Data processing and observation system

• US 7,085,683 B2
• Filed: 04/30/2002
• Issued: 08/01/2006
• Est. Priority Date: 04/30/2001
• Status: Expired due to Fees

• Current Assignee: Commonwealth of Australia
• Original Assignee: Commonwealth of Australia
• Inventors: Anderson, Mark Stephen, Randhawa, Suneel Singh, Engelhardt, Dean Crawford, Marriott, Damian Andrew
• Primary Examiner(s): Hoff, Marc S.
• Assistant Examiner(s): Desta, Elias
• Application Number:
  US10/312,808
• Publication Number:
  US 20030191608A1
• Time in Patent Office: 1,554 Days
• Field of Search: 702/182, 702/186, 702/189, 345/419, 345/440, 710/1, 710241-244, 709/203, 709/225
• US Class Current: 702/186
• CPC Class Codes: G06F 11/328 Computer systems status display G06F11/327 takes precedence
• CPC Class Codes: G06F 11/3447 Performance evaluation by modeling
• CPC Class Codes: G06F 11/3495 for systems
• CPC Class Codes: G06F 2201/86 Event-based monitoring
• CPC Class Codes: G06F 30/30 Circuit design
• CPC Class Codes: G06T 11/206 Drawing of charts or graphs
• CPC Class Codes: G06T 2200/24 involving graphical user interfaces [GUIs]
• CPC Class Codes: H04L 41/046 comprising network management agents or mobile agents therefor
• CPC Class Codes: H04L 41/0686 Additional information in the notification, e.g. enhancement of specific meta-data
• CPC Class Codes: H04L 41/22 comprising specially adapted graphical user interfaces [GUI]

Abstract

An observation paradigm that works with a collection of the abovementioned elements, to provide a way of observing information infrastructures and data movement in a chosen time frame. The user (human observer) is provided sophisticated controls and interaction mechanisms that will make it easier for them to detect computer network intrusion and critical security management events in real time as well as allow them to better analyze past events. Embodiments may include various combinations of a framework for “intelligent agents”; an event handling system and a high-performance multi-layer observation facility presenting the user with a semantically dense depiction of an information source under consideration, such as a computer network.

Claims

1. A system for data processing and observation having a data processing architecture comprising

one or more data processing components associated with a logical level such that

a data processing component associated with a logical level only accepts input from one or more data processing components in a logically higher or lower logical level or an external source;

a data processing component associated with a logical level only provides output to one or more data processing components in a logically higher or lower level or an external recipient system;

wherein a data processing component can not accept input or provide output from or to a data processing component in the same logical level; and

a data processing component will only accept an input that conforms to an ontology related to the logical level with which the data processing component is associated; and

an external recipient system for providing a human-observable representation of one or more virtual objects that are mapped from a representation of a real or virtual object to a virtual object in one or more universes comprising

one or more observing subsystems to provide the human-observable representation of said one or more virtual objects and thus respective universes to which said virtual object is mapped, and

an interface device configured to receive control information indicating a position from which to represent said virtual objects in a respective universe and based thereon, to control said one or more observing sub-systems.

2. A system for data processing and observation according to claim 1 wherein there exist one or more virtual objects in one said universe and two or more views of a said universe and

the one or more observing subsystems are used to determine a set of one or more virtual objects in one of said views and further determines how those virtual objects in said set that exist in said other view are to be represented.

3. A system for data processing and observation according to claim 1 wherein one or more of the observing sub-systems is

a system for creating human observable objects in a modelling system comprising

one or more representations of real or virtual objects;

one or more virtual universes wherein

a universe selection function determines whether a representation of a real or virtual object is presented as one or more virtual objects in one or more virtual universes; and

a start position function determines the start position of a virtual object in a universe; and

a mapping from a representation of a real or virtual object to a virtual object with one or more visual, aural or haptic attributes and force related properties such that the position of a virtual object in a universe is determined by the force-related properties of said virtual object and the relative position and force related properties of zero or more other virtual objects.

4. A system for data processing and observation according to claim 1 wherein one or more of the observing sub-systems is

a system for creating human observable objects in a modelling system comprising

one or more representations of real or virtual objects;

a virtual universe; and

a mapping from a representation of a real or virtual object to a virtual object having at least one of visual, aural or haptic attributes wherein the position of a said virtual object in said universe is in accordance with layout rules, each rule expressed in terms of the representations of first and second real or virtual objects and the interrelationship between said first and second real or virtual objects and a related position determination.

5. A system for data processing and observation according to claim 1 wherein the interface device includes a keyboard configured to receive control information.

6. A system for data processing and observation according to claim 1 wherein the interface device includes a multi-degree of freedom sensor configured to receive said control information.

7. A system for data processing and observation according to claim 1 wherein the interface device includes a control panel having one or more multi-degree of freedom sensors each having a predetermined function configured to receive said control information.

8. A system for data processing and observation according to claim 1 wherein the interface device includes a monitor configured to provide said human-observable representation.

9. A system for data processing and observation according to claim 8 wherein the interface device includes amplification to amplify said representations.

10. A system for data processing and observation according to claim 1 wherein said interface device transforms said representations into a predetermined visual medium.

33. A system for data processing and observations as in claim 1, wherein the one or more data processing components include software components.

34. A system for data processing and observation as in claim 33, wherein the one or more data processing components further include one or more physical components.

11. A system for event processing and observation having an event-handling system that receives from one or more sources one or more events, each event having associated therewith by the issuing source one of an ordered data value and a semantic, wherein said event-handling system makes available one or more events to one or more recipient systems, said event-handling system comprises

one or more event queues having a predetermined semantic wherein events having said predetermined semantic are queued according to their associated data value;

a means to determine events to be made available to said one or more recipient systems if an event has a data value within one or more defined said data ranges, and

an external recipient system for observing one or more human observable virtual objects that are mapped from a representation of a real or virtual object to a virtual object in one or more universes comprising,

one or more observing sub-systems configurable to determine which observing sub-system is used to provide the human-observable representation of said one or more virtual objects and thus respective universes to which said virtual object is mapped, and

an interface device configured to receive control information indicating a position from which to represent said virtual objects in a respective universe and based thereon, to control said one or more observing sub-systems.

12. A system for event processing and observation according to claim 11 wherein there exist one or more virtual objects in one said universe and two or more views of a said universe used to determine wherein a set of one or more virtual objects in one of said views and how those virtual objects in said set that exist in said other view are to be represented.

13. A system for event processing and observation according to claim 12 wherein said interface means allows manipulation or observation of said configuration.

14. A system for event processing and observation according to claim 11 wherein one or more of the observing sub-systems is

a system for creating human observable objects in a modelling system comprising of

one or more representations of real or virtual objects;

one or more virtual universes wherein

a universe selection function determines whether a representation of a real or virtual object is presented as one or more virtual objects in one or more virtual universes; and

a start position function determines the start position of a virtual object in a universe; and

a mapping from a representation of a real or virtual object to a virtual object with one or more visual, aural or haptic attributes and force related properties such that the position of a virtual object in a universe is determined by the force-related properties of said virtual object and the relative position and force related properties of zero or more other virtual objects.

15. A system for event processing and observation according to claim 11 wherein one or more of the observing sub-systems is

a system for creating human observable objects in a modelling system comprising

one or more representations of real or virtual objects;

a virtual universe; and

a mapping from a representation of a real or virtual object to a virtual object having at least one of visual, aural or haptic attributes wherein the position of a said virtual object in said universe is in accordance with layout rules, each rule expressed in terms of the representations of first and second real or virtual objects and the interrelationship between said first and second real of virtual objects and a related position determination.

16. A system for event processing and observation according to claim 11 wherein the interface device includes a keyboard.

17. A system for event processing and observation according to claim 11 wherein the interface device includes a multi-degree of freedom sensor configured to receive said control information.

18. A system for event processing and observation observing one or more human observable virtual objects according to claim 11 wherein the interface device includes a control panel having one or more multi-degree of freedom sensors each having a predetermined function configured to receive said control information.

19. A system for event processing and observation according to claim 11 wherein an interface device includes a monitor configured to provide said human-observation representation.

20. A system for event processing and observation according to claim 19 wherein said interface device includes amplification to amplify said representations.

21. A system for event processing and observation according to claim 11 wherein said interface device transforms said representations into a predetermined visual medium.

22. A system for data processing and event handling and observation having a data processing architecture comprising

one or more data processing components including software components and zero or more physical components associated with a logical level such that

a data processing component associated with a logical level only accepts input from one or more data processing components in a logically higher or lower logical level or an external source;

a data processing component associated with a logical level only provides output to one or more data processing components in a logically higher or lower level or an external recipient system, wherein a data processing component can not accept input or provide output from or to a data processing component in the same logical level; and

a data processing component will only accept an input that conforms to an ontology related to the logical level with which the data processing component is associated; and

a recipient system for event-handling that receives from one or more sources one or more events one at least being said data processing architecture, each event having associated therewith by the issuing source one of an ordered data value and a semantic, wherein said event-handling system makes available one or more events to one or more other recipient systems, said event-handling system comprising;

one or more event queues having a predetermined semantic wherein events having said predetermined semantic are queued according to their associated data value; and

a means to determine events to be made available to said one or more recipient systems if an event has a data value within one or more defined said data ranges; and

said recipient system for observing one or more human observable virtual objects that are mapped from a representation of a real or virtual object to a virtual object in one or more universes that receives at least one or more events from said event handling system, said recipient system comprising,

one or more observing sub-systems configurable to determine which observing sub-system is used to provide the human-observable representation of said one or more virtual objects and thus respective universes to which said virtual object is mapped, and

an interface device configured to receive control information indicating a position from which to represent said virtual objects in a respective universe and based thereon, to control said one or more observing sub-systems.

23. A system for data processing and event handling and observation according to claim 22 wherein there exist one or more virtual objects in one said universe and two or more views of a said universe wherein a set of one or more virtual objects in one of said views and how those virtual objects in said set that exist in said other view are to be represented is configurable by a human.

24. A system for data processing and event handling and observation according to claim 22 wherein one or more of the observing sub-systems is

a system for creating human observable objects in a modelling system comprising of

one or more representations of real or virtual objects;

one or more virtual universes wherein

a universe selection function determines whether a representation of a real or virtual object is presented as one or more virtual objects in one or more virtual universes; and

a start position function determines the start position of a virtual object in a universe;

a mapping from a representation of a real or virtual object to a virtual object with one or more visual, aural or haptic attributes and force related properties such that the position of a virtual object in a universe is determined by the force-related properties of said virtual object and the relative position and force related properties of zero or more other virtual objects.

25. A system for data processing and event handling and observation according to claim 22 wherein one or more of the observing sub-systems is

a system for creating human observable objects in a modelling system comprising

one or more representations of real or virtual objects;

a virtual universe;

a mapping from a representation of a real or virtual object to a virtual object having at least one of visual, aural or haptic attributes wherein the position of a said virtual object in said universe is in accordance with layout rules, each rule expressed in terms of the representations of first and second real or virtual objects and the interrelationship between said first and second real of virtual objects and a related position determination.

26. A system for observing one or more human observable virtual objects according to claim 22 wherein an interface device includes a keyboard configured to receive said control information.

27. A system for data processing and event handling and observation according to claim 22 wherein an interface device includes a multi-degree of freedom sensor configured to receive said control information.

28. A system for data processing and event handling and observation according to claim 22 wherein an interface device includes a control panel having one or more multi-degree of freedom sensors each having a predetermined function configured to receive said control information.

29. A system for data processing and event handling and observation according to claim 22 wherein an interface device includes a monitor configured to provide said human-observable representation.

30. A system for data processing and event handling and observation according to claim 29 wherein said interface device include an amplifier of said representations.

31. A system for data processing and event handling and observation according to claim 22 wherein said interface device transforms said representations into a predetermined visual medium.

35. A system for data processing an observation as in claim 22, wherein the one or more data processing components include software components.

36. A system for data processing an observation as in claim 35, wherein the one or more data processing components further include one or more physical components.

32. A system for data processing and event handling having a data processing architecture comprising

one or more data processing components including software components and zero or more physical components associated with a logical level such that

a data processing component within a logical level only accepts input from one or more data processing components in a logically higher or lower logical level or an external source;

a data processing component within a logical level only provides output to one or more data processing components in a logically higher or lower level or an external recipient system, wherein a data processing component can not accept input or provide output from or to a data processing component in the same logical level; and

a data processing component will only accept an input that conforms to an ontology related to the logical level with which the data processing component is associated; and

a recipient system for event-handling that receives from one or more sources one or more events one at least being said data processing architecture, each event having associated therewith by the issuing source one of an ordered data value and a semantic, wherein said event-handling system makes available one or more events to one or more other recipient systems, said event-handling system comprising;

one or more event queues having a predetermined semantic wherein events having said predetermined semantic are queued according to their associated data value; and

a determination element to determine events to be made available to said one or more other recipient systems if an event has a data value within one or more defined said data ranges.