INTELLIGENT NETWORK MANAGEMENT OF SUBSCRIBER-RELATED EVENTS

• US 20120315893A1
• Filed: 06/09/2011
• Published: 12/13/2012
• Est. Priority Date: 06/09/2011
• Status: Abandoned Application

• Current Assignee: Alcatel-Lucent SA (Nokia Corporation)
• Original Assignee: Alcatel-Lucent Canada Incorporated (Nokia Corporation)
• Inventors: Weppler, Cory R., Vrbaski, Mira, Yeung, Lui Chu, Ma, Haiqing, Beyk, Gita
• Application Number:
  US13/156,787
• Publication Number:
  US 20120315893A1
• Time in Patent Office: Days
• US Class Current: 455/424
• CPC Class Codes: H04L 41/5022 by giving priorities, e.g. assigning classes of service
• CPC Class Codes: H04L 43/0882 Utilisation of link capacity
• CPC Class Codes: H04W 24/08 Testing, supervising or monitoring using real traffic
• CPC Class Codes: H04W 76/20 Manipulation of established connections

Abstract

Various exemplary embodiments relate to a method and related network node including one or more of the following: receiving, at the network node, an indication of an event from a network monitor, the event associated with a subscriber; identifying, based on the event, an applicable rule of a plurality of rules, the applicable rule specifying at least one action; and initiating performance of the at least one action with respect to at least one session associated with the subscriber. Various embodiments additionally include one or more of the following: identifying a group of sessions associated with the subscriber, wherein the steps of identifying an applicable rule and initiating performance of the at least one action are performed for each session of the group of sessions.

Claims

1. A method performed by a network node for resolving subscriber-related events, the method comprising:

receiving, at the network node, an indication of an event from a network monitor, the event associated with a subscriber;

identifying, based on the event, an applicable rule of a plurality of rules, the applicable rule specifying at least one action; and

initiating performance of the at least one action with respect to at least one session associated with the subscriber.

2. The method of claim 1, wherein the step of initiating performance of the at least one action comprises:

identifying a group of sessions belonging to the subscriber; and

initiating performance of the at least one action with respect to each session of the group of sessions.

3. The method of claim 1, further comprising:

identifying a group of sessions associated with the subscriber,

wherein the steps of identifying an applicable rule and initiating performance of the at least one action are performed for each session of the group of sessions.

4. The method of claim 1, further comprising:

updating an object associated with the subscriber based on the event; and

receiving a request associated with a session associated with the subscriber,

wherein the steps of identifying an applicable rule and initiating performance of the at least one action are performed in response to receiving the request.

5. The method of claim 1, further comprising:

receiving a second indication of a second event, the second event associated with a network element,

wherein the step of identifying an applicable rule comprises identifying an applicable rule of the plurality of rules based on both the event and the second event.

6. The method of claim 1, wherein the indication of an event includes an indication of at least one of a single source signal attack, a single source battery attack, peer-to-peer traffic, an always-active subscriber, a high-usage subscriber, a high-signaling subscriber, a horizontal port scan, a vertical port scan, an unwanted source of traffic, a single source flood, a distributed battery attach, a distributed flood, discovery abuse, an signaling abuse.

7. The method of claim 1, wherein the at least one session associated with the subscriber is a session belonging to a different subscriber and that currently shares at least one network element with a different session belonging to the subscriber.

8. A network node for resolving subscriber-related events, the network node comprising:

a network monitor interface for receiving an indication of an event from a network monitor, the event associated with a subscriber;

a rules storage for storing a plurality of rules, each rule of the plurality of rules specifying at least one criteria and at least one action; and

a rules engine configured to identify an applicable rule of the plurality of rules by comparing the event to the at least one criteria of the applicable rule.

9. The network node of claim 8, further comprising:

a subscriber event handler configured to initiate performance of the at least one action identified by the applicable rule.

10. The network node of claim 9, wherein the subscriber event handler is further configured to:

identify a group of sessions associated with the subscriber; and

request an identification of an applicable rule from the rules engine for each session of the group of sessions,

wherein, in initiating performance of the at least one action identified by the applicable rule, the subscriber event handler is configured to initiate performance of at least one action identified by each applicable rule for each session of the group of sessions.

11. The network node of claim 8, further comprising:

a subscriber storage for storing a plurality of subscriber objects, each network element object associated with a network element; and

a subscriber event handler configured to update a subscriber object of the plurality of subscriber objects associated with the subscriber based on the event,

wherein the rules engine, in comparing the event to the at least one criteria, is configured to access the subscriber object from the subscriber storage.

12. The network node of claim 8, further comprising:

an interface for receiving a request associated with a session;

a request handler configured to, in response to receiving the request, initiating performance of the at least one action identified by the rules engine.

13. The network node of claim 8, wherein:

the network monitor interface further receives a second indication of a second event, the second event associated with a network element; and

in identifying an applicable rule, the rules engine is configured to identify an applicable rule of the plurality of rules by comparing both the event and the second event to the at least one criteria of the applicable rule.

14. A tangible and non-transitory machine-readable storage medium encoded with instructions for execution by a network node for resolving subscriber-related events, the tangible and non-transitory machine-readable storage medium comprising:

instructions for receiving, at the network node, an indication of an event from a network monitor, the event associated with a subscriber;

instructions for identifying, based on the event, an applicable rule of a plurality of rules, the applicable rule specifying at least one action; and

instructions for initiating performance of the at least one action with respect to at least one session associated with the subscriber.

15. The tangible and non-transitory machine-readable storage medium of claim 14, wherein the instructions for initiating performance of the at least one action comprise:

instructions for identifying a group of sessions associated with the subscriber; and

instructions for initiating performance of the at least one action with respect to each session of the group of sessions.

16. The tangible and non-transitory machine-readable storage medium of claim 14, further comprising:

instructions for identifying a group of sessions associated with the subscriber,

wherein the instructions for identifying an applicable rule and initiating performance of the at least one action are executed for each session of the group of sessions.

17. The tangible and non-transitory machine-readable storage medium of claim 14, further comprising:

instructions for updating an object associated with the subscriber based on the event; and

instructions for receiving a request associated with a session associated with the subscriber,

wherein the instructions for identifying an applicable rule and initiating performance of the at least one action are executed in response to receiving the request.

18. The tangible and non-transitory machine-readable storage medium of claim 14, further comprising:

instructions for receiving a second indication of a second event, the second event associated with a network element,

wherein the instructions for identifying an applicable rule comprise instructions for identifying an applicable rule of the plurality of rules based on both the event and the second event.

19. The tangible and non-transitory machine-readable storage medium of claim 14, wherein the indication of an event includes an indication of at least one of a single source signal attack, a single source battery attack, peer-to-peer traffic, an always-active subscriber, a high-usage subscriber, a high-signaling subscriber, a horizontal port scan, a vertical port scan, an unwanted source of traffic, a single source flood, a distributed battery attach, a distributed flood, discovery abuse, an signaling abuse.

20. The tangible and non-transitory machine-readable storage medium of claim 14, wherein the at least one session associated with the subscriber is a session belonging to a different subscriber and that currently shares at least one network element with a different session belonging to the subscriber.