Abstract: A method for configuring quality-of-service quantities in a network including a first network segment has a first gateway as a network subscriber and each of multiple second network segments has a second gateway as a network subscriber. The first gateway and the second gateways are logically set up in a tree structure having multiple stages. Each gateway in a stage is connected in a data-conducting manner to precisely one gateway in a stage situated below. The first gateway forms the lowest stage. Each gateway makes a quality-of-service quantity available for the forwarding of data. The method includes: an addressed gateway receiving a quality-of-service request from a requesting network subscriber; checking whether the addressed gateway has a sufficient free quality-of-service quantity; if not, rejecting the quality-of-service request by a negative reply; if so, forwarding the quality-of-service request to the gateway in the stage situated below.

Abstract: A method for operating a communications system, in particular a communications system based on software-defined networking, which has at least one network infrastructure component, in particular an SDN switch, and at least one communications device, the network infrastructure component being developed for forwarding data to and/or from the at least one communications device. The method includes the following steps: allocating the communications device to at least one security zone; specifying at least one forwarding rule for forwarding data by the network infrastructure component to and/or from the communications device, the specification of the forwarding rule taking place under consideration of the security zone.

Abstract: A device and method for operating a communications network in a vehicle, or for operating an industrial communications network; a control entity for the communications network, in particular, a software-defined networking controller, determining a countermeasure after detection of an attack; an infrastructure component being configured as a function of the countermeasure, in particular, by setting at least one filtering, blocking or forwarding rule; and at least one data stream from or to at least one other infrastructure component being isolated by the infrastructure component, in a portion of the communications network; or at least one data stream to or from an end node being isolated by the infrastructure component, in a portion of the communications network.

Abstract: A method and device for operating a network component and a control instance in a software-defined networking communication infrastructure. The software-defined networking communication infrastructure is switched from an operation according to a first strategy for forwarding time-critical data streams in network components of the communication infrastructure to an operation according to a second strategy for forwarding time-critical data streams in network components as a function of at least one trigger signal, the at least one trigger signal being received in an operation according to the first strategy from a control instance in a unicast message or in a broadcast message.

Abstract: A method for operating a communications system, in particular a communications system based on software-defined networking, which has at least one network infrastructure component, in particular an SDN switch, and at least one communications device, the network infrastructure component being developed for forwarding data to and/or from the at least one communications device. The method includes the following steps: allocating the communications device to at least one security zone; specifying at least one forwarding rule for forwarding data by the network infrastructure component to and/or from the communications device, the specification of the forwarding rule taking place under consideration of the security zone.

Abstract: A method and device for operating a network component and a control instance in a software-defined networking communication infrastructure. The software-defined networking communication infrastructure is switched from an operation according to a first strategy for forwarding time-critical data streams in network components of the communication infrastructure to an operation according to a second strategy for forwarding time-critical data streams in network components as a function of at least one trigger signal, the at least one trigger signal being received in an operation according to the first strategy from a control instance in a unicast message or in a broadcast message.

Abstract: A device and method for operating a communications network in a vehicle, or for operating an industrial communications network; a control entity for the communications network, in particular, a software-defined networking controller, determining a countermeasure after detection of an attack; an infrastructure component being configured as a function of the countermeasure, in particular, by setting at least one filtering, blocking or forwarding rule; and at least one data stream from or to at least one other infrastructure component being isolated by the infrastructure component, in a portion of the communications network; or at least one data stream to or from an end node being isolated by the infrastructure component, in a portion of the communications network.