Patent ID: 9208295
Filing Date: 2015-12-08
Classification: G06F,H04L

Abstract:
1. A method comprising: receiving on a control plane of a communication fabric that is physically separated from a data plane of the communication fabric, at a controller of the communication fabric, a first request from a first component of a plurality of components connected to the communication fabric to join the communication fabric, wherein the controller is connected to each of the plurality of components connected to the communication fabric to provide policy-based authentication and policy-based authorization for each of the plurality of components on the control plane; determining, by the controller according to the policy-based authentication, that the first component is allowed to join the communication fabric; receiving on the control plane, at the controller, a publish request from the first component to publish identity context data to the communication fabric; determining, by the controller according to the policy-based authorization, that the first component is permitted to publish identity context data to the communication fabric; receiving on the control plane, at the controller, a second request from a second component of the plurality of components connected to the communication fabric to join the communication fabric; determining, by the controller according to the policy-based authentication, that the second component is allowed to join the communication fabric; receiving on the control plane, at the controller, a subscribe request from the second component to subscribe to the identity context data published by the first component; and determining, by the controller according to the policy-based authorization, that the second component is permitted to subscribe to the identity context data published by the first component, wherein the policy-based authentication and the policy-based authorization include policies governing publication of data, subscription to published data, querying data, registering new services, or discovering new services to and from the communication fabric.