APPARATUS AND METHOD FOR CLOUD NETWORKING

• US 20130227673A1
• Filed: 10/19/2012
• Published: 08/29/2013
• Est. Priority Date: 02/27/2012
• Status: Abandoned Application

• Current Assignee: Electronics and Telecommunications Research Institute
• Original Assignee: Electronics and Telecommunications Research Institute
• Inventors: YOON, Seung Hyun
• Application Number:
  US13/655,867
• Publication Number:
  US 20130227673A1
• Time in Patent Office: Days
• US Class Current: 726/15
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

When a communication node receives a packet from a user terminal, the communication node inquires into a dynamic path mapping table and requests user authentication of the user terminal from a cloud networking control apparatus, if a VSI corresponding to information of the packet does not exist. If a user is an authenticated user, the cloud networking control apparatus performs provisioning of the VSI and transmits information of a VSI in which provisioning is performed to the communication node. After the VSI is set, the communication node connects the VSI to a virtual private network and transfers the packet to the VSI that is connected to the virtual private network.

Claims

1. A method of cloud networking that connects a user terminal to a cloud center through a virtual private network in a communication node, the method comprising:

receiving a packet from the user terminal;

determining whether a user of the user terminal is an authenticated user, when a virtual switch instance (VSI) corresponding to information of the packet does not exist at a dynamic path mapping table;

receiving, if the user of the user terminal is an authenticated user, information of the VSI from a cloud networking control apparatus;

connecting the VSI using the information of the VSI to the virtual private network; and

transferring the packet to the VSI that is connected to the virtual private network.

2. The method of claim 1, wherein the transferring of the packet comprises mapping the VSI to the information of the packet and storing the VSI at the dynamic path mapping table.

3. The method of claim 2, further comprising transferring, when a VSI corresponding to information of the packet exists at the dynamic path mapping table, the packet to the VSI.

4. The method of claim 1, wherein the determining of whether a user of the user terminal is an authenticated user comprises:

requesting the user'"'"'s authentication to the cloud networking control apparatus; and

receiving the user'"'"'s authentication result from the cloud networking control apparatus.

5. The method of claim 1, wherein the connecting of the VSI comprises connecting the VSI to a VSI that is set to another communication node of the virtual private network.

6. The method of claim 1, further comprising removing, if a user of the user terminal is not an authenticated user, the packet.

7. The method of claim 1, wherein the communication node comprises a router or a packet transmission switch.

8. A method of cloud networking that connects a user terminal to a cloud center through a virtual private network in a cloud networking control apparatus, the method comprising:

receiving, when a VSI corresponding to information of the packet does not exist at a dynamic path mapping table, an authentication request for a user of the user terminal from a communication node;

authenticating the user;

performing provisioning of a VSI to the communication node if the user is an authenticated user; and

performing provisioning of a path to the communication node in order for the communication node to connect the VSI to the virtual private network.

9. The method of claim 8, wherein the performing of provisioning of a path comprises calculating the path in consideration of a network resource and at least one VSI existing at the virtual private network.

10. The method of claim 8, further comprising transmitting information of the VSI to the communication node.

11. A cloud networking apparatus that connects a user terminal to a cloud center through a virtual private network, the cloud networking apparatus comprising:

a path inquiry unit that inquires whether a VSI corresponding to information of a packet exists at a dynamic path mapping table, when a packet is received from the user terminal, and that transfers the packet to the VSI corresponding to information of the packet;

an authentication unit that requests authentication of the user to the cloud networking apparatus, if a VSI corresponding to information of the packet does not exist at a dynamic path mapping table;

a VSI setting unit that receives the information of the VSI of the authenticated user from the cloud networking control apparatus and that sets the VSI and connects the VSI to the virtual private network; and

a path mapping unit that maps the set VSI to the information of the packet and that stores the VSI at the dynamic path mapping table.

12. The cloud networking apparatus of claim 11, wherein the VSI setting unit connects the set VSI to a VSI that is set to another communication node of the virtual private network through a tunnel.

13. The cloud networking apparatus of claim 11, wherein the cloud networking apparatus comprises a router or a packet transmission switch.