SYSTEM AND METHOD FOR NETWORK MANAGEMENT USING SELF-DISCOVERING THIN AGENTS

• US 20090204702A1
• Filed: 02/08/2008
• Published: 08/13/2009
• Est. Priority Date: 02/08/2008
• Status: Abandoned Application

• Current Assignee: Clear Blue Security LLC
• Original Assignee: Autiq A/S
• Inventors: KROGH, Poul Hassan Agha, LEHMANN, Anders, JENSEN, Robert
• Application Number:
  US12/028,160
• Publication Number:
  US 20090204702A1
• Time in Patent Office: Days
• US Class Current: 709/224
• CPC Class Codes: H04L 41/046 comprising network management agents or mobile agents therefor
• CPC Class Codes: H04L 43/12 Network monitoring probes

Abstract

In one embodiment, a computer-implemented method of managing a computer network includes installing an agent in each of a plurality of network nodes in the network. The agent may be configured to identify one or more types of network resources attached to a particular node with which the agent is associated. One or more roles may be assigned to or by the agent based, at least in part, upon the one or more types of network resources identified by the agent. Functions associated with the identified roles may be executed. Monitoring the status of each agent may also be carried out. In another embodiment, a network management system includes an agent executing within an associated network node of the network. The agent may be configured to operate so as to identify one or more types of resources attached to the network node. The agent may be assigned one or more roles based, at least in part, on an inference based upon the one or more types of attached resources identified by the agent.

Claims

1. A computer-implemented method of managing a computer network, the method comprising:

installing an agent in each of a plurality of network nodes in the network, wherein the agent is configured to identify a type of network resource attached to a particular node with which said agent is associated;

assigning a role to the agent based, at least in part, upon the type of network resource identified by the agent; and

executing a function associated with the assigned role in the particular node.

2. The method of claim 1, further comprising monitoring a status of each agent.

3. The method of claim 1, further comprising configuring the agent to perform the function associated with the type of network resource identified by the agent.

4. The method of claim 3, wherein said configuring comprises pushing functionality from a management node to the agent.

5. The method of claim 3, wherein said configuring comprises pulling functionality from a management node to the agent.

6. The method of claim 3, wherein said configuring comprises the agent self-configuring by extracting executable code contained in the agent to a memory, said executable code being suitable, upon execution, to perform functions associated with the identified type of network resource.

7. The method of claim 1, further comprising inferring an assigned role of the agent from detected information regarding a configuration of the particular network node.

8. The method of claim 7, wherein said inferring is carried out by the agent.

9. The method of claim 7, wherein said inferring is carried out by a management node.

10. The method of claim 1, wherein a status of plural agents deployed throughout the network is monitored at a management node of the network.

11. The method of claim 1, further comprising the agent dynamically updating a role assignment to itself in response to a change in either hardware or software functionality at the particular network node.

12. The method of claim 11, wherein said dynamically updating comprises deleting a role of the agent in response to removing either a hardware component or a software function at the particular network node.

13. The method of claim 11, wherein said dynamically updating comprises assigning an additional role to the agent in response to adding either a hardware component or a software function at the particular network node.

14. The method of claim 1, further comprising transmitting information regarding a hardware and/or software configuration at the particular node to a management node.

15. The method of claim 14, wherein the information is relayed to the management node by the agent.

16. The method of claim 1, wherein said assigning a role by the agent comprises detecting, through a self-discovery process, a property of a plurality of predetermined properties relating to a network resource attached to the particular node with which said agent is associated, and wherein said role is assigned based upon said detected property.

17. The method of claim 16, wherein said property is detected by detecting one or more of a telltale running process, a registry entry, an environment setting, a file structure, and a directory structure.

18. The method of claim 1, wherein said assigning a role by the agent comprises correlating one or more detected properties with a single role.

19. The method of claim 18, wherein a single property is mapped to the single role.

20. A network management system, the system comprising:

an agent executing within an associated network node of the network, said agent being configured to operate so as to identify a type of resource attached to the network node,

wherein the agent self-assigns a role to itself based, at least in part, on an inference based upon the type of resource identified by the agent.

21. The system of claim 20, further comprising a monitoring node configured to monitor a status of the agent.

22. The system of claim 20, wherein the agent is configured to perform functions associated with the type of network resource based upon the inference.

23. The system of claim 20, wherein said agent is configured to receive functionality pushed from a management node to the agent based upon the inference.

24. The system of claim 20, wherein said agent is configured to receive functionality pulled from a management node based upon the inference.

25. The system of claim 20, wherein said agent is configured to self-configure by extracting executable code contained in the agent to a memory, said executable code being suitable, upon execution, to perform functions associated with the identified type of resource at the network node.

26. The system of claim 20, wherein said agent is assigned a role based, at least in part, from an inference made from detected information regarding a configuration of the network node.

27. The system of claim 26, wherein said agent is configured to infer the assigned role from the detected information.

28. The system of claim 20, further comprising a central node that infers the assigned role of the agent using the detected information.

29. The system of claim 20, further comprising a management node that is configured to monitor a status of the agent.

30. The system of claim 20, wherein the agent is configured to perform a dynamic update to a role assignment to itself in response to a change in either hardware attached to the particular network node, or to a software function performed at the particular network node.

31. The system of claim 20, wherein said dynamic update comprises deleting a role of the agent in response to removing either a hardware component or a software function at the particular network node.

32. The system of claim 20, wherein said dynamic update comprises assigning an additional role to the agent in response to adding either a hardware component or a software function at the particular network node.

33. The system of claim 20, wherein said agent is configured to relay information regarding a hardware and/or software configuration at the particular node to a management node.

34. The system of claim 20, wherein said agent is configured to carry out a self-discovery process in which a property of a plurality of predetermined properties is detected, and wherein said role is assigned based upon said detected property.

35. The system of claim 34, wherein said property is discovered by detecting one or more of a telltale running process, a registry entry, an environment setting, a file structure, and a directory structure.

36. The system of claim 20, wherein said assigning the role by the agent comprises correlating multiple detected properties with a single role.

37. The system of claim 36, wherein a single property is mapped to the single role.

38. An article of manufacture comprising a machine-readable medium containing computer-executable instructions therein which, when executed by a processor, cause an agent to be installed in a network node associated with one or more network resources, said agent being configured to carry out the functions of:

identifying one or more types of network resources attached to the network node in which said agent is installed;

assigning one or more roles to itself based, at least in part, upon the one or more network resources identified by the agent; and

configuring the agent in a desired manner based upon the one or more identified network resources.

39. The article of manufacture of claim 38, wherein said configuring comprises the agent self-extracting and executing only desired functionality from the computer-executable instructions based upon the one or more identified network resources.

40. The article of manufacture of claim 38, wherein said configuring comprises the agent receiving computer-executable instructions transmitted from a source external to the network node so as to enable the agent to provide the desired functionality based upon the one or more identified network resources.

41. The article of manufacture of claim 40, wherein said computer-executable instructions are received after said agent requests that the desired functionality be provided.