Network gateway for time-critical and mission-critical networks

• US 8,705,541 B2
• Filed: 12/07/2010
• Issued: 04/22/2014
• Est. Priority Date: 06/10/2008
• Status: Active Grant

• Current Assignee: E.S. Embedded Solutions 3000 Ltd.
• Original Assignee: E.S. Embedded Solutions 3000 Ltd.
• Inventors: Tsirinsky-Feigin, Larisa
• Primary Examiner(s): Moore, Ian N
• Assistant Examiner(s): Huynh, Dung B
• Application Number:
  US12/962,420
• Publication Number:
  US 20110075677A1
• Time in Patent Office: 1,232 Days
• US Class Current: 370/401
• CPC Class Codes: H04B 7/18565 Arrangements for preventing unauthorised access or for providing user protection arrangements for secret or secure communication H04L9/00
• CPC Class Codes: H04B 7/18586 Arrangements for data transporting, e.g. for an end to end data transport or check
• CPC Class Codes: H04L 12/66 Arrangements for connecting between networks having differing types of switching systems, e.g. gateways
• CPC Class Codes: H04L 47/10 Flow control; Congestion control
• CPC Class Codes: H04L 47/22 Traffic shaping
• CPC Class Codes: H04L 47/2416 Real-time traffic
• CPC Class Codes: H04L 47/2483 involving identification of individual flows
• CPC Class Codes: H04L 63/0236 Filtering by address, protocol, port number or service, e.g. IP-address or URL
• CPC Class Codes: H04L 63/0263 Rule management
• CPC Class Codes: H04L 67/51 Discovery or management thereof, e.g. service location protocol [SLP] or web services
• CPC Class Codes: H04L 69/08 Protocols for interworking; Protocol conversion
• CPC Class Codes: H04L 69/085 specially adapted for interworking of IP-based networks with other networks

Abstract

A network gateway for time-critical and mission-critical networks is provided. The network gateway comprises a decision unit for determining, based on at least one network event; a processing unit for processing frames determined to be associated with the at least one service; a queue for buffering frames; and a traffic shaper for performing bandwidth management on frames stored in the queue.

Claims

1. A network gateway for time-critical and mission-critical networks, comprising:

a decision unit for transparently intercepting frames flowing between a ground network and an aerial network, wherein the frames are intercepted at a data link layer, the decision unit is further configured to determine based on at least one network event, if each frame of intercepted frames is associated with at least one service based on matching the at least one network event against a preconfigured service table mapping the at least one network event associated with an intercepted frame to the at least one service from among a plurality of services included in the preconfigured service table, wherein the ground network and the aerial network are the time-critical and mission-critical networks, wherein the at least one network event includes a virtual channel carrying traffic that always originates from the same source IP address and port number and directed to the same destination IP address and port number;

a processing unit for processing frames determined to be associated with the at least one service;

a queue for buffering frames; and

a traffic shaper for performing bandwidth management on frames stored in the queue.

2. The network gateway of claim 1, wherein the at least one service comprises at least one of:

retransmission of the frames, redirection of frames to one or more destinations, dropping of frames, address resolution, protocol conversion, bandwidth management, prioritization of frames, signalling, alarming, and data encryption.

3. The network gateway of claim 2, wherein the protocol conversion service enables converting at least Internet protocol (IP) frames to non-IP frames and converting non-IP protocol frames to IP frames.

4. The network gateway of claim 3, wherein the non-IP is a protocol selected from the group consisting of:

MIL-STD-1553, RS 485, RS 422, RS 235, and Hotlink.

5. The network gateway of claim 2, wherein the protocol conversion service enables converting an analog video format to a digital video format compliant with H.264.

6. The network gateway of claim 2, wherein the protocol conversion service enables converting an analog video format to a digital video format compliant with MPEG4.

7. The network gateway of claim 1, wherein the at least one network event further comprises at least one of:

a predefined data pattern, a predefined frame sequence, and any combination of network addresses.

8. The network gateway of claim 1, wherein the service table is a look-up table.

9. The network gateway of claim 1, wherein the decision unit forwards frames not being associated with a service directly to the queue.

10. The network gateway of claim 1, wherein the decision unit does not receive new frames while determining if an incoming frame is associated with at least one service.

11. The network gateway of claim 1, wherein the time-critical and mission-critical networks include at least an IP military network.

12. The network gateway of claim 11, further comprising an airborne Ethernet switch.

13. A method for enabling efficient data communication between a ground network and an aerial network, comprising:

transparently intercepting a frame flowing between the ground network and the aerial network, wherein the frame is intercepted at a data link layer;

determining if at least one service is associated with the intercepted frame based on matching at least one network event against a preconfigured service table;

mapping the at least one network event associated with the intercepted frame to at least one service from among a plurality of services included in the preconfigured service table, wherein the at least one network event includes a virtual channel carrying traffic that always originates from the same source IP address and port number and directed to the same destination IP address and port number;

processing the intercepted frame according to the at least one service being associated with the frame; and

relaying the processed frame to a data link between the ground network and the aerial network, wherein the ground network and the aerial network are time-critical and mission-critical networks.

14. The method of claim 13, further comprising:

performing bandwidth management operations on the processed frame or on a frame that was not processed, wherein the bandwidth management operations include at least one of buffering frames and rate shaping of frames.

15. The method of claim 13, wherein the at least one service comprises at least one of:

retransmission of the frames, redirection of frames to one or more destinations, dropping of frames, address resolution, protocol conversion, bandwidth management, prioritization of frame, signalling, alarming, and data encryption.

16. The method of claim 13, wherein the protocol conversion service enables converting at least Internet protocol (IP) frames to non-IP frames and converting non-IP frames to IP frames.

17. The method of claim 13, wherein the at least one network event further comprises at least one of:

a predefined data pattern, a predefined frame sequence, and any combination of network addresses.

18. A non-transitory computer readable medium having stored thereon computer executable code when executed causing a processor to perform the process of:

transparently intercepting a frame flowing between the ground network and the aerial network, wherein the frame is intercepted at a data link layer;

determining if at least one service is associated with the intercepted frame based on matching the at least one network event against a preconfigured service table;

mapping the at least one network event associated with the intercepted frame to the at least one service from among a plurality of services included in the preconfigured service table, wherein the at least one network event includes a virtual channel carrying traffic that always originates from the same source IP address and port number and directed to the same destination IP address and port number;

processing the intercepted frame according to the at least one service being associated with the frame; and

relaying the processed frame to a data link between the ground network and the aerial network, wherein the ground network and the aerial network are time-critical and mission-critical networks.

19. The non-transitory computer readable medium of claim 18, further comprising:

performing bandwidth management operations on the processed frame or on a frame that was not processed, wherein the bandwidth management operations include at least one of buffering frames and rate shaping of frames.