Entry Point, LLC

Entrypoint Networks, Inc.

Eric Turner

Jeffrey Robert Peterson

Robert N Peterson

Robert Peterson

Jeffrey Peterson

Flow-based isolation can be provided in a service network that is implemented over a software-defined network, and particularly in a dynamic open-access network environment. End user premises devices can be configured with one or more service network isolation flows that apply to communications within the service network. Such service network isolation flows can define rules for dropping any outgoing communication that is destined for an IP address within the service network. Such service network isolation flows can also define rules for dropping any incoming communication that originated from an IP address within the service network. By employing service network isolation flows on the end user premises devices to block communications on the service network between end user premises devices, service isolation over the software-defined network and customer isolation within the service network can be provided without the inherent limitations of S-Tag/C-Tag techniques that hinder the scaling of software-defined networks.

Flow-based isolation in a service network implemented over a software-defined network

A dynamic open access software-defined network can be configured to enable an end user premises device to function like a controller so that there is no need to employ a controller within the network. As a result, a dynamic open access software-defined network can be efficiently and effectively scaled. An end user premises device can be configured with a virtual switch that implements a flow receiver for receiving flows directly from a flow communicator of a management server without utilizing a controller or the Openflow protocol. The virtual switch may also be configured to store flows in a configuration file that is persisted across reboots on the end user premises device to thereby enable the end user premises device to rebuild a flow table without communicating with an external component.

End user premises device controller

Services can be isolated across a single physical network interface. A gateway that is installed at the user's premises can include a single inbound port over which multiple services can be provided to the premises. The gateway can evaluate all outbound frames that are received at the port to identify to which service they pertain and then tag the frames with an identifier assigned to the service. This tagging will enable the frames to be delivered to the intended service provider. When the gateway receives an inbound frame, it can strip the identifier from the frame and forward it over the single inbound port regardless of the service to which it pertains. In this way, multiple services that are provided to the user's premises can remain isolated on the wide area network even though they are provided over the same physical medium on the user's local area network.

Growing community of inventors

Idaho Falls, ID, United States of America

Eric Turner