Architecture Technology Corporation

Other

Clint Michael Sanders

Ranga S Ramanujan

Timothy Hartley

Barry Alan Trent

Maher N Kaddoura

Deborah K Charan

Jordan C Bonney

Ryan Marotz

Edward Raymond Mandy

Richard H Carl

Embodiments for a method of implementing multiple domains in a network switching device are disclosed. The method includes assigning a plurality of hardware ports to a plurality of domains. Ports are assigned to at least two of the plurality of domains, and none of the ports are concurrently assigned to multiple domains. The method also includes loading rules for forwarding packets between the plurality of ports into a data plane. The rules direct the data plane to forward only between ports in a common domain of the plurality of domains. The method also includes assuring that a packet received at any port assigned to a first domain is not sent in legible form from any port assigned to a second domain if an error causes the data plane to forward or request forwarding the packet to any port assigned to a second domain.

High-assurance VLAN switch

Disclosed is a high assurance unified switching device corresponding to a modular, standards-compliant extensible network switch supporting multiple security domains with data isolation of multiple data packets obtained from the multiple security domains. The device may comprise an inner layer router and an outer layer security wrapper (outer layer router). The ports on the outer layer router are configured for different security domains and assigned corresponding key pairs. The ports use the assigned key pairs for encrypting data packets prior to routing and decrypt the data after routing such that there is an isolation of data packets of different security domains. A routed packet arriving at the wrong port cannot be decrypted and therefore is dropped.

High assurance unified network switch

High-assurance multi-domain network switch

Methods, networks and nodes for dynamically establishing encrypted communications between a first node having a first identification and a first private key and a second node having a second identification and a second private key. A first signal comprising information indicative of the first identification of the first node is transmitted, then, upon receipt of the first signal by the second node, a second signal comprising information indicative of the second identification of the second node and a first portion of a symmetric key is transmitted, then, upon receipt of the second signal by the first node, a third signal comprising a second portion of the symmetric key is transmitted.

Methods, networks and nodes for dynamically establishing encrypted communications

A device-implemented network with domains each having nodes, the nodes of each of the domains sharing network information with one another according to an intra-domain communication policy. An inter-domain protocol is configured to control communication between at least one of the nodes of one of the domains and at least one of the nodes of a different one of the domains. A broker is configured to be communicatively coupled to the nodes and configured to control communication according to the inter-domain protocol and to which all of the nodes of each of the plurality of domains are configured to send the network information.

Border gateway broker, network and method

The present application relates to an implementation of a reliable transport protocol that provides receiver-based congestion control within a computing system. An exemplary system includes a first network device and a second network device within a network. During a handshake procedure, a transmission rate at which data can be sent as well as an acceptable corruptive loss rate for a data path between the first network device and the second network device in the network is determined. The second network device then receives data sent from the first network device at the transmission rate. When the acceptable corruptive loss rate for received data has been exceeded, the second network device determines an amount by which to reduce the transmission rate, and then sends a notification to the first network device indicating the amount by which to reduce the transmission rate for subsequently transmitted data.

Growing community of inventors

Plymouth, MN, United States of America

Clint Michael Sanders