METHOD FOR MANAGING SERVICES ON A NETWORK

• US 20130268648A1
• Filed: 12/21/2011
• Published: 10/10/2013
• Est. Priority Date: 12/21/2010
• Status: Active Grant

• Current Assignee: Thales Communication & Security S.A.S. (Thales SA), Thales SA
• Original Assignee: Thales SA
• Inventors: Leleu, Philippe Gerard Augustin, Chazal, Florian
• Granted Patent: US 9,781,017 B2
• Time in Patent Office: Days
• US Class Current: 709/223
• CPC Class Codes: G06F 9/4856 resumption being on a different machine, e.g. task migration, virtual machine migration G06F9/5088 takes precedence
• CPC Class Codes: G06F 9/5044 considering hardware capabilities
• CPC Class Codes: G06F 9/505 considering the load
• CPC Class Codes: G06F 9/5055 considering software capabilities, i.e. software resources associated or available to the machine
• CPC Class Codes: H04L 41/5077 wherein the managed service relates to simple transport services, i.e. providing only network infrastructure
• CPC Class Codes: H04L 63/1433 Vulnerability analysis
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 67/62 Establishing a time schedule for servicing the requests
• CPC Class Codes: H04L 69/28 Timers or timing mechanisms used in protocols
• CPC Class Codes: H04L 69/40 for recovering from a failure of a protocol instance or entity, e.g. service redundancy protocols, protocol state redundancy or protocol service redirection management of faults, events, alarms or notifications in data switching networks H04L41/06

Abstract

The invention relates to a method for managing services on a network, comprising: at least two interconnected computer sites, each of which is capable of implementing at least one service that can be accessed from the network; at least one service implemented on a network site; a means for transferring a service from an initial site to a separate destination site. Each is associated with security attributes and the method includes transferring at least one service from an initial site to a destination site of the network following a predetermined transfer sequence which depends on the security attributes.

Claims

1. A method for managing services on a network, including:

at least two interconnected computer sites, each of which is capable of implementing at least one service that can be accessed from the network;

at least two interconnected computer sites, each of which is capable of implementing at least one service that can be accessed from the network;

a means for transferring a service from an initial site to a separate destination site;

wherein it comprises transferring at least one service from an initial site to a destination site of the network according to a predetermined transfer sequence which depends on the security attributes.

2. The method according to claim 1, wherein the security attributes include one or more parameters among a criticality level of the service, a minimum transfer frequency, a maximum transfer frequency, an acceptable risk level, and a transfer time range.

3. The method according to claim 1, wherein it includes, for each transfer, a step of choosing the destination site as a function of a predefined rule.

4. The method according to claim 2, wherein it includes, for each transfer, a step of choosing the destination site as a function of a predefined rule.

5. The method according to claim 3, wherein each site is associated with security characteristics and the step of choosing the destination site includes a step of choosing potential destination sites as a function of the security characteristics of the sites making up the network and a step of choosing the destination site among the potential destination sites.

6. The method according to claim 4, wherein each site is associated with security characteristics and the step of choosing the destination site includes a step of choosing potential destination sites as a function of the security characteristics of the sites making up the network and a step of choosing the destination site among the potential destination sites.

7. The method according to claim 5, wherein the security characteristics include one or more of the characteristics among the available resources of the site, the physical and logic risk level of the site, and the quality of the network for accessing the site.

8. The method according to claim 6, wherein the security characteristics include one or more of the characteristics among the available resources of the site, the physical and logic risk level of the site, and the quality of the network for accessing the site.

9. The method according to claim 5, wherein the step of choosing the destination site includes a phase of randomly choosing among the network sites.

10. The method according to claim 6, wherein the step of choosing the destination site includes a phase of randomly choosing among the network sites.

11. The method according to claim 7, wherein the step of choosing the destination site includes a phase of randomly choosing among the network sites.

12. The method according to claim 5, wherein the transfer sequence depends on the security characteristics of the site on which the service is implemented.

13. The method according to claim 6, wherein the transfer sequence depends on the security characteristics of the site on which the service is implemented.

14. The method according to claim 7, wherein the transfer sequence depends on the security characteristics of the site on which the service is implemented.

15. The method according to claim 8, wherein the transfer sequence depends on the security characteristics of the site on which the service is implemented.

16. The method according to claim 9, wherein the transfer sequence depends on the security characteristics of the site on which the service is implemented.

17. The method according to claim 10, wherein the transfer sequence depends on the security characteristics of the site on which the service is implemented.

18. The method according to claim 11, wherein the transfer sequence depends on the security characteristics of the site on which the service is implemented.

19. A network including:

at least two interconnected computer sites each capable of implementing a service accessible from the network;

at least one service implemented on a network sites;

a means for transferring a service from an initial site to a different separate site;

wherein each service is associated with security attributes and in that the means for transferring at least one service from an initial site to a destination site of the network is capable of performing the transfer following a predetermined transfer sequence that depends on the security attributes by implementing a service management method according to claim 1.

20. The network according to claim 19, wherein each site includes a supervision unit capable of hosting a service on the site and transferring it to another site according to said transfer sequence.