Distributing policy information in a communication network

• US 6,751,659 B1
• Filed: 03/31/2000
• Issued: 06/15/2004
• Est. Priority Date: 03/31/2000
• Status: Expired due to Fees

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Durham, David M., Fenger, Russell J.
• Primary Examiner(s): Maung, Zarni
• Assistant Examiner(s): Halim, Sahera
• Application Number:
  US09/541,146
• Time in Patent Office: 1,537 Days
• Field of Search: 709/223, 709/224, 709/222, 709/221, 370/408, 717/171
• US Class Current: 709/223
• CPC Class Codes: H04L 67/55 Push-based network services
• CPC Class Codes: H04L 67/61 taking into account QoS or priority requirements
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

Selecting a subset of a hierarchical data structure based on a correspondence of the subset with a target in a communication network, and sending the subset of the hierarchical data structure to the target.

Claims

1. A method comprising:

identifying a target in a communication network, said communication network is represented by a policy tree, said target uniquely identified as a target node in the policy tree;

selecting based on the identification of the target node, a subset of policy information, from a superset of policy information, relevant to the target node from the policy tree having a hierarchical data structure; and

sending only the selected subset of policy information to the target for implementing the selected policy information at the target.

2. A method of claim 1, further comprising:

identifying a first subset to be modified from the superset of policy information;

determining a target node having a second subset corresponding to the first subset; and

modifying the second subset in the target node based on the modification of the first subset.

3. A method of distributing policy information within a communication network, the method comprising:

identifying a target in a communication network, said communication network is represented by a policy tree, said target uniquely identified as a target node in the policy tree;

selecting a subset of policy information, from a superset of policy information, from the policy tree of the communication network relevant to the target node; and

downloading the subset of the policy tree to the target for implementing the selected policy information at the target.

4. The method of claim 3, in which the selecting is based on information concerning the target.

5. The method of claim 3, further comprising determining a relative position of the subset of the policy tree within the policy tree after selecting the subset of the policy tree relevant to the target.

6. A method of distributing policy information in a communication network, the method comprising:

matching a first subset of policy information to be modified to policy information relevant to a node of a policy tree, the first subset being a subset of the policy tree having a hierarchical data structure, said first subset of policy information being obtained from a superset of policy information;

identifying a target corresponding to the node and containing a second subset of the policy tree, said second subset corresponding to the first subset that is unmodified; and

notifying the node containing the second subset about the first subset to be modified.

7. The method of claim 6, further comprising modifying the first subset within the superset of policy information and the second subset at the node.

8. The method of claim 7, wherein matching the first subset includes searching from a top of the policy tree to the node and flagging other nodes along a path to the node.

9. The method of claim 8, including setting a flag associated with the second subset of the node that matches the first subset wherein the flag denotes the type of modification.

10. The method of claim 9, wherein identifying the target includes matching the first subset to the node flagged with the type of modification in the policy tree.

11. The method of claim 10, further comprising modifying the second subset at the node in accordance with the type of modification denoted for the node.

12. The method of claim 9, wherein the nodes flagged with the type of modification are at least one of updated, added, or deleted.

13. The method of claim 12, wherein if the type of modification is set to delete, then nodes on a lower level of the tree and associated with the node that is flagged with the type of modification are set to delete.

14. The method of claim 12, wherein if the modification type flag is set to update, old policy information is replaced with new policy data.

15. The method of claim 12, wherein if the modification type flag is set to add, a new node is created.

16. A communication network system comprising a policy server configured to:

identify a target in a communication network, said communication network is represented by a policy tree, said target uniquely identified as a node in the policy tree;

select a subset of policy information from the policy tree of the communication network relevant to the target, said first subset of policy information being obtained from a superset of policy information; and

download to the target only the subset of the policy information to implement the subset at the target.

17. The system of claim 16, in which the policy server is further configured to:

receive information concerning the target before selecting the subset, wherein the information is used to select the subset relevant to the target.

18. The system of claim 17, in which the policy server is further configured to:

determine a relative position of the subset of the policy tree within the policy tree after selecting the subset of the policy tree relevant to the target.

19. A communication network system comprising a policy server configured to:

match a first subset of policy information to be modified to policy information relevant to a node of a policy tree, said first subset being a subset of the policy tree having a hierarchical data structure, said first subset of policy information being obtained from a superset of policy information;

identify a target corresponding to the node and containing a second subset of the policy tree, said second subset corresponding to the first subset that is unmodified; and

notify the target containing the second subset about the first subset to be modified.

20. The system of claim 19, in which the policy server is further configured to:

modify the first subset of the policy tree within the policy tree and the second subset of the target.

21. A communication network system comprising:

a parent server containing a superset of a policy database having a hierarchical data structure;

secondary servers each containing a respective subset of the policy database; and

targets each containing a respective portion of the subset of the policy database, wherein the subsets of the policy database are replicated to the secondary servers and the portions of the subsets are replicated to the targets based on information describing the targets.

22. The communication network system of claim 21, wherein the parent servers maintain status information of the replicated subsets and portions of the subsets, and the targets are updated on the portions of the subsets whenever changes are made to the portions of the subsets in the policy database.

23. The communication network system of claim 22, wherein the targets containing a subset of policy database affected by changes in the policy database are notified of the changes and are updated on the affected subset of the policy database.

24. An article comprising a computer-readable medium that stores computer-executable instructions for causing a computer system to:

identify a target in a communication network that is represented by a policy tree, said target uniquely identified as a node in the policy tree;

select a subset of policy information from the policy tree of the network relevant to the target, said subset of policy information being obtained from a superset of policy information; and

download to the target only the subset of the policy information to implement the subset at the target.

25. The article of claim 24, further causing the computer system to:

receive information concerning the target before selecting the first subset, wherein the information is used to select the first subset relevant to the target.

26. An article comprising a computer-readable medium that stores computer-executable instructions for causing a computer system to:

match a first subset of policy information to policy information relevant to a node of a policy tree, said first subset being a subset of the policy tree having a hierarchical data structure, said first subset of policy information being obtained from a superset of policy information;

identify a target corresponding to the node and containing a second subset of the policy tree, said second subset corresponding to the first subset that is unmodified; and

notify the target containing the second subset about the first subset to be modified.

27. The Article of claim 26, further causing the computer system to:

modify the first subset of the policy tree within the policy tree and the second subset of the target.