Method and Apparatus for Context-Sensitive Event Correlation with External Control in Situation-Based Management

• US 20050222811A1
• Filed: 04/02/2005
• Published: 10/06/2005
• Est. Priority Date: 04/03/2004
• Status: Active Grant

• Current Assignee: Altusys Corp.
• Original Assignee: Altusys Corp.
• Inventors: Jakobson, Gabriel, Lewis, Lundy M., Buford, John F.
• Granted Patent: US 7,788,109 B2
• Time in Patent Office: Days
• US Class Current: 702/183
• CPC Class Codes: H04L 41/0631 using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
• CPC Class Codes: H04L 41/147 for predicting network behaviour

Abstract

Method and apparatus for situation-based management of natural and artificial systems using event correlation and a situation manager. Input is provided from multiple sources in the form of a collection of events. A first level of processing performs event correlation over the collection of events and infers new events and new qualities of events. A second level of processing manages situations based on the collection of events, where situations are recognized, maintained, and given a degree of confidence. Situations are periodically updated based on incoming events. The assertion of a situation may call for information from external sources, provide information for external sources, and provide control instructions to external sources. Given a current situation, past, and possible future situations are inferred. Additionally, a method and apparatus for bi-directional communication between the event correlator and situation manager.

Claims

1. A method of providing context-sensitive information in situation-based management, the method comprising the steps of:

receiving a collection of events;

creating a situation based on the events;

determining information; and

providing information to a resource.

2. The method of claim 1, wherein the providing step includes providing information to an event correlator.

3. The method of claim 1, wherein the providing step includes providing information to an event manager.

4. The method of claim 1, wherein the providing step includes providing information to a situation viewer.

5. The method of claim 1, wherein the providing step includes providing information to a data fusion resource.

6. The method of claim 1, wherein the providing step includes providing information to a signal fusion resource.

7. The method of claim 1, wherein the determining step includes at least one of:

determining incomplete information;

determining inconsistent information; and

determining inferred information.

8. The method of claim 1, wherein the providing step includes the withdrawal of information.

9. The method claim 1, wherein the providing step includes providing control instructions.

10. An apparatus comprising:

an event correlator;

a situation manager operatively coupled to the event correlator, and having as an input a collection of events produced by the event correlator, and providing information as an output; and

a resource operatively coupled to the situation manager, having as an input information produced by the situation manager.

11. The apparatus of claim 10, wherein the resource includes an event correlator.

12. The apparatus of claim 10, wherein the resource includes an event manager.

13. The apparatus of claim 10, wherein the resource includes a situation viewer.

14. The apparatus of claim 10, wherein the resource includes a data fusion resource.

15. The apparatus of claim 10, wherein the resource includes a signal fusion resource.

16. The apparatus of claim 10, wherein the information provided as output by the situation manager includes one of:

incomplete information;

inconsistent information; and

inferred information.

17. The apparatus of claim 10, wherein the information provided as output by the situation manager includes the withdrawal of information.

18. The apparatus of claim 10, wherein information provided as output by the situation manager includes control instructions.

19. An apparatus for providing context-sensitive information to external resources in situation-based management, the apparatus comprising:

means to receive a collection of events;

means to create a situation based on the collection of events;

means to determine information based on creation of a situation;

means to classify information as at least one of;

incomplete information;

inconsistent information;

inferred information;

withdrawal of information; and

control instruction; and

means to provide information to at least one of;

an event correlator;

an event manager;

a situation viewer;

a signal fusion resource; and

a data fusion resource.