Infinera Corporation

Oracle International Corporation

Loukas Paraschis

Abhinava Shivakumar Sadasivarao

Sharfuddin Syed

Marco Sosa

Parthiban Kandappan

Jagwinder Singh Brar

Biao Lu

Kannan Raj

Radhakrishna Valiveti

Sanjoy Bardhan

Hao Su

Robert Maher

Harshad Sardesai

Consistent with the present disclosure, a method and related system for secure autonomic optical transport networks are disclosed. The method includes steps for adding a network element in an optical network. The method includes an initial step of verifying, with a new network element, a first identifier certificate from a proxy network element. In a further step, a second identifier certificate from the new network element is verified with the proxy element. A registrar is used for verifying the second identifier certificate from the proxy network element and sending domain specific parameters to the proxy network element for forwarding to the new network element Next, a local certificate is generated on the new network element. The local certificate is derived from a secure module and sent to the proxy network element for forwarding to the registrar. Further, the new network element in the autonomic domain is enrolled, with the registrar. Moreover, the local certificate is signed with the registrar and the signed local certificate is sent to the new network element.

Secure autonomic optical transport networks

Methods for, and network elements in, packet or optical transport networks are disclosed, including a network element comprising non-transitory computer readable medium storing computer-executable instructions configured as one or more software agents that when executed with computer hardware: determine a state of the network element, comprising comparing a current state of transient properties of the network element against a predetermined, expected state of the transient properties of the network element; and verify a state of other network elements or paths in the transport network by comparing a current state of one or more network-level constraints of the other network elements or paths against a predetermined, expected state of the one or more network-level constraints on the other network elements or paths. The computer hardware may further positively or negatively acknowledge received instructions to apply a configuration to the network element based on the determination and/or verification.

System and method of use of extensible network element software agents for state and network verifications in packet or optical transport networks

A method of executing in-session encryption verification includes receiving a plurality of client data packets for transmission through a network; receiving one or more test data packets for verifying an encryption device; merging the client data packets and the one or more test packets into a data stream; selecting security parameters for each packet in the data stream based on a corresponding packet type; encrypting each packet in the data stream using the encryption device and the corresponding security parameters; and transmitting the data stream comprising encrypted packets through the network. The method also includes decrypting the encrypted packets at a receiving system using congruent techniques.

In-service data plane encryption verification

A method and apparatus for optimizing optical transport using a software defined network (SDN) controller are disclosed herein. The SDN controller may define a margin optimization function based on at least one optical system performance metric. The function may include at least one related initiation criterion. Further, the SDN controller may collect at least one measurement for the performance metric. The measurement may include an assessment of deployed carriers not carrying client data. The SDN controller may determine whether the initiation criterion is met based on at least one collected measurement. The SDN controller may select a system margin optimization mechanism and define a system margin optimization threshold criterion on a condition that the initiation criterion is met. The SDN controller may determine whether the optimization threshold criterion is met. The SDN controller may implement one or more optimization events on a condition that the optimization threshold criterion is met.

Multi-layer mechanisms to optimize optical transport network margin allocation

A method and apparatus for pro-active protection of packet-optical transport in a software defined network (SDN) controller are disclosed herein. The SDN controller may define a proactive protection threshold criterion based on based on a plurality of optical system performance metrics and may collect at least one measurement for each of the metrics. The SDN controller may then determine whether the proactive protection threshold criterion is met based on at least one of the collected measurements. Further, the SDN controller may select a protection mechanism and define a protection threshold criterion on a condition that the proactive protection threshold criterion is met. Also, the SDN controller may initiate proactive protection events based on the selected protection mechanism. The SDN controller may determine whether the protection threshold criterion is met. The SDN controller may implement one or more protection events on a condition that the protection threshold criterion is met.

Proactive multi-layer mechanisms to protect packet-optical transport networks

Growing community of inventors

Menlo Park, CA, United States of America

Loukas Paraschis