Method and system for management of logical networks for multiple customers within a network management framework

• US 20030009546A1
• Filed: 06/29/2001
• Published: 01/09/2003
• Est. Priority Date: 06/29/2001
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Yarsa, Julianne, Benfield, Jason, Hsu, Oliver Yehung, Ullmann, Lorin Evan
• Granted Patent: US 8,204,972 B2
• Time in Patent Office: Days
• US Class Current: 709/223
• CPC Class Codes: H04L 41/0816 the condition being an adaptation, e.g. in response to network events
• CPC Class Codes: H04L 41/082 the condition being updates or upgrades of network functionality
• CPC Class Codes: H04L 41/0879 Manual configuration through operator
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 63/0272 Virtual private networks

Abstract

A method, system, apparatus, and computer program product is presented for management of a distributed data processing system on behalf of a plurality of management customers. The distributed data processing system is logically represented as a set of scopes, wherein a scope is a logical organization of network-related objects. Endpoint objects, system objects, and network objects are logically organized into a set of scopes that do not logically overlap. Each scope is uniquely assigned to a management customer. The distributed data processing system is managed as a set of logical networks in which a logical network contains a set of scopes and in which each logical network is uniquely assigned to a management customer. An administrative user may dynamically reconfigure the logical networks within the distributed data processing system while managing the logical networks for a set of customers.

Claims

1. A method for management of a distributed data processing system, wherein the distributed data processing system is managed on behalf of a plurality of management customers, the method comprising:

representing the distributed data processing system as a set of scopes, wherein a scope comprises a logical organization of network-related objects;

associating each scope with a management customer, wherein each scope is uniquely assigned to a management customer, wherein each scope is uniquely associated with a set of configuration parameters for managing each scope;

managing the distributed data processing system as a set of logical networks, wherein a logical network comprises a set of scopes, and wherein each logical network is uniquely assigned to a management customer; and

allowing an administrative user to dynamically reconfigure logical networks within the distributed data processing system.

2. The method of claim 1 further comprising:

dynamically reconfiguring the distributed data processing system to introduce a new scope by logically dividing a pre-existing scope.

3. The method of claim 2 wherein the new scope is introduced without physically introducing a new network, system, or endpoint to the distributed data processing system.

4. The method of claim 1 further comprising:

dynamically reconfiguring the distributed data processing system by logically moving a scope between management customers.

5. The method of claim 1 further comprising:

dynamically reconfiguring the distributed data processing system to introduce a new management customer.

6. The method of claim 5 wherein the new management customer is introduced without physically introducing a new network, system, or endpoint to the distributed data processing system.

7. The method of claim 1 further comprising:

dynamically discovering endpoints, systems, and networks within the distributed data processing system;

correspondingly representing endpoints, systems, and networks within the distributed data processing system as a set of endpoint objects, system objects, and network objects; and

logically organizing the endpoint objects, system objects, and network objects within a set of scopes, wherein each endpoint object, each system object, and each network object is uniquely assigned to a scope such that scopes do not logically overlap.

8. The method of claim 7 wherein dynamic discovery is limited to a scope assigned to a particular management customer.

9. The method of claim 1 further comprising:

determining whether to allow a reconfiguration operation requested by an administrative user in accordance with security authorization parameters associated with an administrative user.

10. The method of claim 9 further comprising:

limiting reconfiguration operations requested by an administrative user to scopes assigned to a particular management customer.

11. An apparatus for management of a distributed data processing system, wherein the distributed data processing system is managed on behalf of a plurality of management customers, the apparatus comprising:

means for representing the distributed data processing system as a set of scopes, wherein a scope comprises a logical organization of network-related objects;

means for associating each scope with a management customer, wherein each scope is uniquely assigned to a management customer, wherein each scope is uniquely associated with a set of configuration parameters for managing each scope;

means for managing the distributed data processing system as a set of logical networks, wherein a logical network comprises a set of scopes, and wherein each logical network is uniquely assigned to a management customer; and

means for allowing an administrative user to dynamically reconfigure logical networks within the distributed data processing system.

12. The apparatus of claim 11 further comprising:

means for dynamically reconfiguring the distributed data processing system to introduce a new scope by logically dividing a pre-existing scope.

13. The apparatus of claim 12 wherein the new scope is introduced without physically introducing a new network, system, or endpoint to the distributed data processing system.

14. The apparatus of claim 11 further comprising:

means for dynamically reconfiguring the distributed data processing system by logically moving a scope between management customers.

15. The apparatus of claim 11 further comprising:

means for dynamically reconfiguring the distributed data processing system to introduce a new management customer.

16. The apparatus of claim 15 wherein the new management customer is introduced without physically introducing a new network, system, or endpoint to the distributed data processing system.

17. The apparatus of claim 11 further comprising:

means for dynamically discovering endpoints, systems, and networks within the distributed data processing system;

means for correspondingly representing endpoints, systems, and networks within the distributed data processing system as a set of endpoint objects, system objects, and network objects; and

means for logically organizing the endpoint objects, system objects, and network objects within a set of scopes, wherein each endpoint object, each system object, and each network object is uniquely assigned to a scope such that scopes do not logically overlap.

18. The apparatus of claim 17 wherein dynamic discovery is limited to a scope assigned to a particular management customer.

19. The apparatus of claim 11 further comprising:

means for determining whether to allow a reconfiguration operation requested by an administrative user in accordance with security authorization parameters associated with an administrative user.

20. The apparatus of claim 19 further comprising:

means for limiting reconfiguration operations requested by an administrative user to scopes assigned to a particular management customer.

21. A computer program product on a computer readable medium for use in managing a distributed data processing system, wherein the distributed data processing system is managed on behalf of a plurality of management customers, the computer program product comprising:

instructions for representing the distributed data processing system as a set of scopes, wherein a scope comprises a logical organization of network-related objects;

instructions for associating each scope with a management customer, wherein each scope is uniquely assigned to a management customer, wherein each scope is uniquely associated with a set of configuration parameters for managing each scope;

instructions for managing the distributed data processing system as a set of logical networks, wherein a logical network comprises a set of scopes, and wherein each logical network is uniquely assigned to a management customer; and

instructions for allowing an administrative user to dynamically reconfigure logical networks within the distributed data processing system.

22. The computer program product of claim 21 further comprising:

instructions for dynamically reconfiguring the distributed data processing system to introduce a new scope by logically dividing a pre-existing scope.

23. The computer program product of claim 22 wherein the new scope is introduced without physically introducing a new network, system, or endpoint to the distributed data processing system.

24. The computer program product of claim 21 further comprising:

instructions for dynamically reconfiguring the distributed data processing system by logically moving a scope between management customers.

25. The computer program product of claim 21 further comprising:

instructions for dynamically reconfiguring the distributed data processing system to introduce a new management customer.

26. The computer program product of claim 25 wherein the new management customer is introduced without physically introducing a new network, system, or endpoint to the distributed data processing system.

27. The computer program product of claim 21 further comprising:

instructions for dynamically discovering endpoints, systems, and networks within the distributed data processing system;

instructions for correspondingly representing endpoints, systems, and networks within the distributed data processing system as a set of endpoint objects, system objects, and network objects; and

instructions for logically organizing the endpoint objects, system objects, and network objects within a set of scopes, wherein each endpoint object, each system object, and each network object is uniquely assigned to a scope such that scopes do not logically overlap.

28. The computer program product of claim 27 wherein dynamic discovery is limited to a scope assigned to a particular management customer.

29. The computer program product of claim 21 further comprising:

instructions for determining whether to allow a reconfiguration operation requested by an administrative user in accordance with security authorization parameters associated with an administrative user.

30. The computer program product of claim 29 further comprising:

instructions for limiting reconfiguration operations requested by an administrative user to scopes assigned to a particular management customer.