Distributed policy based system management with local management agents responsible for obtaining and storing policies thereat

• US 7,693,971 B2
• Filed: 03/27/2003
• Issued: 04/06/2010
• Est. Priority Date: 03/27/2002
• Status: Active Grant

• Current Assignee: British Telecommunications PLC (BT Group PLC)
• Original Assignee: British Telecommunications PLC (BT Group PLC)
• Inventors: Rana, Sohail P, Fisher, Michael A, McKee, Paul F
• Primary Examiner(s): Patel; Haresh N
• Application Number:
  US10/507,902
• Publication Number:
  US 20050149599A1
• Time in Patent Office: 2,567 Days
• Field of Search: 709217-228, 709200-203, 726/1, 707/3, 705/22
• US Class Current: 709/223
• CPC Class Codes: G06F 9/465 Distributed object oriented systems remote method invocation [RMI] G06F9/548
• CPC Class Codes: G06Q 20/203 Inventory monitoring
• CPC Class Codes: H04L 41/046 comprising network management agents or mobile agents therefor
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management

Abstract

A computer network is managed by policies. This allows selections to be made from a range of control options and optionally to be based on locally available system information. Policy-based management is distributed across the system and is handled locally by management agents allowing control of a sub-network. As a result of a distributed policy-based management system is provided which allows additional flexibility of control.

Claims

1. A computer network management system comprising:

a communication network having a policy-based manager means distributed across said network,

the distributed policy-based manager comprising a plurality of distributed management agents arranged in a hierarchy and being associated with sub-networks of said network, each of said agents includes means to register local network components with itself, to identify and store one or more roles associated with the component and to obtain policies relevant to the stored roles of the registered components,

wherein each of the policies are locally stored and specify a subject role identifying the components in the system which are expected to respond to a policy and an action element specifying an action to be carried out.

2. The system as claimed in claim 1 in which each agent manages network components local to that agent.

3. The system as claimed in claim 1 in which each management policy has a subject comprising a network component to carry out the policy, a target comprising a network component on which the policy is carried out and an action carried out by the subject on the target.

4. The system as claimed in claim 1 in which a policy is event triggered or non-event triggered.

5. The system as claimed in claim 4 in which an event comprises registration of a network component.

6. The system as claimed in claim 1 in which a distributed instance of the manager includes one or more of the following:

an interception element for intercepting network communications;

a registration element for registering network components;

a policy handling element for handling policies managed by the instance;

an event handler element for handling events intercepted by the instance;

a policy store element for storing policies at the instance;

an event log element for logging events intercepted by the instance; and

a conflict resolution element for resolving conflicting policies managed by the instance.

7. The system claimed in claim 1 in which the policy-based manager includes a conflict manager.

8. The system as claimed in claim 7 in which the conflict manager is arranged to implement a conflict management policy.

9. The system as claimed in claim 1 arranged to implement policies written in XML.

10. A computer-readable storage medium containing a computer program arranged to implement a system as claimed in claim 1.

11. A computer arranged to operate under the instructions of a program as claimed in claim 10.

12. A method of managing a computer network having a plurality of network components comprising distributing policy-based management across the network using a distributed policy-based manager comprising a plurality of distributed management agents arranged in a hierarchy and being associated with sub-networks of said network, said method comprising:

registering local network components at each of said agents,

identifying and storing at each of said agents one or more roles associated with each component, and

obtaining at each of said agents policies relevant to the stored roles of the registered components,

wherein each of the policies are locally stored and specify a subject role identifying the components in the system which are expected to respond to a policy and an action element specifying an action to be carried out.

13. The method as claimed in claim 12 in which a plurality of said components operate as managers, a network component registers with one of said managers and the registration step includes registration of a component management policy.

14. The method as claimed in claim 13 in which said one of said managers intercepts a component registration message on the network.

15. The method as claimed in claim 14 in which said manager identifies an intercepted registration message as a registration event.

16. The method as claimed in claim 15 in which the manager identifies and stores a component management policy associated with a registration event.

17. The method as claimed in claim 12 in which the policy-based management is implemented in XML.

18. A computer-readable storage medium containing a computer program arranged to implement a method as claimed in claim 12.

19. A computer arranged to operate under the instructions of a program as claimed in claim 18.