System and method for using agent-based distributed case-based reasoning to manage a computer network

• US 20030126501A1
• Filed: 01/03/2002
• Published: 07/03/2003
• Est. Priority Date: 01/03/2002
• Status: Active Grant

• Current Assignee: Integrated Management Systems Incorporated
• Original Assignee: Integrated Management Systems Incorporated
• Inventors: Musman, Scott Abram
• Granted Patent: US 7,127,441 B2
• Time in Patent Office: Days
• US Class Current: 714/26
• CPC Class Codes: G06F 11/3495 for systems
• CPC Class Codes: H04L 41/046 comprising network management agents or mobile agents therefor
• CPC Class Codes: H04L 41/16 using machine learning or artificial intelligence

Abstract

The present invention describes a system and method for using agent-based distributed case-based reasoning to manage a computer network. In particular, the system includes interface agents, distributed case-based reasoning agents, and response agents, which run on hosts in the network. An interface agent monitors a resource in the network and reports an event to an appropriate distributed case-based reasoning agent. The distributed case-based reasoning agent, using one or more case bases, determines a response to the event. An appropriate response agent implements the response.

Claims

1. An agent-based distributed reasoning system for managing a computer network with a plurality of hosts, the system comprising:

a plurality of interface agents running on the plurality of hosts, the plurality of interface agents assigned to resources within the computer network;

a plurality of distributed case-based reasoning agents running on the plurality of hosts, wherein the plurality of distributed case-based reasoning agents is capable of accessing one or more case bases; and

a plurality of response agents running on the plurality of hosts,

wherein an interface agent in the plurality interface agents sends an input regarding an event in an assigned resource to an appropriate distributed case-based reasoning agent among the plurality of distributed case-based reasoning agents,

wherein the appropriate distributed case-based reasoning agent, upon receiving the input, accesses the one or more case bases to select a response and communicates the response to an appropriate response agent in the plurality of response agents, and

wherein the appropriate response agent implements the response to resolve the event.

2. The system of claim 1, wherein the resources in the computer network includes network management tools, network security tools, operating system specific features, and health tools.

3. The system of claim 1, wherein the plurality of distributed case-based reasoning agents consider inputs regarding multiple resources sent by one or more of the plurality of interface agents.

4. The system of claim 1, wherein the response includes invoking one or more cases in the one or more case bases.

5. The system of claim 1, wherein the plurality of distributed case-based reasoning agents is capable of selecting a response when multiple cases in the one or more case bases match the input.

6. The system of claim 5, wherein the plurality of distributed case-based reasoning agents uses a precedence order to select a response .

7. The system of claim 6, wherein the precedence order is defined based on specificity and priority values.

8. The system of claim 5, wherein the plurality of distributed case-based reasoning agents uses response function call-switches to select a response.

9. The system of claim 8, wherein the response function call-switches include active, always-fire, call-next, and timeout switches.

10. The system of claim 5, wherein the plurality of distributed case-based reasoning agents uses a precedence order and response function call-switches to select the response.

11. The system of claim 5, wherein the response includes invoking one or more cases in the one or more case bases.

12. The system of claim 1, wherein the plurality of cases includes case templates.

13. The system of claim 12, wherein the case templates are used to represent an event, add a new case, or analyze historical events.

14. The system of claim 1, wherein agents including the plurality of interface agents, the plurality of distributed case-based reasoning agents, and the plurality of response agents are independent.

15. The system of claim 1, wherein cases in the one or more case bases are adaptable.

16. The system of claim 1, wherein a failing agent is replaced by another agent.

17. A method for managing a computer network, the computer network having agent-based architecture with a plurality of agents, some of which are interface agents, distributed case-based reasoning agents, and response agents, the method comprising:

monitoring a resource in the computer network using an interface agent;

reporting, using the interface agent, an event in the resource to an appropriate distributed case-based reasoning agent;

selecting a response using the appropriate distributed case-based reasoning agent; and

implementing the response using an appropriate response agent,

wherein the appropriate distributed case-based reasoning agent accesses one or more case bases in the selecting step.

18. The method of claim 17, further comprising;

replacing a failing agent among the plurality of agents with another agent.

19. The method of claim 17, further comprising,

dynamically updating the one or more case bases.

20. The method of claim 19, wherein the updating step uses a plurality of case templates.

21. The method of claim 17, further comprising:

representing an event using a case template,

wherein the case template may be updated.

22. The method of claim 17, further comprising:

adding a new case to the one or more case bases using a case template.

23. The method of claim 17, further comprising:

analyzing historical data using a case template.

24. The method of claim 23, wherein a result of the analyzing step may be used in the selecting step.

25. The method of claim 17, wherein the selecting step further comprises:

resolving a conflict when multiple cases match the event.

26. The method of claim 25, wherein the resolving step uses a precedence order.

27. The method of claim 26, wherein the precedence order is determined based on specificity and priority values.

28. The method of claim 25, wherein the resolving step uses response function call-switches.

29. The method of claim 28, wherein the response function call-switches include active, always-fire, call-next, and timeout switches.

30. The method of claim 25, wherein the resolving step uses a precedence order and response function call-switches.

31. A system for managing a computer network, the computer network having agent-based architecture with a plurality of agents, some of which are interface agents, distributed case-based reasoning agents, and response agents, the system comprising:

means for monitoring a resource in the computer network using an interface agent;

means for reporting, using the interface agent, an event in the resource to an appropriate distributed case-based reasoning agent;

means for selecting a response using the appropriate distributed case-based reasoning agent by accessing one or more case bases; and

means for implementing the response using an appropriate response agent.

32. The system of claim 31, further comprising:

means for surviving a failure without any service interruption.

33. The system of claim 31, further comprising:

means for replacing a failing agent among the plurality of agents with another agent.

34. The system of claim 31, further comprising:

means for dynamically updating the one or more case bases.

35. The system of claim 31, further comprising:

means for resolving a conflict when multiple cases match the event.

36. A computer program product for managing a computer network, the computer network having agent-based architecture with a plurality of agents, some of which are interface agents, distributed case-based reasoning agents, and response agents, the computer program product comprising:

computer readable program code configured to monitor a resource in the computer network using an interface agent;

computer readable program code configured to report, using the interface agent, an event in the resource to an appropriate distributed case-based reasoning agent;

computer readable program code configured to select a response using the appropriate distributed case-based reasoning agent by accessing one or more case bases;

computer readable program code configured to implement the response using an appropriate response agent; and

a computer readable medium in which the computer readable program codes are embodied.