Network management assembly for managing a flow of network management traffic

Patent metadata

Field	Value
Publication number	US-9419898-B2
Application number	US-201214000291-A
Country	US
Kind code	B2
Filing date	Feb 14, 2012
Priority date	Feb 18, 2011
Publication date	Aug 16, 2016
Grant date	Aug 16, 2016

Abstract

A network management assembly is disclosed for managing a flow of network management traffic across a network containing a plurality of discrete network domains. The assembly can include a first management terminal which is arranged to transmit network management traffic to each of the network domains via a respective first communication link, and a second management terminal which is arranged to receive network management traffic from each of the network domains via a respective second communication link. Each of the first communication links can permit a flow of network management traffic from the first management terminal to a respective domain, and prevent a reverse flow of network management traffic from the respective domain to the first management terminal. Each of the second communication links can permit a flow of network management traffic from a respective domain to the second management terminal, and prevent a reverse flow.

First claim

The invention claimed is:

1. A network management assembly for managing a flow of network management traffic across a network having a plurality of discrete network domains, the assembly comprising:
a first management terminal which is configured to transmit network management traffic relating to a configuration of assets from the first management terminal to a respective domain to each of the network domains via respective links in a first group of communication links; and
a second management terminal which is configured to receive network management traffic relating to a status of assets from each of the network domains via respective links in a second group of communication links;
each of the links in the first group of communication links being configured to permit a flow of network management traffic from the first management terminal to a respective one of the network domains and to prevent a flow of network management traffic from the respective one of the network domains to the first management terminal,
each of the links in the second group of communication links being configured to permit a flow of network management traffic from a respective one of the network domains to the second management terminal and prevent a flow of network management traffic from the second management terminal to the respective one of the network domains;
wherein each of the links in the first group of communication links is configured to pass management traffic relating to a configuration of assets from the first management terminal to a respective domain; and
wherein each of the links in the second group of communication links is configured to pass management traffic relating to a status of assets from a respective domain to the second management terminal.

2. An assembly according to claim 1 wherein the second management terminal is configured to monitor the status of the assets associated with each network domain to provide a global status of the assets associated with the network.

3. An assembly according to claim 1 , wherein the first management terminal is communicatively coupled with the second management terminal via a third communications link.

4. An assembly according to claim 3 , wherein the third communications link permits a flow of specified management traffic from the first management terminal to the second management terminal but prevents a flow of the specified management traffic from the second management terminal to the first management terminal.

5. An assembly according to claim 1 , wherein each of the links in the first and second group of communication links comprises: a processor having a memory for buffering a flow of management traffic along each respective link.

6. An assembly according to claim 1 , comprising: first and second user access terminals communicatively coupled with the first and second management terminals, respectively.

7. An assembly according to claim 6 , wherein the first user access terminal is further communicatively coupled with each of the processors.

8. An assembly according to claim 6 , comprising: a switch which is arranged to separately and selectively enable a user to separately communicatively couple the first user access terminal with the first management terminal or one of the processors.

9. An assembly according to claim 1 , comprising: a domain separation assembly which is configured to receive management traffic from one or more of the network domains and communicate management traffic along each respective second communications link associated with the domain to the second management terminal.

10. An assembly according to claim 9 , wherein the domain separation assembly is configured to receive management traffic from one or more of the first communication links for subsequent transmission to a respective network domain.

11. An assembly according to claim 1 , wherein each of the second communication links is configured to pass management traffic relating to a status of assets from a respective domain to the second management terminal.

12. An assembly according to claim 11 , wherein the second management terminal is configured to monitor the status of the assets associated with each network domain to provide a global status of the assets associated with the network.

13. An assembly according to claim 12 , wherein the first management terminal is communicatively coupled with the second management terminal via a third communications link.

14. An assembly according to claim 13 , wherein each of the links in the first and second group of communication links comprises: a processor having a memory for buffering a flow of management traffic along each respective link.

15. An assembly according to claim 14 , comprising: first and second user access terminals communicatively coupled with the first and second management terminals, respectively.

16. A network management interface for managing a flow of network management traffic across a network having a plurality of sub-networks, each sub-network containing a plurality of discrete domains associated with the network, the interface comprising:
a network management assembly according to claim 1 ; and,
a domain separation assembly which is configured to receive management traffic from the network domains of the sub-networks and communicate management traffic along each respective second communications link to the second management terminal, and which is configured to receive management traffic from one or more of the first communication links for subsequent transmission to each respective network domain associated with a sub-network.

17. A management traffic communications network, the network having a plurality of sub-networks, each sub-network containing a plurality of domains associated with the network, each sub-network comprising:
a network management interface according to claim 16 , which is communicatively coupled with at least one network management assembly associated with each sub-network to configure and monitor assets associated with domains of each respective sub-network, the network management interface being provided for configuring and monitoring assets associated with the domains of each network.

18. A network according to claim 17 , wherein the network domains comprise security domains.

Assignees

• Salter Robert John
• Bae Systems Plc

Inventors

• Salter Robert John

Classifications

• H04L67/125

  involving control of end-device applications over a network · CPC title

• H04L47/10 Primary

  Flow control; Congestion control · CPC title

• H04L41/28 Primary

  Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration · CPC title