Patent Issued for System For Providing An Isolated Testing Model For Disaster Recovery Capabilities (USPTO 10,609,127)

2020 APR 15 (NewsRx) -- By a News Reporter-Staff News Editor at Insurance Daily News -- From Alexandria, Virginia, NewsRx journalists report that a patent by the inventors Anderson, Kerry R. (West Hartford, CT); Buccetti, John G. (Wallingford, CT); Merola, Jr., Joseph E. (Westbrook, CT); Saucier, Kenneth A. (Bristol, CT), filed on May 14, 2019, was published online on April 13, 2020.

The patent’s assignee for patent number 10,609,127 is Hartford Fire Insurance Company (Hartford, Connecticut, United States).

News editors obtained the following quote from the background information supplied by the inventors: “Many businesses and organizations rely on computer networks to provide access to critical data and/or critical services. However, computer networks can encounter problems, such as power outages, system failures, fires and/or other disasters, which can inhibit or completely interrupt their ability to provide access to critical data and services. The inhibition, or complete interruption, of access to critical data and services is known as downtime and may result in expensive productivity losses for a business or organization. As a result, many business and organizations seek to reduce or eliminate downtime by operating both a primary network (‘PN’) and a disaster recovery network (‘DRN’) in a live production environment. A live production environment is the collection of network devices and services they provide that a business or organization relies upon for day-to-day operations and backup capabilities. A DRN is a secondary network that provides backup access to critical data and/or critical services (collectively known as disaster recovery capabilities) in the event the primary network is inhibited or completely prevented from providing access to critical data and/or critical services due to a power outage, flood, system failure and/or other disaster. DRNs are expensive to operate and maintain. Thus, DRNs must be highly reliable in their ability to provide disaster recovery capabilities in order to be cost-effective. Accordingly, many business and organizations test the ability of their DRNs to provide disaster recovery capabilities (known as a DRN’s reliability).

“Traditionally, the reliability of a DRN operating in a live production environment is tested by moving the DRN from the live production environment to an isolated test network. Moving a DRN from a live production environment to an isolated network is an expensive procedure that typically requires several weeks of preparation in which the physical wiring and network configurations of hundreds of network devices are altered. Further, integrating a DRN that has been moved to an isolated test network back into a live production environment often requires additional weeks to reinstate the previous physical wiring and network configurations of the altered network devices. Further still, a DRN cannot provide disaster recovery capabilities while in an isolated network. Thus, testing the reliability of a DRN by moving it to an isolated network significantly increases the risk of incurring an extended period of downtime in the event a disaster occurs.

“Other methods of testing the reliability of a DRN seek to reduce the risk of downtime by replicating the backup network in hardware and/or software. However, both of these approaches are expensive as they require the use of additional computing resources.

“Moreover, DRNs that have been moved to an isolated network or replicated in hardware and/or software have different configuration settings during the reliability test than in a live production environment. Thus, the results of a reliability test of a DRN using the above-mentioned methods serve only as an approximation of the reliability of that particular DRN while operating in a live production environment.”

As a supplement to the background information on this patent, NewsRx correspondents also obtained the inventors’ summary information for this patent: “In one embodiment, provided is a system for providing an isolated testing configuration for testing disaster recovery capabilities. The system includes a primary network. The primary network comprises a first data server and a first service server that provide one or more users access to critical data and critical services. The system further includes a streamlined backup network. The streamlined backup network includes a second data server and a second service server that also provide the one or more users access to the critical data and the critical services. The system can be switched between a production mode and a test mode. When the system is in the production mode, the primary network and the streamlined backup network form a live production environment, and the streamlined backup network provides the one or more users backup access to the critical data and the critical services in the event the primary network is unable provide access to the critical data and the critical services. When the system is in the test mode, the streamlined backup network is removed from the live production environment by logically and/or physically isolating the streamlined backup network from the primary network such that the ability of the streamlined backup network to provide the one or more users backup access to the critical data and the critical services can be tested. The second data server and the second service server have the same configuration in the test mode and in the production mode. The system may further include an isolation appliance and the streamlined backup network may further include one or more blocks having external network connections to the primary network by way of the isolation appliance. The second data server and the second service server may be grouped into the one or more blocks. When the system is in the test mode, the isolation appliance may prohibit the second data server and the second service server from communicating with the primary network by disabling the external network connection of each block. When the system is in the production mode, the isolation appliance may enable the second data server and the second service server to communicate with the primary network by enabling the external network connection of each block. The streamlined backup network may further include a load balancer that generates a network traffic distribution by distributing network traffic to at least one of the second data server and the second service server. The load balancer may adapt the network traffic distribution based at least in part on whether the system is in the production mode or the test mode. The first service server of the primary network and the second service server of the streamlined backup network may each include an active directory server, a domain name service server, a dynamic host configuration protocol server, and an application server. The primary network and the streamlined backup network may each further include a demilitarized zone and an internal network. A testing system may be connected to the streamlined backup network when the system is in the test mode.

“In another embodiment, provided is a streamlined backup network designed to provide an isolated testing configuration for disaster recovery capabilities. The streamlined backup network includes a first data server and a first service server providing one or more users access to critical data and critical services. The streamlined backup network is configured to be connected to a primary network. The primary network includes a second data server and a second service server for providing the one or more users access to the critical data and the critical services. The streamlined backup network is configured to switch between a production mode and a test mode. When the streamlined backup network is in the production mode, the streamlined backup network is connected to the primary network to form a live production environment, and the streamlined backup network provides the one or more users backup access to the critical data and the critical services in the event the primary network is unable to provide access to the critical data and the critical services. When the streamlined backup network is in the test mode, the streamlined backup network is removed from the live production environment by logically and/or physically isolating the streamlined backup network from the primary network such that the ability of the streamlined backup network to provide the one or more users backup access to the critical data and the critical services can be tested without inhibiting the operation of the primary network. The first data server and the first service server have the same configuration in the test mode and in the production mode. The streamlined backup network may further include one or more blocks having network connections to the primary network by way of an isolation appliance. For example, the first data server and the first service server may be grouped into the one or more blocks such that when the streamlined backup network is in the test mode, the isolation appliance prohibits the first data server and first service server from communicating with the primary network by disabling the network connection of each block. When the streamlined backup network is in the production mode, the isolation appliance may enable the first data server and first service server to communicate with the primary network by enabling the network connection of each block. The streamlined backup network may further include a load balancer that generates a network traffic distribution by distributing network traffic to at least one of the second data server and the second service server. The load balancer may adapt the network traffic distribution based at least in part on whether the streamlined backup network is in the production mode or the test mode. The first service server of the streamlined backup network and the second service server of the primary network each include an active directory server, a domain name service server, a dynamic host configuration protocol server and an application server. The streamlined backup network and the primary network may each include a demilitarized zone and an internal network.

“In still another embodiment, provided is a primary network designed to provide an isolated testing configuration for disaster recovery capabilities. The primary network includes a first data server and a first service server providing one or more users access to critical data and critical services. The primary network is configured to be connected to a streamlined backup network. The streamlined backup network includes a second data server and a second service server for providing the one or more users access to the critical data and the critical services. The primary network is configured to switch between a production mode and a test mode. When the primary network is in the production mode, the primary network is connected to the streamlined backup network to form a live production environment, and the streamlined backup network provides the one or more users backup access to the critical data and the critical services in the event the primary network is unable to provide access to the critical data and the critical services. When the primary network is in the test mode, the streamlined backup network is removed from the live production environment by logically and/or physically isolating the streamlined backup network from the primary network such that the ability of the streamlined backup network to provide the one or more users backup access to the critical data and the critical services can be tested without inhibiting the operation of the primary network. The second data server and the second service server of the streamlined backup network have the same configuration in the test mode and in the production mode. The streamlined backup network may further include one or more blocks having external network connections to the primary network by way of an isolation appliance. The second data server and the second service server of the streamlined backup network may be grouped into the one or more blocks. In the test mode, the isolation appliance may prohibit the primary network from communicating with the second data server and the second service server by disabling the external network connection of each block. When the primary network is in the production mode, the isolation appliance enables the primary network to communicate with the second data server and second service server by enabling the external network connection of each block. The streamlined backup network may further include a load balancer that generates a network traffic distribution by distributing network traffic to at least one of the second data server and the second service server. The load balancer may adapt the network traffic distribution based at least in part on whether the primary network is in the production mode or the test mode.”

The claims supplied by the inventors are:

“What is claimed is:

“1. A system for providing an isolated testing configuration for disaster recovery capabilities, comprising: a primary network comprising at least one first server that provides one or more users access to data and services; a streamlined backup network comprising at least one second server that also provides the one or more users access to the data and the services; and an isolation appliance comprising one or more switches establishing an external network connection between the primary network and the streamlined backup network; wherein the system is switched between a production mode wherein the primary network and the streamlined backup network form a live production environment wherein the streamlined backup network provides the one or more users backup access to the data and the services in the event the primary network is unable provide access to the data and the services, and a test mode wherein the streamlined backup network is removed from the live production environment by isolating the streamlined backup network from the primary network such that backup access to the data and the services on the streamlined backup network is tested without inhibiting the operation of the primary network; wherein, when the system is in the test mode, the isolation appliance prevents the at least one second server from communicating with the primary network by physically disconnecting the external network connection at the isolation appliance to physically isolate the streamlined backup network from the primary network when the streamlined backup network is in the test mode; and wherein the at least one second server has the same configuration in the test mode and in the production mode.

“2. The system for providing an isolated testing configuration for disaster recovery capabilities of claim 1, wherein the at least one second server of the streamlined backup network is configured into one or more blocks; wherein the external network connection of the streamlined backup network to the isolation appliance includes an external network connection physically connecting each of the one or more blocks to the isolation appliance whereby the one or more blocks of the streamlined backup network are connected to the live production environment; and wherein, when the system is in the test mode, the isolation appliance prevents the at least one second server from communicating with the primary network by physically disabling the external network connection of each block to the isolation appliance.

“3. The system for providing an isolated testing configuration for disaster recovery capabilities of claim 2, wherein the isolation appliance comprises one or more switches with one or more ports; and wherein the external network connections of the one or more blocks of the streamlined backup network physically connect to the one or more ports of the one or more switches of the isolation appliance; and wherein the isolation appliance physically disables the external network connection of each block to the one or more ports of the one or more switches of the isolation appliance to physically isolate the streamlined backup network from the primary network when the streamlined backup network is in the test mode.

“4. The system for providing an isolated testing configuration for disaster recovery capabilities of claim 2, wherein, when the system is in the production mode, the isolation appliance enables the at least one second server to communicate with the primary network by enabling the external network connection of each block.

“5. The system for providing an isolated testing configuration for disaster recovery capabilities of claim 1, wherein the streamlined backup network further comprises a load balancer that generates a network traffic distribution by distributing network traffic to the at least one second server, wherein the load balancer adapts the network traffic distribution based at least in part on whether the system is in the production mode or the test mode.

“6. The system for providing an isolated testing configuration for disaster recovery capabilities of claim 1, wherein the at least one first server of the primary network and the at least one second server of the streamlined backup network each include: an active directory server; a domain name service server; a dynamic host configuration protocol server; and an application server.

“7. The system for providing an isolated testing configuration for disaster recovery capabilities of claim 1, wherein the primary network and the streamlined backup network each comprises a demilitarized zone and an internal network.

“8. The system for providing an isolated testing configuration for disaster recovery capabilities of claim 1, wherein a testing system is connected to the streamlined backup network when the system is in the test mode.

“9. A streamlined backup network designed to provide an isolated testing configuration for disaster recovery capabilities, comprising: at least one first server providing one or more users access to data and services; wherein the streamlined backup network is configured to be connected to a primary network via an external network connection at an isolation appliance, the primary network comprising at least one second server for providing the one or more users access to the data and the services; wherein the streamlined backup network is configured to switch between a production mode wherein the primary network and the streamlined backup network form a live production environment, and the streamlined backup network provides the one or more users backup access to the data and the services in the event the primary network is unable to provide access to the data and the services, and a test mode wherein the streamlined backup network is removed from the live production environment by isolating the streamlined backup network from the primary network such that backup access to the data and the services on the streamlined backup network is tested without inhibiting the operation of the primary network; wherein, when the streamlined backup network is in the test mode, the isolation appliance prevents the at least one first server of the streamlined backup network from communicating with the primary network by physically disconnecting the external network connection at the isolation appliance to physically isolate the streamlined backup network from the primary network when the streamlined backup network is in the test mode; and wherein the at least one first server has the same configuration in the test mode and in the production mode.

“10. The streamlined backup network designed to provide an isolated testing configuration for disaster recovery capabilities of claim 9, wherein the at least one first server of the streamlined backup network is configured into one or more blocks; wherein the external network connection of the streamlined backup network to the isolation appliance includes an external network connection physically connecting each of the one or more blocks to the isolation appliance whereby the one or more blocks of the streamlined backup network are connected to the live production environment; and wherein, when the streamlined backup network is in the test mode, the isolation appliance prevents the at least one first server of the streamlined backup network from communicating with the primary network by physically disabling the external network connection of each block to the isolation appliance.

“11. The streamlined backup network designed to provide an isolated testing configuration for disaster recovery capabilities of claim 10, wherein the isolation appliance comprises one or more switches with one or more ports; and wherein the external network connections of the one or more blocks of the streamlined backup network physically connect to the one or more ports of the one or more switches of the isolation appliance; and wherein the isolation appliance physically disables the external network connection of each block to the one or more ports of the one or more switches of the isolation appliance to physically isolate the streamlined backup network from the primary network when the streamlined backup network is in the test mode.

“12. The streamlined backup network designed to provide an isolated testing configuration for disaster recovery capabilities of claim 10, wherein when the streamlined backup network is in the production mode, the isolation appliance enables the at least one first server of the streamlined backup network to communicate with the primary network by enabling the external network connection of each block.

“13. The streamlined backup network designed to provide an isolated testing configuration for disaster recovery capabilities of claim 9, further comprising a load balancer that generates a network traffic distribution by distributing network traffic to the at least one first server, wherein the load balancer adapts the network traffic distribution based at least in part on whether the streamlined backup network is in the production mode or the test mode.

“14. The streamlined backup network designed to provide an isolated testing configuration for disaster recovery capabilities of claim 9, wherein the at least one first server of the streamlined backup network and the at least one second server of the primary network each include: an active directory server; a domain name service server; a dynamic host configuration protocol server; and an application server.

“15. The streamlined backup network designed to provide an isolated testing configuration for disaster recovery capabilities of claim 9, wherein the streamlined backup network and the primary network each comprises a demilitarized zone and an internal network.

“16. A primary network designed to provide an isolated testing configuration for disaster recovery capabilities, comprising: at least one first server providing one or more users access to data and services; wherein the primary network is configured to be connected to a streamlined backup network via an external network connection at an isolation appliance, the streamlined backup network comprising at least one second server for providing the one or more users access to the data and the services; wherein the primary network is configured to switch between a production mode wherein the primary network and the streamlined backup network form a live production environment, and the streamlined backup network provides the one or more users backup access to the data and the services in the event the primary network is unable to provide access to the data and the services, and a test mode wherein the streamlined backup network is removed from the live production environment by isolating the primary network from the streamlined backup network such that backup access to the data and the services on the streamlined backup network is tested without inhibiting the operation of the primary network; wherein, when the primary network is in the test mode, the isolation appliance prevents the at least one first server of the primary network from communicating with the streamlined backup network by physically disconnecting the external network connection at the isolation appliance to physically isolate the primary network from the streamlined backup network when the primary network is in the test mode; and wherein the at least one second server has the same configuration in the test mode and in the production mode.

“17. The primary network designed to provide an isolated testing configuration for disaster recovery capabilities of claim 16, wherein the at least one second server of the streamlined backup network is configured into one or more blocks; wherein the external network connection of the streamlined backup network to the isolation appliance includes an external network connection physically connecting each of the one or more blocks to the isolation appliance whereby the one or more blocks of the streamlined backup network are connected to the live production environment; and wherein, when the primary network is in the test mode, the isolation appliance prevents the at least one second server of the streamlined backup network from communicating with the primary network by physically disabling the external network connection of each block to the isolation appliance.

“18. The primary network designed to provide an isolated testing configuration for disaster recovery capabilities of claim 16, wherein the isolation appliance comprises one or more switches with one or more ports; and wherein the external network connections of the one or more blocks of the streamlined backup network physically connect to the one or more ports of the one or more switches of the isolation appliance; and wherein the isolation appliance physically disables the external network connection of each block to the one or more ports of the one or more switches of the isolation appliance to physically isolate the streamlined backup network from the primary network when the streamlined backup network is in the test mode.

“19. The primary network designed to provide an isolated testing configuration for disaster recovery capabilities of claim 18, wherein when the primary network is in the production mode, the isolation appliance enables the primary network to communicate with the at least one second server of the streamlined backup network by enabling the external network connection of each block.

“20. The primary network designed to provide an isolated testing configuration for disaster recovery capabilities of claim 16, wherein the streamlined backup network further comprises a load balancer that generates a network traffic distribution by distributing network traffic to the at least one second server, wherein the load balancer adapts the network traffic distribution based at least in part on whether the primary network is in the production mode or the test mode.”

For additional information on this patent, see: Anderson, Kerry R.; Buccetti, John G.; Merola, Jr., Joseph E.; Saucier, Kenneth A. System For Providing An Isolated Testing Model For Disaster Recovery Capabilities. U.S. Patent Number 10,609,127, filed May 14, 2019, and published online on April 13, 2020. Patent URL: http://patft.uspto.gov/netacgi/nph-Parser?Sect1=PTO1&Sect2=HITOFF&d=PALL&p=1&u=%2Fnetahtml%2FPTO%2Fsrchnum.htm&r=1&f=G&l=50&s1=10,609,127.PN.&OS=PN/10,609,127RS=PN/10,609,127

(Our reports deliver fact-based news of research and discoveries from around the world.)