Embedded management system for a physical device having virtual elements

• US 7,546,631 B1
• Filed: 04/30/2004
• Issued: 06/09/2009
• Est. Priority Date: 04/30/2004
• Status: Active Grant

• Current Assignee: Oracle America, Inc. (Oracle Corporation)
• Original Assignee: Sun Microsystems Incorporated (Oracle Corporation)
• Inventors: Phillips, Paul, Carbonneau, Eric, Moogala, Venu G., Choiniere, David A., Pawela, Mark E., Hayduk, Darren J., Knight, Timothy J.
• Primary Examiner(s): Cervetti; David García
• Application Number:
  US10/835,917
• Time in Patent Office: 1,866 Days
• Field of Search: 726/2, 713/153, 711/206
• US Class Current: 726/2
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0895 Configuration of virtualised networks or elements, e.g. virtualised network function or OpenFlow elements
• CPC Class Codes: H04L 41/40 using virtualisation of network functions or resources, e.g. SDN or NFV entities
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/306 User profiles

Abstract

A single management facility in a virtualized system that facilitates the presentation of either a virtual element view or system view to a network management user depending upon the user'"'"'s access rights is disclosed. The view presented to the user is modified based on the scope and type of access rights, which are found in a profile object, that is stored in an environmental object, established during the user login. Each virtualized element in the system includes management information that is associated with the virtual element via a virtual identifier. The management information indicates the level of the user access rights necessary to view the associated virtual element. Requests by a user to access management information associated with a virtual element are analyzed to determine if the access rights specified in the user profile enable the user to access the information associated with the virtual element.

Claims

1. A physical device apparatus in a network, comprising:

a plurality of virtual elements configured on said physical device, each said virtual element associated with a collection of management information for said virtual element, said collection of management information including an access scope indicating a required user access level needed to access said information, wherein said collection of management information is associated with a virtual element identifier and said virtual elements direct communication between clients and resource groups;

at least one environment object associated with a user interfaced with said device, said environment object including a collection of user profile information; and

a management facility, said management facility controlling the access of a user to a collection of management information associated with at least one of said virtual elements, wherein the management facility provides a view of a first virtual element from the plurality of virtual elements to a user, the view of the first virtual element containing an embedded view of a second virtual element, the second virtual element associated with the first virtual element, and wherein the collection of management information for the first virtual element is tagged with a virtual element identifier to associate that collection of management information with the first virtual element, and wherein the collection of management information for the second virtual element is tagged with a first virtual element identifier and a second virtual element identifier to associate that collection of management information with the first virtual element and the second virtual element, such that the collection of management information for the second virtual element is able to be viewed from the view of the first virtual element and the embedded view of the second virtual element.

2. The apparatus of claim 1 wherein said management facility provides one of a system view and virtual element view to a user based on said user profile, said system view including a view of plurality of said virtual elements.

3. The apparatus of claim 1, comprising further:

a user interface, said user interface modified based on the scope and type of access privileges accorded to said user.

4. The apparatus of claim 1 wherein access to said management information is scoped based upon the access privileges accorded a user.

5. The apparatus of claim 1 wherein said collection of user profile information defines the type of access privileges of said user.

6. The apparatus of claim 1 wherein said collection of user profile information defines the scope of access privileges of said user.

7. The apparatus of claim 6 wherein said scope of access privileges of the user is set to one of a specified virtual element, a subset of virtual elements and unlimited access to management information for all of said virtual elements on said physical device.

8. The apparatus of claim 1 further comprising:

a schema for management data and commands stored in an XML (Extensible Markup Language) file.

9. The apparatus of claim 8 wherein data in said XML file is used to create one of a MIB (Management Information Base) file and SMF (Simple Management Framework) file.

10. In a network, a method of controlling access to a plurality of virtual elements, said method comprising:

providing a physical device with a plurality of virtual elements configured thereon, each said virtual element associated with a collection of management information for said virtual element, said collection of management information including an access scope indicating a required user access level needed to access said information, wherein said collection of management information is associated with a virtual element identifier and said virtual elements direct communication between clients and resource groups;

instantiating an environment object associated with a user interfaced with said device, said environment object including a collection of user profile information associated with said user;

requesting access for a user to a collection of said management information for a virtual element; and

determining whether to grant said request based on said user profile information and said collection of management information,

providing a management facility facilitating a view of a first virtual element from the plurality of virtual elements to the user, the view of the first virtual element containing an embedded view of a second virtual element, the second virtual element associated with the first virtual element,

tagging the collection of management information for the first virtual element with a virtual element identifier to associate that collection of management information with the first virtual element; and

tagging the collection of management information for the second virtual element with a first virtual element identifier and a second virtual element identifier to associate that collection of management information with the first virtual element and the second virtual element, such that the collection of management information for the second virtual element is able to be viewed from the view of the first virtual element and the embedded view of the second virtual element.

11. The method of claim 10 wherein said request is contained in a CLI (Command Line Interface)-generated request, web-based request and programmatically generated request.

12. The method of claim 10, further comprising:

providing a management facility facilitating one a of a system view and virtual element view to said user based on said user profile information with said user, and system view including a view of a plurality of said virtual elements.

13. The method of claim 10 wherein said collection of user profile information defines the type of access privileges of said user.

14. The method of claim 10 wherein said collection of user profile information defines the scope of access privileges of said user.

15. The method of claim 14 wherein the scope of access privileges of the user is set to one of a specified virtual element, a subset of virtual elements and unlimited access to configuration data of any virtual element configured on said physical device.

16. The method of claim 10, further comprising:

allowing a user to access said collection of management information associated with a virtual element based on a response to the request.

17. The method of claim 10, further comprising:

denying a user access to said collection of management information associated with a virtual element based on a response to the request.

18. The method of claim 10, further comprising:

tagging each collection of management information with a virtual element identifier to associate that collection of management information with a particular virtual element.

19. The method of claim 10, further comprising:

providing a user interface, said user interface modified based on the scope and type of access privileges accorded said user.