Intelligent policy server system and method for bandwidth control in an ATM network

• US 20010026553A1
• Filed: 01/22/2001
• Published: 10/04/2001
• Est. Priority Date: 01/20/2000
• Status: Active Grant

• Current Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Original Assignee: Verizon Business Global LLC (Verizon Communications Inc.)
• Inventors: Donovan, Steven R., Gallant, John K., Hall, Thomas Glenn Jr.
• Granted Patent: US 8,483,225 B2
• Time in Patent Office: Days
• US Class Current: 370/395.4
• CPC Class Codes: H04L 12/5601 Transfer mode dependent, e.g. ATM
• CPC Class Codes: H04L 2012/5615 Network termination, e.g. NT1, NT2, PBX
• CPC Class Codes: H04L 2012/563 Signalling, e.g. protocols, reference model
• CPC Class Codes: H04L 2012/5642 Multicast/broadcast/point-multipoint, e.g. VOD
• CPC Class Codes: H04L 2012/5663 Support of N-ISDN
• CPC Class Codes: H04L 2012/5671 Support of voice
• CPC Class Codes: H04L 2012/5687 Security aspects
• CPC Class Codes: H04L 2012/6481 Speech, voice
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management
• CPC Class Codes: H04L 41/0895 Configuration of virtualised networks or elements, e.g. virtualised network function or OpenFlow elements
• CPC Class Codes: H04L 49/203 ATM switching fabrics with multicast or broadcast capabilities
• CPC Class Codes: H04L 49/255 Control mechanisms for ATM switching fabrics
• CPC Class Codes: H04L 49/3081 ATM peripheral units, e.g. policing, insertion or extraction
• CPC Class Codes: H04L 65/1095 Inter-network session transfer or sharing
• CPC Class Codes: H04L 65/1101 Session protocols
• CPC Class Codes: H04L 65/80 Responding to QoS
• CPC Class Codes: H04M 2203/2044 Group features, e.g. closed user group
• CPC Class Codes: H04M 2203/5009 Adding a party to an existing conference conducting a computer conference, e.g. admission detection H04L12/1822
• CPC Class Codes: H04M 2207/12 intelligent networks
• CPC Class Codes: H04M 2207/35 : virtual private networks
• CPC Class Codes: H04M 3/38 : Graded-service arrangements, i.e. some subscribers prevented from establishing certain connections queuing arrangements H04Q3/64
• CPC Class Codes: H04M 3/42187 : Lines and connections with preferential service
• CPC Class Codes: H04M 3/56 : Arrangements for connecting several subscribers to a common circuit, i.e. affording conference facilities video conference systems H04N7/15
• CPC Class Codes: H04M 7/006 : Networks other than PSTN/ISDN providing telephone service, e.g. Voice over Internet Protocol (VoIP) , including next generation networks with a packet-switched transport layer H04L65/00 takes precedence; aspects not specific to the type of network H04M3/00; special services in those networks H04M3/42
• CPC Class Codes: H04Q 11/0478 : Provisions for broadband connections
• CPC Class Codes: H04Q 2213/13034 : A/D conversion, code compression/expansion
• CPC Class Codes: H04Q 2213/13097 : Numbering, addressing
• CPC Class Codes: H04Q 2213/13102 : Common translator
• CPC Class Codes: H04Q 2213/13106 : Microprocessor, CPU
• CPC Class Codes: H04Q 2213/13176 : Common channel signaling, CCS7
• CPC Class Codes: H04Q 2213/13204 : Protocols
• CPC Class Codes: H04Q 2213/13242 : Broadcast, diffusion, multicast, point-to-multipoint (1 : N)
• CPC Class Codes: H04Q 2213/1329 : Asynchronous transfer mode, ATM
• CPC Class Codes: H04Q 2213/13296 : Packet switching, X.25, frame relay
• CPC Class Codes: H04Q 2213/13345 : Intelligent networks, SCP
• CPC Class Codes: H04Q 2213/13348 : Channel/line reservation
• CPC Class Codes: H04Q 2213/13389 : LAN, internet
• CPC Class Codes: H04Q 3/0029 : Provisions for intelligent networking
• CPC Class Codes: H04Q 3/0045 : involving hybrid, i.e. a mixture of public and private, or multi-vendor systems
• CPC Class Codes: H04Q 3/0066 : Bandwidth allocation or management

Abstract

An intelligent policy server system and method for providing multiple service features and for controlling bandwidth usage in an ATM network. Signaling messages generated at the user-network interface (i.e., an edge switch) prior to establishing an end-to-end switched virtual circuit are intercepted by a signaling intercept processor for effectuating policy features or permissions by executing appropriate service logic at the policy server associated with the edge switch. A return message from the policy server determines whether a call connection can be made through the network or not. Profile arrays are provided which define feature authorizations and provisioning for subscribers and Customer Logical Ports served by the edge switches. Depending on the triggers associated with a signaling message received in the edge switch, a particular feature is invoked and executed by the policy server. Source address validation, address screening, burst-size limit, class-of-service provisioning, maximum concurrent call connections in progress, bandwidth control, and call frequency rate limit are provided as exemplary features implemented in a presently preferred exemplary embodiment of the present invention.

Claims

1. An intelligent policy server method in an Asynchronous Transfer Mode (ATM) network having an ingress switch and an egress switch, wherein said ingress switch serves an ingress device operated by a calling party and said egress switch serves an egress device operated by a called party, comprising the steps of:

receiving, in said ingress switch, a signaling message from said ingress device;

providing said signaling message to a signaling intercept processor associated with said ingress switch;

propagating said signaling message to a policy server, said policy server including at least one policy profile having a plurality of policy features;

determining in said policy server, based at least in part on said signaling message, if a particular policy feature is to be invoked;

if so, determining whether a policy condition associated with said particular policy feature is satisfied with respect to said signaling message; and

establishing a connection path between said ingress switch and said egress switch based on said determination that said policy condition is satisfied by said signaling message.

2. The intelligent policy server method in an ATM network as set forth in

claim 1

, wherein said signaling message comprises a Connect message.

3. The intelligent policy server method in an ATM network as set forth in

claim 1

, wherein said signaling message comprises an Add Party message.

4. The intelligent policy server method in an ATM network as set forth in

claim 1

,wherein said signaling message comprises a Release message.

5. The intelligent policy server method in an ATM network as set forth in

claim 1

, wherein said signaling message comprises a Setup message.

6. The intelligent policy server method in an ATM network as set forth in

claim 5

, wherein said particular policy feature comprises a source address validation feature.

7. The intelligent policy server method in an ATM network as set forth in

claim 5

, wherein said particular policy feature comprises a maximum call attempt rate limit feature.

8. The intelligent policy server method in an ATM network as set forth in

claim 5

, wherein said particular policy feature comprises a destination address screening feature.

9. The intelligent policy server method in an ATM network as set forth in

claim 5

, wherein said particular policy feature comprises a source address screening feature.

10. The intelligent policy server method in an ATM network as set forth in

claim 5

, wherein said particular policy feature comprises a maximum burst size limit feature.

11. The intelligent policy server method in an ATM network as set forth in

claim 5

, wherein said particular policy feature comprises an aggregate bandwidth limit feature.

12. The intelligent policy server method in an ATM network as set forth in

claim 5

, wherein said particular policy feature comprises a service class selection feature.

13. The intelligent policy server method in an ATM network as set forth in

claim 5

, wherein said particular policy feature comprises a maximum concurrent call limit feature.

14. An Asynchronous Transfer Mode (ATM) network for effectuating intelligent policy features with respect to a call to be established between two parties via a virtual channel connection, comprising:

an ATM switch serving a customer premises equipment (CPE) operated by a party with respect to said call;

a signaling intercept processor associated with said ATM switch for intercepting a signaling message relative to said call; and

a policy server associated with said signaling intercept processor, said policy server including at least one policy profile having a plurality of policy features, wherein said policy server operates to effectuate a particular policy feature with respect to said call when triggered by said signaling message received from said signaling intercept processor.

15. The ATM network for effectuating intelligent policy features with respect to a call as set forth in

claim 14

, wherein said signaling message comprises a Connect message.

16. The ATM network for effectuating intelligent policy features with respect to a call as set forth in

claim 14

, wherein said signaling message comprises an Add Party message.

17. The ATM network for effectuating intelligent policy features with respect to a call as set forth in

claim 14

, wherein said signaling message comprises a Release message.

18. The ATM network for effectuating intelligent policy features with respect to a call as set forth in

claim 14

, wherein said signaling message comprises a Setup message.

19. The ATM network for effectuating intelligent policy features with respect to a call as set forth in

claim 18

, wherein said particular policy feature comprises a source address validation feature for ensuring that said party is an authorized party for accessing said ATM network through a particular network port associated with said CPE.

20. The ATM network for effectuating intelligent policy features with respect to a call as set forth in

claim 19

, wherein said particular network port is a Customer Logical Port.

21. The ATM network for effectuating intelligent policy features with respect to a call as set forth in

claim 19

, wherein said particular network port is a full physical port.

22. The ATM network for effectuating intelligent policy features with respect to a call as set forth in

claim 18

, wherein said particular policy feature comprises a maximum call attempt rate limit feature for monitoring the number of Setup messages received from said party over a predetermined period of time.

23. The ATM network for effectuating intelligent policy features with respect to a call as set forth in

claim 18

, wherein said particular policy feature comprises a destination address screening feature for defining a plurality of addresses to which said party can effectuate said call.

24. The ATM network for effectuating intelligent policy features with respect to a call as set forth in

claim 23

, wherein said destination address screening feature is established for a group of subscribers to which said party belongs.

25. The ATM network for effectuating intelligent policy features with respect to a call as set forth in

claim 18

, wherein said particular policy feature comprises a source address screening feature for defining a plurality of addresses from which said call can be initiated to said party.

26. The ATM network for effectuating intelligent policy features with respect to a call as set forth in

claim 25

, wherein said source address screening feature is established for a group of subscribers to which said party belongs.

27. The ATM network for effectuating intelligent policy features with respect to a call as set forth in

claim 18

, wherein said particular policy feature comprises a maximum burst size limit feature for limiting a burst-size request associated with said call.

28. The ATM network for effectuating intelligent policy features with respect to a call as set forth in

claim 27

, wherein said burst-size request comprises the number of packets per second allowed to be transmit ted to said ATM network with respect to said call.

29. The ATM network for effectuating intelligent policy features with respect to a call as set forth in

claim 27

, wherein said burst-size request comprises the number of packets per second allowed to be received by said party from said ATM network with respect to said call.

30. The ATM network for effectuating intelligent policy features with respect to a call as set forth in

claim 18

, wherein said particular policy feature comprises an aggregate bandwidth limit feature for determining a maximum bandwidth allowable for a particular network port authorized for use by said party.

31. The ATM network for effectuating intelligent policy features with respect to a call as set forth in

claim 18

, wherein said particular policy feature comprises a service class selection feature for specifying a service class with respect to a network port used by said party.

32. The ATM network for effectuating intelligent policy features with respect to a call as set forth in

claim 31

, wherein said service class comprises a constant bit-rate (CBR) service.

33. The ATM network for effectuating intelligent policy features with respect to a call as set forth in

claim 31

, wherein said service class comprises a variable bit-rate (VBR) service.

34. The ATM network for effectuating intelligent policy features with respect to a call as set forth in

claim 33

, wherein said VBR service is a real-time VBR service.

35. The ATM network for effectuating intelligent policy features with respect to a call as set forth in

claim 33

, wherein said VBR service is a non-real-time VBR service.

36. The ATM network for effectuating intelligent policy features with respect to a call as set forth in

claim 31

, wherein said service class comprises an unspecified bit-rate (UBR) service.

37. The ATM network for effectuating intelligent policy features with respect to a call as set forth in

claim 31

, wherein said service class comprises an available bit-rate (ABR) service.

38. The ATM network for effectuating intelligent policy features with respect to a call as set forth in

claim 18

, wherein said particular policy feature comprises a maximum concurrent call limit feature for specifying the total number of calls allowed concurrently with respect to a network port used by said party.

39. A computer-readable medium operable with an Asynchronous Transfer Mode (ATM) network node, said computer-readable medium carrying a sequence of instructions provided for executing service logic which, when executed by a processing entity associated with said ATM network node, causes said ATM network node to perform the steps of:

upon receiving in said ATM network node a signaling message with respect to a call from a party, propagating said signaling message to a policy server operably associated with said ATM network node; and

upon determining that a policy condition associated with a particular policy feature to be invoked is satisfied with respect to said signaling message, effectuating a treatment for said call based on said particular policy feature.

40. The computer-readable medium operable with an ATM network node as set forth in

claim 39

, wherein said treatment comprises establishing a virtual channel connection between said party and another party for said call.

41. The computer-readable medium operable with an ATM network node as set forth in

claim 39

, wherein said treatment comprises denying a virtual channel connection for said call.

42. The computer-readable medium operable with an ATM network node as set forth in

claim 39

, wherein said signing message comprises a Connect message.

43. The computer-readable medium operable with an ATM network node as set forth in

claim 39

, wherein said signing message comprises an Add Party message.

44. The computer-readable medium operable with an ATM network node as set forth in

claim 39

, wherein said signing message comprises a Release message.

45. The computer-readable medium operable with an ATM network node as set forth in

claim 39

, wherein said signing message comprises a Setup message.

46. The computer-readable medium operable with an ATM network node as set forth in

claim 45

, wherein said particular policy feature signing message comprises a source address validation feature for ensuring that said party is an authorized party for accessing said ATM network node through a particular network port associated therewith.

47. The computer-readable medium operable with an ATM network node as set forth in

claim 46

, wherein said particular network port is a Customer Logical Port.

48. The computer-readable medium operable with an ATM network node as set forth in

claim 46

, wherein said particular network port is a full physical port.

49. The computer-readable medium operable with an ATM network node as set forth in

claim 45

, wherein said particular policy feature signing message comprises a maximum call attempt rate limit feature for monitoring the number of Setup messages received from said party over a predetermined period of time.

50. The computer-readable medium operable with an ATM network node as set forth in

claim 45

, wherein said particular policy feature comprises a destination address screening feature for defining a plurality of addresses to which said party can effectuate said call.

51. The computer-readable medium operable with an ATM network node as set forth in

claim 50

, wherein said destination address screening feature is established for a group of subscribers to which said party belongs.

52. The computer-readable medium operable with an ATM network node as set forth in

claim 45

, wherein said particular policy feature comprises a source address screening feature for defining a plurality of addresses from which said call can be initiated to said party.

53. The computer-readable medium operable with an ATM network node as set forth in

claim 52

, wherein said source address screening feature is established for a group of subscribers to which said party belongs.

54. The computer-readable medium operable with an ATM network node as set forth in

claim 45

, wherein said particular policy feature comprises a maximum burst size limit feature for limiting a burst-size request associated with said call.

55. The computer-readable medium operable with an ATM network node as set forth in

claim 54

, wherein said burst-size request comprises the number of packets per second allowed to be transmitted to said ATM network node with respect to said call.

56. The computer-readable medium operable with an ATM network node as set forth in

claim 54

, wherein said burst-size request comprises the number of packets per second allowed to be received by said party from said ATM network node with respect to said call.

57. The computer-readable medium operable with an ATM network node as set forth in

claim 45

, wherein said particular policy feature comprises an aggregate bandwidth limit feature for determining a maximum bandwidth allowable for a particular network port authorized for use by said party.

58. The computer-readable medium operable with an ATM network node as set forth in

claim 45

, wherein said particular policy feature comprises a service class selection feature for specifying a service class with respect to a particular network port used by said party.

59. The computer-readable medium operable with an ATM network node as set forth in

claim 58

, wherein said service class comprises a constant bit-rate (CBR) service.

60. The computer-readable medium operable with an ATM network node as set forth in

claim 58

, wherein said service class comprises a variable bit-rate (VBR) service.

61. The computer-readable medium operable with an ATM network node as set forth in

claim 60

, wherein said VBR service is a real-time VBR service.

62. The computer-readable medium operable with an ATM network node as set forth in

claim 60

, wherein said VBR service is a non-real-time VBR service.

63. The computer-readable medium operable with an ATM network node as set forth in

claim 58

, wherein said service class comprises an unspecified bit-rate (UBR) service.

64. The computer-readable medium operable with an ATM network node as set forth in

claim 58

, wherein said service class comprises an available bit-rate (ABR) service.

65. The computer-readable medium operable with an ATM network node as set forth in

claim 45

, wherein said particular policy feature comprises a maximum concurrent call limit feature for specifying the total number of calls allowed concurrently with respect to a particular network port used by said party.

66. A memory structure for storing data usable in effectuating intelligent policy features in an Asynchronous Transfer Mode (ATM) network wherein said memory structure is operable with a processing entity associated with a policy server node disposed in said ATM network, comprising:

a data structure having a list of subscribers wherein said subscribers are authorized to access said ATM network to setup virtual channel connections for service;

each of said subscribers having an ATM address and a Customer Logical Port (CLP) ID associated therewith; and

a profile array associated with said subscribers wherein a policy feature record is populated for each subscriber with at least one policy feature which indicates a specific treatment for a call to be effectuated relative to said each subscriber.

67. The memory structure for storing data usable in effectuating intelligent policy features in an ATM network as set forth in

claim 66

, wherein said at least one policy feature is selected from the group consisting of:

a source address validation feature, a maximum call attempt rate limit feature, a destination address screening feature, a source address screening feature, a maximum burst size limit feature, an aggregate bandwidth limit feature, a service class selection feature, and a maximum concurrent call limit feature.

68. The memory structure for storing data usable in effectuating intelligent policy features in an ATM network as set forth in

claim 67

, wherein said virtual channel connections comprise switched connections.

69. The memory structure for storing data usable in effectuating intelligent policy features in an ATM network as set forth in

claim 68

, wherein said at least one policy feature is invoked by a trigger received in a signaling message transmitted with respect to said call.

70. The memory structure for storing data usable in effectuating intelligent policy features in an ATM network as set forth in

claim 69

, wherein said signaling message comprises a Connect message.

71. The memory structure for storing data usable in effectuating intelligent policy features in an ATM network as set forth in

claim 69

, wherein said signaling message comprises an Add Party message.

72. The memory structure for storing data usable in effectuating intelligent policy features in an ATM network as set forth in

claim 69

, wherein said signaling message comprises a Release message.

73. The memory structure for storing data usable in effectuating intelligent policy features in an ATM network as set forth in

claim 69

, wherein said signaling message comprises a Setup message.

74. A source address validation method operable in an Asynchronous Transfer Mode (ATM) network, comprising the steps of:

assigning a port ID to a Customer Logical Port (CLP) served by an ATM node disposed in said network;

associating a customer ID with said CLP wherein a plurality of addresses specified for said customer ID are authorized for use with said CLP;

upon receiving in said ATM node a signaling message from a user operating a customer premises equipment (CPE) through said CLP, determining if said CPE'"'"'s address belongs to said plurality of addresses authorized for said CLP; and

if so, establishing a virtual channel connection through said ATM network for said user.

75. A method of restricting call connection attempts by a user in an Asynchronous Transfer Mode (ATM) network, comprising the steps of:

specifying a limit on the number of call setup requests received over a predetermined period at a Customer Logical Port (CLP) served by an ATM node disposed in said network;

receiving in said ATM node a signaling message from said user operating a customer premises equipment (CPE) through said CLP;

determining if said limit on the number of call setup requests is exceeded by said signaling message in said predetermined period; and

if said limit on the number of call setup requests is not exceeded by said signaling message in said predetermined period, establishing a virtual channel connection through said ATM network for said user.

76. A method of screening destination addresses in an Asynchronous Transfer Mode (ATM) network, comprising the steps of:

defining a positive list of addresses to which a user is allowed to make call connections;

defining a negative list addresses to which said user is not allowed to make call connections;

receiving in an ATM node a signaling message from said user operating a customer premises equipment (CPE) through a Customer Logical Port served by said ATM node, said signaling message for attempting to setup a call connection to a called party;

determining if said called party'"'"'s address belongs to said positive list of addresses; and

if so, establishing said call connection through said ATM network for said user.

77. A method of screening source addresses in an Asynchronous Transfer Mode (ATM) network, comprising the steps of:

defining a positive list of addresses from which call connections are allowed to terminate to a user;

defining a negative list addresses from which call connections are not allowed to terminate to said user;

receiving in an ATM node a signaling message from a calling party operating a customer premises equipment (CPE) through a Customer Logical Port served by said ATM node, said signaling message for attempting to setup a call connection to said user;

determining if said calling party'"'"'s address belongs to said positive list of addresses; and

if so, establishing said call connection through said ATM network for said user.

78. A method of restricting burst-size requests received for call connections in an Asynchronous Transfer Mode (ATM) network, comprising the steps of:

defining a forward burst-size limit allowed for an individual call connection established through a Customer Logical Port served by an ATM node disposed in said network;

defining a backward burst-size limit allowed for said individual call connection established through said CLP;

receiving in said ATM node via said CLP a signaling message from a user with respect to a particular call connection, said signaling message including at least one of a forward burst-size request and a backward burst-size request;

determining if at least one of said forward burst-size request and said backward burst-size request exceeds said corresponding burst-size limit;

if so, denying said particular call connection through said ATM network for said user.

79. A class-of-service provisioning method for call connections in an Asynchronous Transfer Mode (ATM) network, comprising the steps of:

configuring a plurality of service classes for a Customer Logical Port served by an ATM node disposed in said network;

receiving in said ATM node via said CLP a signaling message from a user with respect to a particular call connection, said signaling message including a class-of-service request;

determining if said class-of-service request is allowed for said CLP;

if so, establishing said call connection through said ATM network for said user.

80. A method of restricting the number of concurrent active call connections in an Asynchronous Transfer Mode (ATM) network, comprising the steps of:

defining a concurrent call limit allowed for a Customer Logical Port served by an ATM node disposed in said network;

receiving in said ATM node via said CLP a signaling message from a user with respect to a particular call connection;

determining if said concurrent call limit for said CLP would be exceeded by said signaling message;

if so, denying said particular call connection through said ATM network for said user.

81. A bandwidth control method operable in an Asynchronous Transfer Mode (ATM) network, comprising the steps of:

specifying a total forward bandwidth allocated for a Customer Logical Port (CLP) served by an ATM node disposed in said network;

specifying a total backward bandwidth allocated for said CLP;

receiving in said ATM node via said CLP a signaling message from a user with respect to a particular call connection, said signaling message including at least one of a service class request and a plurality of bandwidth parameters;

calculating at least one of a forward bandwidth request and a backward bandwidth request corresponding to said particular call connection;

applying an overbooking factor to at least of said forward bandwidth request and said backward bandwidth request calculated for said particular call connection, thereby generating an adjusted forward bandwidth request and an adjusted backward bandwidth request;

computing a remaining bandwidth after accounting for bandwidth in use in each direction;

comparing said adjusted forward bandwidth request and said adjusted backward bandwidth request to said remaining bandwidth in each direction; and

if said adjusted forward and backward bandwidth requests exceed said remaining bandwidth in each direction, establishing said particular call connection through said ATM network for said user.