Real-time policy evaluation mechanism

• US 7,676,559 B2
• Filed: 06/24/2003
• Issued: 03/09/2010
• Est. Priority Date: 06/24/2003
• Status: Expired due to Fees

• Current Assignee: RPX Corporation
• Original Assignee: Alcatel-Lucent SA (Nokia Corporation)
• Inventors: Cuervo, Fernando
• Primary Examiner(s): Srivastava; Vivek
• Assistant Examiner(s): Swearingen; Jeffrey R
• Application Number:
  US10/601,627
• Publication Number:
  US 20040267865A1
• Time in Patent Office: 2,450 Days
• Field of Search: None
• US Class Current: 709/223
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management
• CPC Class Codes: H04L 67/30 Profiles
• CPC Class Codes: H04L 67/60 Scheduling or organising the servicing of application requests, e.g. requests for application data transmissions using the analysis and optimisation of the required network resources admission control or resource allocation H04L47/70
• CPC Class Codes: H04Q 3/0062 Provisions for network management

Abstract

An apparatus and methods for real-time policy evaluation in support of network management and service provisioning are presented. The apparatus includes a policy repository, a scheduler, a triggering module, a pre-computation module. A policy equivalency class association is determined for each policy-managed entity, policy, policy-managed information flow of information and/or any part of a communication network. Policy conditions are divided into triggering and passive conditions. The scheduler prioritizes policy evaluation for policies associated with passive conditions for entire policy equivalency classes applicable to large numbers of policy-managed entities. Real-time events and updates are trapped via triggering conditions and related policy evaluation is performed for the entire policy equivalency class, for a large number of policy-managed entities, in real-time. A policy decision distribution mechanism provides policy-managed entities with policy decisions for enforcement. Policy evaluation includes changing the association of a policy-managed device with a group of policy equivalency classes. Advantages are derived from real-time policy evaluation of policies related to entire policy equivalency classes, each policy equivalency class being associated with large numbers of policy-managed entities.

Claims

1. A policy server in a communications network, the policy server comprising:

a pre-computation module that identifies and explicitly separates a plurality of policy conditions into passive conditions and triggering conditions, groups a plurality of policies having an identical triggering condition that results in an identical policy decision into a policy equivalency class, continuously evaluates said policies based on changes in said passive conditions, and schedules a prioritized evaluation based on at least one of demand and resources;

a scheduler that initiates said prioritized evaluation for said passive conditions and said triggering conditions, uses received events satisfying said passive conditions to determine policy-managed entity memberships with respect to the policy equivalency class, prioritizes the evaluation of the policy equivalency class based on demand for the policy equivalency class and available resources, and arranges said passive conditions according to a precedence ranking and assigns a higher priority to said policy equivalency class when said policy equivalency class is related to one of said triggering conditions;

a triggering module that monitors all of said triggering conditions, wherein the triggering condition that corresponds to said policy equivalency class causes only member policies in said policy equivalency class to be reevaluated;

a policy decision distribution mechanism that issues the policy decision upon detection of the triggering condition corresponding to the policy equivalency class being satisfied, distributes the policy decision to the policy equivalency class, and enforces policies for policy-managed entities that are members of said policy equivalent class; and

a policy repository that stores the plurality of policies and the policy decision.

2. The policy server claimed in claim 1, the policy server being associated with a network management system providing support of one of policy-based network management, and policy-based service provisioning.

3. The policy server claimed in claim 1, wherein the policy repository further comprises:

one of a database and a directory.

4. The policy server claimed in claim 1, wherein the policy repository further comprises:

a policy condition management interface providing interaction with one of the policies and policy conditions.

5. The policy server claimed in claim 1, the policy server being further associated with a policy equivalency class repository for storing policy equivalency class specifications.

6. The policy server claimed in claim 1, further comprising:

a policy condition management interface providing interaction with one of the policies and policy conditions.

7. The policy server of claim 1, wherein the policy equivalency class aggregates Internet Protocol (IP) addresses based upon whether credits are prepaid and whether the IP addresses are available to receive content.

8. A method of policy evaluation comprising:

grouping a plurality of policies having an identical triggering condition that results in an identical policy decision into a policy equivalency class;

identifying and explicitly separating a plurality of policy conditions into passive conditions and triggering conditions;

determining policy-managed entity membership with respect to the policy equivalency class;

receiving an event satisfying the triggering condition that corresponds to said policy equivalency class;

distributing the policy decision corresponding to said triggering condition for policy enforcement to policy-managed entity members of the policy equivalency class, wherein policies of the policy equivalency class resulting in said policy decision are;

continuously evaluating said policy decision based on changes related to said passive conditions;

scheduling prioritized policy evaluation for policy decisions that correspond to said policy equivalent class based on demands for said policy equivalent class or available resources,

arranging said passive conditions according to a precedence ranking;

assigning a higher priority to the policy equivalency class when said policy equivalency class is related to one of said triggering conditions; and

monitoring all of said triggering conditions, wherein the triggering condition that corresponds to said policy equivalency class causes only member policies in said policy equivalency class to be reevaluated.

9. The method as claimed in claim 8, the method further comprising:

changing a corresponding policy-managed entity'"'"'s membership with respect to the policy equivalence class for said triggering condition.

10. The method as claimed in claim 8, the method further comprising:

monitoring events in a communications network.

11. The method as claimed in claim 8, the method further comprising:

changing a corresponding policy-managed entity'"'"'s membership with respect to the policy equivalence class for said passive conditions.

12. The method as claimed in claim 8, the method further comprising:

prioritizing passive condition related policy evaluation based on a demand for one of a policy and the policy equivalency class.

13. The method as claimed in claim 12, further comprising:

determining a demand for the one of the policy and the policy equivalency class based on a previous utilization frequency.

14. The method as claimed in claim 8, further comprising:

specifying a policy condition.

15. The method as claimed in claim 14, the method further comprising:

designating the policy condition as either one of said triggering conditions or said passive conditions.

16. The method as claimed in claim 15, the method further comprising:

specifying one of a time-of-day event, a quality-of-service event, a source available event, a source unavailable event, a broadcast start event, and an information flow available event to be monitored as one of said triggering conditions.

17. The method as claimed in claim 16, the method further comprising:

logically combining events when identifying said triggering conditions.

18. The method as claimed in claim 15, the method further comprising:

specifying one of a prepaid status event, a policy-managed entity on-line event, a policy-managed entity off-line event, a policy-managed entity capability, and a policy-managed entity interest in a service when identifying said passive conditions.

19. The method of claim 8, wherein the policy equivalency class aggregates Internet Protocol (IP) addresses based upon whether credits are prep aid and whether the IP addresses are available to receive content.