Patent ID: 7408936

Claim:
A method of routing packets in a network system, the network system comprising a plurality of edge nodes, a plurality of core nodes wherein selected core nodes in the plurality of core nodes are coupled to communicate with selected edge nodes in the plurality of edge nodes, and a plurality of external nodes external from the edge nodes with selected external nodes coupled to communicate with selected edge nodes in the plurality of edge nodes wherein different external nodes in the plurality of external nodes are associated with a plurality of different entities sharing resources on the network system, the method comprising: proposing a set of entities from the plurality of different entities, wherein the proposed set comprises entities associated with external nodes that share respective connections to a number of edge nodes in the plurality of edge nodes such that the shared number is less than a total number of all edge nodes to which each different entity in the set is connected; assigning a single edge node tag to the proposed set of entities; and communicating the single edge node tag to the plurality of edge nodes such that the single edge node tag may be inserted into packets by edge nodes for purposes of routing those packets through certain core nodes in the plurality of core nodes and to external nodes corresponding to the single edge node tag, conditioned on determining that the proposed set of entities, by sharing the single edge node tag, will provide for a leakage among the edge nodes below a threshold and further conditioned on determining that the proposed set of entities, by sharing the single edge node tag, will not violate an imposed restriction, wherein the imposed restriction is selected from a set consisting of: data security requirements of any entity in the proposed set of entities; data delay requirements of any entity in the proposed set of entities; a prohibition that excludes one or more entities in the plurality of entities from sharing the single edge node tag; and a prohibition against grouping of a particular entity with other entities for purposes of sharing a single edge node tag.