPC Class Codes: H04L 45/302 Route determination based on requested QoS
• CPC Class Codes: H04L 45/52 Multiprotocol routers
• CPC Class Codes: H04L 45/54 Organization of routing tables
• CPC Class Codes: H04L 45/56 Routing software

Abstract

Dynamically reconfigurable middleware is embedded in hardware form in communication network platforms to implement network security policies, exploit data and increase data throughput, especially in mobile ad hoc environments. The hardware includes a quality of service manager for receiving data from the network and prioritizing the data according to predetermined classes of data service. An embedded security manager authenticates data received from the network based on a predetermined security policy and allows only that data to reach applications running on the platform that has been authenticated. A data exploitation manager detects receipt at the platform of predetermined types of data of interest to the platform. Routing tables are provided for determining the routing of the data to a destination, and a protocol engine is employed to specify the protocol to be used in routing the data.

Claims

1. Network platform interface hardware, comprising:

a quality of service manager for receiving data from the network and prioritizing the received data according to predetermined classes of data service;

a security manager for authenticating data received from the network based on a predetermined security policy and allowing only that data to pass through the platform that has been authenticated; and

,

a data exploitation manager for detecting receipt at the platform of predetermined types of data of interest to the platform.

2. The network platform interface hardware of claim 1, further comprising:

routing tables coupled with the quality of service manager for determining the routing of the data to a destination; and

a protocol engine coupled with the routing tables for specifying the protocol to be used in routing the data.

3. The network platform interface hardware of claim 1 further comprising an interface description language engine coupled with the security manager for changing the form of the presentation of the data authenticated by the security manager.

4. The network platform interface hardware of claim 1, further comprising a memory for storing a table of rules used to determine routing of the data at the platform.

5. The network platform interface hardware of claim 1, further comprising a circuit coupled with the security manager and containing security protocols governing access of data to the platform.

6. The network platform interface hardware of claim 1, further comprising an XML parser coupled with the data exploitation manager for parsing data received in XML format.

7. The network platform interface hardware of claim 1, further comprising:

a software application program for performing operations using the data received at platform from the network; and

an application programming interface connected between the software application program and the combination of the quality of service manager, the security manager and the data exploitation manager.

8. The network platform interface hardware of claim 1, wherein the quality of service manager, the security manager and the data exploitation manager are embedded in a field programmable gate array.

9. In a data communication network running distributed software over platforms defining nodes in the network, data processing hardware at each of the platforms, comprising:

a security manager for authenticating data received at the platform from the network based on a predetermined security policy and allowing only that data to pass through to the application software platform that has been authenticated.

10. The data processing hardware of claim 9, further comprising a quality of service manager for receiving data from the network and prioritizing the received data according to predetermined classes of data service.

11. The data processing hardware of claim 9, further comprising a data exploitation manager for detecting receipt at the platform of predetermined types of data of interest to the platform.

12. The data processing hardware of claim 11, further comprising a quality of service manager for receiving data from the network and prioritizing the received data according to predetermined classes of data service.

13. The data processing hardware of claim 12, wherein the security manager, the quality of service manager and the data exploitation manager are embedded in a programmable device.

14. The data processing hardware of claim 13, wherein the programmable device is a field programmable gate array.

15. The data processing hardware of claim 10, further comprising:

routing tables coupled with the quality of service manager for determining the routing of the data to a destination; and

a protocol engine coupled with the routing tables for specifying the protocol to be used in routing the data.

16. The data processing hardware of claim 9, further comprising an interface description language engine for receiving and changing the data from the security manager.

17. The data processing hardware of claim 13, further comprising a memory for storing a table of rules used to determine routing of the data at the platform.

18. The data processing hardware of claim 11, further comprising an XML parser coupled with the data exploitation manager for parsing data received at the platform in XML format.

19. A method of processing data received at a hardware platform forming a node in a data communication network, comprising the steps of:

(A) receiving data at the platform from the network;

(B) authenticating the data received in step (A) based on a predetermined security policy;

(C) detecting receipt at the platform of predetermined types of data; and

(D) passing only that data to a software application running on the platform that has been authenticated in step (B) and detected in step (C).

20. The method of claim 19, further comprising the step of:

(E) embedding the security policy in a circuit at the platform.

21. The method of claim 19, further comprising the steps of:

(E) embedding routing tables in a circuit at the platform; and

,

(F) routing the data received in step (A) to a destination based on the routing tables embedded in step (E).

22. The method of claim 19, further comprising the step of:

(E) storing the security policy in a software application at the platform, and

wherein step (B) includes authorizing data received in step (A) to access a software application running on the platform based on the security policy stored in step (E).

23. The method of claim 19, further comprising the step of:

(E) prioritizing the data received in step (A) according to predetermined classes of data service.

24. The method of claim 23, further comprising the step of:

(F) embedding security protocols in a circuit at the platform that enforce the security policy.

25. The method of claim 19, further comprising the step of:

(E) prioritizing the data received in step (A) according to predetermined classes of data service.

26. The method of claim 25, further comprising the step of:

(F) embedding a quality of service manager in a circuit at the platform, and

wherein the quality of service manager performs the prioritizing in step (E).

27. The method of claim 19, further comprising the step of:

(E) embedding a data exploitation manager in a circuit at the platform, and

wherein the data exploitation manager performs the detecting of step (C).

28. The method of claim 19, wherein steps (B) and (C) are performed within a field programmable gate array.

29. The method of claim 19, including the step of:

(E) programming a circuit at the platform to perform steps (B) and (C).