Virtual network management

• US 20030191830A1
• Filed: 04/04/2002
• Published: 10/09/2003
• Est. Priority Date: 04/04/2002
• Status: Active Grant

• Current Assignee: Avaya Incorporated
• Original Assignee: Avaya Technology LLC (Avaya Incorporated)
• Inventors: Fitzgerald, Christopher A.
• Granted Patent: US 7,058,711 B2
• Time in Patent Office: Days
• US Class Current: 709/223
• CPC Class Codes: H04L 41/18 Delegation of network management function, e.g. customer network management [CNM]
• CPC Class Codes: H04L 41/28 Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration
• CPC Class Codes: H04L 41/40 using virtualisation of network functions or resources, e.g. SDN or NFV entities
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A system providing for virtual network management is disclosed. A system in accordance with the present invention allows a service provider to remotely manage one or more client network management systems. The security of the client network management systems is advanced by only allowing communications between a client network management system and the service provider that have been initiated by the client network management system. A mirror image of a client network management system is maintained by the service provider as a virtual network management system. Data included in the virtual network management system is periodically updated with data received from the client network management system. Instructions or data may be passed from the service provider to the client network management system in reply to communications initiated by the client network management system. The present invention is particularly useful in connection with the remote management of client networks with respect to which security is a concern.

Claims

1. A method for remotely managing a network, comprising:

providing a client network comprising a client network management system;

providing a service provider network management system;

providing a communication link between said client network management system and said service provider network management system;

initiating in said client network a communication addressed to said service provider network management system, wherein said service provider network management system cannot initiate communications with said client network.

2. The method of claim 1, further comprising:

generating in said service provider network management system an acknowledgment of said communication, wherein said acknowledgment comprises at least one of a request for data and data for use by said client network.

3. The method of claim 1, wherein said communication addressed to said service provider network management system is formatted according to an Internet protocol.

4. The method of claim 3, wherein said Internet protocol comprises HTTPS.

5. The method of claim 1, wherein said client network comprises a virtual private network.

6. The method of claim 1, wherein said client network comprises a private branch exchange.

7. The method of claim 1, further comprising establishing at least a first virtual network management system on said service provider network management system, wherein said virtual network management system comprises data describing aspects of said client network.

8. The method of claim 7, further comprising providing first and second client networks, wherein a first virtual network management system corresponding to said first client network is established on said service provider network management system, and wherein a second virtual network management system corresponding to said second client network is established on said service provider network management system.

9. A system for remotely managing a network, comprising:

a client network, comprising;

a plurality of communication nodes;

a communication link interconnecting said nodes;

a client server;

a service provider network management system, comprising;

a communication network interconnecting said client network and said service provider network, wherein communication between said client network and said service provider network may be initiated by said client network and may not be initiated by said service provider network.

10. The system of claim 9, wherein at least a first of said communication nodes comprises a telephone.

11. The system of claim 9, wherein said client network comprises a private branch exchange communications network.

12. The system of claim 9, wherein said client server stores configuration information regarding said client network.

13. The system of claim 12, wherein said configuration information can be at least one of altered and replaced with configuration information received from said service provider network management system in response to a communication initiated by said client network.

14. The system of claim 9, wherein said communication link comprises an Internet protocol communication link.

15. A method for remotely managing a client network from a service provider network management system, comprising:

receiving at said service provider network a first communication;

generating a response to said first communication, wherein said response comprises at least one of substantive information related to operational aspects of a client network and a request for data, and wherein a communication initiated by said service provider network will not receive a response from said client network.

16. The method of claim 15, wherein said substantive information comprises at least one of data, a request for data, and network administration information.

17. The method of claim 15, further comprising:

establishing a virtual client network on said service provider network management system, wherein said virtual client network comprises substantive information related to operational aspects of at least a first client network.

18. The method of claim 15, further comprising:

receiving at said service provider network a second communication, wherein said second communication comprises substantive information related to operational aspects of said client network.

19. The method of claim 15, wherein said at least a first communication is formatted according to an Internet protocol.

20. The method of claim 19, wherein said Internet protocol comprises HTTPS.