Policy based system management

• US 7,716,313 B2
• Filed: 03/27/2003
• Issued: 05/11/2010
• Est. Priority Date: 03/27/2002
• Status: Active Grant

• Current Assignee: British Telecommunications PLC (BT Group PLC)
• Original Assignee: British Telecommunications PLC (BT Group PLC)
• Inventors: McKee, Paul F, Rana, Sohail P, Fisher, Michael A
• Primary Examiner(s): Eng; David Y
• Application Number:
  US10/507,897
• Publication Number:
  US 20050172015A1
• Time in Patent Office: 2,602 Days
• Field of Search: 709/223
• US Class Current: 709/223
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management

Abstract

A computer network includes a plurality of components governed by policies from a policy manager. Where conflicts arise between policies, a conflict management policy is inherent in the system and is implemented to detect and resolve such conflicts.

Claims

1. A computer network management system comprising a distributed policy-based manager which comprises, for each of a plurality of sub-networks of said computer network management system, an associated management agent, each sub-network including a store arranged to store policy-conflict resolution policies for one or more components in said sub-network, wherein each said sub-network management agent incorporates:

(i) a sub-network policy receiver configured to receive policies from a policy store external to said associated management agent;

(ii) a policy-conflict resolution mechanism arranged in operation to resolve at run time conflicts between different policies received by said sub-network policy receiver taking said stored policy-conflict resolution policies into account.

2. The system as claimed in claim 1 in which the policy-conflict resolution mechanism is operable to perform conflict detection.

3. The system as claimed in claim 2 in which the policy-conflict resolution mechanism is operable to detect a conflict if a network event triggers more than one policy.

4. The system as claimed in claim 1 in which the policy-conflict resolution mechanism is operable to identify a conflict ranking and to resolve the conflict according to the ranking.

5. The system as claimed in claim 1 in which the policy-conflict resolution mechanism is operable to perform at least one of the group consisting of:

(i) identifying a method or dynamically loadable software which can be used to resolve the specific conflict and using the identified method or dynamically loadable software to resolve the respective conflict;

(ii) identifying a policy creator rank and resolving the conflict according to the creator rank; and

(iii) implementing a resolution policy inherent in the conflict management policy.

6. A method of distributed policy management in a computer network which includes a plurality of sub-networks, said method comprising:

(i) configuring a plurality of interconnected components to have behavior determined by a plurality of policies;

(ii) associating a sub-network management agent with each said sub-network;

(iii) storing in each sub-network, policy-conflict resolution policies for one or more components in said sub-network;

(iv) operating each associated sub-network management agent to;

(a) receive policies from a policy store external to said associated management agent; and

(b) determine at run time if, in respect of any given triggering event, a possible conflict may arise in respect of one or more of said received policies activated by said triggering event and, if so, passing each respective activated policy as an argument to a policy-conflict resolution process operating, as part of each sub-network management agent, in accordance with said stored policy-conflict management policies.

7. The method as claimed in claim 6 wherein said policy-conflict management policies used by each management agent differ between different management agents.

8. The method of claim 6 used to implement a computer network manager.

9. A computer network including a computer processor which acts as the computer network manager as claimed in claim 8.

10. A computer-readable computer program storage medium containing a program or a suite of programs comprising processor implementable instructions for causing a computer processor to carry out a method comprising:

(i) configuring a plurality of interconnected components to have behavior determined by a plurality of policies;

(ii) associating a sub-network management agent with each said sub-network;

(iii) storing in each sub-network, policy-conflict resolution policies for one or more components in said sub-network;

(iv) operating each associated sub-network of said management agent to;

(a) receive policies from a policy store external to said associated management agent; and

(b) determine at run time if, in respect of any given triggering event, a possible conflict may arise in respect of one or more of said received policies activated by said triggering event and, if so, passing each respective activated policy as an argument to a policy-conflict resolution process operating, as part of each sub-network management agent, in accordance with said stored policy-conflict management policies.