Method and system for restricting and enhancing topology displays for multi-customer logical networks within a network management system

• US 7,310,666 B2
• Filed: 06/29/2001
• Issued: 12/18/2007
• Est. Priority Date: 06/29/2001
• Status: Expired due to Fees

• Current Assignee: BlueCat Networks Incorporated
• Original Assignee: International Business Machines Corporation
• Inventors: Benfield, Jason, Hsu, Oliver Yehung, Ullmann, Lorin Evan, Yarsa, Julianne
• Primary Examiner(s): Caldwell, Andrew
• Assistant Examiner(s): BLAIR, DOUGLAS B
• Application Number:
  US09/895,143
• Publication Number:
  US 20030009547A1
• Time in Patent Office: 2,363 Days
• Field of Search: 709/223, 709/224, 709/226, 709/245, 715/735, 715/736
• US Class Current: 709/223
• CPC Class Codes: H04L 41/0233 Object-oriented techniques, for representation of network management data, e.g. common object request broker architecture [CORBA]
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 41/22 comprising specially adapted graphical user interfaces [GUI]

Abstract

A method, system, apparatus, and computer program product are presented for management of a distributed data processing system on behalf of a plurality of management customers. A set of logical networks within the distributed data processing system and/or a set of physical networks in the distributed data processing system are associated with an anchor object. A topology map can be generated and displayed in which a root node of the topology map is the anchor object. Each anchor object is uniquely associated with a customer for which the distributed data processing system is managed. The topology display can be restricted such that portions of topology information are displayed to an administrative user in accordance with the authorized security access of the user.

Claims

1. A method for management of a distributed data processing system, the method comprising:

associating a set of logical networks in the distributed data processing system and/or a set of physical networks in the distributed data processing system with an anchor object, wherein different physical networks within the distributed data processing system may support duplicate network addresses;

managing a set of anchor objects, wherein each anchor object has an anchorname which is a root name within a hierarchical naming space that represents a hierarchical logical network, wherein each anchorname is a unique name within the distributed data processing system, and wherein usage of an anchorname in combination with subnet information for a logical network supports unique addressing within a logical network;

uniquely associating each anchor object in a set of anchor objects with a customer in a set of customers, wherein the distributed data processing system is managed on behalf of a plurality of customers;

generating a topology map that includes a plurality of anchor objects; and

displaying the topology map.

2. The method of claim 1 further comprising:

editing the topology map by creating topology elements including relations to other topology elements which may include anchor objects.

3. The method of claim 2 further comprising:

creating a user-defined topology element container.

4. The method of claim 3 further comprising:

creating relations between the user-defined topology element container and other containers.

5. The method of claim 1 further comprising:

receiving a customer-defined topology comprising customer-defined topology elements.

6. The method of claim 5:

wherein the customer-defined topology elements are containers containing other elements.

7. The method of claim 5 further comprising:

receiving a customer-defined anchorname name to be collectively associated with elements within the anchor object.

8. The method of claim 7 further comprising:

discovering customization resources to be associated with elements of the customer-defined topology.

9. The method of claim 8 further comprising:

determining a customization resource based on an association between an identity of a user and a customer-defined topology element.

10. The method of claim 1 further comprising:

simultaneously displaying a plurality of anchor objects.

11. The method of claim 1 further comprising:

providing a selection mechanism whereby a user may select a displayed object; and

displaying detailed information for a selected object.

12. The method of claim 11 further comprising:

determining whether a user has authorized access to the detailed information for the selected object; and

restricting a display operation for the detailed information for the selected object to data items in the detail information for which the user has authorized access.

13. The method of claim 11, wherein the anchor object is a container object, further comprising:

retrieving an alternative graphic object for representing the selected object; and

displaying the alternative graphic object.

14. The method of claim 1 further comprising:

allowing an administrative user to select a display view of the topology map, wherein the display view of the topology map comprises a hierarchical tree view of all objects discovered by a user-specified distributed discovery controller.

15. The method of claim 1 further comprising:

representing the distributed data processing system as a set of scopes, wherein a scope comprises a logical organization of network-related objects;

associating each scope with a customer, wherein each scope is uniquely assigned to a management customer;

managing the distributed data processing system as a set of logical networks, wherein a logical network comprises a set of scopes, and wherein each logical network is uniquely assigned to a customer.

16. The method of claim 1 further comprising:

dynamically discovering endpoints, systems, and networks within the distributed data processing system;

correspondingly representing endpoints, systems, and networks within the distributed data processing system as a set of endpoint objects, system objects, and network objects; and

logically organizing the endpoint objects, system objects, and network objects within a set of scopes, wherein each endpoint object, each system object, and each network object is uniquely assigned to a scope such that scopes do not logically overlap.

17. A method for management of a distributed data processing system, the method comprising:

associating a set of logical networks in the distributed data processing system and/or a set of physical networks in the distributed data processing system with an anchor object, wherein different physical networks within the distributed data processing system may support duplicate network addresses;

managing a set of anchor objects, wherein each anchor object has an anchorname which is a root name within a hierarchical naming space that represents a hierarchical logical network, wherein each anchomame is a unique name within the distributed data processing system, and wherein usage of an anchorname in combination with subnet information for a logical network supports unique addressing within a logical network;

uniquely associating each anchor object in a set of anchor objects with a customer in a set of customers, wherein the distributed data processing system is managed on behalf of a plurality of customers;

creating a customer-defined topology;

associating the customer-defined topology with a topology derived from a physical network to form a combined topology map;

associating customization resources with elements within the combined topology map; and

displaying the combined topology map.

18. The method of claim 17 further comprising:

requesting a network management operation based on the combined topology map.

19. A method for management of a distributed data processing system, wherein the distributed data processing system is managed on behalf of a plurality of management customers, the method comprising:

representing the distributed data processing system as a set of scopes, wherein a scope comprises a user-defined logical organization of network-related objects, wherein different scopes within the distributed data processing system may support duplicate network addresses;

associating each scope with an anchor object, wherein an anchor object is uniquely assigned to a management customer;

managing a set of anchor objects, wherein each anchor object has an anchomame which is a root name within a hierarchical naming space that represents a hierarchical logical network, wherein each anchorname is a unique name within the distributed data processing system, and wherein usage of an anchorname in combination with subnet information for a logical network supports unique addressing within a logical network;

generating a topology map,; and

allowing an administrative user to select a display view of the topology map.

20. The method of claim 19 wherein a display view of the topology map comprises a hierarchical tree view of all objects discovered by a user-specified distributed discovery controller.

21. The method of claim 19 wherein a display view of the topology map comprises a hierarchical tree view of all objects discovered by a plurality of distributed discovery controllers.

22. The method of claim 19 wherein a display view of the topology map comprises a hierarchical tree view of all objects discovered by all distributed discovery controllers for which a user has authorized access.

23. An apparatus for managing a distributed data processing system, the apparatus comprising:

means for associating a set of logical networks in the distributed data processing system and/or a set of physical networks in the distributed data processing system with an anchor object, wherein different physical networks within the distributed data processing system may support duplicate network addresses;

means for managing a set of anchor objects, wherein each anchor object has an anchorname which is a root name within a hierarchical naming space that represents a hierarchical logical network, wherein each anchorname is a unique name within the distributed data processing system, and wherein usage of an anchorname in combination with subnet information for a logical network supports unique addressing within a logical network;

means for uniquely associating each anchor object in a set of anchor objects with a customer in a set of customers, wherein the distributed data processing system is managed on behalf of a plurality of customers;

means for generating a topology map that includes a plurality of anchor objects,; and

means for displaying the topology map.

24. The apparatus of claim 23 further comprising:

means for editing the topology map by creating topology elements including relations to other topology elements which may include anchor objects.

25. The apparatus of claim 24 further comprising:

means for creating a user-defined topology element container.

26. The apparatus of claim 25 further comprising:

means for creating relations between the user-defined topology element container and other containers.

27. The apparatus of claim 23 further comprising:

means for receiving a customer-defined topology comprising customer-defined topology elements.

28. The apparatus of claim 27 wherein the customer-defined topology elements are containers containing other elements.

29. The apparatus of claim 27 further comprising:

means for receiving a customer-defined name to be collectively associated with elements within the anchor object.

30. The apparatus of claim 29 further comprising:

means for discovering customization resources to be associated with elements of the customer-defined topology.

31. The apparatus of claim 30 further comprising:

means for determining a customization resource based on an association between an identity of a user and a customer-defined topology element.

32. The apparatus of claim 23 further comprising:

means for simultaneously displaying a plurality of anchor objects.

33. The apparatus of claim 23 further comprising:

means for providing a selection mechanism whereby a user may select a displayed object; and

means for displaying detailed information for a selected object.

34. The apparatus of claim 33 further comprising:

means for determining whether a user has authorized access to the detailed information for the selected object; and

means for restricting a display operation for the detailed information for the selected object to data items in the detail information for which the user has authorized access.

35. The apparatus of claim 33, wherein the anchor object is a container object, further comprising:

means for retrieving an alternative graphic object for representing the selected object; and

means for displaying the alternative graphic object.

36. The apparatus of claim 23 further comprising:

means for allowing an administrative user to select a display view of the topology map, wherein a display view of the topology map comprises a hierarchical tree view of all objects discovered by a user-specified distributed discovery controller.

37. The apparatus of claim 23 further comprising:

means for representing the distributed data processing system as a set of scopes, wherein a scope comprises a logical organization of network-related objects;

means for associating each scope with a customer, wherein each scope is uniquely assigned to a management customer;

means for managing the distributed data processing system as a set of logical networks, wherein a logical network comprises a set of scopes, and wherein each logical network is uniquely assigned to a customer.

38. The apparatus of claim 23 further comprising:

means for dynamically discovering endpoints, systems, and networks within the distributed data processing system;

correspondingly representing endpoints, systems, and networks within the distributed data proces sing system as a set of endpoint objects, system objects, and network objects; and

means for logically organizing the endpoint objects, system objects, and network objects within a set of scopes, wherein each endpoint object, each system object, and each network object is uniquely assigned to a scope such that scopes do not logically overlap.

39. An apparatus for management of a distributed data processing system, the apparatus comprising:

means for associating a set of logical networks in the distributed data processing system and/or a set of physical networks in the distributed data processing system with an anchor object, wherein different physical networks within the distributed data processing system may support duplicate network addresses;

means for managing a set of anchor objects, wherein each anchor object has an anchorname which is a root name within a hierarchical naming space that represents a hierarchical logical network, wherein each anchorname is a unique name within the distributed data processing system, and wherein usage of an anchorname in combination with subnet information for a logical network supports unique addressing within a logical network;

means for uniquely associating each anchor object in a set of anchor objects with a customer in a set of customers, wherein the distributed data processing system is managed on behalf of a plurality of customers;

means for creating a customer-defined topology;

means for associating the customer-defined topology with a topology derived from a physical network to form a combined topology map;

means for associating customization resources with elements within the combined topology map; and

means for displaying the combined topology map.

40. The apparatus of claim 39 further comprising:

means for requesting a network management operation based on the combined topology map.

41. An apparatus for management of a distributed data processing system, wherein the distributed data processing system is managed on behalf of a plurality of management customers, the apparatus comprising:

means for representing the distributed data processing system as a set of scopes, wherein a scope comprises a user-defined logical organization of network-related objects, wherein different scopes within the distributed data processing system may support duplicate network addresses;

means for associating each scope with an anchor object, wherein an anchor object is uniquely assigned to a management customer;

means for managing a set of anchor objects, wherein each anchor object has an anchorname which is a root name within a hierarchical naming space that represents a hierarchical logical network, wherein each anchorname is a unique name within the distributed data processing system, and wherein usage of an anchomame in combination with subnet information for a logical network supports unique addressing within a logical network;

means for generating a topology map,; and

means for allowing an administrative user to select a display view of the topology map.

42. The apparatus of claim 41 wherein a display view of the topology map comprises a hierarchical tree view of all objects discovered by a user-specified distributed discovery controller.

43. The apparatus of claim 41 wherein a display view of the topology map comprises a hierarchical tree view of all objects discovered by a plurality of distributed discovery controllers.

44. The apparatus of claim 41 wherein a display view of the topology map comprises a hierarchical tree view of all objects discovered by all distributed discovery controllers for which a user has authorized access.