Method and system for restricting and enhancing topology displays for multi-customer logical networks within a network management system

• US 7,562,132 B2
• Filed: 10/04/2007
• Issued: 07/14/2009
• Est. Priority Date: 06/29/2001
• Status: Active Grant

• Current Assignee: BlueCat Networks Incorporated
• Original Assignee: International Business Machines Corporation
• Inventors: Yarsa, Julianne, Benfield, Jason, Hsu, Oliver Yehung, Ullmann, Lorin Evan
• Primary Examiner(s): Blair; Douglas B
• Application Number:
  US11/867,028
• Publication Number:
  US 20080019499A1
• Time in Patent Office: 649 Days
• Field of Search: 709/223, 709/245, 719/315, 719/316, 715/734, 715/735, 715/736
• US Class Current: 709/223
• CPC Class Codes: H04L 41/0233 Object-oriented techniques, for representation of network management data, e.g. common object request broker architecture [CORBA]
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 41/22 comprising specially adapted graphical user interfaces [GUI]

Abstract

A method, system, apparatus, and computer program product are presented for management of a distributed data processing system on behalf of a plurality of management customers. A set of logical networks within the distributed data processing system and/or a set of physical networks in the distributed data processing system are associated with an anchor object. A topology map can be generated and displayed in which a root node of the topology map is the anchor object. Each anchor object is uniquely associated with a customer for which the distributed data processing system is managed. The topology display can be restricted such that portions of topology information are displayed to an administrative user in accordance with the authorized security access of the user.

Claims

1. A computer program product operable with a computer for use in managing a distributed data processing system, the computer program product includes a computer readable storage-type medium and further comprises:

instructions for associating a set of logical networks in the distributed data processing system and/or a set of physical networks in the distributed data processing system with an anchor object, wherein different physical networks within the distributed data processing system may support duplicate network addresses;

instructions for managing a set of anchor objects, wherein each anchor object has an anchorname which is a root name within a hierarchical naming space that represents a hierarchical logical network, wherein each anchorname is a unique name within the distributed data processing system, and wherein usage of an anchorname in combination with subnet information for a logical network supports unique addressing within a logical network;

instructions for uniquely associating each anchor object in a set of anchor objects with a customer in a set of customers, wherein the distributed data processing system is managed on behalf of a plurality of customers;

instructions for generating a topology map that includes a plurality of anchor objects; and

instructions for displaying the topology map.

2. The computer program product of claim 1 further comprising:

instructions for allowing an administrative user to select a display view of the topology map, wherein the display view of the topology map comprises a hierarchical tree view of all objects discovered by a user-specified distributed discovery controller.

3. The computer program product of claim 1 further comprising:

instructions for editing the topology map by creating topology elements including relations to other topology elements which may include anchor objects.

4. The computer program product of claim 3 further comprising:

instructions for creating a user-defined topology element container.

5. The computer program product of claim 4 further comprising:

instructions for creating relations between the user-defined topology element container and other containers.

6. The computer program product of claim 1 further comprising:

instructions for receiving a customer-defined topology comprising customer-defined topology elements.

7. The computer program product of claim 6, wherein the customer-defined topology elements are containers containing other elements.

8. The computer program product of claim 6 further comprising:

instructions for receiving a customer-defined anchorname name to be collectively associated with elements within the anchor object.

9. The computer program product of claim 8 further comprising:

instructions for discovering customization resources to be associated with elements of the customer-defined topology.

10. The computer program product of claim 9 further comprising:

instructions for determining a customization resource based on an association between an identity of a user and a customer-defined topology element.

11. The computer program product of claim 1 further comprising:

instructions for simultaneously displaying a plurality of anchor objects.

12. The computer program product of claim 1 further comprising:

instructions for providing a selection mechanism whereby a user may select a displayed object; and

instructions for displaying detailed information for a selected object.

13. The computer program product of claim 12 further comprising:

instructions for determining whether a user has authorized access to the detailed information for the selected object; and

instructions for restricting a display operation for the detailed information for the selected object to data items in the detail information for which the user has authorized access.

14. The computer program product of claim 12, wherein the anchor object is a container object, further comprising:

instructions for retrieving an alternative graphic object for representing the selected object; and

instructions for displaying the alternative graphic object.

15. The computer program product of claim 1 further comprising:

instructions for representing the distributed data processing system as a set of scopes, wherein a scope comprises a logical organization of network-related objects;

instructions for associating each scope with a customer, wherein each scope is uniquely assigned to a management customer;

instructions for managing the distributed data processing system as a set of logical networks, wherein a logical network comprises a set of scopes, and wherein each logical network is uniquely assigned to a customer.

16. The computer program product of claim 1 further comprising:

instructions for dynamically discovering endpoints, systems, and networks within the distributed data processing system;

instructions for correspondingly representing endpoints, systems, and networks within the distributed data processing system as a set of endpoint objects, system objects, and network objects; and

instructions for logically organizing the endpoint objects, system objects, and network objects within a set of scopes, wherein each endpoint object, each system object, and each network object is uniquely assigned to a scope such that scopes do not logically overlap.