Method and apparatus for resolving network users to network computers

• US 5,978,568 A
• Filed: 04/03/1997
• Issued: 11/02/1999
• Est. Priority Date: 03/11/1997
• Status: Expired due to Fees

• Current Assignee: Sequal Technologies Incorporated (Niterra Co., Ltd.)
• Original Assignee: Sequal Technologies Incorporated (Niterra Co., Ltd.)
• Inventors: Abraham, Dalen M., Barnes, Todd A., Grieve, Mark G.
• Primary Examiner(s): Harrell, Robert B.
• Application Number:
  US08/826,598
• Time in Patent Office: 943 Days
• Field of Search: 364/DIG. 1 MS File, 364/DIG. 2 MS File, 707/10, 395/200.3, 395/200.33, 395/200.47, 395/200.48, 395/200.5, 395/200.51, 395/200.52, 395/200.53, 395/200.54, 395/200.75
• US Class Current: 709/224
• CPC Class Codes: H04L 41/046 comprising network management agents or mobile agents therefor
• CPC Class Codes: H04L 41/22 comprising specially adapted graphical user interfaces [GUI]
• CPC Class Codes: H04L 41/26 using dedicated tools for LAN [Local Area Network] management
• CPC Class Codes: H04L 41/28 Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration
• CPC Class Codes: H04L 61/00 Network arrangements, protocols or services for addressing or naming
• CPC Class Codes: H04L 61/45 Network directories; Name-to-address mapping
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/0263 Rule management
• CPC Class Codes: H04L 69/16 Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]

Abstract

A naming service manager (46) is provided for resolving mapping information regarding a plurality of computers connected to a local area network (LAN 24) and their users. The naming service manager 46 collects mapping information, i.e., user login names, domain names, computer names and IP addresses, from a plurality of naming service agents 50 located on the LAN (24) and correlates the mapping information into a current computer-to-user assignment or "mapping" for each user of the LAN 24 and/or a current IP address-to-computer assignment or "mapping" for each computer connected to the LAN 24. The naming service manager (46) serves the correlated mapping information to a plurality of naming service applications (48) which process the correlated mapping information in accordance with their own needs and requirements.

Claims

1. A computer-readable medium having computer-executable components for mapping users of a network connecting a plurality of computers, to the computers of the network, the computer-readable medium having computer-executable components comprising:

(a) a manager for maintaining mapping information for each user of the network and for each computer connected to the network; and

(b) at least one agent for providing updated mapping information collected from the plurality of computers to the manager as users of the network change and addresses of computers connected to the network change, wherein the manager updates the mapping information with the updated mapping information provided by said at least one agent.

2. The computer-readable medium of claim 1 having a further computer-executable component comprising at least one application for receiving updated mapping information from the manager, wherein said at least one application processes the updated mapping information in accordance with application requirements.

3. The computer-readable medium of claim 2, wherein the mapping information for each user identifies a login name of the user and a computer name of the computer to which the user is mapped.

4. The computer-readable medium of claim 3, wherein the mapping information for each computer identifies the computer name of the computer to which the user is mapped and the address of the computer connected to the network.

5. The computer-readable medium of claim 4, wherein the at least one agent provides the manager with a prior address update to the mapping information for each computer when the address for the computer becomes obsolete, and wherein the prior address update includes the obsolete address and computer name for the computer.

6. The computer-readable medium of claim 5, wherein when the manager is provided the prior address update by the at least one agent, the manager updates the mapping information for the computer with the obsolete address and computer name for the computer.

7. The computer-readable medium of claim 6, wherein the at least one agent provides the manager with a current address update to the mapping information for each computer when the computer is assigned a new address, and wherein the current address update includes the new address and computer name for the computer.

8. The computer-readable medium of claim 7, wherein when the manager is provided the current address update by the at least one agent, the manager updates the mapping information for the computer with the new address and computer name for the computer.

9. The computer-readable medium of claim 8, wherein the at least one agent provides the manager with a logout update to the mapping information for each user and each computer as each user logs out of a computer connected to the network, wherein the logout update includes the login name of the user logging out of the computer, and the address and computer name of the computer out of which the user is logging.

10. The computer-readable medium of claim 9, wherein when the manager is provided the logout update by the at least one agent, the manager updates the mapping information for the computer and the user with the login name of the user logging out of the computer, and the address and computer name of the computer out of which the user is logging.

11. The computer-readable medium of claim 10, wherein the at least one agent provides the manager with a login update to the mapping information for each user and each computer as each user logs into a computer connected to the network, wherein the login update includes the login name of the user logging into the computer and the address and computer name of the computer into which the user is logging.

12. The computer-readable medium of claim 11, wherein when the manager is provided the login update by the at least one agent, the manager updates the mapping information for the computer and the user with the login name of the user logging into the computer and the address and computer name of the computer into which the user is logging.

13. The computer-readable medium of claim 12, wherein if the computer into which the user is logging h as a new address, the manager processes a current address update for the computer.

14. The computer-readable medium of claim 13, wherein if another user is logged into the computer identified by the login update provided by the at least one agent, the manager processes a logout update for the other user.

15. The computer-readable medium of claim 10, wherein if the computer out of which the user is logging has a new address, the manager processes a current address update for the computer.

16. The computer-readable medium of claim 8, wherein prior to updating the mapping information with the new address and computer name for the compute, the manager processes a prior address update for the former address for the computer because the former address of the computer has become obsolete.

17. The computer-readable medium of claim 1, wherein the at least one agent provides the manager with static updated mapping information for each user.

18. The computer-readable medium of claim 17, wherein at least one other agent provides the manager with dynamic updated mapping information for each user.

19. The computer-readable medium of claim 18, wherein the manager does not update static mapping information provided by the at least one agent with dynamic updated mapping information provided by the at least one other agent.

20. A method for resolving a plurality of users of a network connecting a plurality of computers to at least one of the computers connected to the network, the method comprising:

(a) establishing for each user a computer-to-user mapping, which maps the user to at least one of the computers connected to the network;

(b) establishing for each computer connected to the network a computer-to-address mapping, which maps the computer to a network address;

(c) updating the computer-to-user mapping for each user as the user logs into and out of the at least one computer; and

(d) updating the computer-to-address mapping for each computer as the network address for the computer changes.

21. The method of claim 20, further comprising communicating to at least one application, the computer-to-user mapping of each user, the computer-to-address mapping for each computer to a network address, and the update of each said mapping, wherein said at least one application processes said mappings and said updates in accordance with application requirements.

22. The method of claim 21, further comprising storing the computer-to-address mapping for each computer and the computer-to-user mapping for each user mapped to the computer as a record in a host mapping table.

23. The method of claim 22, wherein updating the computer-to-user mapping of each user as the user logs into and out of the at least one computer comprises:

(a) identifying each newly active computer and each newly inactive computer connected to the network by computer name and network address;

(b) generating a login update for each newly active computer, wherein the login update includes the computer name and network address of the newly active computer and a login name of the user who logged in to the computer;

(d) generating a logout update for each newly inactive computer, wherein the logout update includes the computer name and network address of the newly inactive computer and the login name of the user who logged out of the computer.

24. The method of claim 23, wherein updating the computer-to-address mapping for each computer as the network address for the computer changes comprises:

(a) identifying each newly active computer by computer name and new network address;

(b) identifying each newly inactive computer by computer name and former network address;

(c) identifying each active computer whose network address has changed by computer name and new network address;

(d) for each newly active computer, generating a current address update, wherein the current address update includes the computer name and new network address of the newly active computer;

(e) for each newly inactive computer, generating a prior address update, wherein the prior address update includes the computer name and former network address of the newly inactive computer; and

(f) for each active computer whose network address has changed, generating a prior address update including the computer name and former network address of the active computer, and a current address update including the computer name and new network address of the active computer.

25. The method of claim 24, further comprising processing each prior address update, wherein processing each prior address update comprises:

(a) locating a record in the host mapping table containing a computer name which matches the computer name in the prior address update;

(b) storing the computer name and an invalid network address of the computer identified in the prior address update in said record in the host mapping table; and

(c) sending a prior address update record to the at least one application containing the computer name and the invalid network address of said computer.

26. The method of claim 25, further comprising processing each current address update, wherein processing each current address update comprises:

(a) locating a record in the host mapping table containing a computer name which matches the computer name in the current address update;

(b) storing the computer name and the new network address of the computer identified in the current address update in said record in the host mapping table; and

(c) sending a current address update record to the at least one application containing the computer name and the new network address of said computer.

27. The method of claim 26, further comprising processing each logout update, wherein processing each logout update comprises:

(a) locating a record in the host mapping table containing a computer name which matches the computer name in the logout update;

(b) storing the computer name and network address of the computer identified in the logout update and the login name of the user who logged out of said computer in said record in the host mapping table; and

(c) sending a logout record to the at least one application containing the computer name and the network address of said computer and the login name of the user who logged out of said computer.

28. The method of claim 27, further comprising processing each login update, wherein processing each login update comprises:

(a) locating a record in the host mapping table containing a computer name which matches the computer name in the login update;

(b) storing the computer name and network address of the computer identified in the login update and the login name of the user who logged into said computer in said record in the host mapping table; and

(c) sending a login record to the at least one application containing the computer name and the network address of said computer and the login name of the user who logged into said computer.

29. The method of claim 28, wherein if the computer-to-user mapping and the computer-to-address mapping in said record are permanent, the computer name and network address of the computer identified in the login update and the login name of the user who logged into said computer are not stored in said record in the host mapping table and a login record is not sent.

30. The method of claim 29, wherein processing the login update further comprises processing a current address update for the computer identified in the login update if the network address of said computer has changed.

31. The method of claim 27, wherein processing the logout update further comprises processing a prior address update for the computer identified in the logout update if the network address of said computer has changed.

32. The method of claim 27, wherein if the computer-to-user mapping and the computer-to-address mapping in said record are permanent, the computer name and network address of the computer identified in the login update and the login name of the user who logged out of said computer is not stored in said record in the host mapping table and a logout record is not sent.

33. The method of claim 26, wherein processing the current address update further comprises processing a prior address update for the computer identified in the current address update prior to storing the computer name and the new network address of said computer in said record in the host mapping, table, if the new address of said computer is different that a former address of said computer.

34. The method of claim 33, wherein processing the current address update further comprises sending a login record to the at least one application, if the former address of the computer identified in the current address update was an invalid network address and the user is not currently logged into said computer, wherein the login record includes the login name of the user and the computer name and network address of said computer.

35. The method of claim 25, wherein processing the prior address update further comprises sending a logout record to the at least one application if the user mapped to the computer identified in the prior address update was currently logged into the newly inactive computer, wherein the logout record includes the login name of the user and the computer name and former network address of said computer.

36. An apparatus for mapping users of a network connecting a plurality of computers, to the computers of the network, the apparatus comprising:

(a) a storage medium for storing a manager for maintaining mapping information for each user of the network and for each computer connected to the network, wherein the manager is provided updated mapping information from at least one agent which collects the updated mappimg information from the plurality of computers, and wherein the manager updates the mapping information with the updated mapping information provided by said at least one agent; and

(b) a processing unit electronically coupled to the storage medium for executing program instructions which implement the manager.

37. The apparatus of claim 36, wherein the processing unit executes program instructions causing the manager to communicate the mapping information for each user and computer to at least one application, wherein the at least one application processes the mapping information in accordance with application requirements.

38. The apparatus of claim 37, wherein the mapping information for each user identifies a login name of the user and a computer name of the computer to which the user is mapped.

39. The apparatus of claim 38, wherein the mapping information for each computer identifies the computer name of the computer to which the user is mapped and the address of the computer connected to the network.

40. The apparatus of claim 39, wherein when the manager is provided the prior address update by the at least one agent, the manager updates the mapping information for the computer with the obsolete address and computer name for the computer.

41. The apparatus of claim 40, wherein the at least one agent provides the manager with a current address update to the mapping information for each computer when the computer is assigned a new address, and wherein the current address update includes the new address and computer name for the computer.

42. The apparatus of claim 41, wherein when the manager is provided the current address update by the at least one agent, the manager updates the mapping information for the computer with the new address and computer name for the computer.

43. The apparatus of claim 42, wherein the at least one agent provides the manager with a logout update to the mapping information for each user and each computer as each user logs out of a computer corrected to the network, wherein the logout update includes the login name of the user logging out of the computer and the address and computer name of the computer out of which the user is logging.

44. The apparatus of claim 43, wherein when the manager is provided the logout update by the at least one agent, the manager updates the mapping information for the computer and the user with the login name of the user logging out of the computer and the address and computer name of the computer out of which the user is logging.

45. The apparatus of claim 44, wherein the at least one agent provides the manager with a login update to the mapping information for each user and each computer as each user logs into a computer connected to the network, wherein the login update includes the login name of the user logging into the computer and the address and computer name of the computer into which the user is logging.

46. The apparatus of claim 45, wherein when the manager is provided the login update by the at least one agent, the manager updates the mapping information for the computer and the user with the login name of the user logging into the computer and the address and computer name of the computer into which the user is logging.

47. The apparatus of claim 46, wherein if the computer into which the user is logging has a new address, the manager provides a current address update for the computer.

48. The apparatus of claim 47, wherein if another user is logged into the computer identified by the login update provided by the at least one agent, the manager provides a logout update for the other user.

49. The apparatus of claim 44, wherein if the computer out of which the user is logging has a new address, the manager provides a current address update for the computer.

50. The apparatus of claim 42, wherein the manager provides a prior address update for the former address for the computer.

51. The apparatus of claim 39, wherein the at least one agent provides the manager with a prior address update to the mapping information for each computer when the address for the computer becomes obsolete, and wherein the prior address update includes the obsolete address and computer name for the computer.

52. The apparatus of claim 36, wherein the network connecting the plurality of computers is connected to an internetwork, and wherein the address of each of the plurality of computers comprises an internetwork protocol address.