Method and apparatus for adaptive application message payload content transformation in a network infrastructure element

• US 9,185,082 B2
• Filed: 01/18/2013
• Issued: 11/10/2015
• Est. Priority Date: 11/17/2004
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Dashora, Vinod, Kumar, Sandeep
• Primary Examiner(s): Schmidt, Kari
• Application Number:
  US13/745,692
• Publication Number:
  US 20130132518A1
• Time in Patent Office: 1,026 Days
• Field of Search: 713/151, 713/152, 713/167, 726/3, 726/13
• US Class Current: 1/1
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 8/656 while running
• CPC Class Codes: H04L 41/026 using e-messaging for transporting management information, e.g. email, instant messaging or chat
• CPC Class Codes: H04L 41/06 Management of faults, events, alarms or notifications
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 41/22 comprising specially adapted graphical user interfaces [GUI]
• CPC Class Codes: H04L 41/5003 Managing SLA; Interaction between SLA and QoS
• CPC Class Codes: H04L 41/5009 Determining service level performance parameters or violations of service level contracts, e.g. violations of agreed response time or mean time between failures [MTBF]
• CPC Class Codes: H04L 41/5012 determining service availability, e.g. which services are available at a certain point in time
• CPC Class Codes: H04L 41/5096 wherein the managed service relates to distributed or central networked applications
• CPC Class Codes: H04L 43/0811 by checking connectivity
• CPC Class Codes: H04L 45/00 Routing or path finding of packets in data switching networks routing or path finding in wireless networks H04W40/00
• CPC Class Codes: H04L 45/56 Routing software
• CPC Class Codes: H04L 45/563 Software download or update
• CPC Class Codes: H04L 63/0245 Filtering by information in the payload
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/12 : Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 67/02 : based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/34 : involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 69/22 : Parsing or analysis of headers
• CPC Class Codes: H04L 9/40 : Network security protocols

Abstract

Application message payload data elements are transformed within a network infrastructure element such as a packet data router or switch. The network element has application message transformation logic for receiving one or more packets representing an input application message logically associated with OSI network model Layer 5 or above; extracting an application message payload from the input application message; identifying one or more first content elements in the application message payload; transforming the first content elements into one or more second content elements of an output application message; and forwarding the output application message to a destination that is identified in the input application message. Transformations performed in the network element can include field reordering, field enrichment, field filtering, and presentation transformation.

Claims

1. A data processing apparatus, comprising:

a plurality of network interfaces that are configured to be coupled to a data network for receiving one or more packets therefrom and sending one or more packets thereto;

one or more hardware processors;

a switching system coupled to the one or more hardware processors and packet forwarding logic, wherein the switching system and packet forwarding logic are configured to receive packets on a first network interface, determine a second network interface on which to send the packets, and to send the packets on the second network interface;

application message transformation logic comprising one or more stored sequences of instructions which, when executed by the one or more hardware processors, cause;

receiving one or more packets representing an input application message from a sender application to a receiver application;

extracting an application message payload from the input application message;

identifying one or more first content elements in the application message payload, wherein the one or more first content elements comprise a first field and a second field;

wherein the first field is before the second field in the one or more first content elements;

transforming the one or more first content elements into one or more second content elements of an output application message at least in part by;

reordering at least the first field and the second field to an order that is expected by the receiver application, wherein the first field is after the second field in the one or more second content elements; and

performing a transformation based on code page translation, wherein the code page translation includes mapping the one or more first content elements to a locale-specific content encoding, wherein the locale-specific content encoding includes elements representing times, dates, or calendar entries;

forwarding the output application message to a destination that is identified in the input application message.

2. The apparatus of claim 1, wherein the input application message is logically associated with Open Systems Interconnection (OSI) network model Layer 5 or above.

3. The apparatus of claim 1, wherein the apparatus comprises any of a packet data router or a packet data switch configured to couple to a packet-switched network.

4. The apparatus of claim 1, wherein the application message transformation logic comprises one or more extensible stylesheet language transforms, one or more parser plugin transforms, and one or more custom transforms that are logically coupled and perform successive transformation operations on the application message payload.

5. The apparatus of claim 1, wherein the application message transformation logic comprises sequences of instructions which, when executed, cause transforming the one or more first content elements into the one or more second content elements comprises changing a data value from the one or more first content elements.

6. The apparatus of claim 1, wherein the application message transformation logic comprises sequences of instructions which, when executed, cause applying an extensible stylesheet language transformation file to the input application message to generate the output application message.

7. The apparatus of claim 1, wherein a first data value corresponds to the first field and a second data value corresponds to the second field, wherein the first data value is before the second data value in the one or more first content elements, and the application message transformation logic comprises sequences of instructions which, when executed, cause reordering the first data value and the second data value, and wherein the first data value is after the second data value in the one or more second content elements.

8. The data processing apparatus of claim 1, wherein the first field has a first same name in both the one or more first content elements and the one or more second content elements;

and wherein the second field has a second same name in both the one or more first content elements and the one or more second content elements.

9. The apparatus of claim 1, wherein the application message transformation logic comprises sequences of instructions which, when executed, cause transforming the one or more first content elements into the one or more second content elements further comprises performing a transformation based on content validation, or data validation.

10. The apparatus of claim 1, wherein the application message transformation logic comprises sequences of instructions which, when executed, cause:

performing the transformation based on one or more of required media types of the receiver application, security credential mapping, content aggregation, content splitting, service interface virtualization, or performing content-based lookup, extraction, routing and distribution.

11. A machine-implemented method comprising:

receiving one or more packets representing an input application message from a sender application to a receiver application;

wherein the one or more packets are received in a network infrastructure data processing element comprising a plurality of network interfaces that are configured to be coupled to a data network for receiving one or more packets therefrom and sending one or more packets thereto, one or more processors, a switching system coupled to the one or more processors and packet forwarding logic, wherein the switching system and packet forwarding logic are configured to receive packets on a first network interface, determine a second network interface on which to send the packets, and to send the packets on the second network interface, and application message transformation logic;

extracting an application message payload from the input application message;

identifying one or more first content elements in the application message payload, wherein the one or more first content elements comprise a first field and a second field, wherein the first field is before the second field in the one or more first content elements;

transforming the one or more first content elements into one or more second content elements of an output application message at least in part by;

reordering at least the first field and the second field to an order that is expected by the receiver application, wherein the first field is after the second field in the one or more second content elements; and

performing a transformation based on code page translation, wherein the code page translation includes mapping the one or more first content elements to a locale-specific content encoding, wherein the locale-specific content encoding includes elements representing times, dates, or calendar entries;

forwarding the output application message to a destination that is identified in the input application message;

wherein the method is performed by one or more processors.

12. The method of claim 11, wherein the input application message is logically associated with Open Systems Interconnection (OSI) network model Layer 5 or above.

13. The method of claim 11, wherein transforming the one or more first content items into the one or more second content items comprises applying an extensible stylesheet language transformation file to the input application message to generate the output application message.

14. The method of claim 11, wherein transforming the one or more first content elements into the one or more second content elements further comprises removing a field and a corresponding data value from the one or more first content elements.

15. The method of claim 11, wherein a first data value corresponds to the first field and a second data value corresponds to the second field, wherein the first data value is before the second data value in the one or more first content elements, and wherein reordering at least the first field and the second field comprises reordering the first data value and the second data value, and wherein the first data value is after the second data value in the one or more second content elements.

16. The method of claim 11, wherein the first field has a first same name in both the one or more first content elements and the one or more second content elements;

and wherein the second field has a second same name in both the one or more first content elements and the one or more second content elements.

17. The method of claim 11, wherein transforming the one or more first content elements into the one or more second content elements further comprises performing a transformation based on content validation, or data validation.

18. The method of claim 11, wherein transforming the one or more first content elements into the one or more second content elements further comprises:

performing the transformation based on one or more of required media types of the receiver application, security credential mapping, content aggregation, content splitting, service interface virtualization, or performing content-based lookup, extraction, routing and distribution.

19. A non-transitory computer-readable storage medium storing one or more sequences of instructions, which instructions, when executed by one or more processors, cause the one or more processors to perform:

receiving one or more packets representing an input application message from a sender application to a receiver application;

wherein the one or more packets are received in a network infrastructure data processing element comprising a plurality of network interfaces that are configured to be coupled to a data network for receiving one or more packets therefrom and sending one or more packets thereto, one or more processors, a switching system coupled to the one or more processors and packet forwarding logic, wherein the switching system and packet forwarding logic are configured to receive packets on a first network interface, determine a second network interface on which to send the packets, and to send the packets on the second network interface, and application message transformation logic;

extracting an application message payload from the input application message;

identifying one or more first content elements in the application message payload;

wherein the one or more first content elements comprise a first field and a second field;

wherein the first field is before the second field in the one or more first content elements;

transforming the one or more first content elements into one or more second content elements of an output application message at least in part by;

reordering at least the first field and the second field to an order that is expected by the receiver application, wherein the first field is after the second field in the one or more second content elements; and

performing a transformation based on code page translation, wherein the code page translation includes mapping the one or more first content elements to a locale-specific content encoding, wherein the locale-specific content encoding includes elements representing times, dates, or calendar entries;

forwarding the output application message to a destination that is identified in the input application message.

20. The non-transitory computer-readable storage medium of claim 19, wherein the input application message is logically associated with Open Systems Interconnection (OSI) network model Layer 5 or above.

21. The non-transitory computer-readable storage medium of claim 19, further comprising sequences of instructions which when executed cause applying an extensible stylesheet language transformation file to the input application message to generate the output application message.

22. The non-transitory computer-readable storage medium of claim 19, further comprising sequences of instructions which when executed cause removing a field and a corresponding data value from the one or more first content elements.

23. The non-transitory computer-readable storage medium of claim 19, wherein a first data value corresponds to the first field and a second data value corresponds to the second field, wherein the first data value is before the second data value in the one or more first content elements, and wherein further comprising sequences of instructions which when executed cause reordering the first data value and the second data value, and wherein the first data value is after the second data value in the one or more second content elements.

24. The non-transitory computer-readable storage medium of claim 19, wherein the first field has a first same name in both the one or more first content elements and the one or more second content elements;

and wherein the second field has a second same name in both the one or more first content elements and the one or more second content elements.

25. The non-transitory computer-readable storage medium of claim 19, further comprising sequences of instructions which when executed cause performing a transformation based on content validation, or data validation.

26. The non-transitory computer-readable storage medium of claim 19, further comprises sequences of instructions which, when executed, cause:

performing the transformation based on one or more of required media types of the receiver application, security credential mapping, content aggregation, content splitting, service interface virtualization, or performing content-based lookup, extraction, routing and distribution.