Method and system for real-time distributed data mining and analysis for network

• US 20020046273A1
• Filed: 01/29/2001
• Published: 04/18/2002
• Est. Priority Date: 01/28/2000
• Status: Abandoned Application

• Current Assignee: Wiltel Communications Group, Inc. (Lumen Technologies, Inc.)
• Original Assignee: Credit Suisse First Boston Mortgage Capital LLC (Credit Suisse)
• Inventors: Jeon, Andrew J.H., Lahr, Nils B.
• Application Number:
  US09/770,641
• Publication Number:
  US 20020046273A1
• Time in Patent Office: Days
• US Class Current: 709/224
• CPC Class Codes: G06F 11/3495 for systems
• CPC Class Codes: G06F 16/2471 Distributed queries
• CPC Class Codes: G06F 16/27 Replication, distribution or synchronisation of data between databases or within a distributed database system; Distributed database system architectures therefor
• CPC Class Codes: G06F 2201/875 Monitoring of systems including the internet
• CPC Class Codes: H04L 41/044 comprising hierarchical management structures
• CPC Class Codes: H04L 43/00 Arrangements for monitoring or testing data switching networks
• CPC Class Codes: H04L 43/062 related to network traffic
• CPC Class Codes: H04L 43/0817 by checking functioning
• CPC Class Codes: H04L 43/18 Protocol analysers

Abstract

A data mining and analysis method and system can be implemented in an open architecture and use a multiple-tiered design to collect and analyze data relating to network devices in essentially real-time or near real-time. Analyzer modules are implemented in a distributed, multi-layered manner and process log data in a distributed and hierarchical manner to reduce data transfer needed for reporting. Analyzer modules analyze sequences of numbers and strings generated from software that understands analyzer module commands such as a parser module for such applications as collecting real-time voting information, and analyzing and aggregating real-time number sequence generated by media servers, among other applications.

Claims

1. A method of performing distributed data mining and analysis comprising the steps of:

arranging a plurality of analyzer modules in a network for collecting information relating to a number of different network devices, each of said analyzer modules being operated in a parent-child relationship with another of said analyzer modules;

sending information relating to said network devices from the corresponding child analyzer modules with which said network devices operate to at least one parent analyzer module;

aggregating said information received from at least one of said child analyzer modules at a first one of said parent analyzer modules; and

transmitting said aggregated information to a second one of said parent analyzer modules with which said first parent analyzer module is a child module.