Patent Description:
At its core, the main purpose of any information network is to deliver data (content) to the recipient (user) with a guaranteed quality of services, including bandwidth, delay and allowable limit of delay variation. However, with the current growth in the number of users, applications and the amount of content they consume (traffic), it is becoming increasingly difficult to ensure the quality of network services. The use of legacy technologies to build connections between autonomous systems with different internal routing, technical and logical segments is a major challenge and drawback of global data networks. The consequences are a decrease in the speed of information transmission, the presence of large non-useful data overhead on packets traversing the networks that lead to inefficient use of network bandwidth, significant increase in network delays, lower quality of end user experience, etc..

Patent document <CIT>) discloses methods and systems for transmitting and receiving data between a first node and a second node through a first tunnel group and a second tunnel group respectively. The first node transmits data to the second node mainly through a first tunnel group and receives data from the second node mainly through a second tunnel group. In some embodiments, the first node receives first IP packets from one of its LAN interfaces and then transmits encapsulated first IP packets and then are transmitted mainly through a first one or more WAN interfaces to the second node. The first node receives encapsulated second IP packets mainly from the second node through a second one or more of its WAN interfaces. Second IP packets are then decapsulated and transmitted through one of the LAN interfaces of the first node.

Patent document <CIT>) discloses a method for secure communications between a transmitting computer and a receiving computer includes transmitting data from the transmitting computer over a first one-way link to a data security engine, receiving and validating the data within the data security engine, and, after validating the data, transmitting the data from the data security engine to the receiving computer over a second one-way link.

Patent document <CIT>) discloses methods and systems for managing VPN tunnels. A VPN concentrator establishes a first aggregated VPN connection and a second aggregated VPN connection with a rust host and a first network device respectively. When the first aggregated VPN connection comprises a first plurality of VPN tunnels, the VPN concentrator applies uplink and downlink bandwidth limits to each of the plurality of VPN tunnels. Similarly, when the second aggregated VPN connection comprise a second plurality of VPN tunnels, the VPN concentrator applies uplink and downlink bandwidth limits to each of the plurality of VPN tunnels. The first host encapsulates a first data packet in a first encapsulating packet and transmits the first encapsulating packet to a VPN concentrator using a first aggregated VPN connection. When the VPN concentrator receives the first encapsulating packet, the VPN concentrator decapsulates the first data packet from the first encapsulating packet and encapsulates the first data packet in a second encapsulating packet. The VPN concentrator then transmits the second encapsulating packet to a first network device using a second aggregated VPN connection.

The present invention is directed to subject-matter as disclosed by the appended claims.

Multi-Service Tunnel Networking Technology (MSTNT) in accordance with embodiments of the present invention includes computer networking that provides systems and methods for deploying highly secure distributed data networks. MSTNT configures each network as an independent autonomous system connected to the global Internet, and routes packet traffic across the network independent of TCP/IP protocol. MSTNT enables the creation of logical tunnel connections with complete flexibility over the flow of data traffic, while ensuring that the order of delivery of isolated packages is maintained. MSTNT enables the creation also of monolithic communication channels from multiple transport IP channels, summing up the bandwidth of the individual sub-channels. The transport can involve Ethernet (IEEE <NUM>) traffic tunnel transmission with arbitrary labels (e.g., IEEE <NUM>, VLAN, IEEE <NUM>-in-VLAN) and MTU size up to, e.g., <NUM> bytes. The present systems cab be built on top of any data transmission channel, whether it is a dedicated mobile cellular connection or the Internet, abstracting routing technologies and physical devices and encrypting the data packets. The autonomous system can be located anywhere geographically and can use network products from any manufacturer. It can provide constant monitoring of the quality of tunnel connections and the load on them, allowing for central management of the entire network infrastructure. Accordingly, it can reduce the cost of transforming an existing network or operating one, providing the network operator with freedom of choice among vendors in subsequent operation or expansion of the network and a reduced need for specialized network engineering resources. MSTNT can help users to realize networking benefits, productivity gains, and cost savings on their existing network systems or with new network systems that they plan to deploy.

In one embodiment, a multi-service tunnel networking technology (MSTNT) system, which uses multiple internet service providers and forms logical tunnels, includes a tunnel module, which performs summing of data transport channels, enables data protection when transmitted over an unsecure network or manages Layer <NUM> Ethernet tunnels over Wide Area Networks (WAN); and a management and monitoring system (MMS) module, which enables network administrators to centrally monitor the status and operation of communication channels created by MSTNT technology; wherein the data packets' transportation from digital devices or their networks to a user and vice versa is through network data services.

In other embodiments, the MSTNT system can additionally comprise an A-Loop module, which includes a software application that operates in kernel and user space memory modules, receives and analyzes network traffic transmitted from the subscriber's network local area network (LAN) ports to a multi-service tunnel protocol (MSTP) tunnel in order to detect and block loops that appear in the network. The MSTNT system can additionally comprise a B-Test module including a client-server application which creates simplex and duplex load streams of user datagram protocol (UDP) or transmission control protocol (TCP) traffic of a bandwidth to measure quality of data transmissions, and is used for testing communication channels built using MSTNT technology. The MSTNT system can additionally comprise a Cryptocube including proprietary hardware equipment with integrated software, with several interfaces for connection to one or more designated networks, which comprises a platform crypto-module (PCM) including a software module implemented on proprietary hardware equipment to manage MSTP and multi-network transport protocol (MNTP) tunnel access control from authorized subscriber mobile devices, to enable the devices to receive and transfer data via the designated networks; and a management crypto mobile platform (MCMP) including a multiplatform software application implemented on a computer device, to administer PCM settings and to manage access to PCM from subscriber mobile devices.

In one embodiment, the tunnel module can include a tunnel collector module (TCM), which is used for controlling access to MSTNT tunnels from/to a central collector by automatically configuring tunnel access for each autonomous system that implements the MSTNT system; a multi-platform module (MPM), which provides for a user an access to the MSTNT tunnels by user devices, thereby controlling data transfer between the user devices and a local area collector; a platform mobile module (PMM), which is used to configure and manage MSTP connections from all devices to transfer data via cellular networks; and a platform crypto module (PCM) including a software module, which manages MSTP and MNTP tunnel access control from authorized subscriber mobile devices and enables the authorized subscriber mobile devices to receive and transfer data via the designated networks. The TCM can be configured as one or more of a regional collector to function as a backbone for a subscriber's MSTNT network, connecting all the control elements between geographic locations across the globe; a local area collector to enable traffic routing within a subscriber's MSTNT network; a mobile segment collector; and/or a reflector to act as a proxy device to route traffic.

The MSTNT system can further have a central collector (CC) module including a central registry and a controller, used for storing and handling configuration details for subscribers and their MSTNT networks, which is integrated with or independent of the MMS module. The MSTNT system can include an autonomous MSTNT system built on top of a data transmission channel, which allows abstracting routing technologies and physical devices and encrypting the data packets, the data transmission channel including a dedicated mobile cellular connection or the Internet. The MSTNT system can employ an operating system including a multi-platform tunnel operating system (MPT OS), installed on any telecommunication equipment based on X86, ARM, or MIPS processors. The MSTNT system can employ cloud infrastructure for docketing of the network architecture.

In another embodiment, an MSTNT method, which uses multiple internet service providers and forms logical tunnels, comprises receiving an internet protocol packet (IP packet) at a dispatch point; dispatching a MSTN packet to a logical tunnel; receiving the MSTN packet at a destination; and delivering the IP packet to a user where the IP data packets' transportation from digital devices or their networks to the user and vice versa is through network data services.

In other methods, dispatching the MSTN packet is performed by multiple transport IP channels, summing up bandwidth of individual sub-channels. The method can use MSTN packet fragmentation for the transportation of the data packets via the logical tunnel, and an order of delivery of isolated packages is maintained after the MSTN packet fragmentation, and the steps of dispatching and receiving the MSTN packet.

The MSTNT method can further include IP packets converted as MSTN packets before the transportation of the data packets via the logical tunnel; and IP packets reconstituted from MSTN packets after the transportation of the data packets via the logical tunnel. The MSTNT can be used in or by central management of an entire network infrastructure. The MSTNT method can automatically perform constant monitoring of quality of the logical tunnel connections and a load on them; when a channel in use becomes offline or is not working properly for a defined period of time, the channel is automatically changed into a new online channel; reservation of sub-channels is performed for future use, based on current MSTN packet dispatchment to the logical tunnel and future needs.

The data sent through the logical tunnel can be encrypted. The MSTNT method can filter MSTN packet duplicates. The MSTNT method can be employed for connection types including data dispatchment, digital telephony, and/or video conferencing (or others).

In still other embodiments, a multi-service tunnel networking technology (MSTNT) use for the data packets' transportation from digital devices or their networks to a user and vice versa through network data services can be employed, wherein an internet protocol packet (IP packet) is received at a dispatch point; a MSTN packet is dispatched to a logical tunnel; the MSTN packet is received at a destination; and the IP packet is delivered to a user.

The present invention will be better understood when considered in view of the attached drawings. The drawings, however, are presented merely to illustrate embodiments of the invention without limiting the invention in any manner whatsoever.

In accordance with the present embodiments, new logical networking systems and methods of processing data packets are provided that can operate using existing physical communication channels and that can guarantee the quality of services (e.g., increased data throughput, reduced latency, limited jitter, enhanced data security, support for all devices attached to the network, simplified true end-to-end network configuration and administration, true centralized network monitoring, and reduced cost of network operation), while also improving the users' data experience. Any system or method described herein for downloading data packets is also contemplated as being suitable for uploading data packets and vice versa. Using the present invention would allow network operators and organizational network administrators to build and evolve highly flexible network configurations for any set of requirements.

<FIG> depicts a block diagram of an exemplar MSTNT system. In accordance with one illustrative embodiment, a Multi-Service Tunnel Networking Technology (MSTNT) system comprises:.

A proprietary operating system, the Multi-Platform Tunnel Operating System (MPT OS) (<NUM>), is installed on any telecommunication equipment based on X86, ARM, or MIPS processors.

The Tunnel Module (TM) (<NUM>) can include two unique data transfer protocols to manage data transfer with other MSTNT modules: (<NUM>) Multi-Service Tunnel Protocol (MSTP) (<NUM>) and (<NUM>) Multi-Network Transport Protocol (MNTP)(<NUM>). The Tunnel module (<NUM>) can comprise:.

A Platform Mobile Module (PMM) (<NUM>) is used to configure and manage MSTP connections from Android™ devices in order to transfer data via cellular networks.

A Platform Crypto Module (PCM) (<NUM>), a software module, manages MSTP and MNTP tunnel access control from authorized user mobile devices and enables the devices to receive and transfer data via the designated networks.

In addition to the Tunnel module (<NUM>) and the MMS (<NUM>) module, the MSTNT system could have the following modules: A-Loop Module (<NUM>), a software application that operates in the kernel and user space memory modules, receives and analyzes network traffic transmitted from the user's network LAN ports to the MSTP tunnel in order to detect and block loops that appear in the network; B-Test Module (<NUM>), a client-server application for testing communication channels built using MSTNT technology; a Cryptocube (<NUM>), a proprietary hardware equipment with integrated software, with several LTE/ Wi-Fi/ Ethernet™ interfaces for connection to one or more designated networks.

The Cryptocube (<NUM>) can include a Platform Crypto-Module (PCM), a software module implemented on proprietary hardware equipment to manage MSTP and MNTP tunnel access control from authorized user mobile devices, to enable the devices to receive and transfer data via the designated networks; and a Management Crypto Mobile Platform (MCMP), a multiplatform software application implemented on a computer device, to administer PCM settings and to manage access to PCM from user mobile devices.

<FIG> depicts an example physical computer network implementing the MSTNT system. This example MSTNT network comprises of a user branch office gateway device.

Tunnel Collector Modules (TCM) could be configured as a Regional Collector (<NUM>) to function as a backbone for a user's MSTNT network, connecting all the control elements between geographic locations across the globe; as a local Area Collector (<NUM>) to enable traffic routing within a user's MSTNT network; as a Mobile Segment Collector (<NUM>) or as a Reflector to act proxy devices to route traffic.

The MSTNT system also comprise a Monitoring and Management System (MMS)(<NUM>) and a Central Collector Module (TCM)(<NUM>), which may be integrated with or independent of the MMS.

<FIG> depicts a logical view of an example MSTNT network and includes a user branch office gateway device with TM firmware installed to provide a MSTP connection (<NUM>) to a TCM that is configured as a Local Area Collector (<NUM>). The Local Area Collector with TM installed provides a MNTP connection (<NUM>) to a TCM that is configured as a Regional Area Collector (<NUM>). The Regional Area Collector with TM installed can also provide a MNTP connection to a TCM that is configured as a Reflector. A TCM (<NUM>) can be specially configured as a Mobile Segment Collector for mobile devices (<NUM>) via cellular LTE. Regional Area Collectors can include independent MNTP connections to the Central Collector. A Monitoring and Management System (MMS) module creates, configures, monitors, and manages each user network as an independent autonomous MSTNT system. The Central Collector, can be integrated with, or independent from the Monitoring and Management System (MMS) module. The example MSTNT network described above is illustrative only and is not intended to limit other configurations and architectures of TCMs for local, regional, reflector and mobile purposes.

By reference to <FIG>, below is a description of the functions of each logical element comprising the MSTNT network.

The Tunnel Module (<NUM>, <FIG>) performs transparent summing of data transport channels, enables data protection when transmitted over an unsecure network (encapsulation), and manages Layer <NUM> (OSI model) Ethernet tunnels over Wide Area Networks (WAN), (i.e., Internet and Intranet).

MSTP creates and organizes Layer <NUM> Ethernet tunnels over WAN networks (Internet and Intranet) and also manages and monitors tunnel-forming equipment. MSTP connects a User's Branch Office Gateway to the Local Area Collector, enabling Layer <NUM> Ethernet transport to transmit data packets using either Virtual Local Area Network (VLAN) or <NUM>. 1Q technology (single tag, QinQ or untagged).

MNTP enables transparent transport channel summation, data protection when transmitting over an unprotected network (encapsulation), and automatic filtering of data routing announcements. MNTP operates to connect the TCMs to each other and to the Central Collector, enabling Ethernet traffic transmission with arbitrary <NUM>. 1q labels, with a maximum transmission unit (MTU) size up to <NUM> bytes when transmitting a user's traffic over a MSTNT network.

TCM (<NUM>) provides for controlling access to MSTNT tunnels from/to the Central Collector (<FIG>, <FIG>) by automatically configuring tunnel access for each Autonomous System that implements the MSTNT system. TCMs can be configured as Regional Collectors, to function as a backbone for a user's MSTNT network, connecting all the control elements between geographic locations across the globe; Local Area Collectors, to enable traffic routing within a user's MSTNT network; and Reflectors, to act proxy devices to route traffic.

MPM (<NUM>) provides for the user to control access by user's devices to the MSTNT tunnels, thereby controlling data transfer between the user devices and the Local Area Collector.

The Platform Mobile Module (PMM) (<NUM>) controls MSTP tunnel access by Android™ OS-based mobile devices to transfer data via cellular networks.

PMM (<NUM>) is used to configure and manage MSTP connections (<NUM>) from Android devices.

The A-Loop Module (<NUM>), a software application that operates in the kernel and user space memory modules of the user Gateway Device analyzes network traffic transmitted from the user's network LAN ports to the MSTP tunnel in order to detect and block loops that appear in the network.

The B-Test Module (<NUM>), a client-server application for testing communication channels built using MSTNT technology, creates simplex and duplex load streams of UDP or TCP traffic of a certain bandwidth to measure the quality of data transmissions. Performance indicators that B- Test can measure include packet loss (separate for transmission and reception), latency, jitter (the variation in the latency), presence of packet reordering, and the maximum possible speed of data reception and/or transmission in the MSTNT tunnels.

The Monitoring and Management System (MMS) (<NUM>), a centralized management and monitoring platform with a user interface based on modern Web technologies (HTML5, SPA, Ajax, WebSockets), enables network administrators to centrally monitor the status and operation of communication channels created by the MSTNT technology, including, the results of different data transfer tests (e.g., Ping, B-Test), and other measures of network performance and status. For long-term (day or more) analysis, the MSTNT system will aggregate and visualize through the Web interface the quality of the subchannels of each tunnel (loss, latency fluctuations, traffic load). The Web interface controls and includes the ability to download, save, edit, and automatically create configuration files for both the server (collector) and client ends for each MSTP/MNTP tunnel. It is also possible to open a remote client device (shell) directly from the Web interface to promptly analyze incoming data (such as running a tcpdump traffic analyzer). MMS eliminates the need to monitor and manage, in certain versions of network equipment, at the routing hardware level. This alleviates the need for time-consuming network monitoring and management activity for networks that use older equipment or equipment from certain vendors.

The Central Collector (CC) (<NUM>, <FIG>) is a central registry and controller, for storing and handling configuration details for users and their MSTNT networks. CC can assign abstracted and unique logical identifiers to each operator by their geographic area of service, each user autonomous MSTNT network (under each operator, if applicable), each TCM on the user's network, and to each device connected into the user's MSTNT network. The identifier can also support the identification of geography, network operators, and equipment manufacturers.

The Cryptocube (<NUM>) is a proprietary hardware equipment with integrated software, with several LTE/Wi-Fi/ethernet interfaces for connection to one or more designated networks. Cryptocube (<NUM>) includes: (<NUM>) The Platform Crypto-Module (PCM), a software module implemented on proprietary hardware equipment, to manage MSTP and MNTP tunnel access control from authorized user's mobile devices, to enable the devices to receive and transfer data via the designated networks and (<NUM>) The Management Crypto Mobile Platform (MCMP), a multiplatform software application implemented on a computer device , to administer PCM settings and to manage access to PCM from user mobile devices.

MSTNT configures each network as an independent autonomous system connected to the global Internet (INTERNET). The autonomous system is built on top of any data transmission channel, whether it is a dedicated mobile cellular connection or the Internet.

The process of configuring and launching a new autonomous system for a user is as follows:.

<FIG> is a schematic of the steps <NUM>-<NUM> to configure a user's device for connection to the user's autonomous network based on the MSTNT system. Step <NUM> includes an administrator configures a new device for use in an MSTNT autonomous system. Step <NUM> includes the MSTNT Central Controller assigning a unique MSTNT index ID and generating a configuration key. Step <NUM> has the central controller installing firmware with the configuration key. Step <NUM> includes the subscriber/user administrator creating one or more tunnels to associate with the device. Step <NUM> has the subscriber administrator configuring the tunnels for the application case.

In Step <NUM>, the subscriber administrator selects instructions for the device to connect to a MSTNT area connector. In Step <NUM>, the subscriber administrator selects sub-channels to provide data connectivity to the device.

<FIG> depicts the configuration of an example user's device <NUM> for connection to a user's autonomous network based on the MSTNT system.

<FIG> depicts a configuration of an example network link <NUM> to connect the authorized user device to the user's autonomous network based on the MSTNT system.

<FIG> depicts the configuration of an example MSTNT tunnel <NUM> to connect the authorized user device to the user's autonomous network based on the MSTNT system.

<FIG> depicts management of an example authorized user device <NUM> configured to connect through a MSTNT tunnel to an autonomous network based on the MSTNT system.

<FIG> depicts a configuration of an example basic tunnel setting <NUM> to connect a user device to the autonomous user's network.

<FIG> depicts an example user network configuration <NUM> involving MSTNT collectors.

A MSTNT network can be built on top of any data transmission channel, whether it is a dedicated mobile cellular connection or the Internet, abstracting routing technologies and physical devices and encrypting the data packets. In accordance with aspects of the present invention, MSTNT uses a packet header structure and abstracted address details, to route packet traffic across the network independent of the TCP/IP protocol. MSTNT enables the creation of logical tunnel connections with complete flexibility over the flow of data traffic, while ensuring that the order of delivery of isolated packages is maintained. It enables the creation of monolithic communication channels from multiple transport IP channels, summing up the bandwidth of the individual sub-channels.

MSTP is a Layer <NUM> (OSI) transport protocol to organize the tunneling of data packets for Layer <NUM> (Ethernet) or Layer <NUM> (IP) OSI levels. The UDP or ICMP (Ping) protocols are used as a transport environment for the MSTP protocol.

The MSTP protocol encrypts transmitted data through its own development algorithm on "fast" logical operations (xor, and, or,. ) that provides low performance requirements for the hardware platform on which it is launched. There is also the possibility (if there is support from the hardware platform) for MSTP to support added encryption under the standard aES <NUM>-bit algorithm. To transmit useful data, the MSTP protocol can use an arbitrary number of different physical communication channels (e.g., up to <NUM>), referred to as transport sub-channels or subchannels. Sub-channels are organized in transmission/reception (tx/rx) rings and each ring is set a number (with the ring number serving as a priority). The ring can contain both working (Online) sub-channels and nonperforming (OffLine) sub-channels. Sub-channels can have different bandwidth capacities.

In order for the client part of MSTP to be able to inform the server part of the work of the sub-channel, MSPT uses service synchronization packets. A synchronization packet generated by the client is to be accepted by the server and in response the server sends the client a packet indicating that the sub-channel is working. The client, having accepted such a packet, marks the sub-channel as working. If a single synchronization packet has not been accepted after a certain interval after the sub-channel is installed (Online) or the sub-channel is marked as it does not work (Offline), transmission of data through the sub-channel stops. MSTP allows each subchannel to set the waiting interval for synchronization packets, as well as their number until the sub-channel is working. As a matter of data transport, fast stable sub-channels are used first and only in case of failure will other sub-channels be used as backups (in order of descending their bandwidth and quality). At the same time, the time to switch to a backup feed is milliseconds (set by parameters for the sub-channel) or generally equals <NUM> (in the case of hot reservations).

Each of the sub-channels of the ring is divided into two logical sub-channels (reception - rx and transmission - tx). Every such sub-channel has a number. That is, the same sub-channel can be in ring number <NUM> for data transmission and in ring <NUM> to receive data. This allows MSTP to organize asynchronous data transmission (acceptance on one sub-channel, and transmission on others). As one example of such a situation, one-way satellite Internet connections can be considered, when reception is from a satellite and transmission is through a GPRS/<NUM>/LTE mobile network. In default mode, if there are several operating sub-channels in the ring, the traffic (packets) for transmission between them is distributed equally. But it is possible to set quality of service criteria for each sub-channel. For example, one sub-channel can be set to transfer all the packets that were sent to it, while another one is set to transfer only <NUM>%, yielding the remaining <NUM>% to the next sub-channel in the ring that is Online.

It is also possible for MSTP to set a subordinate sub-channel for hot backup/mirroring purposes. In this case, the data packets transmitted through a sub-channel will be cloned and simultaneously transferred through the designated hot backup/mirroring sub-channel. The host will process the first packet that arrives through either sub-channel (in this example) and ignore the copy of the same packet that arrives through the other sub-channel. This dynamic feature of MSTP allows for significant improvement in the quality of communication, removing losses, minimizing latency, minimizing jitter, and getting zero-time switching to the backup channel.

It is also possible for MSTP to specify that n number of packets be transmitted through one sub-channel, then the next n packets go through a second sub-channel, and so on. In addition to enabling the distribution of traffic load between sub-channels with different bandwidth, MSTP's ability to transmit via multiple transport sub-channels provides a much higher degree of security than conventionally possible. For example, if <NUM>,<NUM> bytes of data is to be transferred between two points and there are three available sub-channels of communication. MSTP can be set to transmit the first block of <NUM> bytes in encrypted form through the first sub-channel, the second block through the second, and so on until all the bytes have been successfully transferred. If a third party were to attempt to listen or probe, without authorization, the traffic on the first sub-channel, the party may only be able to try and listen and probe the first <NUM> bytes. So, in addition to its use of encryption and virtual addresses, MSTNT actively tries to prevent unauthorized access to the full block of bytes in each transmission.

<FIG> depicts an illustrative MSTN header <NUM> for an exemplar data packet <NUM>. The MSTN packet header enables MSTNT's system and method of packet processing. The packet header has the following structure, taking up <NUM> bytes: struct tunhdr {
_be16 ip_id; // duplicate value from (ipv4 header). For fragmentation (<NUM>). _be16 frag_prot; // unique id to protect fragmentation (<NUM>). _be16 len; // total length (for fragmentation) (<NUM>). _u8 type:<NUM>; // package type. Data or service (<NUM>). _u8 role:<NUM>; // role: <NUM>-client, <NUM>-server (<NUM>). _u8 sub_chan_num; //the number of the subchannel (1325a). _be32 snum; // sequence number (to restore the order of packets on the peer side) (<NUM>)
};
The fields are arranged in such a way that the necessary (e.g., atomicity, speed) alignment
(e.g., memory alignment) is appropriate for the relevant processors.

The MSTNT method comprises these following steps: receiving internet protocol packet (IP packet) at the Dispatch Point; the MSTN packet dispatchment to the logical tunnel; the MSTN packet receive at the destination; the IP packet delivery to the user. In addition to these steps, there usually are present other steps, which deal with the packet processing and fragmentation. One of the examples is shown in <FIG> depicts the method by which a MSTNT tunnel processes an incoming data packet.

Referring to <FIG>, Step <NUM>: Receive IP Packet at Dispatch Point. MNTP accepts an IP packet from the user's LAN on the user's MSTNT gateway on the dispatch end. Step <NUM>: Reconstitute IP packet as a MSTN packet. <FIG> depicts a schematic for MSTN packet handling. An IP packet <NUM> is disassembled by MNTP to optimize the LAN routing information. The MSTN packet header details are then added and the newly constituted packet is then encrypted if necessary. An MSTN packet <NUM> is assembled in such a way that it includes all the necessary route information for its delivery to the recipient after passing the MSTNT tunnel. The packet is received from the kernel, then the MSTP header (<NUM> bytes) is added. Before passing through the core, the packet is cleared of irrelevant LAN headers. After adding the MSTP header details, the data is encrypted (using one of the encryption algorithms, depending on the structure and branching of the user's MSTNT network).

In <FIG>, Step <NUM>: Fragmentation. The size of the collected MSTN packet is analyzed for its compliance with the maximum transmission unit (MTU) specified in a MSTN tunnel parameter. If the packet size exceeds the specified MTU in the MSTN tunnel, it is split into two or more sub-packets in a fragmentation step. In one embodiment, if the packet size exceeds the sc_var (sub-channel variable) MTU (by default, it is <NUM> bytes), then the packet is split (fragmented). A fragmented packet <NUM> includes two parts: the first part in Step <NUM>. <NUM> will include the MSTN tunnel detail, the transport header detail, and payload data, up to the allowed MTU size for that MSTN tunnel sub-channel, the second part in Step <NUM>. <NUM> will include the remainder of the data packet. Fragmentation can be performed either by the MSTP module or by the Linux kernel.

For fragmentation by the MSTP module (<NUM>), MSTNT employs a proprietary algorithm. Data about fragmentation, in this case, is transmitted not in the L3 header (IP header), but in the service fields of the MSTP header of the tunnel, of which the traffic routers on the network know nothing. Accordingly, the routers cannot determine the presence of fragmented traffic, providing, additional security to the data packets.

For fragmentation by a kernel module (<NUM>, <FIG>), while the standard fragmentation function can be performed, this method is not always preferred. This can be due to anomalies in the operation of the transport WAN network (Internet) or the deliberate blocking of fragmented IP traffic by network traffic operators in order to prevent the use of tunnels.

Step <NUM>: Dispatch to Tunnel. MSTN packets received after fragmentation step are sent to the MSTN tunnel. Step <NUM>: Packet Handling at Destination End. On the receiving side, everything is exactly the opposite. The MSTN packet is received and the MSTN header is removed from the MSTN packet. The packet is then checked for compliance with the specified packet addressing parameters. All necessary address pointers are updated for the user device that is the final destination. When the tun_vaOchecksum is enabled, the checksum is written (crc16) and the receiving side checks the validity of this value and discards packets with corrupted data. The user's original IP packet is now restored and ready for final delivery. <FIG> depicts the MSTN header with checksum support for an exemplar data packet <NUM>. Step <NUM>: Delivery. The restored original IP packet is delivered to the user's LAN network on the receiving end.

A packet sequence recovery algorithm ensures that the sequence of packets at dispatch is restored at the destination. If the packets are delivered to the receiving side without a queue, duplicates (DUPs) are discarded.

<FIG> depicts a schematic for the MSTNT handling of packets in the kernel space (<NUM>) of an operating system. A MSTP tunnel (<NUM>) (main and auxiliary modules) works in kernel space (<NUM>). All processing of transmitted and received data, e.g., from LAN1 (<NUM>) is also performed in kernel space. This is an important factor for system performance. Only the mstp_cmd utility works in userspace (<NUM>). It uses the /dev/mstp (character special file <NUM>/<NUM>) file and the ioctl mechanism to send commands to the MSTP modules and receive data from them. Exchange mechanisms are standard for Linux (secure copying from kernel space to user space and back). This is the end of the work in userspace.

<FIG> illustrates the processing of IP and MNTP packets by the MSTP module (<NUM>) between LAN <NUM><NUM> and WAN <NUM> in the kernel space <NUM> of MPT OS.

<FIG> depicts a packet/sub-packets <NUM> for an embodiment of the present invention wherein a single data communication channel is dynamically configured by MSTN into multiple virtual MSTN tunnels, each of which can then be assigned to carry different packet streams from one or more services. In <FIG>, an example embodiment of the present invention is depicted wherein a single data communication channel, whether wired cable or cellular, between a transmission point and a receiving end, can be dynamically configured by MSTN to represent multiple MSTN tunnels, each of which can then be assigned to carry different packet streams, fragmented or unfragmented, from one or more services (e.g., VoIP, web browsing, video streaming, transmission of a digital X-ray, and transmission of an insurance charge, in the case of a medical care facility as the MSTNT user). MSTN can then combine packets sent via different streams and coming through different MSTN tunnels to re-create the original data signal that was transmitted with minimal latency, jitter, and packet loss, but with improved speed, better capacity utilization, and enhanced security. MSTNT can also enable the user to configure different quality of service (QoS) measures for packets based on their application service type, which can be specified using the applicable port identifier in the network connection.

<FIG> depicts an embodiment of the present invention wherein a single data communication channel (<NUM>) is dynamically configured by MSTN into multiple virtual MSTN tunnels (<NUM>) (packages L2 <NUM>-<NUM>), each of which can then be assigned to carry different packet streams from one or more local area networks.

In <FIG>, an example embodiment of the present invention is depicted wherein a single data communication channel, whether wired cable or cellular, between a transmission point and a receiving end, can be dynamically configured by MSTN to represent multiple MSTN tunnels, each of which can then be assigned to carry different packet streams, fragmented or unfragmented, from one or more services (e.g., VoIP, web browsing, video streaming, transmission of a digital X-ray, and transmission of an insurance charge, in the case of a medical care facility as the MSTNT user) from multiple local area networks. In essence, a single channel is transformed into multiple VLANs. In the embodiment shown in <FIG>, six Layer <NUM> channels (packages L2 <NUM>-<NUM>) are shown, but in principle MSTN can support up to <NUM>,<NUM> channels at the same time. MSTNT will use the tag associated with each packet to route it through the appropriate channel. At the receiving end, MSTN can then route each packet to its appropriate LAN destination. In contrast to a current solution such as MPLS, which will need six MPLS lines to perform the same data transport service, MSTN is able to perform the same routing function and carry the same workload using just one channel. In addition, MSTN will transfer the data packets with minimal latency, jitter, and packet loss, but with improved speed, better capacity utilization, and enhanced security. MSTNT can also enable the user to configure different quality of service (QoS) measures for packets based on their local area network, which can be specified using the applicable Layer <NUM> (OSI) identifier in the network connection.

<FIG> depicts the transfer of data using a MSTNT summation method (<NUM>) in comparison to alternative methods (<NUM>). In contrast to existing tunnel-forming systems, MSTNT provides the possibility of combining several sub-channels (<NUM>) in the summation of bandwidth mode and in the reservation mode (whether in hot or cold setting). This summation of bandwidth of channels guarantees preservation of the packets sequence - packets leave the tunnel in the same order that they enter it. MNTP can transparently sum the transport channels and protect the data packets as they are transmitted even over an unsecured network, with automatic filtering of routing instructions and Ethernet traffic transmission with arbitrary <NUM>. 1q tags and a maximum transmission unit size up to <NUM>,<NUM> bytes, but future improvements are contemplated.

By virtue of its novel tunneling system and data packet processing method, MSTNT provides superior and highly secure fault tolerance compared to alternative methods. Channels and tunnels can be pre-configured to be in cold mode, ready to be activated and used whenever necessary.

<FIG> depicts the MSTNT method to provide fault tolerant fail-over data connectivity. In normal operation, as depicted by thick solid lines with arrows, a user branch office (<NUM>) logically connects to an Area Collector (<NUM>), which in turn transmits the information received from the branch office to the Regional Collector (<NUM>) as previously depicted in <FIG> and <FIG>. In turn, the Regional Collector <NUM> transmits the data to the Central Collector (<NUM>) as previously depicted also in <FIG> and <FIG>. The user's central or head office (<NUM>) and the branch office are thus connected through MSTNT connections. If there is a disruption in the connection to the Local Collector or the Local Collector fails, rather than having the whole network stop functioning to the detriment of the Branch Office, MSTNT will switch the data traffic flow from the Branch Office directly to the Regional Collector as depicted by thin dashed line with arrows. This happens automatically in the same data session, so there is no interruption in data flow. The same automatic switching will happen in case the Regional collector fails. If for any reason both the Local and Regional collectors fail, then the Branch Office will automatically connect directly to the Head Office Central Collector as depicted by the double line with arrows, without dropping the packet.

To ensure global fault tolerance, MSTNT also provides a proxy-mirroring mode, which enables the creation of chains of servers by directing control of traffic routing outside specified networks or geographies. In combination with MSTNT's ability to dynamically configure different subchannels, it becomes possible to split the relevant data stream into sub-data streams and transmit them through different networks or geographies. For example, MSTNT would enable the direction of a traffic route from USA (Carrier Ul) Germany (Carrier Gl) France (Carrier FI) Italy (Carrier <NUM>) USA (Data Group) to USA (Carrier <NUM>) Canada (Carrier Cl).

<FIG> depicts the transfer of data using a MSTNT summation method, illustrating that MSTNT novel summation method can continue to function despite any failure in connectivity of any sub-channel, with the summation covering all available sub-channels.

The A-Loop Module (<NUM>, <FIG>) detects loops in a MSTNT network using a unique Linux kernel implementation of both passive and active loop detection methods. The A-Loop Module uses a Linux kernel module for its (core) Layer <NUM> ebtables firewall. This assures significantly improved performance. In the passive method, A-Loop uses multicast and broadcast packet counters received. When a set limit is exceeded; that is, when the loop has already gained a certain strength (packet flow), a loop is detected. In the active loop detection method, A-Loop transmits a special Ethernet packet of a certain type every N seconds (N is set to <NUM> seconds by default) and analyzes response characteristics.

MSTNT uses dynamic data traffic reflectors to ensure the best path between two end points. It can also use other protocols such as ICMP, UDP, and TCP, to route traffic. The use also of hot backup channel and data integrity checks allows MSTNT to always deliver packets by the shortest tunnel path in terms of data integrity and security.

MSTNT includes B-test, a system and a method (<NUM>) for comprehensive inspection and monitoring of the quality of the MSTNT tunnels in real time, (<NUM>) for evaluating the possibility of dynamically combining several sub-channels into a single solid communication channel through a summation method, (<NUM>) for creating tunnels through the single summed connection. MSTNT then uses the tunnels to transmit the useful payload portion of data traffic through OSI model Layer <NUM> (Ethernet) or Layer <NUM> (IP), minimizing data packet loss. As a practical matter, since Internet connectivity is relatively cheap and decreasing in cost, to configure a tunnel with a capacity of <NUM> megabits, MSTNT makes it easy to take four Internet channels with a capacity of <NUM> megabits each and using its summation method create a hot spare that can provide an ultra-stable <NUM> megabits capacity tunnel. When traffic flows increase, the <NUM>-megabit tunnel ensures that dropped packets, latency, and jitter are minimized.

Another significant aspect of the present invention includes that MSTNT can enable network operators and users to route traffic dynamically to minimize latency and to maximize capacity utilization, among other network management objectives. For example, if traffic appears to build up along a network path, MSTNT can be configured to dynamically redirect the path using TCMs configured as reflectors. This is in addition to the hot reservation option to have standby sub-channels. For even greater resilience, MSTNT can enable users to use a mode of mirroring (or scrolling), creating chains from servers to route data packets in specified geographic ways and then breaking down the data packets into sub-streams of data packets that can be transmitted via different paths and then reassembled at the destination end.

Another significant aspect of the present invention is that MSTNT can enable hardware devices built on x86, MIPS or AIMS processors, to be transformed into MSTNT-ready network devices. An exemplar embodiment of this feature is the CryptoCube (<NUM>, <FIG>). In an example embodiment, the CryptoCube is a standard router operating on a X86 processor, configured to send/receive data packets to external devices via one or more cellular antenna connections. Using an algorithm specific for this transmission modality, MSTNT can configure the CryptoCube to send/receive MSTN packets, bringing all the attributes and benefits of MSTN packet processing to a mobile router, thereby extending the systems and methods of the present invention to mobile cellular device connections.

In current technologies, bandwidth capacity in network connections can be used up by service features like tunnels and encryption. A significant and novel aspect of the present invention is that MSTNT can enable use of tunnels for packet transmission with minimal bandwidth overhead. In conventional technologies, tunnels can consume significant bandwidth, sometimes up to <NUM>% more, for each pack transmitted. This is inefficient use of network capacity and drives up the cost of network ownership. By contrast, MSTNT's ability to combine the capacity of multiple available sub-channels results in only about a <NUM>% bandwidth cost from use of tunnels, leaving more of the available bandwidth for transmission of the useful data payload.

All modern software applications use encryption. Encryption is inexpensive, and encryption of data in transit is becoming standard practice. A significant aspect of the present invention is that MSTNT can enable multiple encryption on packet transmission with minimal network resource cost.

For example, common MPLS Layer <NUM> (OSI) channels routing data packets for applications with encryption will have only about <NUM>-<NUM>% of the theoretical bandwidth capacity for useful payload transmission. The remainder is taken up by the encryption methods. By contrast, MSTNT can use the same legacy channel, but implement its encryption services with only a <NUM>-<NUM>% overhead, leaving the remainder <NUM>-<NUM>% of bandwidth capacity for useful payload transmission.

Most tunnel-based network applications use the IPsec protocol to authenticate and encrypt data packets to provide secure encrypted communication between two devices over an IP network. It finds use in VPNs. But, in many instances, encryption is done twice, wasting bandwidth (as noted above) and CPU, with no advantage. By contrast, MSTNT employs the kernel space of the MST OS to perform its encryption step, which enables a double encryption layer with minimal use of CPU. In addition, MSTNT performs encryption and decryption steps of useful data only at the first and last points of each MSTNT connection, which also leads to efficiency in use of network resources.

Unlike with general software-defined WAN solutions, MSTNT adds a proprietary Layer <NUM> - Ethernet encryption. The Layer <NUM> encryption does not consume additional bandwidth. It works on the kernel level of the router's OS, avoiding the need to employ vulnerable IP addresses provided by the Internet provider. Instead, MSTNT employs its proprietary network address assignment mechanism, which makes a MSTNT network practically inaccessible for DDoS and other IP-based network attacks.

The MSTNT Btest module (<NUM>) passes N random data streams at a given speed. On the receiving side, the MNTP module examines the throughput and loss. Also, it analyzes the order in which the test packets arrive at the destination, to evaluate any violation of the order sequence. The test transmissions can be in UDP or TCP sessions. The MSTNT implementation of BTest has several unique features: it supports multithreading in UDP, it adjusts speeds correctly, it performs through NATs, and it can measure losses correctly.

A significant aspect of the present invention is that MSTNT can enable users to monitor the health and performance of their networks in real-time.

In case of any network fault, the MMS system can then notify the user's designated network administration staff to enable them to identify and resolve the fault.

<FIG> illustratively depicts that real-time monitoring using MMS of the key performance indicators for a MSTN connection can be performed. Both download and upload performance characteristics can be measured and monitored at the sub-channel level using MSTNT MMS.

<FIG> depicts real-time monitoring using MMS of the key performance indicators of multiple MSTN sub-channels in hot mode. Note that both data is transmitted through both subchannels operating in summation mode.

<FIG> depicts real-time monitoring using MMS of the key performance indicators of multiple MSTN sub-channels, contrasting hot and cold modes. Note that one sub-channel has weak connectivity, yet MSTNT routes data without delay through the sub-channel with connectivity.

Key performance parameters can include, e.g., minimum latency; minimum jitter; increased throughput; maximum beneficial use of all available network connection capacity; minimum loss of packets during transmission; superior data transmission speed; enhanced data security; centralized network management; greater ease of network administration; lower cost of network administration; and ability to work on top of any type of data channel connection; compatible with hardware from any manufacturer, new or legacy; unlimited scalability across a user's network; compatibility with any Internet service provider globally, among others.

<FIG> depict summary details and illustrative aspects of MSTNT capabilities that solve challenges experienced by network operators and enterprise administrators today when deploying current solutions in accordance with aspects of the present invention. <FIG> depicts comparative characteristics.

<FIG> depict the application of MSTNT to the data network architecture and functional needs in various application contexts.

<FIG> depicts an example embodiment of the application of MSTNT to WAN showing a mobile user (Helix mobile router), headquarters (GX) gateway, home router (Helix TS), local office router (Helix TM), regional office router (Helix TX), etc. communication over the Internet and interacting with a Helix Cloud. Many enterprises use WANs based on earlier generations of networking technologies when bandwidth was expensive and monolithic applications supported business needs that were slow to change. Expensive equipment and certified engineers were required to manage and evolve these WANs. They are now facing a changed business reality, with data-intensive applications, mobile connectivity, unified communications, and application programming interfaces are driving dynamic cloud applications that evolve continuously. To meet these changed demands, companies are looking for secure, reliable, and scalable WAN capabilities. MSTNT can be deployed as a subscription-based network-as-a-service to service these and other WAN needs.

<FIG> depicts an example embodiment of the application of MSTNT to data centers <NUM>. Business demands on data centers are growing continuously as data-intensive applications, mobile connectivity, unified communications, smart decisioning tools, and time-sensitive business needs, among other applications, add to the traditional business productivity and enterprise resource planning applications. To meet these growing demands, companies are looking for secure, reliable, and scalable cloud technologies and virtualized applications in place of on-premises data centers and networking management. MSTNT can be deployed as a subscription-based network-as-a-service to service these and other data center networking needs.

<FIG> depicts an example embodiment of the application of MSTNT to VOIP networks. For example, a VOIP provider <NUM> can communicate over the Internet and interact with a Helix Cloud with IP phones <NUM>. For businesses looking to leverage cloud technologies for their voice, video, and data communications, their legacy WANs may not be able to meet the performance, scalability, and security requirements of the cloud applications. Replacing the WAN may not be a practical solution. MSTNT can be deployed as a subscription-based network-as-a-service to service these and other VOIP network needs.

<FIG> depicts an example embodiment of the application of MSTNT to streaming media networks where data centers <NUM> communication over the Internet and interact with the Cloud with user stations <NUM>, <NUM>. Media and entertainment companies are transforming their business models from traditional analog distribution to file-based streaming networks. This transformation is being powered by moving to networks that can support file-based content production, secure cloud- based collaborative workflows, and secure distribution through mobile applications. This transformation is placing increasing demand on bandwidth, the quality of user experience, and secure connections with users globally. MSTNT can be deployed as a subscription-based network- as-a-service to service these and other streaming media networking needs.

<FIG> depicts an example embodiment of the application of MSTNT to shared space networks <NUM>. Corporate workforces are increasingly mobile and connected, leading to an always on, business anywhere model. The same networking technologies are serving as a catalyst for new commercial real estate models, lowering the barriers between potential tenants and real estate owners. Shared workplace or co-working spaces have emerged as collaborative office space models for young ventures, for the on-demand needs of telecommuting and mobile workforces, contractors, and even corporate satellite offices. These shared spaces have to meet the networking demands of the corporate clients, with their diverse data-intensive applications, unified communication tools, business productivity applications, and enterprise resource planning applications. To meet these growing demands, shared services operators are looking for secure, reliable, and scalable cloud technologies and virtualized applications. MSTNT can be deployed as a subscription-based network-as-a-service to service these and other shared space networking needs.

<FIG> depicts an example embodiment of the application of MSTNT to Internet of Things (IOT) networks. As IoT finds increasing presence in a variety of operational contexts, new demands are being placed on the data network. As IoT devices multiply, so also is the demand for unique device addresses. Headless IoT devices require new approaches to provisioning, monitoring, and security. IoT devices (IOT) must have the ability to connect to heterogenous networks (e.g., satellite <NUM> (<FIG>), cell tower <NUM>, etc.) and to communicate with each other. To meet these growing and unique demands fueled by IoT devices, companies are looking for secure, reliable, and scalable networking capabilities that can support emerging sensors and controls. MSTNT can be deployed as a subscription-based network-as-a-service to service these and other IOT networking needs.

<FIG> depicts an example embodiment of the application of MSTNT to media networks covering live events. Venue owners, event organizers, broadcasters, and network operators are continuously looking for new ways to offer enhanced services and immersive experiences for large scale live sports, entertainment, expos/conferences, and other public events. Live <NUM> video quality, customizable multi-angle viewcasts, AI-enabled video recognition, virtual reality applications, and immersive advertising are just some of the many emerging applications. The structural features of large public venues can make data networking a challenge, forcing the use of cables in many cases. In turn, this leads to difficult network deployment, fixed camera positioning, and high costs. With LTE networks, if the compute power is a few hops away, it can lead to poor user experience. <NUM> solutions are expected to address some of these challenges in the coming years. To meet these growing objectives, event-stakeholders are looking for flexible, scalable, and reliable alternatives. MSTNT can be deployed as a subscription-based network-as- a-service to service these and other live media event networking needs.

<FIG> depicts an example embodiment of the application of MSTNT to healthcare applications. Digital healthcare products and services, in the form of electronic health records, wearables, remote diagnostics / telemedicine, and powerful healthcare analytics, are growing at a rapid pace, with their promise of improved diagnosis and treatment at a lower cost. Such growth is placing enormous loads on the data networks of medical facilities, which were designed to previously handle administrative tasks such as patient registration, billing, and personnel data. Most such facilities operate data networks that are based on proprietary network technologies that are difficult and costly to manage and scale. As healthcare IT begins to transform, attention must be given to data reliability, regulatory compliance requirements, and data security risks. MSTNT can be deployed as a subscription-based network-as-a-service to service these and other healthcare sector networking needs.

<FIG> depicts an example embodiment of the application of MSTNT to business assurance applications. As more aspects of industrial, business, organizational, and consumer life become digital, organizations face a greater risk from digital disruptions to their operations, whether those disruptions are unexpected or malicious. A resilient digital business continuity architecture and a hardened data security model are essential to addressing these challenges. Whether an organization is a large one with a complex distributed backend or a small one with limited resources to implement a custom solution, a practical digital business assurance model would have to support uninterrupted connectivity, reliable performance, and ultra-secure data networks. MSTNT can be deployed as a subscription-based network-as-a-service to service these and other networking needs driven by business assurance objectives.

<FIG> depicts an example embodiment of the application of MSTNT to transportation networks. There is increasing interest in high speed communication services for transportation systems. The interest arises from diverse application cases with varying quality of service needs: communications with the engineer/driver; closed-circuit television video for safety/security surveillance; richer passenger information systems, provisioning of passenger WiFi connectivity; and, more recently, the advent of autonomous vehicle navigation. However, the lack of quality- of service features in many solutions limits their ability to carry both mission-critical and nonmission critical data traffic in the same network reliably. A key requirement is that these services be able to deliver guaranteed quality of service in dynamically varying data traffic conditions. To achieve this, data backhaul has to accommodate dynamic configuration with mobility management driven directly from a local area network controller. MSTNT can be deployed as a subscription-based network-as-a-service to service these and other networking needs in the transportation sector.

<FIG> depicts the application of MSTNT to financial services applications. Financial technology or FinTech innovations represent a strategic frontier for financial services companies. Cloud technologies and mobile applications are driving marketing and customer services closer to each prospect and customer, alleviating the need for prospects and customers to come into branch offices to complete transactions. These applications demand low-latency, high-reliability, secure data connections, and rich personalized experiences for distributed trading, banking, insurance, and other financial services applications. To meet these growing demands, financial companies are looking for secure, reliable, and scalable cloud technologies and virtualized applications in place of on-premises data centers and branch office systems. MSTNT can be deployed as a subscription-based network-as-a-service to service these and other networking needs in the financial services sector.

<FIG> depicts an example embodiment of the application of MSTNT to service the hotspot connectivity needs of any enterprise in any location. Technology is driving a rapid increase in remote and distributed business models, where geographic location and business hours are no longer constraints on the scope and scale of business. Office workers may telecommute or work from co-working spaces, IoT bots may collect and transmit data from distributed areas, field teams may gather and process sensitive data (e.g., agriculture yield, medical information) away from metro areas, and data connectivity can be provided on-demand in areas with limited fixed connectivity (e.g., convention centers). Connectivity that is reliable, secure, and configurable for the specific data needs of a use case, is critical for these application cases. MSTNT can be deployed as a subscription-based mobile network-as-a-service to service hotspot connectivity needs of enterprises.

The MSTNT technology could be used for the data packets' transportation from digital devices or their networks to a user and vice versa through network data services. The methods could be used for the data packets' transportation for all known connection types, such as data dispatchment, digital telephony, video conferencing and other. The use of the MSTNT method comprises these main steps:.

Other computer system architectures capable of executing software and interacting with a database and users may also be used to practice this invention. It is noted that in the embodiments of the methods of the present invention discussed above, the steps may occur in a different order or steps may be omitted or added as long as the overall workflow of the methods is not frustrated. For example, when configuring a fault tolerance architecture, a reflector may not be used in the alternative data path. All possible permutations and combinations of the above steps and any additional steps are also envisioned.

It is envisioned also that any feature or element that is positively identified in this description may also be specifically excluded as a feature or element of an embodiment of the present invention in claims pertaining to that embodiment.

Claim 1:
A multi-service tunnel networking technology "MSTNT" system, which uses multiple
internet service providers and forms logical tunnels within one physical communication channel, the system comprises:
a tunnel module (<NUM>), which performs summing of data transport channels, enables data protection when transmitted over an unsecure network or manages Layer <NUM> Ethernet tunnels over Wide Area Networks "WAN"; and
a management and monitoring system "MMS" module (<NUM>), which enables network administrators to centrally monitor the status and operation of communication channels created by MSTNT technology;
wherein the data packets' transportation is permitted from digital devices or their networks to a user and vice versa through network data services, characterized in that, for data transmission, the multi-service tunnel protocol "MSTP", which operates at a kernel level of the Multi-Platform Tunnel Operating System "MPT OS", employs
a plurality of different physical communication sub-channels, which are structured into distinct groups known as transmission/reception "tx/rx" rings, where each of these tx/rx rings is assigned a unique identifier number that facilitates the ordered management and prioritization of data flow within the network.