Infinera Corporation

Oracle International Corporation

Abhinava Shivakumar Sadasivarao

Sharfuddin Syed

Chris Liou

Loukas Paraschis

Biao Lu

Ping Pan

Marco Sosa

Parthiban Kandappan

Michael Frendo

Jagwinder Singh Brar

Steven Joseph Hand

Ashok Kunjidhapatham

Sachin Jain

Kannan Raj

Radhakrishna Valiveti

Mohit Misra

Tjandra Trisno

Balaji Balasubramanian

Sri Mohana Satya Srinivas Singamsetty

Anthony Jorgenson

Sanjoy Bardhan

Mana Palai

Hao Su

Robert Maher

Harshad Sardesai

Biju Mathew

Stu Elby

Lu Biao

Balaji Gopalakrishnan

Consistent with the present disclosure, a method and related system for secure autonomic optical transport networks are disclosed. The method includes steps for adding a network element in an optical network. The method includes an initial step of verifying, with a new network element, a first identifier certificate from a proxy network element. In a further step, a second identifier certificate from the new network element is verified with the proxy element. A registrar is used for verifying the second identifier certificate from the proxy network element and sending domain specific parameters to the proxy network element for forwarding to the new network element Next, a local certificate is generated on the new network element. The local certificate is derived from a secure module and sent to the proxy network element for forwarding to the registrar. Further, the new network element in the autonomic domain is enrolled, with the registrar. Moreover, the local certificate is signed with the registrar and the signed local certificate is sent to the new network element.

Secure autonomic optical transport networks

Methods for, and network elements in, packet or optical transport networks are disclosed, including a network element comprising non-transitory computer readable medium storing computer-executable instructions configured as one or more software agents that when executed with computer hardware: determine a state of the network element, comprising comparing a current state of transient properties of the network element against a predetermined, expected state of the transient properties of the network element; and verify a state of other network elements or paths in the transport network by comparing a current state of one or more network-level constraints of the other network elements or paths against a predetermined, expected state of the one or more network-level constraints on the other network elements or paths. The computer hardware may further positively or negatively acknowledge received instructions to apply a configuration to the network element based on the determination and/or verification.

System and method of use of extensible network element software agents for state and network verifications in packet or optical transport networks

A method of executing in-session encryption verification includes receiving a plurality of client data packets for transmission through a network; receiving one or more test data packets for verifying an encryption device; merging the client data packets and the one or more test packets into a data stream; selecting security parameters for each packet in the data stream based on a corresponding packet type; encrypting each packet in the data stream using the encryption device and the corresponding security parameters; and transmitting the data stream comprising encrypted packets through the network. The method also includes decrypting the encrypted packets at a receiving system using congruent techniques.

In-service data plane encryption verification

A telemetry manager receives, from a network server, global data collection information about network components in an optical network device. The global data collection information includes identifiers for network nodes in the network components from which telemetry data are to be collected, and reporting frequency and encoding format for sending collected telemetry data to the network server. The telemetry manager identifies, from the global data collection information, local data collection information specified for a network component, and sends this information to a telemetry agent in the network component. The telemetry manager receives telemetry data generated by a network node of the network component, where the data is provided according to instructions in the local data collection information. The telemetry manager converts the telemetry data from its native format to an encoding format specified by the global data collection information, and sends the encoded telemetry data to the network server.

Streaming telemetry for optical network devices

A method and apparatus for optimizing optical transport using a software defined network (SDN) controller are disclosed herein. The SDN controller may define a margin optimization function based on at least one optical system performance metric. The function may include at least one related initiation criterion. Further, the SDN controller may collect at least one measurement for the performance metric. The measurement may include an assessment of deployed carriers not carrying client data. The SDN controller may determine whether the initiation criterion is met based on at least one collected measurement. The SDN controller may select a system margin optimization mechanism and define a system margin optimization threshold criterion on a condition that the initiation criterion is met. The SDN controller may determine whether the optimization threshold criterion is met. The SDN controller may implement one or more optimization events on a condition that the optimization threshold criterion is met.

Multi-layer mechanisms to optimize optical transport network margin allocation

Methods and systems for determining data transport paths through data transport subnetworks include a method for receiving, by circuitry of a computer system, a service request message from an edge node coupled with the circuitry of the computer system, the service request message including information indicative of: a first unique identifier of an ingress port of a first core node, the first core node being within a transport subnetwork; a second unique identifier of an egress port of a second core node within the transport subnetwork; and a requested transport path bandwidth. The method further comprises determining, by the circuitry of the computer system, a transport path through the transport subnetwork between the first core node and the second core node based on the service request message; and forming the transport path between the ingress port of the first core node and the egress port of the second core node.

Methods and systems for determining data transport paths through data transport

Methods and systems are disclosed for storing, in a non-transitory memory device, multi-layer network information comprising at least one of link availability, bandwidth availability, priority levels for paths in a multi-layer network, path status in the multi-layer network, and status for network elements in the multi-layer network; receiving, via at least one input component, a message from a network element in the network comprising information indicative of a failure of a working path in the network; determining, automatically, based at least in part on the multi-layer network information, an alternate path for transmission of the data traffic through the network; and transmitting, via at least one output component, at least one signal comprising configuration instructions to at least one optical line module, the configuration instructions directing the optical line module to switch and select the data traffic using the alternate path.

Multi layer network resiliency with software defined orchestration

A method and apparatus for pro-active protection of packet-optical transport in a software defined network (SDN) controller are disclosed herein. The SDN controller may define a proactive protection threshold criterion based on based on a plurality of optical system performance metrics and may collect at least one measurement for each of the metrics. The SDN controller may then determine whether the proactive protection threshold criterion is met based on at least one of the collected measurements. Further, the SDN controller may select a protection mechanism and define a protection threshold criterion on a condition that the proactive protection threshold criterion is met. Also, the SDN controller may initiate proactive protection events based on the selected protection mechanism. The SDN controller may determine whether the protection threshold criterion is met. The SDN controller may implement one or more protection events on a condition that the protection threshold criterion is met.

Proactive multi-layer mechanisms to protect packet-optical transport networks

A software defined network, in accordance with some examples of the disclosure, may be used to optimizing traffic across a multi-layer inter-exchange for applications like automated private peering by incorporating packet switching along with OTN and/or optical switching into a converged system. Participants in private peering may have ports into the multi-layer inter-exchange, some to the L2 fabric which supports multi-tenant peering and some to the L1 or L0 fabric for higher-performance private peering.

Systems and methods for multilayer peering

Apparatuses are disclosed including a node having a switch for communicating traffic from input interface to output interface; and a control module, located proximate to the input interface, output interface and switch, comprising a communication interface configured to connect to a third communication link external to the node and having a processor accessing network node configuration information and being configured to compute a path to a destination node through the output interface with the network node configuration information and also configured to be switched from a first state in which the processor provides first instructions to the switch to configure the switch to communicate the traffic from the input interface to the output interface, to a second state in which the processor provides second instructions, received via the communication interface, to the switch to configure the switch to communicate traffic from the input interface to the output interface.

Management and control of software defined networking enabled open transport networks

Systems and methods are disclosed including a computer system, comprising a software defined networking configuration manager having a processor computing and provisioning paths through an optical transport network for multiple switch nodes to be provisioned as head end nodes, the processor managing and interpreting data indicative of managed entities within the optical transport network to create a first network Sub-Network Connection (SNC) for a first customer, and a second network SNC for a second customer, the first network SNC being representative of a first graphical illustration of a state of first resources within the transport network that are allocated to the first customer, and the second network SNC being representative of a second graphical illustration of a state of second resources within the transport network that are allocated to the second customer.

Growing community of inventors

Sunnyvale, CA, United States of America

Abhinava Shivakumar Sadasivarao