The Boeing Company

Scott Charles Sullivan

Ronald Ward Sackman

John L Meier

Ramin Nobakht

James P Scott

Techniques for sending data over a computer network from an origination computer to a destination computer are presented. The techniques include: receiving a demand communication from the origination computer, where the demand communication specifies at least one network parameter; determining that a path through the network from the origination computer to the destination computer that complies with the at least one network parameter is not available; sending data from the origination computer to a node in the network over a path that complies with the at least one network parameter, where the node is not the destination computer; and storing the data at the node in persistent memory.

Context-aware network storage

A system that detects malicious traffic flows in a network includes a computer system including a processor in communication with at least one memory device. The processor is programmed to store a plurality of context information about the network including a plurality of devices. The processor is also programmed to determine a network configuration of the network at a specific point in time. The processor is further programmed to generate one or more security policies for one or more devices of the plurality of devices in the network based on the network configuration and the plurality of context information. In addition, the processor is programmed to deploy the one or more security policies to the one or more devices in the network, wherein the one or more devices are configured to execute an algorithm to monitor communications on the network in view of a corresponding security policy of the one or more security policies.

Systems and methods for context aware cybersecurity

A Non-Geostationary Orbit (NGSO) satellite system is described that utilizes backbone route tables at its satellites that define different snapshots of a time-varying backbone topology of the NGSO satellite system. Because each satellite may see a different portion of the backbone topology, the backbone route tables at different satellites may be different from each other. Also, the backbone route tables at the satellites may be active at different times as the backbone topology changes over time. Different routing groups of backbone route tables may be defined in order to represent different routing options for packets arriving at a satellite. The routing options for a routing group may emphasis various network performance and security goals for traffic assigned to the routing group.

Differential routing for non-geostationary orbit (NGSO) satellite systems

A system for detecting malicious traffic flows in a network is provided. The system includes a processor. Based on packet information received for a plurality of data packets transmitted over the network the processor is programmed to calculate inter-arrival times and packet durations for the plurality of data packets. The processor is also programmed to filter the packet information to remove noise. The processor is further programmed to generate at least one histogram based on the packet information, the inter-arrival times, and the packet durations. In addition, the processor is programmed to generate a power spectral density estimate based on the packet information, the inter-arrival times, and the packet durations. Moreover, the processor is programmed to analyze the at least one histogram and the power spectral density estimate to detect one or more unexpected data flows. Furthermore, the processor is programmed to report the one or more unexpected data flows.

Systems and methods for real-time network traffic analysis

A Non-Geostationary Satellite Orbit (NGSO) satellite system is described that implements one or more user route tables and a plurality of pre-calculated backbone route tables at its satellites. The user route tables track user connectivity to the satellites, and each of the backbone route tables defines a snapshot of a time-varying backbone topology seen by a particular satellite. During operation, a satellite selects different backbone route tables as the topology changes over time, and receives updates to the user route tables when connectivity changes occur between the users and the satellites. The decoupling of the user route tables from the backbone route tables at the satellite reduces the computational burden on the NGSO system, as the backbone route tables are calculated in advance and the NGSO system is subsequently tasked with a computationally lower burden of performing real-time updates to the user route tables.

Routing for non-geostationary orbit (NGSO) satellite systems

Systems, methods, and apparatus for user mobility in a system with time-varying user-satellite and satellite-ground Ethernet links are disclosed. In some embodiments, A method for user mobility in a satellite system comprises transmitting, by a user device, a first signal comprising internet protocol (IP) data packets encapsulated in an Ethernet frame to a satellite. The method further comprises transmitting, by the satellite, a second signal comprising the IP data packets encapsulated in the Ethernet frame to a ground modem of a ground terminal. Further, the method comprises transmitting, by the ground modem, a third signal comprising the IP data packets encapsulated in the Ethernet frame to a default gateway, which is associated with user device, of a customer ground location via a virtual Ethernet switch. The virtual Ethernet switch utilizes one of a layer two (L2) overlay or a wide area network (WAN) L2 virtual private network (VPN) implementation.

User mobility in a system with time-varying user-satellite and satellite-ground ethernet links

A system includes a first MODEM configured to generate a first data packet (including a first virtual routing and forwarding (VRF) instance identifier associated with a first service, a first user group, or both) based on a first radio-frequency (RF) signal and a second MODEM configured to generate a second data packet (including a second VRF instance identifier associated with a second service, a second user group, or both) based on a second RF signal. The system includes a network device configured to receive the first data packet, transmit a first packet (including a first header that includes a first indicator associated with a first VRF instance) to a first device via a network, receive the second data packet, and transmit a second packet (including a second header that includes a second indicator associated with a second VRF instance) to a second device via the network.

System and method for network traffic processing based on federated services and user groups

A system for optical communications may include a multiplicity of optical communications relay platforms that each move above a surface of the earth. Each relay platform may include a relay link for communications between adjacent relay platforms. The system may also include a plurality of ground stations. Each ground station may be configured to communicate with another of the ground stations through at least one of the relay platforms. Each ground station may include an optical communications link for optical communications with successive relay platforms. The optical link of each ground station may be configured for handover connections between the successive relay platforms as the relay platforms move relative to the earth. The system may additionally include a network operations center having a link controller. The link controller may be configured to control switching of the communications links for hitless transmission between the ground stations.

Growing community of inventors

South Pasadena, CA, United States of America

Scott Charles Sullivan