Abstract:
The invention concerns a method for providing a connection between two domains (GSPR, LSPR) of contiguous hierarchy of a communication network comprising peers (SP 1 -SP 13,  NP 1 -NP 4 ) by means of at least one dedicated peer (PP 1,  PP 2 ) whereby said at least one dedicated peer (PP 1,  PP 2 ) connects said two domains (GSPR, LSPR), controls the access or the traffic flow between said two domains (GSPR, LSPR), acts as a member of said both domains (GSPR, LSPR) and performs the same tasks that are performed by the peers that belong to said two domains (GSPR, LSPR), a dedicated peer, a program module and a communication network therefor.

Description:
[0001]     The invention is based on a priority application EP 05290832.4 which is hereby incorporated by reference.  
       FIELD OF THE INVENTION  
       [0002]     The invention relates to a method for providing a connection between two domains of contiguous hierarchy of a communication network comprising peers, by means of at least one dedicated peer whereby said at least one dedicated peer connects said two domains, controls the access or the traffic flow between said two domains, acts as a member of said both domains and performs the same tasks that are performed by the peers that belong to said two domains, a dedicated peer for providing a connection between two domains of contiguous hierarchy of a communication network comprising peers whereby said dedicated peer comprises means for connecting said two domains, for controlling the access or traffic flow between said two domains, for acting as a member of both domains and for performing the same tasks that can be performed by the peers that belong to said two domains, a program module to be executed in a dedicated peer for providing a connection between two domains of contiguous hierarchy of a communication network comprising peers, whereby if the program module is activated, said dedicated peer connects said two domains, controls the access or traffic flow between said two domains, acts as a member of said both domains and performs the same tasks that can be performed by the peers that belong to said two domains and a communication network comprising peers and at least one dedicated peer and that is subdivided into at least two domains, whereby said at least one dedicated peer connects two of said at least two domains of contiguous hierarchy of the communication network, controls the access or traffic flow between said two of said at least two domains, acts as a member of said two of said at least two domains and performs the same tasks that can be performed by the peers that belong to said two of said at least two domains.  
       BACKGROUND OF THE INVENTION  
       [0003]     Session-oriented conversational and collaboration or community services over Internet like e.g. voice or multimedia conferencing, instant messaging, push-to-talk (PTT) and information sharing gain increasingly in importance for carriers like e.g. Application Service Providers (ASPs), Internet Service Providers (ISPs) and Network Service Providers (NSPs) and enterprises.  
         [0004]     For competition reasons, the platform solutions for these types of services have to be more and more low cost in terms of capital expenditure (CAPEX) and operational expenditure (OPEX). Operators demand for least-infrastructure and zero-administration approaches, which have to be secure, self-organizing, robust against attacks and partial network failures. To offer trusted environments to the users, a domain structuring is required. The problem to be solved here is the autonomous organization and structuring of networks across administrative domains. This requires the awareness of peers network locality.  
         [0005]     There are two principal approaches for low CAPEX/OPEX solutions.  
         [0006]     First, central application server based approaches can be used like e.g. Microsoft Netmeeting which offer directories, collaborative working tools and Voice over Internet Protocol (VoIP) based on Session Initiation Protocol (SIP) or H.323 standard. In such centralized systems, all function and information is centralized on a single server with many clients connecting directly to the server. Both flow control and data flow take place through the central server.  
         [0007]     Second, distributed peer-to-peer network approaches can be used like e.g Skype and Kazaa or JXTA from Sun for VoIP telephony/conferencing, instant messaging and file sharing. All peers, as e.g. workstations, in a peer-to-peer network have equivalent capabilities and responsibilities and act both as a client and a server. This differs from client/server architectures, in which some computers are dedicated to serving the others.  
         [0008]     Today&#39;s central server based solutions, e.g. according to the classical SIP model, offer good domain based control concepts, but they are faced with massive scalability and security problems, as they have a single point of failure and offer a central target for network and service attacks. Furthermore, scalability is limited by central server capacity and server-network connection.  
         [0009]     Common distributed peer-to-peer approaches, like e.g. Skype, have the disadvantage to offer no domain concepts for confidential and trusted networking, but on the other hand they need only low administrative effort as no central connection server has to be maintained.  
         [0010]     Both approaches have therefore major drawbacks to meet the requirements as stated above.  
       OBJECT OF THE INVENTION  
       [0011]     The object of the invention is to propose a method for providing a connection between different domains of contiguous hierarchy of a communication network comprising peers allowing for autonomous organization and structuring of the communication network across the different administrative domains of the communication network.  
       SUMMARY OF THE INVENTION  
       [0012]     This object is achieved by a method for providing a connection between two domains of contiguous hierarchy of a communication network comprising peers, by means of at least one dedicated peer whereby said at least one dedicated peer connects said two domains, controls the access or the traffic flow between said two domains, acts as a member of said both domains and performs the same tasks that are performed by the peers that belong to said two domains, a dedicated peer for providing a connection between two domains of contiguous hierarchy of a communication network comprising peers whereby said dedicated peer comprises means for connecting said two domains, for controlling the access or traffic flow between said two domains, for acting as a member of both domains and for performing the same tasks that can be performed by the peers that belong to said two domains, a program module to be executed in a dedicated peer for providing a connection between two domains of contiguous hierarchy of a communication network comprising peers, whereby if the program module is activated, said dedicated peer connects said two domains, controls the access or traffic flow between said two domains, acts as a member of said both domains and performs the same tasks that can be performed by the peers that belong to said two domains and a communication network comprising peers and at least one dedicated peer and that is subdivided into at least two domains, whereby said at least one dedicated peer connects two of said at least two domains of contiguous hierarchy of the communication network, controls the access or traffic flow between said two of said at least two domains, acts as a member of said two of said at least two domains and performs the same tasks that can be performed by the peers that belong to said two of said at least two domains.  
         [0013]     The main idea of the invention is, that in order to leverage the advantages of common distributed architectures like scalability, robustness and autonomy based on common peer-to-peer solutions like e.g. the distributed lookup protocol Chord, described e.g. in “Chord: A scalable peer-to-peer lookup service for internet applications”, Ion Stoica et al., Proc. ACM SIGCOMM 2001, August 2001, a new (virtual) network element, i.e. a dedicated peer called herein proxypeer is introduced in addition to normal peers and superpeers in communication networks with a federated hierarchical network structure. A superpeer is distinct from a normal peer in that a superpeer is more powerful and reliable than a normal peer, has high network connection bandwidth and/or high CPU power (CPU=central processing unit). The term hierarchy herein is used in the sense of a certain level of confidentiality or a certain level of information. A domain is built by peers having an equivalent hierarchical level, i.e. they have an equivalent level of confidentiality or an equivalent level of information. Domains of contiguous hierarchy are distinct from each other in that they comprise different kinds of peers having a different level of confidentiality, a different level of information and/or performing different tasks that are related to the respective hierarchy level.  
         [0014]     The newly introduced proxypeers hold the interfacing role between two contiguous hierarchy levels of such a communication network, called herein local domain and global domain. However, the described principle is not limited to networks with two hierarchy levels only. Also the term “local” is not restricted to a location, or to network topologies. It can also be interpreted as a virtual neighborhood in groups having same properties or interests, like members of a team or company.  
         [0015]     Proxypeers are at the same time participating in the network structures of two hierarchy levels and are guaranteeing for traffic locality and network integrity by defining a border between these two domains. This means that local peers first try to connect to the local domain to keep traffic and topology information internally. The storage and lookup of data, users and services is primarily done in the local domain to achieve a better data consistency, service integrity and continuity of service at the local domain e.g. in case of failures of the upper hierarchy level or losing connection to the Internet. For maximum trust of the offered network services, all confidential data and services are kept local and independent of domains other than the local domain, e.g. private directories and documents should be kept local. If peers still want to participate in services of, or offer services to the higher hierarchy levels, here the global domain, like e.g. global voice services, the proxypeers handle the exchange of information and requests between the local domain and the global domain. The confidentiality level of every single service advertisement like published documents, voice service username/number, department information, etc., is graded in a generic way and as such respected by the proxypeers.  
         [0016]     As common in most peer-to-peer networks, this new federated hierarchical network structure is built and maintained in an autonomous way by the peers itself and requires not more administrative effort than today&#39;s peer-to-peer networks.  
         [0017]     Further developments of the invention can be gathered from the dependent claims and the following description. 
     
    
     BRIEF DESCRIPTION OF THE DRAWINGS  
       [0018]     In the following the invention will be explained further making reference to the attached drawings.  
         [0019]      FIG. 1  shows an example of a federated hierarchical overlay network structure with two domains with an exemplary superpeer ring structure.  
         [0020]      FIG. 2  shows an example for hierarchical domains with proxypeers with a basic redundancy concept.  
         [0021]      FIG. 3  shows an example for a normal peer offering two different services to the network, one graded as local and the second graded as global. 
     
    
     DESCRIPTION OF THE INVENTION  
       [0022]     A communication network in which the invention can be implemented comprises peers belonging to a first domain and peers belonging to a second domain with the domains having contiguous hierarchy. Among these peers, there is at least one peer called proxypeer that belongs to both the first and the second domain.  
         [0023]     The peers of the first domain are connected with each other by means of wireline or wireless connections like e.g. Intranet connections, LAN connections (LAN=Local Area Network), Internet connections or WLAN connections (WLAN=Wireless Local Area Network), and the peers of the second domain are also connected with each other by means of such connections.  
         [0024]     The two domains can be connected to further domains or other fixed or wireless networks via at least one of said peers by means of wireless or wireline connections.  
         [0025]     The peers are devices that can be both client and server like e.g. customary computers, SIP phones (SIP=Session Initiation Protocol) or wireless handheld devices like e.g. Personal Digital Assistants (PDAs) or smartphones.  
         [0026]     According to the invention, a proxypeer comprises the functionality of a peer, belongs to at least two domains and additionally comprises means for connecting said domains. Furthermore, a proxypeer comprises means for controlling the access or traffic flow between said at least two domains.  
         [0027]     In the following, by way of example, the method according to the invention is described in detail making reference to the figures.  
         [0028]     In traditional peer-to-peer systems, there exists only a single flat structure of so-called superpeers, suited e.g. to implement the well understood so-called Chord technology. The normal peers, e.g. telephones, are connected in a redundant way to several superpeers.  
         [0029]     In  FIG. 1 , the domain structuring approach and the related role of the new proxypeers PP 1 , PP 2  according to the invention by way of example realized as ring structure, suited e.g. for the implementation of Chord technology, is shown.  
         [0030]     The communication network according to the invention depicted in  FIG. 1  comprises by way of example four normal peers NP 1 -NP 4  and thirteen superpeers SP 1 -SP 13 .  
         [0031]     The nine superpeers SP 1 -SP 9  are connected in such a way that they build a ring structure which is called global domain superpeer ring GSPR, i.e. these superpeers SP 1 -SP 9  build a domain called global domain in our example.  
         [0032]     The six superpeers SP 5 , SP 7  and SP 10 -SP 13  are connected in such a way that they build a ring structure which is called local domain superpeer ring LSPR, i.e. these superpeers SP 5 , SP 7  and SP 10 -SP 13  build a domain called local domain in our example.  
         [0033]     The normal peer NP 1  is connected to the superpeer SP 13 , the normal peer NP 2  is connected to the superpeers SP 10  and SP 12 , and the normal peers NP 3  and NP 4  are both connected to the superpeer SP 11 .  
         [0034]     The separation of domains and the hierarchical federated architecture is achieved by adding the new proxypeers PP 1 , PP 2  according to the invention. The superpeers with the unique identifications SP 5  and SP 7  are participating in their role as proxypeers at the same time in the superpeer structures of two hierarchy levels, here the global domain superpeer ring GSPR and the local domain superpeer ring LSPR. A proxypeer PP 1  or PP 2  has two legs. On the one side, it is a local superpeer and joins the local domain superpeer ring LSPR and on the other side, it is a global superpeer and joins the global domain superpeer ring GSPR. The local domain superpeer ring LSPR handles all local service traffic, like queries and publications of services and information in a local domain. The global domain superpeer ring GSPR is responsible for global concerns, e.g. worldwide access to a service via the internet.  
         [0035]     The interfacing proxypeers PP 1 , PP 2  are organized among themselves, e.g. as a proxypeer ring PPR in our example suited to implement e.g. the Chord technology.  
         [0036]     Information and services are distributed e.g. by Chord technology to certain superpeers SP 1 -SP 13  in the superpeer rings GSPR and LSPR. These superpeers SP 1 -SP 13  are linked to certain proxypeers PP 1 , PP 2 , which organize publishing or lookups of information and services in the next hierarchy level, i.e. in the next domain. Hence proxypeers PP 1 , PP 2  decide if they route the publication of, or the lookup for data and services, to another domain, e.g. to the public Internet. Further, if there are queries from outside, proxypeers PP 1 , PP 2  decide whether they will route them into the local domain or not.  
         [0037]     New mechanisms are useful or required among all participating peers for the autonomous organization of this new federated hierarchical network structure.  
         [0038]     In a preferred embodiment, in case of a connection setup of a booting peer to a superpeer, this superpeer checks for advertisements of normal peers and superpeers located in the same domain as the booting peer. Where applicable, the superpeer refers the booting peer to the better suited neighbor(s).  FIG. 1  gives an example for this feature: After booting, the normal peer NP 1  first logs-on to the superpeer SP 8 , which is known to the normal peer NP 1  e.g. from local peer cache or bootstrap mechanism (indicated by the double-arrow labeled  1  in  FIG. 1 ) The superpeer SP 8  now looks for advertisements of better located superpeers SP 10 -SP 13  in the same domain as the normal peer NP 1  (indicated by the double-arrow labeled  2  in  FIG. 1 ) and refers the normal peer NP 1  to the local superpeer SP 13  for connection (indicated by the double-arrow labeled  3  in  FIG. 1 ).  
         [0039]     In another preferred embodiment, a peer&#39;s role to play in the communication network is detected and adapted on any network changes. A peer can become automatically a proxypeer of a domain e.g if no proxypeer is available, to prevent the existing proxypeers from overload situations or for redundancy requirements. Adapted to the example in  FIG. 1 , this means that if the proxypeers PP 1  and PP 2  are overloaded with superpeer connections, a suitable additional proxypeer is selected from the local domain SP ring LSPR, e.g. the superpeer SP 10 .  
         [0040]     In another preferred embodiment, if peers get knowledge of other local peers e.g. by refer-mechanisms, LAN broadcast and the like, they automatically start building a local domain with normal peers, superpeers and proxypeers with according structures, e.g. a superpeer ring and a proxypeer ring. This results in an exemplary hierarchical network as shown in  FIG. 1 .  
         [0041]     In another preferred embodiment, proxypeers provide efficient and autonomous mechanisms for redundant storage of information across domains. Proxypeers recognize their redundancy status and involve, if necessary, further redundant proxypeers for managing the database information like DHT-keys (DHT=distributed hash table) and service advertisements.  
         [0042]      FIG. 2  shows an example for 1:1 redundancy for the global advertisements of the normal peer NP 10  across multiple hierarchy levels.  
         [0043]     The communication network according to the invention depicted in  FIG. 2  comprises by way of example a normal peer NP 10 , five superpeers, SP 20 , SP 21 , SP 24 , SP 71  and SP 72  and eight proxypeers PP 31 - 32 , PP 41 - 42 , PP 51 - 52  and PP 61 - 62 .  
         [0044]     The normal peer NP 10  is connected to two superpeers SP 71  and SP 72 . These two superpeers SP 71  and SP 72  are connected in such a way with the two proxypeers PP 61  and PP 62  that they build together the domain of a local department of a company DEP in form of a ring structure.  
         [0045]     The four proxypeers PP 61 , PP 62 , PP 51  and PP 52  are connected in such a way that they build the domain of a location of the company LOC in form of a ring structure, and the four proxypeers PP 51 , PP 52 , PP 41  and PP 42  are connected in such a way that they build the domain of the company worldwide COM in form of a ring structure. Finally, the three superpeers SP 20 , SP 21  and SP 24  and the two proxypeers PP 31  and PP 32  are connected in form of a ring structure and belong to the hierarchical level of the global internet INT.  
         [0046]     The global advertisement of the normal peer NP 10  shall occur in the superpeer SP 20 , as e.g. determined by a hash procedure according to the Chord technology. Therefore, the normal peer NP 10  has to send a notice to the superpeer SP 20  to make itself known. The aim is to have in this example in every hierarchical level two peers being involved in the advertisement procedure. The flow of the notice up to the global internet INT is indicated in  FIG. 2  by lines.  
         [0047]     The normal peer NP 10  sends the key “#20”, addressing the superpeer SP 20 , to the superpeer SP 71  and SP 72 . Then, each of the proxypeers PP 61  and PP 62  receive the key “#20” from only one superpeer SP 71  or SP 72  respectively, which is called case  1  and is indicated by a dotted box in  FIG. 2 . As proxypeer PP 62  receives the key “#20” from only one superpeer SP 72 , it knows that another proxypeer, here proxypeer PP 61 , is available for redundancy. So no action has to be undertaken by proxypeer PP 62  to achieve redundancy. Afterwards, the proxypeer PP 52  receives two same keys “#20” from the two proxypeers PP 61  and PP 62 , which is called case  2  and is indicated by a dotted box in  FIG. 2 . Thus, the proxypeer PP 52  knows that it has to incorporate a new redundant proxypeer PP 51 . Finally, the notice with the key“#20” is sent on the one hand via proxypeers PP 51 , PP 41  and PP 31  and on the other hand via proxypeers PP 52 , PP 42  and PP 32  to the global internet INT. Here, the global advertisement is stored in the superpeer SP 20  and, for redundancy reasons, also in the superpeer SP 21 .  
         [0048]     This example also demonstrates the scalability of the mechanism, where the number of involved proxypeers is automatically kept to two for each domain hierarchy level.  
         [0049]     In another preferred embodiment, the confidentiality level of every single service advertisement is graded in a generic way and respected by the proxypeers. By regarding this information each proxypeer determines whether the information can be published to the next higher hierarchy level, i.e. domain, or should be kept local.  
         [0050]      FIG. 3  shows an example for a normal peer NP 99  offering two different services to the communication network, the first service graded as local and the second service graded as global.  
         [0051]     The communication network according to the invention depicted in  FIG. 3  comprises by way of example a normal peer NP 99 , four superpeers SP 15 , SP 45  and SP 82 - 83  and two proxypeers PP 91 - 92 .  
         [0052]     The normal peer NP 99  is connected to two superpeers SP 82  and SP 83  of a local domain which in turn are connected to a global domain via proxypeers PP 91  and PP 92  respectively. The superpeer SP 15  belongs to the local domain and is connected to both the superpeer SP 82  and the superpeer SP 83  and the superpeer SP 45  belongs to the global domain and is connected to both the proxypeer PP 91  and the proxypeer PP 92 .  
         [0053]     The description and the confidentiality grade are described within the service advertisement SA 15  of the local service and within the service advertisement SA 45  of the global service. The responsible redundant superpeers SP 82  and SP 83  are publishing the service advertisements SA 15  and SA 45  to the communication network. The searchable service key S#15 of the local service described by the service advertisement SA 15  is stored locally at the superpeer SP 15 . The searchable service key S#45 of the global service described by SA 45  is published via the two proxypeers PP 91  and PP 92  to the global domain and are stored at the superpeer SP 45 .  
         [0054]     From the global domain, one gets access to the global service advertisement SA 45  from the superpeer SP 45  either via the proxypeer PP 91  to the superpeer SP 82 , or via the proxypeer PP 92  to the superpeer SP 83 , which is indicated by the dotted arrows.  
         [0055]     As the local service advertisement SA 15  is not known in the global domain, one gets access to the local service advertisement SA 15  only from the local domain from the superpeer SP 15  to the superpeer SP 82  or to the superpeer SP 83 , indicated by the dotted arrows.  
         [0056]     In another preferred embodiment, existing keep-alive mechanisms are adapted to maintain the connections of proxypeers to the communication network across different hierarchy levels in case of IP-address changes, distortion of network address or port address translation and network or node failures. Furthermore, proxypeers have to support limited lifetime of service advertisements and DHT keys by implementing suitable update messages and dynamic cache cleanup.