Systems and methods for micro network segmentation

Patent metadata

Field	Value
Publication number	US-2020092254-A1
Application number	US-201916664657-A
Country	US
Kind code	A1
Filing date	Oct 25, 2019
Priority date	Feb 26, 2016
Publication date	Mar 19, 2020
Grant date	—

Abstract

A wireless communication system includes an external provider subsystem and an electronic network subsystem in operable communication with the external provider subsystem. The electronic network subsystem is configured to provide a first microservice and a second microservice different from the first microservice. The wireless communication system further includes an in-home subsystem (i) separate from the external provider subsystem, (ii) in operable communication with the electronic network subsystem, and (iii) including a first micronet and a second micronet different from the first micronet. The first micronet is configured to operably interact with the first microservice, and the second micronet is configured to operably interact with the second microservice. The wireless communication system further includes at least one electronic device configured to operably connect with one of the first micronet and the second micronet.

First claim

What is claimed is:

1 . A micronet-enabled network communication system having a micronets platform for automatically organizing a plurality of connected devices within a plurality of trust domains, comprising:
a system operator network including (i) an intelligent services business logic layer to serve as an interface for the micronets platform, and (ii) a micronet manager in operable communication with the intelligent services business logic layer and configured to orchestrate service delivery to the system; and an on-premises network including (i) a gateway in operable communication with the micronet manager, and (ii) a plurality of micronets; wherein the gateway is configured to implement a software defined networking (SDN) switch automatically segment the on-premises network into the plurality of micronets.

2 . The system of claim 1 , wherein the intelligent services and business logic layer comprises advanced services including one or more of a machine learning powered application, a neural network powered application, business logic, an artificial intelligence-enabled service, a security service, and a device fingerprinting service.

3 . The system of claim 1 , wherein the micronets manager is further configured to receive advance service information from the system, and to arrange traffic routing and connectivity of the system.

4 . The system of claim 1 , wherein the gateway comprises at least one of a modem, a virtual switch, a micronet application layer, an access point, a router, and an ethernet.

5 . The system of claim 4 , wherein the gateway is further configured to support at least one of a wired environment and a wireless environment.

6 . The system of claim 4 , wherein the gateway comprises the virtual switch, and wherein the virtual switch is configured to be controlled by the SDN to implement a flow table pipeline.

7 . The system of claim 1 , wherein the plurality of micronets comprises at least one system-managed micronet and at least one user-managed micronet separate from the system-managed micronet.

8 . The system of claim 7 , wherein the micronet manager is further configured to manage one or more of an SDN controller microservice, a dynamic host configuration protocol (DHCP) server microservice, a domain name system (DNS) server microservice, and an authentication, authorization, and accounting (AAA) server microservice.

9 . The system of claim 7 , further comprising an SDN switch.

10 . The system of claim 9 , wherein the SDN switch is configured to automatically establish the at least one system-managed micronet and at least one user-managed micronet.

11 . The system of claim 10 , wherein the SDN switch is configured to automatically establish the at least one system-managed micronet into a first trust domain, and at least one user-managed micronet into a second trust domain different from the first trust domain.

12 . The system of claim 11 , further comprising a provider subsystem in operable communication with the micronet manager and the micronet infrastructure through a multiple service operator (MSO) application programming interface layer.

13 . The system of claim 12 , wherein the SDN switch is configured to automatically establish a third trust domain different from the first trust domain and the second trust domain.

14 . The system of claim 13 , wherein the on-premises network includes a specialized device provisioned by the provider subsystem, and wherein the gateway is further configured to establish a secure connection to the provider subsystem direct communication between the provider subsystem and the specialized device.

15 . The system of claim 1 , wherein the intelligent services and business logic layer is further configured to interpret certificates from a plurality of ecosystems to identify the plurality of connected devices.

16 . The system of claim 15 , wherein the intelligent services and business logic layer is further configured to (i) identify that a particular device of the plurality of connected devices does not have an ecosystem certificate, and (ii) cause the gateway to establish a segregated micronet for operation of the particular device within the system.

17 . The system of claim 1 , wherein the on-premises network is in operable communication with the micronet manager through an access and core network.

18 . The system of claim 1 , wherein micronet manager is further configured to provide at least one of segmentation of the network into (i) a plurality of micro-networks, (ii) separate trust domains for the segmented micro-networks, (iii) extended secure connectivity beyond the on-premises network, (iv) leveraged artificial intelligence and machine learning, (v) privacy protection, dynamic rules and policy management, (vi) an identity of each end device or endpoint connecting to the network, and (vii) standardized interfaces.

19 . The system of claim 1 , wherein the on-premises network is configured to temporarily remove a suspected device into a separate, secure micro-network trust domain until the condition giving rise to the suspicion of the device is removed.

20 . The system of claim 1 , wherein the Micronets platform is dynamically configured to place the plurality of connected devices into individualized separate trust domain based on the type of device, the use by the user, the capabilities of the on-premises network, and traffic flow.

Assignees

• Cable Television Laboratories Inc

Inventors

• Goeringer Steven J
• Glenn Michael
• Scriber Brian A
• Johnson Brady
• Deazley Mark
• Thakore Darshak
• Walker Mark

Classifications

• H04L45/42

  Centralised routing · CPC title

• H04L45/46

  Cluster building · CPC title

• H04L45/64

  using an overlay routing layer · CPC title

• G06N3/08

  Learning methods · CPC title

• H04L63/0892

  by using authentication-authorization-accounting [AAA] servers or protocols · CPC title