UNIVERSAL CONNECTIONS DATA COLLECTION

• US 20100329149A1
• Filed: 06/29/2010
• Published: 12/30/2010
• Est. Priority Date: 06/29/2009
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: Fiberlink Communications Corporation (International Business Machines Corporation)
• Inventors: SINGH, Sumeet, ADAMS, Clinton Donald
• Application Number:
  US12/826,319
• Publication Number:
  US 20100329149A1
• Time in Patent Office: Days
• US Class Current: 370/254
• CPC Class Codes: H04L 12/28 characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks] wireless communication networks H04W ; arrangements for dividing the transmission path H04W40/00
• CPC Class Codes: H04L 12/4625 Single bridge functionality, e.g. connection of two networks over a single bridge
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272

Abstract

Universal connection data collection solution for monitoring, collecting and reporting connection data and/or attributes for endpoint computing devices making a connection to a network for use in analyzing user behavior and device connectivity efficiencies. Embodiments include IP connections wherein the universal connections data collection module is notified by the OS of IP connection events. Embodiments may include a standalone mode of the universal connections data collection solution and add-on modes wherein the universal connections data collection solution integrates with a third party connection manager using an API to communicate. The universal connections data collection solution monitors the state of network connections by enumerating connections, comparing the list of active connections to the last known snapshot of the network state to determine a network state change (e.g., new connection, change in connection state, disconnection), and periodically updating the statics of the connected network. Network connection details may be exported in the form of connection logs.

Claims

1. A method for collection and reporting of connections data on an endpoint comprising:

detecting a notification of a network change event at the endpoint;

evaluating the nature of the network change event;

collecting information about a current state of one or more active network connections of the endpoint;

storing, upon a network state change, the current state of the one or more active network connections in a data store;

formatting information about a plurality of states of network connections to create a connection log containing normalized connection data; and

uploading the connection log to a server for further evaluation.

2. The method of claim 1, wherein the step of collecting information about the current state of one or more active network connections of the endpoint occurs continuously after a connection has been established.

3. The method of claim 1, wherein the step of formatting comprises parsing and collating information about the plurality of states of network connections in accordance with a predefined schema.

4. The method of claim 1, wherein the step of collecting comprises gathering connection attributes from at least one third-party connection manager on the endpoint via an application programming interface (API).

5. The method of claim 1, wherein the information collected includes transport specific data attributes that are determined by the type of network connections.

6. The method of claim 1 further comprising:

monitoring a VPN connection made with a virtual network adapter; and

wherein the information about the state of the VPN connection is included in the normalized connection data in the connection log.

7. The method of claim 6 further comprising:

associating the VPN connection with another network connection and including the information about the association in the connection log.

8. The method of claim 1, wherein the step of collecting comprises gathering network attributes from an operating system on the endpoint.

9. A system for collection and reporting of connections data on an endpoint comprising:

an event notification module configured to detect a notification of a network change event at the endpoint;

a network inspection module configured to collect information about a current state of one or more active network connections of the endpoint;

a data store including a plurality of network states;

a correlation module configured to compare the current state of the one or more active network connections to a corresponding state stored in the data store to determine a network state change, wherein the software system updates the plurality of network states in the data store upon a network state change;

a data formatting and collation module configured to format information about a plurality of states of network connections to create a connection log containing normalized connection data; and

an upload module configured to upload the connection log to a server for further evaluation;

wherein the normalized connection data includes information gathered from an operating system of the endpoint.

10. The system of claim 9, wherein the normalized connection data includes information includes connection data that is gathered continuously after a connection has been established.

11. The system of claim 9, wherein the data formatting and collation module is further configured to parse and collate information about the plurality of states of network connections in accordance with a predefined schema.

12. The system of claim 9, further comprising

at least one third-party connection manager on the endpoint;

and

at least one application programming interface (API) configured to allow the system to collect a first set of connection attributes from the at least one third-party connection manager.

13. The system of claim 9, wherein the information collected includes transport specific data attributes that are determined by the type of network connections.

14. The system of claim 9, wherein

at least one software module is configured to monitor a VPN connection made with a virtual network adapter;

and

wherein the information about the state of the VPN connection is included in the normalized connection data in the connection log.

15. The system of claim 14, wherein the correlation module is further configured to associate the VPN connection with another network connection such that the association is included in the connection log.

16. The system of claim 9, wherein the step of collecting comprises gathering network attributes from an operating system on the endpoint.

17. A method for collection and reporting of connections data on an endpoint comprising:

receiving a notification of a network change event at the endpoint;

collecting, in response to receiving the notification, information about a current state of one or more active network connections of the endpoint;

storing the current state of the one or more active network connections in a data store;

formatting information about a plurality of states of network connections to create a connection log containing normalized connection data; and

uploading the connection log to a server for further evaluation;

wherein the step of collecting comprises gathering connection attributes via an application programming interface (API).

18. The method of claim 17, wherein the step of collecting further comprises receiving network attributes that are exported by at least one third-party connection manager via the API.

19. The method of claim 17, further comprising the step of merging the connection log with network connection information of a similar format made available by at least one third-party connection manager.

20. The method of claim 17 wherein the step of collecting further comprises gathering network attributes from an operating system on the endpoint.

21. The method of claim 17, wherein the information collected includes transport specific data attributes that are determined by the type of network connections.

22. The method of claim 17 further comprising:

monitoring a VPN connection made with a virtual network adapter; and

wherein the information about the state of the VPN connection is included in the normalized connection data in the connection log.

23. The method of claim 22 further comprising:

associating the VPN connection with another network connection and including the information about the association in the connection log.