Ciena Corporation

British Telecommunications Public Limited Company

Loudon Thomas Blair

Michael Y Frankel

Lyndon Y Ong

Christian Bourget

David W Boertjes

David Jordan Krauss

Jamie Gaudette

Joseph E Berthold

Marian Trnkus

Sashisekaran Thiagarajan

Victor Mizrahi

Jean-Luc Archambault

Anurag Prakash

Mohit Chhillar

Stephen B Alexander

John P Mateosky

Michael Alain Gazier

Jonathan R Armitage

Kevin S Meagher

Steven W Cornelius

Raghuraman Ranganathan

Fiona MacKenzie

Steffen D Koehler

Roger Bakos

Joseph Berthold

Systems and methods for mitigating network attacks include, responsive to detection of malicious traffic in a network, causing creation of an isolated network slice in the network where the isolated network slice is a set of connection resources that are allocated to a flow of traffic and that spans a plurality of network devices in the network; and causing rerouting of the malicious traffic from a source node of the malicious traffic to a deceptive network resource along the isolated network slice.

Method and system of mitigating network attacks

A method for mitigating network attacks includes receiving traffic status information from sentries distributed in a network, and analyzing the traffic status information to detect an attack on the network. In response to the attack, an isolated network slice is created. For the isolated network slice, a deceptive network resource is created in isolated network slice. The method further includes transmitting instructions to route malicious traffic to the deceptive network resource.

A data center utilizing an architecture minimizing Internet Protocol (IP) routing therein includes one or more service edge network elements located in the data center, wherein a sub-IP network communicatively couples the one or more service edge network elements to one or more customer edge network elements located at or near demarcation points between a customer edge network and a service provider network, wherein the one or more customer edge network elements and the one or more service edge network elements are configured to provide direct user access to the data center for a plurality of users; and a control system communicatively coupled to the one or more service edge network elements and the sub-IP network, wherein the control system is configured to control resources on the sub-IP network and the data center for the plurality of users.

Scalable broadband metro network architecture

Systems and methods for path computation in an optical network include obtaining optical layer characteristics related to one or more optical paths in the optical network based in part on performance measurements in the optical network; responsive to service establishment or service restoration, determining a path from source to destination based on utilizing the optical layer characteristics to confirm physical validity of the path; and provisioning a service on the determined path from the source to the destination in the optical network.

Path computation based on dynamic performance monitoring systems and methods in optical networks

A data center network includes a plurality of packet-optical switches each at a location in the data center network and each including a switch fabric comprising both a Layer 1 fabric and a packet fabric communicatively coupled to one or more line ports; wherein the plurality of packet-optical switches are communicatively coupled to one another in a topology to form data connectivity in the data center network, and wherein each of the plurality of packet-optical switches is configured to provide the data connectivity through the Layer 1 switch bypassing the packet fabric when the location does not require Layer 2 forwarding in the topology, and provide the data connectivity through the Layer 1 switch and using the packet fabric to provide the data service with multi-point connectivity when the location requires Layer 2 forwarding in the topology.

Data center connectivity systems and methods through packet-optical switches

The present disclosure provides dynamic performance monitoring systems and methods for optical networks to ascertain optical network health in a flexible and accurate manner. The present invention introduces accurate estimations for optical channel performance characteristics based either on existing channels or with a dynamic optical probe configured to measure characteristics on unequipped wavelengths. Advantageously, the dynamic performance monitoring systems and methods introduce the ability to determine physical layer viability in addition to logical layer viability.

Systems and methods for providing a data service through a packet-optical switch in a network include, subsequent to defining a loop-free forwarding topology for the data service in the network, if the packet-optical switch is a degree 2 site for the data service, providing the data service through the packet-optical switch at a Layer 1 protocol bypassing a partitioned packet fabric of the packet-optical switch; and if the packet-optical switch is a degree 3 or more site for the data service with multi-point connectivity, providing the data service through the packet-optical switch at the Layer 1 protocol and at a packet level using the partitioned packet fabric to provide the data service between the multi-point connectivity and to associated OTN connections for each degree of the degree 3 or more site.

Data connectivity systems and methods through packet-optical switches

A computer-implemented method, a system, and a network include receiving network data from a network and non-network sourced data from one or more external sources relative to the network; performing data mining on the network data and the non-network sourced data; developing a predictive analytics model based on the data mining; and performing predictive analytics on the network data and the non-network sourced data using the predictive analytics model to detect likely future failures in the network. The network can include a Software Defined Network (SDN) operating at any of Layers 0, 1, 2 and/or 3.

Proactive operations, administration, and maintenance systems and methods in networks using data analytics

A network element, configured to operate in a network to provide various network functions therein, includes a main processor communicatively coupled to a main memory, wherein the main processor is configured to perform Operations, Administration, Maintenance, and Provisioning (OAM&P) associated with the network element, wherein the main processor is accessible through one or more access techniques; and a supervisory plane comprising a secure processor and a secure memory communicatively coupled thereto, wherein the supervisory plane is separate from and communicatively coupled to the main processor and the main memory, the supervisory plane is configured to allow secure, direct access to the main processor and the main memory.

Secure access systems and methods to network elements operating in a network

Coherent probe and optical service channel systems and methods for optical networks

The present disclosure provides distributed domain network planning systems and methods. The network planning systems and methods include a distributed domain network planning system that adapts planning concepts to networks operated by modern distributed control planes, such as ASON/ASTN, GMPLS, etc. The network planning systems and methods operate on a multi-domain network utilizing a control plane and local planning systems associated with each individual domain in the multi-domain network. The network planning systems and methods also operate on a single domain network utilizing a control plane and local planning systems associated with the single domain network. The network planning systems and methods build on a distributed control plane philosophy that the network is the database of record. There is significant operational value to distributing the planning function of a large network using the systems and methods disclosed herein.

Distributed network planning systems and methods

A directionless optical architecture is described for reconfigurable optical add/drop multiplexers (ROADMs) and wavelength selective switches (WSSs). The directionless architecture utilizes a directionless wavelength switch coupled between client devices and ROADMs/WSSs to eliminate the need to hard-wire client devices to a wavelength division multiplexed (WDM) network. Accordingly, client device connections can be automatically routed without manual intervention to provide a highly resilient network design which can recover route diversity during failure scenarios. Additionally, the present invention minimizes deployments of costly optical transceivers while providing superior resiliency. Further, the present invention couples the directionless optical architecture and associated optical protection mechanisms with existing mesh restoration schemes to provide additional resiliency.

Directionless optical architecture and highly available network and photonic resilience methods

The present disclosure provides hybrid packet-optical private network systems and methods for a private and dedicated multi-point Ethernet Private Local Area Network (EPLAN). The network systems and methods include a Layer 1 infrastructure service with the inclusion of reserved, dedicated packet switch capacity upon which clients can build their personal, private packet networks. In the systems and methods described herein, packet networking methods are not used to partition the isolated LAN connectivity. Instead, dedicated Ethernet Private LANs (EPLs) are defined between dedicated virtual switching instances (VSIs) that are defined, as necessary, within larger packet-optical switches. Each VSI is partitioned from the remainder of its packet switch fabric as a dedicated, private resource for a specific EPLAN. A packet network is then built by the customer on top of the private EPLAN bandwidth and operated as an isolated, private network with no influence by other carrier's network resources.

Ethernet private local area network systems and methods

The present invention provides a directionless optical architecture for reconfigurable optical add/drop multiplexers (ROADMs) and wavelength selective switches (WSSs). The directionless architecture utilizes a directionless wavelength switch coupled between client devices and ROADMs/WSSs to eliminate the need to hard-wire client devices to a wavelength division multiplexed (WDM) network. Accordingly, client device connections can be automatically routed without manual intervention to provide a highly resilient network design which can recover route diversity during failure scenarios. Additionally, the present invention minimizes deployments of costly optical transceivers while providing superior resiliency. Further, the present invention couples the directionless optical architecture and associated optical protection mechanisms with existing mesh restoration schemes to provide additional resiliency.

Photonic link information collection and advertisement systems and methods enable photonic nodes (e.g., optical amplifiers) to operate within a control plane system in a distributed and real-time manner. For example, the photonic nodes may not require full control plane protocol stacks at each photonic node. In particular, the systems and methods provide a distributed discovery method for photonic links without requiring full participation in the control plane at the photonic nodes. Additionally, the systems and methods include network databases with amplifier configuration information in a control plane enabled network.

Growing community of inventors

Severna Park, MD, United States of America

Loudon Thomas Blair