System and method for interconnecting multiple virtual private networks

• US 7,072,964 B1
• Filed: 08/31/2000
• Issued: 07/04/2006
• Est. Priority Date: 08/31/1999
• Status: Active Grant

• Current Assignee: Anxebusiness Corporation (Open Text Corporation)
• Original Assignee: Science Applications International Corporation
• Inventors: Whittle, Bryan, Tesink, Kaj
• Primary Examiner(s): Meky, Moustafa M.
• Application Number:
  US09/653,201
• Time in Patent Office: 2,133 Days
• Field of Search: 709/200, 709/201, 709/203, 709/217, 709/218, 709/219, 709/220, 709/223, 709/224, 709/225, 709/226, 709/227, 713/200, 713/201
• US Class Current: 709/226
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 47/10 Flow control; Congestion control
• CPC Class Codes: H04L 47/18 End to end
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A system and method for interconnecting multiple VPNs, each using multiple service providers, while offering a minimum standard of end-to-end connection quality and reliability is described. The system and method utilizes an overseer that resolves end-to-end issues across multiple interconnected virtual private networks. When connecting multiple virtual private networks, multiple interconnect providers are interconnected so that the end-to-end service quality standard is met. The certification of service providers, exchange points, transit service providers and IPSec devices permits interoperability for encryption, integrity and authentication across the product of all IPSec vendors. When two subscribers both use certified IPSec equipment then they can provide each other with controlled access to each other'"'"'s networks.

Claims

1. A system of interconnecting a plurality of virtual private networks, the system comprising:

a plurality of virtual private networks, each of the virtual private networks having multiple service providers;

at least one interconnect provider configured to connect the plurality of virtual private networks; and

a global overseer configured to ensure end-to-end service quality across multiple ones of the plurality of virtual private networks,

wherein end-to-end service quality across multiple ones of the plurality of virtual private networks includes maintaining the number of multiple service providers below a maximum acceptable number between a first subscriber of one of the plurality of virtual private networks to a second subscriber of another of the plurality of virtual private networks.

2. A system of interconnecting a plurality of virtual private networks, the system comprising:

a plurality of virtual private networks, each of the virtual private networks having multiple service providers;

at least one interconnect provider configured to connect the plurality of virtual private networks; and

a global overseer configured to ensure end-to-end service quality across multiple ones of the plurality of virtual private networks,

wherein each of the plurality of virtual private networks comprises a program overseer configured to ensure end-to-end service quality across its corresponding virtual private network,

wherein each of the program overseers pays a fee to the global overseer for maintaining the global overseer and the at least one interconnect provider pays a fee to the global overseer for certification.

3. A method of interconnecting at least one interconnect provider between a plurality of virtual private networks to ensure end-to-end service quality across multiple ones of the plurality of virtual private networks, each of the virtual private networks having multiple subscribers, multiple service providers, and at least one exchange point interconnecting the plurality of multiple service providers, the method comprising steps of:

providing at least one interconnect provider disposed between a first set of the multiple service providers in one of the plurality of virtual private networks and a second set of the multiple service providers in a second one of the plurality of virtual private networks; and

providing a global overseer coupled to the at least one interconnect provider, wherein the global overseer is configured to ensure end-to-end service quality across multiple ones of the plurality of virtual private networks,

wherein the at least one interconnect provider is also one of the multiple service providers within at least one of the plurality of virtual private networks.

4. A method of interconnecting at least one interconnect provider between a plurality of virtual private networks to ensure end-to-end service quality across multiple ones of the plurality of virtual private networks, each of the virtual private networks having multiple subscribers, multiple service providers, and at least one exchange point interconnecting the plurality of multiple service providers, the method comprising steps of:

providing at least one interconnect provider disposed between a first set of the multiple service providers in one of the plurality of virtual private networks and a second set of the multiple service providers in a second one of the plurality of virtual private networks;

providing a global overseer coupled to the at least one interconnect provider, wherein the global overseer is configured to ensure end-to-end service quality across multiple ones of the plurality of virtual private networks; and

certifying the at least one interconnect provider by the global overseer.

5. A method of interconnecting at least one interconnect provider between a plurality of virtual private networks to ensure end-to-end service quality across multiple ones of the plurality of virtual private networks, each of the virtual private networks having multiple subscribers, multiple service providers, and at least one exchange point interconnecting the plurality of multiple service providers, the method comprising steps of:

providing at least one interconnect provider disposed between a first set of the multiple service providers in one of the plurality of virtual private networks and a second set of the multiple service providers in a second one of the plurality of virtual private networks; and

providing a global overseer coupled to the at least one interconnect provider, wherein the global overseer is configured to ensure end-to-end service quality across multiple ones of the plurality of virtual private networks,

wherein a maximum number of the multiple service providers between two of the multiple subscribers is two and the maximum number of the multiple service providers and the at least one interconnect provider between subscribers of different ones of the plurality of virtual private networks is three.