NETWORK CLUSTERING TECHNOLOGY

• US 20080005298A1
• Filed: 07/31/2006
• Published: 01/03/2008
• Est. Priority Date: 06/30/2006
• Status: Active Grant

• Current Assignee: Big Kahuna Technologies, LLC
• Original Assignee: XSLENT, LLC
• Inventors: Tinsley, David, Busalacchi, Frank, Skinner, Wesley
• Granted Patent: US 7,783,766 B2
• Time in Patent Office: Days
• US Class Current: 709/223
• CPC Class Codes: H04L 41/0226 Mapping or translating multiple network management protocols
• CPC Class Codes: H04L 41/0233 Object-oriented techniques, for representation of network management data, e.g. common object request broker architecture [CORBA]
• CPC Class Codes: H04L 41/08 Configuration management of networks or network elements address allocation H04L61/50
• CPC Class Codes: H04L 41/0806 for initial configuration or provisioning, e.g. plug-and-play
• CPC Class Codes: H04L 41/0863 by rolling back to previous configuration versions
• CPC Class Codes: H04L 41/0866 Checking the configuration
• CPC Class Codes: H04L 41/0886 Fully automatic configuration
• CPC Class Codes: H04L 43/091 Measuring contribution of individual network components to actual service level

Abstract

Network Clustering Technology (“NCT”) creates an controlled environment that allows organizations to manage their networks, information resources, users and uses through a common structure. Although that capability is valuable in and of itself, it has the additional advantage of being both highly configurable and extensible. NCT is implemented so that it can function as a multiple-redundant implementation configuration to ensure that the network experiences minimal downtime with optimized throughput through one or more connections. As part of a Global Information Architecture (“GIA”), NCT provides the capability to establish rules for prioritizing and optimizing network traffic for specific users or classes of users, and specific classes of information traffic.

Claims

1. A method for managing a network administrative control system in a controlled environment, the method comprising the steps of:

creating an information object comprising an access rule and a relationship, wherein said access rule is for said system and is defined by a relationship of said system;

determining a privilege of said system based on said access rule; and

managing said system by enforcing said privilege.

2. The method of claim 1, further comprising repeating said creating, determining, and managing for another system that is part of said environment.

3. A method for executing an application in a controlled environment, the method comprising the steps of:

defining a parameter structure, wherein said parameter structure comprises a parameter for an application and a first information object;

defining a parameter configuration, wherein said parameter configuration comprises a parameter for a controlled environment and a second information object;

defining a command structure, wherein said command structure comprises a template with said parameter, and

executing said command structure in said application.

4. The method of claim 3, wherein said parameter structure comprises a parameter specifying a location of an executable to run said application.

5. The method of claim 3, wherein said executing said command structure comprises the steps of:

identifying a device for managing flow of information in or out of a network; and

transmitting a behavior definition to said device, wherein said behavior definition is created using said parameter for a controlled environment.

6. The method of claim 5, wherein said parameter for a controlled environment is an IP address or domain name.

7. The method of claim 5, wherein said parameter for a controlled environment is a firewall command.

8. The method of claim 5, wherein said parameter for a controlled environment is associated with load balancing.

9. The method of claim 5, wherein said parameter for a controlled environment defines bandwidth.

10. The method of claim 5, wherein said device configures said network according to said behavior definition.

11. The method of claim 10, wherein said configuring of said network comprises the steps of:

translating said network behavior definition into a configuration request for a system manager in communication with a network-support device; and

transmitting said configuration request to said system manager.

12. The method of claim 11, wherein said system manager translates said configuration request into a command for said network-support device and transmits said command to said network-support device.

13. The method of claim 12, wherein said network-support device configures itself according to said command.

14. A network control system comprising:

a node manager,

one or more network appliances, and

at least one appliance manager for each of said one or more network appliances,

wherein said node manager keeps track of one or more roles each of said one or more network appliances is responsible for fulfilling.

15. The system of claim 14, wherein said node manager receives a network behavior definition and sends a configuration request to said at least one appliance manager.

16. A method for managing a network in a controlled environment, the method comprising the steps of:

receiving a network behavior definition from a network control system;

translating said network behavior definition into a configuration request for a system manager in communication with a network-support device; and

transmitting said configuration request to said system manager.

17. The method of claim 16, wherein said network behavior definition is received at a secure location.

18. The method of claim 16, wherein said configuration request is transmitted using a secure transmission scheme.

19. The method of claim 16, wherein said receiving comprises the steps of:

polling a specified location for an updated network behavior definition; and

receiving from said specified location an updated network behavior definition.

20. The method of claim 19, wherein said specified location has no access to the system receiving said network behavior definition.

21. The method of claim 16, further comprising the step of evaluating the flow of traffic in said network.

22. The method of claim 21, further comprising the steps of:

storing a network behavior definition;

translating said stored network behavior definition into a second configuration request for said system manager if said flow of traffic fails to meet performance criteria; and

transmitting said second configuration request to said system manager.

23. The method of claim 22, further comprising the step of notifying said network control system of said failure of said flow of traffic.

24. The method of claim 22, wherein said network behavior definition is stored in a secured location.

25. A method for controlling a network-support device, the method comprising the steps of:

receiving a configuration request from a network control system manager;

translating said configuration request into a command for said network-support device; and

transmitting said command to said network-support device.

26. The method of claim 25, wherein said translating comprises the step of creating a command utilizing information provided by a third party and said received configuration request.

27. The method of claim 26, wherein said information comprises:

information regarding a relationship between said network-support device and a second network-support device;

information regarding a relationship between a plurality of network components available on said network-support device;

or information regarding a relationship between a plurality of services that are provided by a network component on said network-support device.

28. The method of claim 25, wherein said command is transmitted using a secure transmission scheme.

29. A method for creating a network control system, the method comprising the steps of:

executing an initial boot configuration on a machine capable of executing network control system manager programs;

determining whether there is an alive network control system manager on said network; and

configuring said machine based on said determination.

30. The method of claim 29, wherein said initial boot configuration is used to configure said machine.

31. The method of claim 29, wherein said configuring comprises the steps of:

receiving an instruction from an alive network control system manager; and

using said instruction to configure said machine.

32. The method of claim 31, wherein said instruction is received at a secure location.

33. The method of claim 31, wherein said receiving comprises the steps of:

polling a location specified by said initial boot configuration for an instruction from said alive network control manager; and

receiving from said specified location an instruction from said alive network control manager.

34. A method for creating a network control system, the method comprising the steps of:

receiving a network behavior definition from a higher network control system; and

using said network behavior definition to configure said network control system.

35. The method of claim 34, wherein said network behavior definition is received at a secure location.

36. The method of claim 34, wherein said receiving comprises:

polling a location specified by said initial boot configuration for a network behavior definition; and

receiving from said specified location a network behavior definition.

37. A method for managing a network administrative control system using a configurable remote interface, said method comprising the steps of:

creating a payload comprising a plurality of commands for said system, and transmitting said payload to a specific location capable of being accessed by said system using a configurable remote interface.

38. The method of claim 37, wherein said remote interface is configured to operate normally when intermediate commands for said system block subsequent commands for said system.

39. The method of claim 37, wherein said payload is transmitted using a secure transmission scheme.

40. The method of claim 37, wherein said specific location is secure.

41. A method of managing Quality of Service between two nodes, the method comprising the steps of:

creating a channel by assigning a priority or a permission to a tunnel between said two nodes;

identifying a priority or a permission of a data stream;

matching said priority or permission of said data stream to said channel; and

directing said data stream for transmission through said tunnel.

42. A method of managing Quality of Service for a user, the method comprising the steps of:

associating a user with a priority or permission,

tagging data associated with said user with said priority or permission, and

matching said tagged data to a channel assigned said priority or permission.

43. A computer readable medium having computer-executable instructions for performing a method comprising:

receiving a network behavior definition from a network control system;

translating said network behavior definition into a configuration request for a system manager in communication with a network-support device; and

transmitting said configuration request to said system manager.

44. A computer readable medium having computer-executable instructions for performing a method comprising:

receiving a configuration request from a network control system manager;

translating said configuration request into a command for a network-support device; and

transmitting said command to said network-support device.

45. A computer readable medium having computer-executable instructions for performing a method comprising:

creating a payload comprising a plurality of commands for a network administrative control system, and

transmitting said payload to a specific location capable of being accessed by said system using a configurable remote interface.