MANAGEMENT APPARATUS AND MANAGEMENT METHOD

• US 20140207929A1
• Filed: 09/24/2013
• Published: 07/24/2014
• Est. Priority Date: 01/21/2013
• Status: Abandoned Application

• Current Assignee: Alaxala Networks Corporation (Fortinet Inc.)
• Original Assignee: Alaxala Networks Corporation (Fortinet Inc.)
• Inventors: HOSHINO, Hikaru, KIMURA, Hiroyasu
• Application Number:
  US14/034,602
• Publication Number:
  US 20140207929A1
• Time in Patent Office: Days
• US Class Current: 709/223
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 41/0213 Standardised network management protocols, e.g. simple network management protocol [SNMP]
• CPC Class Codes: H04L 41/06 Management of faults, events, alarms or notifications
• CPC Class Codes: H04L 41/0677 Localisation of faults
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/507 Filtering out customers affected by service problems
• CPC Class Codes: H04L 61/103 across network layers, e.g. resolution of network layer into physical layer addresses or address resolution protocol [ARP]
• CPC Class Codes: H04L 61/5014 using dynamic host configuration protocol [DHCP] or bootstrap protocol [BOOTP]
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

A management apparatus includes user group information for managing the terminals by grouping terminals into groups each corresponding to service use conditions of terminals belonging to the group, and service information for associating each of the services provided by the service providing resources with paths for passing data when a terminal uses the service and a failure group which is affected by a failure when the failure occurs in one of the paths. When a failure occurs in one of the paths in the network, the management apparatus refers to the service information to identify a service for which the paths in the service information include the failed path as a failed service, identifies a failure group associated with the identified failed service, refers to the user group information to identify terminals belonging to the identified failure group as failure terminals, and reports the identified failure terminals.

Claims

1. A management apparatus connected to terminals and service providing resources for providing services to be used by the terminals via a network, the management apparatus comprising:

user group information for managing the terminals by grouping the terminals into groups each corresponding to service use conditions of terminals belonging to the group; and

service information for associating each of the services provided by the service providing resources with paths for passing data when a terminal uses the service and a failure group which is affected by a failure when the failure occurs in one of the paths,

wherein, when a failure occurs in one of the paths in the network, the management apparatus refers to the service information to identify a service for which the paths in the service information include the failed path as a failed service,

wherein the management apparatus identifies a failure group associated with the identified failed service,

wherein the management apparatus refers to the user group information to identify terminals belonging to the identified failure group as failure terminals, and

wherein the management apparatus reports the identified failure terminals.

2. A management apparatus according to claim 1,

wherein the service providing resources include an authentication apparatus for authenticating users of the terminals,

wherein the groups to which the terminals belong include a first group to which terminals of unauthenticated users belong and a second group to which terminals of authenticated users belong, and

wherein, upon receipt of authentication log information sent from the authentication apparatus when the authentication apparatus has authenticated a user of a terminal, the management apparatus updates the user group information in such a manner that the terminal of the authenticated user belongs to the second group.

3. A management apparatus according to claim 2,

wherein the management apparatus accepts entry of authentication information related to the authentication of the user of the terminal, and

wherein the management terminal registers the accepted authentication information in the authentication apparatus.

4. A management apparatus according to claim 1,

wherein the service information further associates each of the services with processing to be executed when a failure occurs in one of the paths,

wherein the management apparatus identifies processing to be executed associated with the identified failed service, and

wherein the management apparatus executes the identified processing.

5. A management apparatus according to claim 1,

wherein the service information further associates each of the services with a failure-affected service which will be unavailable by an effect of a failed service when the failure occurs in one of the paths,

wherein, upon identification of the failed service, the management apparatus refers to the service information to identify a failure-affected service associated with the failed service, and

wherein the management apparatus reports the identified failure terminals and the identified failure-affected service.

6. A management apparatus according to claim 1,

wherein the service information further associates each of the services with a quasi-failure group which will be affected by a failure when the failure occurs in one of the paths and a predetermined requirement is satisfied,

wherein, upon identification of the failed service, the management apparatus refers to the service information to identify a quasi-failure group associated with the failed service,

wherein the management apparatus refers to the user group information to identify terminals belonging to the identified quasi-failure group as quasi-failure terminals, and

wherein the management apparatus reports the identified failure terminals and the identified quasi-failure terminals.

7. A management method for a management apparatus connected to terminals, service providing resources for providing services to be used by the terminals via a network to manage the terminals, the service providing resources, and the network,

the management apparatus including:

user group information for managing the terminals by grouping the terminals into groups each corresponding to service use conditions of terminals belonging to the group; and

service information for associating each of the services provided by the service providing resources with paths for passing data when a terminal uses the service and a failure group which is affected by a failure when the failure occurs in one of the paths,

the management method comprising;

referring to, by the management apparatus, the service information upon occurrence of a failure in one of the paths in the network to identify a service for which the paths in the service information include the failed path as a failed service;

identifying, by the management apparatus, a failure group associated with the identified failed service;

referring to, by the management apparatus, the user group information to identify terminals belonging to the identified failure group as failure terminals; and

reporting, by the management apparatus, the identified failure terminals.

8. A management method according to claim 7,

wherein the service providing resources include an authentication apparatus for authenticating users of the terminals,

wherein the groups to which the terminals belong include a first group to which terminals of unauthenticated users belong and a second group to which terminals of authenticated users belong, and

wherein the management method further comprises:

updating, by the management apparatus, the user group information in such a manner that the terminal of the authenticated user belongs to the second group upon receipt of authentication log information sent from the authentication apparatus when the authentication apparatus has authenticated a user of a terminal.

9. A management method according to claim 8, further comprising:

accepting, by the management apparatus, entry of authentication information related to the authentication of the user of the terminal; and

registering, by the management terminal, the accepted authentication information in the authentication apparatus.

10. A management method according to claim 7,

wherein the service information further associates each of the services with processing to be executed when a failure occurs in one of the paths,

wherein the management method further comprises:

identifying, by the management apparatus that has identified the failed service, processing to be executed associated with the identified failed service; and

executing, by the management apparatus, the identified processing.

11. A management method according to claim 7,

wherein the service information further associates each of the services with a failure-affected service which will be unavailable by an effect of a failed service when the failure occurs in one of the paths,

wherein the management method further comprises:

referring to, by the management apparatus that has identified the failed service, the service information to identify a failure-affected service associated with the failed service; and

reporting, by the management apparatus, the identified failure terminals and the identified failure-affected service.

12. A management method according to claim 7,

wherein the service information further associates each of the services with a quasi-failure group which will be affected by a failure when a predetermined requirement is satisfied after the failure occurs in one of the paths,

wherein the management method further comprises:

referring to, by the management apparatus that has identified the failed service, the service information to identify a quasi-failure group associated with the failed service;

referring to, by the management apparatus, the user group information to identify terminals belonging to the identified quasi-failure group as quasi-failure terminals; and

reporting, by the management apparatus, the identified failure terminals and the identified quasi-failure terminals.