Network service management using customizable business-level rules

• US 7,962,633 B1
• Filed: 10/13/2005
• Issued: 06/14/2011
• Est. Priority Date: 10/13/2005
• Status: Active Grant

• Current Assignee: Juniper Networks Incorporated
• Original Assignee: Juniper Networks Incorporated
• Inventors: Gao, Yue, Foong, Siu Jin, Stewart, Hugh, Sidebottom, Greg
• Primary Examiner(s): Backer; Firmin
• Assistant Examiner(s): ALGIBHAH, HAMZA N
• Application Number:
  US11/249,227
• Time in Patent Office: 2,070 Days
• Field of Search: 709/229
• US Class Current: 709/229
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: H04L 41/0226 Mapping or translating multiple network management protocols
• CPC Class Codes: H04L 41/0681 Configuration of triggering conditions
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management
• CPC Class Codes: H04L 41/0895 Configuration of virtualised networks or elements, e.g. virtualised network function or OpenFlow elements

Abstract

A service deployment device responds to events originating internally or in a network using a set of condition/action rules. The condition/action rules are defined in terms of business-level information. A rules engine in the service deployment device translates the network events to business information and uses a forward-chaining algorithm to evaluate conditions associated with the rules. Based on the evaluation, the service deployment device enables actions associated with the rules. An enterprise using the service deployment device uses the condition/action rules to deploy business policies in the network.

Claims

1. A method comprising:

receiving, with a service deployment device, a set of business logic rules defined in terms of high-level business information as an initial set of rules, wherein the set of business logic rules embody business policies of a network service provider, and wherein the business policies govern a group of relationships between the network service provider and one or more subscribers;

processing, with the service deployment device, the initial set of rules into a first set of rules, a second set of rules, and a third set of rules, wherein the first set of rules comprise event translation rules that control translation of network-level events into business-level information for evaluation of conditions, the second set of rules comprise condition rules that enable actions when certain conditions are met, and the third set of rules comprise execution rules that define how an execution module of the service deployment device executes the actions enabled by the condition rules;

receiving, with the service deployment device, network-level events from one or more network devices associated with the network service provider;

in response to the network-level events, applying the set of event translation rules, with an event translator of the service deployment device, to the network-level events to generate business-level information for evaluation of a condition, wherein each event translation rule includes a translation attribute, and wherein the event translator evaluates an expression specified by the translation attribute to generate the business-level information;

evaluating, with a rules engine of the service deployment device, the business-level information with one or more conditions specified by the set of condition rules, wherein one or more actions are enabled by the rules engine when at least one of the one or more conditions is satisfied; and

performing, with the execution module of the service deployment device, the one or more actions enabled by the rules engine by at least applying the set of execution rules to the network-level events, wherein the one or more actions are related to services provided by the network service provider.

2. The method of claim 1, wherein evaluating comprises applying a forward-chaining algorithm to the set of rules.

3. The method of claim 1, further comprising:

storing the business-level information in a working memory,

wherein, when the rules engine detects that the business-level information in the working memory has changed, the rules engine evaluates the one or more conditions.

4. The method of claim 1, further comprising:

maintaining a sequence of actions enabled by the rules engine;

ordering the enabled actions according to priorities associated with the execution rules; and

executing the enabled actions according to the ordering.

5. The method of claim 1, wherein applying the set of execution rules comprises:

storing processor classes in a processor library;

retrieving action descriptors from the execution rules corresponding to actions enabled for execution, wherein each of the action descriptors includes a reference to a processor descriptor and a set of attributes that instruct the execution module how to use the processor descriptor;

locating processor descriptors in the set of execution rules based on the action descriptors, wherein the processor descriptors include a reference to a processor class and attributes that instruct the execution module how to configure the processor class;

locating processor classes in the processor library based on the processor descriptors; and

invoking methods of the processor classes specified by the enabled actions.

6. The method of claim 5, wherein storing the processor classes comprises storing pluggable software modules containing one or more related methods or attributes.

7. The method of claim 5, wherein storing the processor classes comprises storing a service activation proxy that contains methods that control network services.

8. The method of claim 5, wherein storing the processor classes comprises storing a database proxy that contains methods that retrieve information from and store information to a database.

9. The method of claim 8, further comprising storing a record specific to a user of services provided by an operator in the database.

10. The method of claim 1, wherein performing actions related to services comprises sending commands based on the responses to the network-level events to a service activation module that controls network services.

11. The method of claim 10, further comprising sending device instructions from the service activation module to the network devices to cause the network devices to activate the requested services, refuse to activate the requested services, or activate the requested services with limitations.

12. The method of claim 1, wherein performing actions comprises commanding one or more of the network devices to send electronic messages to one or more users.

13. The method of claim 1, wherein performing actions comprises commanding one or more of the network devices to redirect a user to a specified web page.

14. The method of claim 1, wherein performing actions comprises granting or denying access to a service, or placing restrictions on the service.

15. The method of claim 1, wherein performing actions comprises commanding one or more of the network devices to alter or terminate a service for a user when the condition rules indicate that the user has violated a term of a service agreement.

16. The method of claim 1, wherein the initial set of rules are encoded in a rule specification language.

17. The method of claim 1, wherein the network service provider is an Internet Service Provider.

18. The method of claim 1, wherein the services include a service selected from the group of an authentication service, a dynamic host configuration protocol service, and domain name server service.

19. The method of claim 1, wherein the business policies include a term of service limiting a subscriber to a number of minutes of access to a service provided by the network service provider in a given time period.

20. The method of claim 1, wherein the business policies include a term of service limiting a subscriber to an amount of data transferred through a service provided by the network service provider in a given time period.

21. A system comprising:

a plurality of physical network devices coupled to a network that generate network-level events; and

a physical service deployment device that applies an initial set of rules to the network-level events to initiate actions related to services provided by a network service provider, wherein the initial set of rules are defined in terms of high-level business information and represent business policies of the network service provider, wherein the business policies govern a group of relationships between the network service provider and one or more subscribers, and wherein the service deployment device comprises;

a rule compiler that processes the initial set of rules into a set of event translation rules, a set of condition rules, and a set of execution rules, wherein the set of event translation rules control translation of the network-level events into business level information for evaluation of conditions, the set of condition rules enable actions, and the set of execution rules define how an execution module of the service deployment device executes the actions enabled by the set of condition rules;

an event translator that applies the set of event translation rules to generate business-level information in response to the network-level events, wherein each event translation rule of the set of event translation rules includes a translation attribute, and wherein the event translator evaluates an expression specified by the translation attribute to generate the business-level information;

a rules engine that evaluates the conditions specified by the set of condition rules and enables actions associated with the set of condition rules when one or more of the conditions are satisfied; and

an execution module that controls the execution of the actions enabled by the rules engine by applying the set of execution rules to the network-level events, wherein the one or more actions are related to services provided by the network service provider.

22. The system of claim 21, wherein the rules engine uses a forward-chaining algorithm to process the rules.

23. The system of claim 21, wherein the conditions specified by the condition rules are defined in terms of business-level information.

24. The system of claim 21, wherein the service deployment device further comprises:

a working memory that stores the business-level information,

a forward-chaining rules engine detects that the business-level information in the working memory has changed and evaluates the condition upon detecting the change.

25. The system of claim 21, wherein the service deployment device further comprises:

a priority queue that maintains a sequence of actions enabled by the rules engine;

wherein, the enabled actions are ordered according to priority, and wherein, the execution module executes the enabled actions in the sequence maintained by the priority queue.

26. The system of claim 25, wherein the execution module comprises:

a processor library that contains processor classes; and

a dispatcher that retrieves action descriptors from the set of execution rules corresponding to the enabled actions, wherein each of the action descriptors includes a reference to a processor descriptor and a set of attributes that instruct the execution module how to use the processor descriptor, locates processor descriptors in the set of execution rules based on the action descriptors, wherein the processor descriptors include a reference to a processor class and attributes that instruct the execution module how to configured the processor class, locates processor classes in the processor library based on the processor descriptors, and invokes methods of the processor classes specified by the action descriptors.

27. The system of claim 26, wherein each of the processor classes is a pluggable software module containing one or more related methods or attributes.

28. The system of claim 26, wherein the processor library includes a service activation proxy that contains methods that control network services.

29. The system of claim 26, wherein the processor library includes a database proxy that contains methods that retrieve information from and store information in a database.

30. The system of claim 29, wherein the database contains files specific to users of services provided by an operator of the system.

31. The system of claim 21, further comprising:

a service activation module that receives commands from the service deployment device,

wherein the service activation module controls network services in a manner consistent with the commands.

32. The system of claim 31, wherein the service activation module sends device instructions to the network devices, wherein the device instructions cause the network devices to activate the requested services, refuse to activate the requested services, or activate the requested services with limitations.

33. The system of claim 21, wherein the service deployment device responds to the events by commanding one or more of the network devices to send electronic messages to one or more users.

34. The system of claim 21, wherein the service deployment device responds to the events by commanding one or more of the network devices to redirect a user to a specified web page.

35. The system of claim 21, wherein the service deployment device responds to the events by granting or denying access to a service or by placing restrictions on the service.

36. The system of claim 21, wherein the service deployment device commands at least one of the network devices to alter or terminate a service for a user when the rules indicate that the user has violated a term of service agreement.

37. The system of claim 21, wherein the initial set of rules are encoded in a rule specification language.

38. The system of claim 21, wherein the network service provider is an Internet Service Provider.

39. The system of claim 21, wherein the services include a service selected from the group of an authentication service, a dynamic host configuration protocol service, and domain name server service.

40. The system of claim 21, wherein the business policies include a term of service limiting a subscriber to a number of minutes of access to a service provided by the network service provider in a given time period.

41. The system of claim 21, wherein the business policies include a term of service limiting a subscriber to an amount of data transferred through a service provided by the network service provider in a given time period.

42. A non-transitory computer-readable storage medium having computer code encoded thereon comprising instructions for causing a programmable processor to:

receive a set of business logic rules defined in terms of high-level business information as an initial set of rules, wherein the business logical rules embody business policies of a network service provider, and wherein the business policies govern a group of relationships between the network service provider and one or more subscribers;

process the initial set of rules into a first set of rules, a second set of rules, and a third set of rules, wherein the first set of rules comprise event translation rules that control translation of the events into business-level information for evaluation of conditions, the second set of rules comprise condition rules and the third set of rules comprise execution rules that define how an execution module of the service deployment device executes the actions enabled by the condition rules;

receive network-level events from a plurality of network devices associated with one of the network service provider;

apply the set of event translation rules to the network-level events to generate business-level information in response to the network-level events for evaluation of a condition, wherein each event translation rule of the set of event translation rules includes a translation attribute that specifies an expression, and wherein the business-level information is generated by at least evaluating the expression specified by the translation attribute;

evaluate the business-level information with one or more conditions specified by the set of condition rules, wherein one or more actions are enabled when at least one of the one or more conditions is satisfied; and

perform the one or more enabled actions by applying the set of execution rules to the network-level events, wherein the one or more enabled actions are related to services provided by the network service provider.

43. The computer-readable storage medium of claim 42, wherein the instructions cause the processor to use a forward-chaining algorithm to evaluate the condition.