Communication system, virtual network management apparatus, virtual network management method and program

• US 9,794,111 B2
• Filed: 10/04/2013
• Issued: 10/17/2017
• Est. Priority Date: 10/05/2012
• Status: Active Grant

• Current Assignee: NEC Asia Pacific Pte Limited (NEC Corporation)
• Original Assignee: NEC Corporation
• Inventors: Yamabe, Tomohisa, Morimoto, Masaharu
• Primary Examiner(s): Phillips, Hassan
• Assistant Examiner(s): Tsegaye, Saba
• Application Number:
  US14/433,015
• Publication Number:
  US 20150249565A1
• Time in Patent Office: 1,474 Days
• Field of Search: None
• CPC Class Codes: H04L 41/044 comprising hierarchical management structures
• CPC Class Codes: H04L 41/0803 Configuration setting
• CPC Class Codes: H04L 41/0895 Configuration of virtualised networks or elements, e.g. virtualised network function or OpenFlow elements
• CPC Class Codes: H04L 41/28 Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration
• CPC Class Codes: H04L 41/40 using virtualisation of network functions or resources, e.g. SDN or NFV entities
• CPC Class Codes: H04L 45/38 Flow based routing
• CPC Class Codes: H04L 47/35 by embedding flow control information in regular packets, e.g. piggybacking
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A communication system includes: a network configuration memory that stores network configuration information of a first layer in which an area of the first layer whose low level configuration is desired to be concealed is represented by a preset symbol and that also stores network configuration information of a second layer showing the area represented by the preset symbol. The system also includes a network configuration management section that allows a first user to manage a network of the first layer using the network configuration information of the first layer and that also allows a second user to manage a network of the second layer using at least the network configuration information of the second layer.

Claims

1. A communication system, comprising:

a network configuration memory that stores;

network configuration information of a first layer in which an area of the first layer whose low level configuration is desired to be concealed is represented by a preset symbol; and

network configuration information of a second layer showing the area represented by the preset symbol;

a network configuration management section that allows;

a first user to manage a network of the first layer using the network configuration information of the first layer; and

a second user to manage a network of the second layer using at least the network configuration information of the second layer;

a mapping information memory that stores a relation of correspondence between a first identifier for identifying a user in the first layer, and a second identifier for identifying a user in the second layer; and

a switch controller that causes a switch on a path of a user packet to write the second identifier in a header of the user packet, based on the first identifier contained in the user packet.

2. The communication system according to claim 1, wherein, the second identifier is stored in a preset area of an additional header that stores an identifier of the first layer.

3. The communication system according to claim 2, wherein,

the network of the second layer showing the area represented by the preset symbol is associated with the network of the first layer in a one to multiple relation.

4. The communication system according to claim 1, wherein, the second identifier is stored in a preset area of the header of the user packet.

5. The communication system according to claim 4, wherein,

the network of the second layer showing the area represented by the preset symbol is associated with the network of the first layer in a one to multiple relation.

6. The communication system according to claim 1, wherein,

the network of the second layer showing the area represented by the preset symbol is associated with the network of the first layer in a one to multiple relation.

7. A virtual network management apparatus comprising:

a network configuration memory that stores;

network configuration information of a first layer in which an area of the first layer whose low level configuration is desired to be concealed is represented by a preset symbol; and

network configuration information of a second layer showing the area represented by the preset symbol;

a network configuration management section that allows;

a first user to manage a network of the first layer using the network configuration information of the first layer; and

a second user to manage a network of the second layer using at least the network configuration information of the second layer;

a mapping information memory that stores a relation of correspondence between a first identifier for identifying a user in the first layer, and a second identifier for identifying a user in the second layer; and

a switch controller that causes a switch on a path of a user packet to write the second identifier in a header of the user packet, based on the first identifier contained in the user packet.

8. A method for management of a virtual network including a network configuration memory that stores network configuration information of a first layer in which an area of the first layer whose low level configuration is desired to be concealed is represented by a preset symbol, and that also stores network configuration information of a second layer showing the area represented by the preset symbol, the method comprising:

accepting an operation on a network of the first layer made by a first user with the use of the network configuration information of the first layer;

accepting an operation on a network of the second layer made by a second user with the use of at least the network configuration information of the second layer;

storing a relation of correspondence between a first identifier for identifying a user in the first layer, and a second identifier for identifying a user in the second layer; and

causing a switch on a path of a user packet to write the second identifier in a header of the user packet, based on the first identifier contained in the user packet.

9. The method according to claim 8, wherein:

the second identifier is stored in a preset area of an additional header that stores an identifier of the first layer.

10. The method according to claim 8, wherein:

the second identifier is stored in a preset area of the header of the user packet.

11. The method according to claim 8, wherein:

the network of the second layer showing the area represented by the preset symbol is associated with the network of the first layer in a one to multiple relation.

12. A non-transitory computer-readable recording medium storing a program that causes a computer, arranged in a virtual network including a network configuration memory that stores network configuration information of a first layer in which an area of the first layer whose low level configuration is desired to be concealed is represented by a preset symbol, and that also stores network configuration information of a second layer showing the area represented by the preset symbol, to execute a method, the method comprising:

accepting an operation on a network of the first layer made by a first user with the use of the network configuration information of the first layer;

accepting an operation on a network of the second layer made by a second user with the use of at least the network configuration information of the second layer;

storing a relation of correspondence between a first identifier for identifying a user in the first layer, and a second identifier for identifying a user in the second layer; and

causing a switch on a path of a user packet to write the second identifier in a header of the user packet, based on the first identifier contained in the user packet.

13. The non-transitory computer readable recording medium according to claim 12, wherein:

the second identifier is stored in a preset area of an additional header that stores an identifier of the first layer.

14. The non-transitory computer readable recording medium according to claim 12, wherein:

the second identifier is stored in a preset area of the header of the user packet.

15. The non-transitory computer readable recording medium according to claim 12, wherein:

the network of the second layer showing the area represented by the preset symbol is associated with the network of the first layer in a one to multiple relation.