Virtual network management

• US 7,058,711 B2
• Filed: 04/04/2002
• Issued: 06/06/2006
• Est. Priority Date: 04/04/2002
• Status: Expired due to Term

• Current Assignee: Avaya Incorporated
• Original Assignee: Avaya Technology Corporation Miami Lakes FLA US
• Inventors: Fitzgerald, Christopher A.
• Primary Examiner(s): Vaughn, Jr., William C.
• Assistant Examiner(s): Avellino, Joseph E.
• Application Number:
  US10/117,509
• Publication Number:
  US 20030191830A1
• Time in Patent Office: 1,524 Days
• Field of Search: 709217-229, 717168-178, 713200-202, 707/104.1, 714/4
• US Class Current: 709/224
• CPC Class Codes: H04L 41/18 Delegation of network management function, e.g. customer network management [CNM]
• CPC Class Codes: H04L 41/28 Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration
• CPC Class Codes: H04L 41/40 using virtualisation of network functions or resources, e.g. SDN or NFV entities
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A system providing for virtual network management is disclosed. A system in accordance with the present invention allows a service provider to remotely manage one or more client network management systems. The security of the client network management systems is advanced by only allowing communications between a client network management system and the service provider that have been initiated by the client network management system. A mirror image of a client network management system is maintained by the service provider as a virtual network management system. Data included in the virtual network management system is periodically updated with data received from the client network management system. Instructions or data may be passed from the service provider to the client network management system in reply to communications initiated by the client network management system. The present invention is particularly useful in connection with the remote management of client networks with respect to which security is a concern.

Claims

1. A method for remotely managing a network, comprising:

providing a first client network comprising a first client network management system;

providing a second client network comprising a second client network management system;

providing a service provider network management system, wherein said service provider network management system is provided with an address of said first client network management system and an address of said second client network management system;

providing a communication link between said first client network management system and said service provider network management system;

providing a communication link between said second client network management system and said service provider network management system;

in response to said first client network management system initiating a communication addressed to said service provider network management system, wherein said service provider network management system cannot initiate communications with said first client network, wherein communications from said service provider network management system to said first client network management system are only completed as part of a response to a communication initiated by said first client network management system, and wherein said communication addressed to said service provider network management system is formatted according to an Internet protocol;

the step of;

establishing at least a first virtual network management system on said service provider network management system, wherein said first virtual network management system comprises a database that mirrors said first client network management system, and wherein a technician using said service provider network management system can manage said first client network without having real time access to said first client network; and

in response to said second client network management system initiating a communication addressed to said service provider network management system, wherein said service provider network management system cannot initiate communications with said second client network, wherein communications from said service provider network management system to said second client network management system are only completed as part of a response to a communication initiated by said second client network management system, and wherein said communication addressed to said service provider network management system is formatted according to an Internet protocol;

the step of;

establishing at least a second virtual network management system on said service provider network management system, wherein said second virtual network management system comprises a database that mirrors said second client network management system, and wherein a technician using said service provider network management system can manage said second client network without having real time access to said second client network.

2. The method of claim 1, further comprising:

generating in said service provider network management system an acknowledgment of said communication, wherein said acknowledgement comprises at least one of a request for data and data for use by said client network.

3. The method of claim 1, wherein said Internet protocol comprises HTTPS.

4. The method of claim 1, wherein said first client network comprises a virtual private network.

5. The method of claim 1, wherein said first client network comprises a private branch exchange.

6. A system for remotely managing a network, comprising:

a first client network, comprising;

a first plurality of communication nodes;

a communication link interconnecting said nodes;

a first client server;

a first client network management system;

a second client network, comprising;

a second plurality of communication nodes;

a communication link interconnecting said nodes;

a second client server;

a second client network management system;

a service provider network management system, comprising;

a first virtual database including a mirrored copy of said first client network management system of said first client network, wherein said first virtual database is established in response to said first client network management system initiating a communication addressed to said service provider network management system, wherein a technician using said service provider network management system can access said first virtual database to manage said first client network without having real time access to said first client network;

a second virtual database including a mirrored copy of said second client network management system of said second client network wherein said second virtual database is established in response to said second client network management system initiating a communication addressed to said provider network management system, wherein a technician using said service provider network management system can access said second virtual database to manage said second client network without having real time access to said first client network;

a communication network interconnecting said first and second client networks and said service provider network, wherein communication between said first and second client networks and said service provider network may be initiated by one of said client networks and may not be initiated by said service provider network, and wherein said communication between one of said client networks and said service provider network is formatted according to an Internet protocol.

7. The system of claim 6, wherein at least a first of said communication nodes comprises a telephone.

8. The system of claim 6, wherein said first client network comprises a private branch exchange communications network.

9. The system of claim 6, wherein said client server of said first client network stores configuration information regarding said first client network.

10. The system of claim 9, wherein said configuration information can be at least one of altered and replaced with configuration information received from said service provider network management system in response to a communication initiated by one of said first and second client networks.

11. The system of claim 6, wherein said communication link comprises an Internet protocol communication link.

12. A method for remotely managing a client network from a service provider network management system, comprising:

receiving at said service provider network a first communication formatted according to an Internet protocol from a first client network management system;

generating a response to said first communication, wherein said response comprises at least one of substantive information related to operational aspects of a first client network obtained from a first virtual network management system related to said first client network management system and a request for data for inclusion in said first virtual network management system, and wherein a communication initiated by said service provider and addressed to said first client network that is other than a response to a communication from said first client network management system will not receive a response from said first client network;

receiving at said service provider network a second communication formatted according to an Internet protocol from a second client network management system;

generating a response to said second communication, wherein said response comprises at least one of substantive information related to operational aspects of a second client network obtained from a second virtual network management system related to said second client network management system and a request for data for inclusion in said second virtual network management system, and wherein a communication initiated by said service provider and addressed to said second client network that is other than a response to a communication from said second client network management system will not receive a response from said second client network.

13. The method of claim 12, wherein said substantive information comprises at least one of data, a request for data, and network administration information.

14. The method of claim 12, wherein said virtual client network comprises substantive information related to operational aspects of at least a first client network.

15. The method of claim 12, wherein said second communication comprises substantive information related to operational aspects of said client network.

16. The method of claim 12, wherein said Internet protocol comprises HTTPS.