Methods, apparatuses and systems facilitating distribution of updated traffic identification functionality to bandwidth management devices

• US 7,155,502 B1
• Filed: 06/17/2002
• Issued: 12/26/2006
• Est. Priority Date: 06/17/2002
• Status: Active Grant

• Current Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Original Assignee: Packeteer Incorporated (Gen Digital Inc.)
• Inventors: Quinn, Michael J., Galloway, Brett D.
• Primary Examiner(s): Meky, Moustafa M.
• Application Number:
  US10/173,503
• Time in Patent Office: 1,653 Days
• Field of Search: 709224-226, 709/223, 709200-203, 709217-220, 382/251, 370231-232, 370/235, 370/395.41, 370/468, 370/477
• US Class Current: 709/223
• CPC Class Codes: H04L 41/082 the condition being updates or upgrades of network functionality
• CPC Class Codes: H04L 41/0896 Bandwidth or capacity management, i.e. automatically increasing or decreasing capacities flow or congestion control using dynamic resource allocation, e.g. in-call renegotiation, H04L47/76
• CPC Class Codes: H04L 47/10 Flow control; Congestion control

Abstract

Methods, apparatuses and systems facilitating the distribution of updated traffic identification functionality to bandwidth management devices. The present invention, in one embodiment, allows for automatic updates to the traffic identification functionality implemented by bandwidth management devices eliminating the cumbersome upgrade processes required by prior art methods and systems. The present invention, in one embodiment, also provides a system facilitating management of upgrades for multiple bandwidth management devices.

Claims

1. A system facilitating the distribution of updated traffic identification functionality to at least one network device over a computer network, comprising

an update server,

comprising a traffic identification update database storing update files embodying upgraded traffic identification functionality,

wherein the update server is operative to:

transmit at least one update file to at least one network device over a computer network;

at least one network device operative to;

identify traffic types corresponding to data flows traversing an access link;

wherein the at least one network device comprises an update demon operative to

transmit a network device configuration profile to the update server, wherein the network device configuration profile comprises a license set identifier and a cryptographic hash of the network device configuration profile;

interact with the update server to receive at least one update file embodying upgraded traffic identification functionality; and

install the at least one update file received from the update server to thereby allow for execution of upgraded traffic identification functionality;

wherein the update server is further operative to

detect changes to the license set identifier by validating the cryptographic hash of the network device configuration profile; and

use the network device configuration profile to locate the at least one update file.

2. The system of claim 1 wherein the at least one network device is further operative to enforce bandwidth utilization controls across the access link on data flows associated with corresponding traffic types.

3. The system of claim 1 wherein the at least one network device is a bandwidth management device.

4. The system of claim 1 wherein the at least one update file comprises at least one plug-in, and wherein the at least one network device further comprises a shared library loader operative to incorporate the at least one plug-in into the traffic identification functionality implemented by the at least one network device.

5. The system of claim 1 wherein the device configuration profile comprises a build identifier and a version identifier.

6. The system of claim 5 wherein the device configuration profile further comprises a list of at least one update file installed on the at least one network device.

7. The system of claim 1 wherein the update server is operative to control access to the at least one update file based on the validated license set identifier associated with the network device.

8. The system of claim 1 wherein the update server is operative to transmit an authentication document to the at least one network device;

and wherein the at least one network device is operative to validate the authentication document.

9. The system of claim 8 wherein the authentication document is a digital certificate.

10. A system facilitating the distribution of updated traffic identification functionality to at least one network device over a computer network, comprising

an update server,

comprising a traffic identification update database storing at least one update file embodying upgraded traffic identification functionality,

the update server is operative to:

transmit at least one update file to at least one network device operably connected to a computer network;

a network device management server operative to;

store at least one network device configuration profile corresponding to at least one managed network device, wherein the network device configuration profile comprises a license set identifier and a cryptographic hash of the network device configuration profile;

transmit a network device configuration profile corresponding to a managed network device to the update server,

receive and store at least one update file embodying upgraded traffic identification functionality corresponding to at least one network device; and

at least one network device operative to;

identify traffic types corresponding to data flows traversing an access link;

interact with the network device management server to receive the at least one update file embodying upgraded traffic identification functionality; and

install the at least one update file received from the network device management server to thereby allow for execution of upgraded traffic identification functionality;

wherein the update server is further operative to

detect changes to the license set identifier transmitted by the network device management server by validating the cryptographic hash of the network device configuration profile; and

use the network device configuration profile to locate the at least one update file in the traffic identification update database.

11. The system of claim 10 wherein the at least one network device is further operative to enforce bandwidth utilization controls across the access link on data flows associated with corresponding traffic types.

12. The system of claim 10 wherein the at least one network device is a bandwidth management device.

13. The system of claim 10 wherein the at least one network device comprises an update demon operative to interact with the network device management server to receive at least one update file embodying upgraded traffic identification functionality.

14. The system of claim 10 wherein the network device management server comprises an update demon operative to interact with the update server to receive and store at least one update file embodying upgraded traffic identification functionality corresponding to the at least one network device.

15. The system of claim 10 wherein the at least one update file comprises at least one plug-in, and wherein the at least one network device further comprises a shared library loader operative to incorporate the at least one plug-in into the traffic identification functionality implemented by the at least one network device.

16. The system of claim 10 wherein the device configuration profile comprises a build identifier and a version identifier.

17. The system of claim 16 wherein the device configuration profile further comprises a list of at least one update file installed on the at least one network device.

18. The system of claim 10 wherein the update server is operative to control access to the at least one update file based on the validated license set identifier associated with the at least one network device.

19. An apparatus operating in connection with an update server operably coupled to a computer network, the update server storing at least one update file embodying upgraded traffic identification functionality, comprising

a network device comprising:

a traffic discovery engine operative to identify traffic types corresponding to data flows traversing an access link;

a traffic class database storing traffic classes in association with matching rules and bandwidth utilization controls;

wherein the traffic discovery engine is operative to create traffic classes in the traffic class database in response to data flows traversing the access link;

a bandwidth control mechanism operative to enforce bandwidth utilization controls on data flows associated with corresponding traffic classes across the access link; and

an update demon operative to;

transmit a network device configuration profile to the update server, wherein the network device configuration profile comprises a license set identifier and a cryptographic hash of the network device configuration profile

interact with the update server to receive at least one update file embodying upgraded traffic identification functionality; and

install the at least one update file for execution by the traffic discovery engine.

20. The apparatus of claim 19 wherein the at least one update file comprises at least one plug-in, and wherein the apparatus further comprises a shared library loader operative to incorporate the at least one plug-in into the traffic identification functionality implemented by the traffic discovery engine.