Secure distribution and use of weighted network topology information

• US 6,185,612 B1
• Filed: 10/29/1998
• Issued: 02/06/2001
• Est. Priority Date: 10/29/1998
• Status: Expired due to Term

• Current Assignee: Micro Focus Software, Inc. (Open Text Corporation)
• Original Assignee: Novell Incorporated (Open Text Corporation)
• Inventors: Carter, Stephen R, Jensen, Del
• Primary Examiner(s): VU, VIET DUY
• Application Number:
  US09/182,978
• Time in Patent Office: 831 Days
• Field of Search: 709/220, 709/221, 709/223, 709/224, 709/225, 709/226, 709/238, 709/241, 709/242, 709/243, 709/244, 709/249, 713/201
• US Class Current: 709/223
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/104 Grouping of entities

Abstract

Methods, systems, signals, and devices are provided for managing and using topology information in a network. A topology information manager keeps fragments of network topology and provides access to entire fragments or to fragment summaries in response to authenticated requests. An authenticated path selector uses topology information from the manager to select message routes. The path selector may use summaries of hidden network paths to determine whether the hidden path is desirable, without having access to all topological information about the hidden path. Messages may be forwarded over hidden paths by the manager without disclosing more than the summary information to the message provider.

Claims

1. A topology information manager in a distributed computer system, the topology information manager comprising:

an authentication component for authenticating requests regarding information about the topology of at least a portion of the distributed computer system;

a response component for providing responses to such requests; and

a storage component for storing topology information, the storage component being configured by topology information in the form of a hidden path which includes an identification of at least two end nodes of a hidden path and which omits topology information about at least one path between the two end nodes.

2. The topology information manager of claim 1, wherein the storage component comprises a volatile memory cache.

3. The topology information manager of claim 1, further comprising topology information in the form of a partial tree representing at least two nodes and at least one link in the distributed computer system.

5. The topology information manager of claim 1, further comprising a forwarding component for receiving a data packet and forwarding it over a hidden path without fully disclosing the topology of the hidden path.

6. The topology information manager of claim 1 in combination in the distributed computer system with a path selector, the path selector comprising:

a request component for making an authenticated request to the topology information manager and receiving a response; and

a path selection Component for selecting at least one path based at least in part on topology information provided in response to the authenticated request.

7. The topology information manager of claim 1, wherein the topology information manager is located on a single node of the distributed computer system.

8. The topology information manager of claim 7 in combination with at least one other topology information manager which is located on at least one other node of the distributed computer system.

4. A computer storage medium having a configuration that represents data and instructions which will cause performance of method steps for managing network topology information in a computer network, the method comprising the steps of:

receiving a topology information management request;

authenticating the request; and

managing hidden path topology information in response to the authenticated request.

22. The configured storage medium of claim 4, wherein the managing step updates topology information in a topology information manager in response to the authenticated request.

27. The configured storage medium of claim 4, wherein the managing step provides topology information to a path selector in response to the authenticated request.

28. The configured storage medium of claim 27, further comprising the step of selecting at least one path based at least in part on topology information provided during the providing step.

29. The configured storage medium of claim 4, wherein the request is from a requester to a provider, and the method further comprises the steps of sending data from the requester to the provider and then forwarding the data over a hidden path from the provider without first fully disclosing the topology of the hidden path to the requester.

9. A path selector in a distributed computer system, the path selector comprising:

a request component for making an authenticated request for topology information and receiving a response; and

a path selection component for selecting at least one path based at least in part on topology information provided in response to the authenticated request, the path selection component configured to select a path using topology information in the form of a hidden path which includes an identification of at least two end nodes of a hidden path and which omits topology information about at least one path between the two end nodes.

10. The path selector of claim 9 in combination with a directory identifying at least one source of topology information.

11. The path selector and directory combination of claim 10, wherein the directory includes distributed replicated partitions.

12. The path selector and directory combination of claim 11 in further combination with a topology information manager identified in the directory, the topology information manager comprising:

an authentication component for authenticating requests for access to topology information;

a response component for providing responses to such requests; and

a storage component for storing topology information.

13. The path selector of claim 9, wherein the path selector is located on a single node of the distributed computer system.

14. The path selector of claim 13 in combination with at least one other path selector which is located on at least one other node of the distributed computer system.

15. A set of data signals embodied in a network connection for topology fragment management, the data signals comprising:

at least one topology information management request made by a requester;

at least one authentication signal containing identification and credential data of the requester; and

at least one topology information hidden path signal which includes an identification of at least two end nodes of a hidden path and which omits topology information about at least one path between the two end nodes.

16. The data signals of claim 15, further comprising at least one response to a topology information request in the form of a partial tree representing a portion of network topology.

17. The data signals of claim 15, further comprising at least one data packet and a corresponding request that the data packet be forwarded over a hidden path.

18. The data signals of claim 15, wherein the management request is a topology information update request from a first topology information manager to a second topology information manager.

19. A method for managing network topology information in a computer network, comprising the steps of:

receiving a request for topology information about the network;

authenticating the request;

providing topology information in response to the authenticated request; and

selecting at least one path based at least in part on at least one hidden path provided by the providing step.

20. The method of claim 19, further comprising at least two informing steps, each of which furnishes a different node in the network with topology information to be provided in response to an authenticated request.

21. The method of claim 19, further comprising the step of selecting at least one path based at least in part on at least one partial tree provided by the providing step.

23. The method of claim 19, wherein the selecting step selects a path including at least two hidden paths.

24. The method of claim 19, wherein the request is from a requester on a requesting node to a provider on a providing node, and the requesting node is different from the providing node.

25. The method of claim 19, wherein the request is from a requester to a provider, and the requester and provider are on the same node.

26. The method of claim 19, wherein the request is from a requester to a provider, and the method further comprises the steps of sending data from the requester to the provider and then forwarding the data over a hidden path from the provider without first fully disclosing the topology of the hidden path to the requester.