ATM virtual private networks

• US 6,078,586 A
• Filed: 08/03/1998
• Issued: 06/20/2000
• Est. Priority Date: 08/03/1998
• Status: Expired due to Term

• Current Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Original Assignee: MCI Communications Corporation (Verizon Communications Inc.)
• Inventors: Dugan, Andrew J., McDysan, David E.
• Primary Examiner(s): Pham, Chi H.
• Assistant Examiner(s): NGUYEN, STEVEN H D
• Application Number:
  US09/128,495
• Time in Patent Office: 687 Days
• Field of Search: 370/395, 370/397, 370/399, 370/408, 370/409, 370/410, 370/426, 370/522, 370/230, 370/231, 370/236, 370/252, 370/400, 370/401, 379/230, 379/231, 379/370, 379/379
• US Class Current: 370/395.2
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 2012/5621 Virtual private network [VPN]; Private-network - network-interface (P-NNI)
• CPC Class Codes: H04L 2012/563 Signalling, e.g. protocols, reference model
• CPC Class Codes: H04Q 11/0478 Provisions for broadband connections

Abstract

A network architecture and service platform for providing virtual private network services ("VPN") over an ATM network. The architecture provides services for voice, video, and data traffic among multiple VPN customers over a shared ATM network by implementing intelligent control devices to perform enhanced processing of ATM call setup messages, including validations and routing translations. Hierarchical routing mechanisms provided by ATM, along with customized customer addressing schemes, are used to overlay customer VPNs as higher-level networks onto the shared ATM network. The control devices translate customer ATM VPN address to internal ATM network addresses. The ATM switch network then performs lower-level network processing, using internal network addressing, to setup a virtual connection for a VPN call. The intelligent control devices may also explicitly state the end-to-end route.

Claims

1. A system for providing virtual private network services over an ATM network shared by multiple users, said ATM network having a plurality of ATM switches interconnected by links, each ATM switch adapted for routing ATM call traffic within said public ATM network, said system comprising:

an interface means for generating a call setup message associated with a private network call to be routed within said public ATM network, said setup message comprising information including original source address of a call initiator and an original destination address of a call recipient subscribed to said private network;

a processing network having intelligence and including control processing nodes interconnected with one or more ATM switches of said public ATM network;

means implemented in said ATM switch for receiving said setup message and for modifying said setup message to include an address of a said control processing node while embedding said original source and destination addresses within said modified setup message; and

means for routing said modified setup message from an ATM switch to a proximate control processing node at said address specified in said modified setup message,

said control processing node comprising means for converting said embedded original source and destination addresses of said modified setup message into ATM network addresses recognizable by said ATM switches and routing said modified setup message back to said ATM switch for enabling said private network call to be routed over said public ATM network, and means for validating said embedded original source and destination addresses of said modified setup message.

2. The system as claimed in claim 1, wherein said means for modifying said setup message includes means for inserting an address of any control processing node in said processing network.

3. The system as claimed in claim 1, wherein said means for routing said modified setup message from an ATM switch to a control processing node includes routing said modified setup message through one or more intermediate ATM switches.

4. The system as claimed in claim 1, wherein said control processing node further includes means for appending to said modified setup message a designated transit list specifying a specific route for said private network call through said public ATM network.

5. The system as claimed in claim 1, wherein said control processing node including means for returning said modified setup message back to an ATM switch for routing said call through said public network includes a crankback mechanism.

6. The system as claimed in claim 1, wherein said control processing node includes means for performing enhanced call processing features, said means for validating including means for determining whether enhanced call feature processing is to be performed.

7. The system as claimed in claim 1, wherein said ATM network addresses recognizable by said ATM switches includes an address of a terminating ATM switch connected with said call recipient, said modified setup message being routed to said terminating switch.

8. The system as claimed in claim 7, wherein said terminating ATM switch extracts said embedded original source and destination addresses enabling completion of a call setup for routing said call to said call recipient.

9. The system as claimed in claim 7, further including means implemented in said ATM switch for routing said modified setup message back to a said control processing node to re-route said modified setup message to said destination address via an alternate ATM switch.

10. The system as claimed in claim 1, wherein said means for modifying said setup message includes means for preventing allocation of bandwidth at said one or more intermediate ATM switches when routing said modified setup message to a control processing node through one or more intermediate ATM switches.

11. An apparatus for providing private network message routing services for multiple customers within a shared ATM network having a plurality of ATM switches interconnected by links, each ATM switch adapted for routing ATM call traffic within said shared ATM network in accordance with an ATM routing protocol, said apparatus comprising:

an interface means for generating a first setup message corresponding to a call initiated by a private network caller at a source location and routing said first setup message to a first ATM switch, said first setup message identifying a unique private network source address of said caller and a unique private network destination address of a call recipient;

means implemented in said originating ATM switch for converting said first setup message to a second setup message, said second message having said unique private network source address and said unique private network destination address included therein;

one or more intelligent control processing means interconnected with each ATM switch and adapted to receive said second setup message from an ATM switch, each control processing means for recognizing said unique private network source and destination address of said call and modifying said unique private network source and destination address in said second message into internal source and destination addresses recognizable by said ATM switches; and

means implemented in said control processing means for returning said modified second setup message back to said originating ATM switch, said ATM routing protocol setting up a signal path for routing said ATM call between said private network caller and said recipient, said control processing means further comprising means for validating said unique private network source and destination addresses associated with said caller.

12. The apparatus as claimed in claim 11, wherein said ATM routing protocol is a hierarchical message routing scheme.

13. The apparatus as claimed in claim 11, wherein said ATM routing protocol functions in accordance with a PNNI protocol.

14. The apparatus as claimed in claim 11, wherein said validating means includes means for accessing valid private network source and destination addresses associated with said caller and comparing them with said private network source and destination addresses included in said second setup message.

15. The apparatus as claimed in claim 13, wherein said means implemented in said control processing means for returning said modified second setup message back to said first ATM switch includes a crankback mechanism implemented in PNNI.

16. The apparatus as claimed in claim 11, wherein said means implemented in said control processing means for returning said modified second setup message back to said first ATM switch includes a designated transit list specifying one or more switches interconnected for routing said ATM call within said shared ATM network.

17. The apparatus as claimed in claim 11, further including means enabling overflow call routing by determining alternate addresses when said modified second setup message cannot be routed through an ATM switch.

18. The apparatus as claimed in claim 11, wherein said interface means generates and routes said first setup message in accordance with a UNI standard protocol.

19. A method of providing private network message routing services for multiple customers within a shared ATM network having a plurality of ATM switches interconnected by links, each ATM switch adapted for routing ATM call traffic within said shared ATM network in accordance with an ATM routing protocol, said method comprising:

(a) generating a first setup message corresponding to a call initiated by a private network caller at a source location and routing said first setup message to a first ATM switch, said first setup message comprising a unique private network destination address of a call recipient;

(b) converting said first setup message to a second setup message having said unique private network source address and said unique private network destination address included therein;

(c) routing said second setup message from said ATM switch to one or more intelligent control processing means and interconnected with said ATM switch and adapted to recognize said unique private network source and destination address of said call;

(d) modifying said unique private network source and destination address included in said second message into internal source and destination addresses recognizable by said ATM switches, said step of modifying said second message further including the step of validating said unique private network source and destination addresses associated with said caller;

(e) returning said modified second setup message back to said originating ATM switch; and

enabling said ATM routing protocol to set up a signal path for routing said ATM call between said private network caller and said recipient based on said modified second setup message.

20. The method according to claim 19, wherein said enabling step (f) includes implementing a hierarchical message routing scheme for routing said ATM call between said private network caller and said recipient.

21. The method according to claim 20, wherein said hierarchical message routing scheme functions in accordance with an ATM PNNI protocol.

22. The method according to claim 19, wherein said validating step includes the steps of:

accessing valid private network source and destination addresses associated with said caller; and

comparing said valid private network source and destination addresses with said private network source and destination addresses contained in said second setup message.