Network operation

• US 10,389,641 B2
• Filed: 03/30/2016
• Issued: 08/20/2019
• Est. Priority Date: 03/31/2015
• Status: Active Grant

• Current Assignee: British Telecommunications PLC (BT Group PLC)
• Original Assignee: British Telecommunications PLC (BT Group PLC)
• Inventors: Turner, Michael, Healing, Alexander
• Primary Examiner(s): O Connor, Brian T
• Application Number:
  US15/563,018
• Publication Number:
  US 20180198718A1
• Time in Patent Office: 1,238 Days
• CPC Class Codes: H04L 41/0631 using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
• CPC Class Codes: H04L 41/0816 the condition being an adaptation, e.g. in response to network events
• CPC Class Codes: H04L 41/145 involving simulating, designing, planning or modelling of a network
• CPC Class Codes: H04L 41/28 Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration
• CPC Class Codes: H04L 47/2441 relying on flow classification, e.g. using integrated services [IntServ]
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/0272 Virtual private networks

Abstract

A method of operating a communications network is disclosed. In order to manage a network, it is first necessary to establish the state the network is in. This is difficult in practice because the network operational data stored and transmitted in the network takes a myriad of forms owing to the variety of suppliers and types of network equipment. There is a need to distil that network operational data down to aggregate network operational data which can be taken to provide an indication of the state of the network which is of a manageable size, and to which network management apparatus can react by sending control commands to the network. The problem of generating aggregate network operational data is difficult because of the heterogeneity of network operational data items. By finding attribute names in different network operational data items which match one another, and then comparing attribute values provided from those matching attribute names, a comparison of heterogeneous network operational data items is enabled. This enables the production of network aggregate data which more accurately reflects the operational state of the network. This in turn leads to the network management apparatus controlling the network to operate in a more efficient manner than has hitherto been possible.

Claims

1. A method of managing a communications network comprising:

obtaining a plurality of network operational data items relating to the operation of said communications network, each of said network operational data items comprising one or more attributes, each attribute comprising an attribute name and one or more values for that attribute, at least one of said network operational data items providing a plurality of values for each of one or more attributes;

calculating, for each two-way combination of network operational data items, a data item similarity measure by comparing the two network operational data items in the two-way combination, each of said data item similarity measures being calculated by;

a) comparing names of attributes to identify one or more commonly named attributes in the two network operational data items; and

b) calculating, for each of said one or more commonly named attributes, an attribute value similarity measure;

wherein, for cases where at least one of the two network operational data items in the two-way combination provides a plurality of values for a commonly named attribute, said attribute value similarity measure calculation comprises;

i) finding, for each of the plurality of values provided for said commonly named attribute in said at least one network operational data item, an attribute value similarity component with respect to each of the one or more values provided for said commonly named attribute in the other network operational data item; and

ii) aggregating the attribute value similarity components to calculate said attribute value similarity measure for said commonly named attribute;

classifying network operational data items into classes in dependence upon said data item similarity measures; and

operating a network controller to send control commands to the network to automatically apply common class-specific treatment in response to network operational data items in one of said classes.

2. A method according to claim 1 wherein said aggregation of said attribute value similarity components comprises calculating a weighted sum of said attribute value similarity components in which higher attribute value similarity components are given a higher weight than lower attribute value similarity components.

3. A method according to claim 1, wherein the two network operational data items in the two-way combination have two or more commonly named attributes, said data item similarity value calculation comprising aggregating the attribute value similarity measures for the two or more commonly named attributes to find said data item similarity measure.

4. A method according to claim 3 wherein the aggregation of said attribute value similarity measures comprises calculating a weighted sum of said attribute value similarity measures.

5. A method according to claim 4 wherein the weight applied to each attribute value similarity measure depends upon the number of values provided for the commonly named attribute in the two network operational data items.

6. A method according to claim 5 wherein said weight is proportional or equal to the total number of values provided for said commonly named attribute in the two network operational data items.

7. A method according to claim 1 further comprising:

obtaining, in relation to one or more of said attribute names, a data type indication indicating the type of data values provided for that attribute, said attribute value similarity measure calculation depending upon said data type indication.

8. A method according to claim 7 wherein said data type indication comprises a statistical data type indication.

9. A method according to claim 1, further comprising providing an administrator with a user interface enabling the selection of a subset of said attribute names to be taken into account in classifying said network operational data items.

10. Network control apparatus comprising:

a receiver arranged in operation to receive a plurality of network operational data items relating to an operation of a communications network, each of said network operational data items comprising one or more attributes, each attribute comprising an attribute name and one or more values for that attribute, at least one of said network operational data items providing a plurality of values for each of one or more attributes;

a network operational data item classifier arranged in operation to;

calculate, for each two-way combination of network operational data items, by comparing the two network operational data items in the two-way combination, a data item similarity by;

a) comparing names of attributes to identify one or more commonly named attributes in the two network operational data items; and

b) calculating, for each of said one or more commonly named attributes, an attribute value similarity measure;

wherein, for cases where at least one of said the two network operational data items in the two-way combination provides a plurality of values for a commonly named attribute, said attribute value similarity measure calculation comprises;

i) finding, for each of the plurality of values provided for said commonly named attribute in said at least one network operational data item, an attribute value similarity component with respect to each of the one or more values provided for said commonly named attribute in the other network operational data item; and

ii) aggregating the attribute value similarity components to calculate said attribute value similarity measure for said commonly named attribute;

classify network operational data items into classes in dependence upon said data item similarity measures; and

a network controller arranged in operation to automatically apply common class-specific treatment in response to network operational data items in one or more of said classes found by said classifier.

11. The network control apparatus according to claim 10 wherein said aggregation of said attribute value similarity components comprises a calculation of a weighted sum of said attribute value similarity components in which higher attribute value similarity components are given a higher weight than lower attribute value similarity components.

12. The network control apparatus according to claim 10, wherein the two network operational data items in the two-way combination have two or more commonly named attributes, said data item similarity value calculation comprises an aggregation of the attribute value similarity measures for the two or more commonly named attributes to find said data item similarity measure.

13. The network control apparatus according to claim 12 wherein the aggregation of said attribute value similarity measures comprises a calculation of a weighted sum of said attribute value similarity measures.

14. The network control apparatus according to claim 13 wherein the weight applied to each attribute value similarity measure depends upon the number of values provided for the commonly named attribute in the two network operational data items.

15. The network control apparatus according to claim 14 wherein said weight is proportional or equal to the total number of values provided for said commonly named attribute in the two network operational data items.

16. The network control apparatus according to claim 10 wherein the network control apparatus is configured to:

obtain, in relation to one or more of said attribute names, a data type indication indicating the type of data values provided for that attribute, said attribute value similarity measure calculation depending upon said data type indication.

17. The network control apparatus according to claim 16 wherein said data type indication comprises a statistical data type indication.

18. The network control apparatus according to claim 10, wherein the network control apparatus is configured to:

provide an administrator with a user interface enabling the selection of a subset of said attribute names to be taken into account in classifying said network operational data items.

19. The network control apparatus according to claim 10, wherein

the automatic application of the common class-specific treatment includes providing a same countermeasure to communications network elements which are represented by network operational data items assigned to a common class and are malicious.

20. A computer-implemented method of classifying network operational data comprising:

obtaining a plurality of network operational data items relating to an operation of a communications network, each of said network operational data items comprising one or more attributes, each attribute comprising an attribute name and one or more values for that attribute, at least one of said network operational data items providing a plurality of values for each of one or more attributes;

calculating, for each two-way combination of network operational data items, by comparing the two network operational data items in the two-way combination, a data item similarity measure by;

a) comparing names of attributes to identify one or more commonly named attributes in the two network operational data items; and

b) calculating, for each of said one or more commonly named attributes, an attribute value similarity measure;

wherein, for cases where at least one of said the two network operational data items in the two-way combination provides a plurality of values for a commonly named attribute, said attribute value similarity measure calculation comprises;

i) finding, for each of the plurality of values provided for said commonly named attribute in said at least one network operational data item, an attribute value similarity component with respect to each of the one or more values provided for said commonly named attribute in the other network operational data item; and

ii) aggregating the attribute value similarity components to calculate said attribute value similarity measure for said commonly named attribute;

classifying network operational data items into classes in dependence upon said data item similarity measures; and

operating a network controller to send control commands to the network to automatically apply common class-specific treatment in response to network operational data items in one of said classed.