Scheduled network management

• US 9,015,302 B2
• Filed: 02/16/2011
• Issued: 04/21/2015
• Est. Priority Date: 02/16/2011
• Status: Active Grant

• Current Assignee: The Boeing Co.
• Original Assignee: The Boeing Co.
• Inventors: Howe, Wayne Richard
• Primary Examiner(s): Chriss, Andrew
• Assistant Examiner(s): MAK, PETER K
• Application Number:
  US13/028,610
• Publication Number:
  US 20120209971A1
• Time in Patent Office: 1,525 Days
• Field of Search: 709/223, 370412-418, 370/428
• US Class Current: 709/223
• CPC Class Codes: H04L 47/17 Interaction among intermediate nodes, e.g. hop by hop
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload

Abstract

A method and apparatus for managing a network. Signals are received from a plurality of time sources. A signal having a desired level of accuracy is selected from the signals. A reference time in the network is established using the signal. Data to be transmitted through the network is encrypted to form encrypted data. The encrypted data includes a number of encrypted headers and an encrypted body. A next node in the network is identified based on a destination for the encrypted data. A request is generated to reserve a number of time intervals for transmitting the encrypted data to the next node through the network. The encrypted data is transmitted in the network during the number of time intervals responsive to receiving an approval for the request from the next node.

Claims

1. An apparatus comprising:

a time management system configured to receive signals from a plurality of time sources, select a signal having a desired level of accuracy from the signals, and set a reference time in a network associated with the time management system using the signal;

a cryptography system configured to encrypt data to be transmitted through the network to form encrypted data wherein the encrypted data comprises a number of encrypted headers and an encrypted body;

a network reservation system configured to

identify a plurality of next nodes in the network based on a destination for the encrypted data,

wherein the plurality of next nodes are indirectly connected to a source node from which the encrypted data is sent to the destination via at least one other node, the destination being among the plurality of next nodes,

wherein the network reservation system is further configured to generate a request to reserve a number of time intervals with each of the plurality of next nodes for transmitting the encrypted data to the plurality of next nodes through the network,

wherein a time interval is a time between transmission of the encrypted data in the network using the reference time, and

wherein the network reservation system is further configured to selectively implement pre-reserved paths along the plurality of next nodes for transmitting the encrypted data; and

a network interface configured to transmit the encrypted data in the network during the number of time intervals responsive to receiving an approval for the request from the plurality of next nodes, and wherein the encrypted data is transmitted through the plurality of next nodes without decryption until the encrypted data arrives at the destination.

2. The apparatus of claim 1, wherein the time management system, the cryptography system, the network reservation system, and the network interface form the source node.

3. The apparatus of claim 2, wherein the plurality of next nodes are configured to receive the request to reserve the number of time intervals, determine whether the number of time intervals are available at the plurality of next nodes using a schedule, and send the approval for the request to the source node responsive to a determination that the number of time intervals are available at the plurality of next nodes.

4. The apparatus of claim 2, wherein when the request for the number of time intervals is sent to a next node by the source node, the source node also sends a request for another number of time intervals to a second next node.

5. The apparatus of claim 3, wherein the request is a first request and the number of time intervals is a first number of time intervals, and wherein the plurality of next nodes are further configured to determine whether a particular node in the plurality of next nodes is the destination responsive to receiving the request and generate a second request to transmit the encrypted data to an additional node in the plurality of next nodes during a second number of time intervals responsive to the determination that the particular next node is not the destination.

6. The apparatus of claim 5, wherein the plurality of next nodes are further configured to receive the encrypted data during the first number of time intervals and send the encrypted data to the additional node during the second number of time intervals without decrypting the encrypted data.

7. The apparatus of claim 1, wherein the encrypted data is encrypted such that the encrypted data does not have an unencrypted portion.

8. The apparatus of claim 1, wherein the plurality of time sources comprises a number of satellites and in being configured to receive the signals, the time management system is configured to identify a Doppler shift between transmissions of a satellite time signal from the number of satellites.

9. The apparatus of claim 1, wherein the data is first data and the network interface is further configured to transmit second data during the number of time intervals when the encrypted data is unavailable.

10. The apparatus of claim 1, wherein the plurality of time sources is selected from a global positioning system, an atomic clock, a vehicle, a local clock, and a number of network transmitters.

11. The apparatus of claim 1, wherein the plurality of next nodes include a first next node and further comprising:

an inconsistency management system configured to cause the network reservation system to identify a second next node in the plurality of next nodes based on the destination, further cause the network reservation system to generate a second request to reserve the number of time intervals for transmitting the encrypted data to the second next node when the network reservation system generates the request to reserve the number of time intervals for transmitting the encrypted data to the plurality of next nodes, receive a notification of an inconsistency in the network from the first next node, cause the network interface to cease transmitting the data to the first next node, and cause the network interface to transmit the data to the second next node during the number of time intervals responsive to receiving the notification of the inconsistency.

12. The apparatus of claim 1,

the time management system configured to

identify, from the signals, the signal with the desired level of accuracy that is an amount of specificity of the signal with respect to time, and

set the reference time using a signal with a highest accuracy of the plurality of time sources when multiple ones of the signals exceed the desired level of accuracy.

13. A method for managing a network comprising:

receiving signals from a plurality of time sources;

selecting a signal having a desired level of accuracy from the signals;

setting a reference time in the network using the signal;

encrypting data to be transmitted through the network to form encrypted data, wherein the encrypted data comprises a number of encrypted headers and an encrypted body;

identifying, by a network reservation system, a plurality of next nodes in the network based on a destination for the encrypted data, wherein the plurality of next nodes are indirectly connected to a source node from which the encrypted data is sent to the destination via at least one other node, the destination being among the plurality of next nodes;

generating, by the network reservation system, a request to reserve a number of time intervals with each of the plurality of next nodes for transmitting the encrypted data to the plurality of next nodes through the network, wherein a time interval is a time between transmission of the encrypted data in the network using the reference time and wherein pre-reserved paths for transmitting the encrypted data are selectively implemented; and

responsive to receiving an approval for the request from the plurality of next nodes, transmitting the encrypted data in the network during the number of time intervals through the plurality of next nodes without decryption until the encrypted data arrives at the destination.

14. The method of claim 13, wherein the steps of receiving, selecting, setting, encrypting, identifying, generating, and transmitting are performed by the source node.

15. The method of claim 14 further comprising:

receiving the request to reserve the number of time intervals;

determining whether the number of time intervals are available at the plurality of next nodes using a schedule; and

responsive to a determination that the number of time intervals are available at the next node, sending the approval for the request to the source node.

16. The method of claim 15, wherein the request is a first request and the number of time intervals is a first number of time intervals, and further comprising:

determining whether a particular node in the plurality of next nodes is the destination responsive to receiving the request; and

responsive to a determination that the particular node is not the destination, generating a second request to transmit the encrypted data to an additional node in the plurality of next nodes during a second number of time intervals.

17. The method of claim 16 further comprising:

receiving the encrypted data during the first number of time intervals; and

sending the encrypted data to the additional node during the second number of time intervals without decrypting the encrypted data.

18. The method of claim 13, wherein the encrypted data comprises a number of encrypted headers and an encrypted body.

19. The method of claim 13, wherein the encrypted data is encrypted such that the encrypted data does not have an unencrypted portion.

20. The method of claim 13, wherein the plurality of time sources comprises a number of satellites and receiving the signals identifying a Doppler shift between transmissions of a satellite time signal from the number of satellites.

21. The method of claim 13, wherein the data is first data and further comprising:

transmitting second data during the number of time intervals when the encrypted data is unavailable.

22. The method of claim 13, wherein the plurality of time sources is selected from a global positioning system, a vehicle, a local clock, an atomic clock, and a number of network transmitters.

23. The method of claim 13, wherein the plurality of next nodes includes a first next node and further comprising:

identifying a second next node among the plurality of next nodes in the network based on the destination;

generating a second request to reserve the number of time intervals for transmitting the encrypted data to the second next node when the network reservation system generates the request to reserve the number of time intervals for transmitting the encrypted data to the plurality of next nodes;

receiving a notification of an inconsistency in the network from the first next node;

ceasing to transmit the data to the first next node; and

transmitting the data to the second next node during the number of time intervals responsive to receiving the notification of the inconsistency.

24. An apparatus comprising:

a time management system configured to receive signals from a plurality of time sources, select a signal having a desired level of accuracy from the signals, and set a reference time for a source node in a network associated with the time management system using the signal;

a network reservation system configured to identify a plurality of next nodes associated with the source node based on a destination for data to be transmitted by the source node through the network, wherein the plurality of next nodes are indirectly connected to a source node from which the data is sent to the destination via at least one other node, the destination being among the plurality of next nodes, and wherein the network reservation system is further configured to generate a request to reserve a first number of time intervals with each of the plurality of next nodes for transmitting the data and a second number of time intervals with the each of the plurality of next nodes for receiving response data, wherein a time interval is a time between transmission of the data by the source node in the network using the reference time and wherein the network reservation system is further configured to selectively implement pre-reserved paths for transmitting the data;

a network interface configured to transmit the data during the first number of time intervals to a first next node in the plurality of next nodes responsive to receiving an approval for the request from the first next node; and

an inconsistency management system configured to identify an inconsistency in the network through the first next node in the plurality of next nodes, cause the network interface to cease transmitting the data to the first next node in the plurality of next nodes, and further cause the network interface to transmit the data to a second next node in the plurality of next nodes during the first number of time intervals responsive to identifying the inconsistency.

25. The apparatus of claim 24, wherein in being configured to identify the inconsistency in the network, the inconsistency management system is configured to receive a notification of the inconsistency from the first next node.

26. The apparatus of claim 24, wherein in being configured to identify the inconsistency in the network, the inconsistency management system is configured to transmit a plurality of messages to the plurality of next nodes and identify the inconsistency responsive to a number of acknowledgments to the plurality of messages not being received within a period of time.

27. The apparatus of claim 26, wherein the plurality of messages comprise a plurality of internet control message protocol messages and the number of acknowledgments comprise a number of internet control message protocol responses.

28. The apparatus of claim 24, wherein the inconsistency occurs with an additional node in the network that receives the data before the data arrives at the destination.

29. The apparatus of claim 24, wherein the source node and the first next node form a first portion of a first path for the data, and the source node and the second next node form a second portion of a second path for the data.

30. The apparatus of claim 24 further comprising:

a cryptography system configured to encrypt the data to form encrypted data prior to transmitting the data to the first next node such that the first next node receives the data and transmits the data to an additional node in the network without decrypting the data, wherein the encrypted data comprises a number of encrypted headers and an encrypted body such that all of the data is encrypted.

31. A method of managing an inconsistency in a network comprising:

receiving signals from a plurality of time sources;

selecting a signal having a desired level of accuracy from the signals;

setting a reference time for a source node in the network using the signal;

identifying a plurality of next nodes associated with the source node based on a destination for data to be transmitted by the source node through the network, wherein the plurality of next nodes are indirectly connected to a source node from which the data is sent to the destination via at least one other node, the destination being among the plurality of next nodes;

generating a request to reserve a first number of time intervals with each of the plurality of next nodes for transmitting the data and a second number of time intervals with the each of the plurality of next nodes for receiving response data, wherein a time interval is a time between transmission of the data by the source node in the network using the reference time and wherein pre-reserved paths for transmitting the data are selectively implemented;

transmitting the data during the first number of time intervals to a first next node in the plurality of next nodes responsive to receiving an approval for the request from the first next node; and

responsive to identifying the inconsistency in the network through the first next node in the plurality of next nodes, ceasing transmitting the data to the first next node in the plurality of nodes and transmitting the data to a second next node in the plurality of next nodes during the first number of time intervals.

32. The method of claim 31, wherein identifying the inconsistency in the network comprises:

receiving a notification of the inconsistency from the first next node.

33. The method of claim 31, wherein identifying the inconsistency in the network comprises:

transmitting a plurality of messages to the plurality of next nodes; and

responsive to a number of acknowledgments to the plurality of messages not being received within a period of time, identifying the inconsistency.

34. The method of claim 33, wherein the plurality of messages comprise a plurality of internet control message protocol messages and the number of acknowledgments comprise a number of internet control message protocol responses.

35. The method of claim 31, wherein the inconsistency occurs with an additional node in the network that receives the data before the data arrives at the destination.

36. The method of claim 31, wherein the source node and the first next node form a first portion of a first path for the data, and the source node and the second next node form a second portion of a second path for the data.

37. The method of claim 31 further comprising:

encrypting the data to form encrypted data prior to transmitting the data to the first next node such that the first next node receives the data, wherein the encrypted data comprises a number of encrypted headers and an encrypted body such that all of the data is encrypted; and

transmitting the data to an additional node in the network without decrypting the data.

38. An apparatus comprising:

a time management system configured to receive signals from a plurality of time sources, select a signal having a desired level of accuracy from the signals, and set a reference time for a first node in a network associated with the time management system using the signal;

a node configuration system configured to identify, using configuration data, a plurality of next nodes associated with the first node, wherein the plurality of next nodes indirectly connect the first node to a destination via at least one other node, the destination being among the plurality of next nodes, and wherein the node configuration system is further configured to identify a first number of time intervals with each of the plurality of next nodes for receiving a request, and a second number of time intervals with the each of the plurality of next nodes for transmitting the request, wherein a time interval is a time between transmission of the request by the first node in the network using the reference time;

a network reservation system configured to receive, during the first number of time intervals, the request from a second node in the plurality of next nodes to transmit data to the first node during a third number of time intervals, determine whether the third number of time intervals is available for the first node, and send an approval to the second node during the second number of time intervals responsive to a determination that the third number of time intervals is available for the first node and wherein the network reservation system is further configured to selectively implement pre-reserved paths for transmitting the data; and

a network interface configured to receive the data during the third number of time intervals.

39. The apparatus of claim 38, wherein the network interface is further configured to transmit the data to a third node in the plurality of next nodes based on the destination for the data.

40. The apparatus of claim 38, wherein the configuration data is received in a user input and comprises addresses for the plurality of next nodes and the first number of time intervals.

41. The apparatus of claim 38, wherein the configuration data is stored in a memory associated with the node configuration system and comprises addresses for the plurality of next nodes and the first number of time intervals.

42. The apparatus of claim 38, wherein the node configuration system is further configured to send a notification to the plurality of next nodes that the first node is available.

43. The apparatus of claim 42, wherein the notification is sent during the first number of time intervals.

44. The apparatus of claim 42 further comprising:

a cryptography system configured to encrypt the notification prior to sending the notification to the plurality of next nodes such that the notification is not decrypted until the notification arrives at the destination for the notification.

45. A method for configuring a node comprising:

receiving signals from a plurality of time sources;

selecting a signal having a desired level of accuracy from the signals;

setting a reference time for a first node in a network using the signal;

identifying, using configuration data, a plurality of next nodes associated with the first node, wherein the plurality of next nodes indirectly connect the first node to a destination via at least one other node, the destination being among the plurality of next nodes, and wherein the node configuration system is further configured to identify a first number of time intervals with each of the plurality of nodes for receiving a request, and a second number of time intervals with the each of the plurality of nodes for transmitting the request, wherein a time interval is a time between transmission of the request by the first node in the network using the reference time and wherein pre-reserved paths for transmitting the data are selectively implemented;

receiving, during the first number of time intervals, the request from a second node in the plurality of next nodes to transmit data to the first node during a third number of time intervals;

determining whether the third number of time intervals is available for the first node;

responsive to a determination that the third number of time intervals is available for the first node, sending an approval to the second node during the second number of time intervals; and

receiving the data during the third number of time intervals.

46. The method of claim 45, further comprising:

after receiving the data during the third number of time intervals, transmitting the data to a third node in the plurality of next nodes based on a destination for the data.

47. The method of claim 45, wherein the configuration data is received in a user input and comprises addresses for the plurality of next nodes and the first number of time intervals.

48. The method of claim 45, wherein the configuration data is stored in a memory associated with a node configuration system and comprises addresses for the plurality of next nodes and the first number of time intervals.

49. The method of claim 45 further comprising:

sending a notification to the plurality of next nodes that the first node is available.

50. The method of claim 49, wherein the notification is sent during the first number of time intervals.

51. The method of claim 49 further comprising:

encrypting the notification prior to sending the notification to the plurality of next nodes such that the notification is not decrypted until the notification arrives at the destination for the notification.