Patent Publication Number: US-9419898-B2

Title: Network management assembly for managing a flow of network management traffic

Description:
The present invention relates to a network management assembly for managing a flow of network management traffic. 
     When configuring a communications network, it is necessary to communicate management traffic over the network, to suitably plan, configure and monitor the various network devices to ensure correct operation of the network. The management traffic thus comprises information relating to the set-up and operation of the network. 
     In situations where the communications network is arranged to support secure communications between parties it is desirable to manage the flow of management traffic over the network, to control the type of management traffic which is communicated over a particular network link, since this may otherwise enable a hostile party to acquire information about the network from a particular link. This is a particular requirement when the network comprises a secure communication network for coalition forces in a battle scenario, since any information gleaned about the network by an enemy may compromise the coalition strategy. 
     In accordance with the present invention as seen from a first aspect, there is provided a network management assembly for managing a flow of network management traffic across a network comprising a plurality of discrete network domains, the assembly comprising: 
     a first management terminal which is arranged to transmit network management traffic to each of the network domains via a respective first communication link; 
     a second management terminal which is arranged to receive network management traffic from each of the network domains via a respective second communication link; wherein, 
     each of the first communication links are arranged to permit a flow of network management traffic from the first management terminal to the respective domain and prevent a flow of network management traffic from the respective domain to the first management terminal, and 
     each of the second communication links are arranged to permit a flow of network management traffic from the respective domain to the second management terminal and prevent a flow of network management traffic from the second management terminal to the respective domain. 
     The assembly is thus arranged to separate and isolate the flow of management traffic along specific communication links to minimise the exposure of a particular link to information about the network. The unidirectional flow of traffic along specific links further restricts the information which may be obtained about the entire network from a specific link. 
     Preferably, each of the first communication links is arranged to pass management traffic relating to a configuration of assets, namely electronic hardware associated with the respective domain, from the first management terminal to the respective domain. 
     Preferably, each of the second communication links is arranged to pass management traffic relating to a status of assets, namely electronic hardware, associated with the respective domain, from the respective domain to the second management terminal. 
     The second terminal is preferably arranged to monitor the status of the assets associated with each network domain to provide a global status of the assets associated with the network. 
     Preferably, the first management terminal is communicatively coupled with the second management terminal via a third communications link. The third communications link preferably permits a flow of management traffic from the first management terminal to the second management terminal but prevents a flow of management traffic from the second management terminal to the first management terminal. The third communications link is arranged to pass management traffic relating to a configuration of assets, namely electronic hardware associated with the respective domain, such that the second management terminal can compare the status of the assets with their intended configuration. 
     Each of the first and second communications links preferably comprise a processor having a memory for buffering a flow of management traffic along the respective link. 
     Preferably, the assembly further comprises a first and second user access terminal communicatively coupled with the first and second management terminal, respectively. The first user access terminal is further communicatively coupled with each of the processors. 
     Preferably, the assembly further comprises a switch which is arranged to separately and selectively enable a user to separately communicatively couple the first user access terminal with the first management terminal or one of the processors. 
     The assembly preferably further comprises a domain separation assembly which is arranged to receive management traffic from one or more of the network domains and communicate management traffic along the respective second communications link associated with the domain to the second management terminal. Preferably, the domain separation assembly is further arranged to receive management traffic from one or more of the first communication links for subsequent transmission to the respective network domain. 
     In accordance with the present invention as seen from a second aspect, there is provided a network management interface for managing a flow of network management traffic across a network comprising a plurality of sub-networks, each sub-network comprising a plurality of discrete domains associated with the network, 
     the interface comprising a network management assembly according to the first aspect, and a domain separation assembly which is arranged to receive management traffic from the network domains of the sub-networks and communicate management traffic along the respective second communications link of said network management assembly to the second management terminal, and which is further arranged to receive management traffic from one or more of the first communication links of said network management assembly for subsequent transmission to the respective network domain associated with a sub-network of the network. 
     Preferred features of the network management interface of the second aspect may comprise one or more of the preferred features of the network management assembly of the first aspect. 
     In accordance with the present invention as seen from a third aspect, there is provided a management traffic communications network, the network comprising a plurality of sub-networks, each sub-network comprising a plurality of domains associated with the network, 
     each sub-network comprising a network management assembly according to the first aspect for configuring and monitoring assets associated with the domains of the respective sub-network, 
     the network further comprising a network management interface of the second aspect communicatively coupled with at least one management assembly associated with each sub-network, for configuring and monitoring assets associated with the domains of the network. 
     The network domains preferably comprise security domains. 
     Further preferred features of the management traffic communications network may comprise one or more of the preferred features of the network management assembly of the first aspect and/or one or more of the preferred features of the network management interface of the second aspect. 
    
    
     
       An embodiment of the present invention will now be described by way of example only and with reference to the accompanying drawings, in which: 
         FIG. 1  is a schematic illustration of a network management assembly according to an embodiment of the present invention; 
         FIG. 2  is a schematic illustration of a network management interface according to an embodiment of the present invention; and, 
         FIG. 3  is a schematic illustration of a management traffic communications network according to an embodiment of the present invention. 
     
    
    
     Referring to  FIG. 1  of the drawings, there is illustrated a network management assembly  100  according to an embodiment of the present invention, which is arranged to manage a flow of network management traffic across a local network  200  comprising a plurality of network domains  201   a - d . In this embodiment, the domains  201   a - d  may comprise security domains which are permitted to support different security levels of communicated traffic, such as confidential, restricted, secret etc, or coalition domains, such that each domain  201   a - d  relates to a particular party of the coalition. The assembly  100  is arranged to configure and monitor various network assets  202  such as a network router or telephone associated with a particular network domain  201   a - d  to ensure correct operation of the local network  200 . 
     The assembly  100  comprises a first management terminal  101  which is communicatively coupled with a plurality of processors  102   a - d  via a respective first communications link  103   a - d , such as twisted pair of copper cables (not shown). Each of the first communications links  103   a - d  permit a flow of management traffic from the first management terminal  101  to the respective processor  102   a - d , but prevent a flow of management traffic in the opposite direction, namely from the respective processor  102   a - d  to the first management terminal  101 . 
     The assembly  100  further comprises a second management terminal  104  which is communicatively coupled with each of the plurality of processors  102   a - d  via a respective second communications link  105   a - d , which again may comprise a pair of twisted copper cables (not shown). Each of the second communication links  105   a - d  permit a flow of management traffic from the respective processor  102   a - d  to the second management terminal  104 , but prevent a flow of management traffic in the opposite direction, namely from the second management terminal  104  to the respective processor  102   a - d.    
     The first management terminal  101  is controlled and operated via a respective first user access terminal  106  which may comprise a monitor  106   a  and a keyboard  106   b  for example and is coupled to the first management terminal  101  via a primary communications link  107   a , which may comprise two pairs of twisted copper cable (not shown), each pair offering communication along a particular direction. The first user access terminal  106  does not comprise any processing capability since this would potentially allow for a deposit of information relating to the local network  200  at a single location. Instead, the processing facility is provided by a processor (not shown) provided within the first management terminal  101   
     To enable the operator (not shown) to communicate with the network assets  202 , the processors  102   a - d  are separately communicatively coupled to a domain  201   a - d  of the network  200  via a respective secondary communications link  109   a - d . The secondary communications links  109   a - d  may similarly comprise two pairs of twisted copper cables (not shown), with each pair offering communication along a particular direction. 
     In order to plan the local network  200  and configure the assets  202  of the network domains  201   a - d , the operator is arranged to provide the required planning and configuration details for the assets  202  to the first management terminal  101 , using first user access terminal, via the primary communication link  107   a . The planning and configuration instructions are then transmitted to the assets  202  of the respective domains  201   a - d  at a time determined by the operator (not shown), along the respective first communications link  103   a - d , via the respective processor  102   a - d  and secondary communication links  109   a - d.    
     The processors  102   a - d  disposed within the first/second communications links  103   a - d ,  105   a - d  are further coupled to the first user access terminal  106  via respective further primary communications links  107   b - e . Each of the primary communications links  107   a - e  are coupled at one end thereof to the respective processor/first management terminal  102   a - d ,  101  and at the other end thereof to a communications switch  108 , which enables the operator (not shown) of the first user access terminal  106  to selectively and separately access the first management terminal  101  or one of the processors  102   a - d  via the respective primary link  107   a - e . Accordingly, any debugging of the assets  202  which may be required is achieved by the operator (not shown) by communicating the appropriate instructions along the respective primary communications link  107   b - e  direct to the respective asset(s)  202  via the respective processor  102   a - d  and secondary communications link  109   a - d.    
     The assets  202  associated with the domains  201   a - d  of the local network  200 , are collectively monitored via an operator (not shown) of a second user access terminal  110 . The second user access terminal  110  comprises a monitor  110   a  and a keyboard  110   b ; the associated processing is performed within the second management terminal  104  using a processor (not shown). The second user access terminal is communicatively coupled to the second management terminal  104  via a tertiary communications link  111 , which may comprise two pairs of twisted copper cables (not shown) with each pair offering communication along a particular direction. Information relating to the status of the assets  202  associated with each domain  201   a - d  is communicated along the respective secondary communications link  109   a - d  to the respective processor  102   a - d  and onward to the management terminal  104  via the respective second communications link  105   a - d . In this respect, the primary, secondary and tertiary links  107   a - e ,  109   a - d ,  111  are arranged to support a flow of management traffic in both directions, namely to and from the respective processor  102   a - d.    
     In order that the operator (not shown) of the second user access terminal  110  can determine whether the local network  200  is performing according to the intended configuration, the management configuration traffic which is communicated to the respective domain  201   a - d  from the first management terminal  101 , is also communicated directly to the second management terminal  104  via a third communications link  112  which may comprise a twisted pair of copper cables (not shown), similar to the first and second links  103   a - d ,  105   a - d . Accordingly, the third communications link  112  is arranged to only allow management traffic to pass from the first to the second management terminal  101 ,  104 . 
     Referring to  FIG. 2  of the drawings, there is illustrated a network management interface  300  according to an embodiment of the present invention, for managing a flow of network management traffic across a network  400  comprising a plurality of sub-networks  200 , each sub-network comprising a plurality of discrete domains (not shown in  FIG. 2 ) associated with the network  400 . 
     The assets (not shown in  FIG. 2 ) associated with the domains (not shown in  FIG. 2 ) of each sub-network  200  are configured and monitored using a local management assembly  100  as described above. The network management interface  300  however, permits a planning, configuring and monitoring of the assets  202  of a domain (not shown in  FIG. 2 ) of a particular sub-network  200 , from a location which is remote to the particular sub-network  200 . In this manner, the management interface  300  provides a level of redundancy to the entire network  300 , such that in the event that a management assembly  100  associated with a particular sub-network  200  fails, then the management interface  300  can further plan, configure, manage and monitor the assets (not shown in  FIG. 2 ) associated with the domains (not shown in  FIG. 2 ) of the particular sub-network  200 . 
     The management interface  300  comprises a management assembly  100  as described above, with the addition however, of a domain separation assembly  301 . The secondary communication links  109   a - d  associated with the assembly  100  of the management interface  300  are coupled to the domain separation assembly  301  which maintains a discrete relation between the management traffic communicated along the respective secondary links  109   a - d . The domain separation assembly  301  is further communicatively coupled to a cryptogram device  302  which is arranged to encrypt the management traffic received from the secondary links  109   a - d  for communication over a network path, which may comprise a satellite link or a commercial communication link (not shown), for example, from one sub-network  200  to another sub-network  200 . 
     Conversely, the domain separation assembly  301  is also arranged to receive management traffic communicated over a network path, decrypt the traffic using the cryptogram device  302 , and pass the management traffic to the respective secondary communications link  109   a - d  for onward transmission to the second management terminal  104  of the assembly  100  associated with the management interface  300 . 
     Referring to  FIG. 3  of the drawings, there is illustrated a management traffic communications network  400  according to an embodiment of the present invention comprising a plurality of sub-networks  200 , with each sub-network  200  comprising a plurality of domains  201   a - d , such as security domains. In the embodiment illustrated, the network  400  comprises four sub-networks  200 , however, the skilled reader will recognise that the network  400  may comprise an alternative number of sub-networks  200 . The sub-networks  200  may comprise command posts for a local area network for example and the assets (not shown in  FIG. 3 ) associated with the various domains  201   a - d  of each sub-network  200  are configured and monitored using a local management assembly  100  as described above. The respective management assemblies  100  further enable the various sub-networks and thus the assets (not shown in  FIG. 3 ), to communicate with each other over the network  400 . 
     The network  400  further comprises a network management interface  300  as described above, communicatively coupled with the network  400 , via a network link which may comprise a physical connection or a wireless connection. However, it is to be appreciated that the network  400  may comprise more than one network interface  300 . It is envisaged that the network management interface  300  may be located at a command headquarters and communicatively coupled with one or more of the management assemblies  100  via a satellite link (not shown), for example. Accordingly, the management assembly  100  of each sub-network  200  is arranged to manage the assets (not shown in  FIG. 3 ) of the domains  201   a - d  of the respective sub-network  200 , while the network management interface  300  is arranged to manage the assets (not shown in  FIG. 3 ) of the entire network  400  remotely, and provides a level of management redundancy in the event that one or more of the management assemblies  100  associated with the sub-networks  200  fails. 
     In a further embodiment which is not illustrated, the first management terminal  101  of each of the management assemblies  100  of the network  400  may be communicatively coupled, so that a first management terminal  101  of one assembly  100  may instruct a further first management terminal  101  of the respective further assembly  100  with the planning of the respective further sub-network  200  and configuration of the assets  202  associated with the further sub-network  200 . Similarly, the second management terminal  104  of each of the management assemblies  100  may be communicatively coupled, so that a second management terminal  104  of one assembly  100  may receive information relating to the status of the assets  202  of a further sub-network  200  from the respective further second management terminal  104 . 
     This embodiment therefore allows communication between the management assemblies  100  over the network  400 , but in order to plan and configure the assets  202  of the further sub-network  200 , the first management terminal  101  of the management assembly  100  of the further sub-network  200  must be operational. Similarly, in order to monitor the assets  202  of the further sub-network  200 , the respective further second management terminal  104  must be operational. 
     In contrast, the network management interface  300  can plan, configure and monitor the assets  202  of the sub-networks  200 , regardless of the operational state of the respective management assembly  100 , by communicating directly with the required domains  201   a - d  of the sub-network  200 . 
     From the foregoing therefore, it is evident that the network management assembly and network management interface provide for a secure and resilient communications network.