Associating telemetry data from a group of entities

• US 8,024,444 B2
• Filed: 03/13/2009
• Issued: 09/20/2011
• Est. Priority Date: 03/13/2009
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Lam, Rohan S., Chabukswar, Rahul Arun, Parikh, Ashish, Richmeier, Jonas Aich
• Primary Examiner(s): Lazaro; David
• Application Number:
  US12/403,846
• Publication Number:
  US 20100235471A1
• Time in Patent Office: 921 Days
• Field of Search: 709/223, 709/224
• US Class Current: 709/223
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 43/065 related to network devices
• CPC Class Codes: H04L 43/20 the monitoring system or the monitored elements being virtualised, abstracted or software-defined entities, e.g. SDN or NFV

Abstract

Embodiments of the invention provide an ability to associate telemetry data received from different entities, such as guest and/or host machines residing on one or more particular physical computers (e.g., server computers) executing virtualization software. In some embodiments, telemetry data supplied by each entity includes information that identifies, and preserves the anonymity of, the entity (e.g., the computer(s) on which the guest and/or host machine(s) reside(s)). For example, if the entities comprise guest and/or host machines residing on a single computer, the information may comprise a one-way hash of the fully qualified domain name (FQDN) of the computer. If the entities are guest and/or host machines residing on a group of computers, the information may comprise a one-way hash of a portion of an FQDN for each computer which is common to all computers in the group. If the group of computers belong to a network domain having a globally unique identifier (GUID) (e.g., as employed by Microsoft Active Directory), the information may comprise a one-way hash of a portion of the GUID.

Claims

1. At least one tangible computer-readable storage medium article having instructions recorded thereon which, when executed, perform a method comprising:

(A) receiving, by each of a plurality of guest and/or host machines implemented by at least one computer executing virtualization software, information descriptive of the at least one computer, the information received by each of the plurality of guest and/or host machines being the same information;

(B) each of the plurality of guest and/or host machines generating a one-way hash of the information; and

(C) each of the plurality of guest and/or host machines including the one-way hash of the information within its respective telemetry data generated for transmission to an information collection facility, to enable the information collection facility to form an association between the telemetry data generated by each of the plurality of guest and/or host machines.

2. The at least one tangible computer-readable storage medium article of claim 1, wherein the act (A) comprises one or more of the plurality of guest and/or host machines reading the information from the at least one computer.

3. The at least one tangible computer-readable storage medium article of claim 1, wherein the at least one computer comprises a server computer.

4. The at least one tangible computer-readable storage medium article of claim 3, wherein each guest machine executes at least one application implementing a server role for the server computer.

5. The at least one tangible computer-readable storage medium article of claim 3, wherein the information comprises a fully qualified domain name (FQDN) of the server computer.

6. The at least one tangible computer-readable storage medium article of claim 1, further comprising acts of:

(D) transmitting the telemetry data for each of the plurality of guest and/or host machines to the information collection facility; and

(E) the information collection facility forming the association between the telemetry data generated by each of the plurality of guest and/or host machines.

7. The at least one tangible computer-readable storage medium article of claim 1, wherein the act (B) comprises employing a SHA-256 one-way hashing algorithm.

8. A system comprising:

at least one processor programmed to implement an information collection facility configured to;

receive, from at least one computer coupled to the information collection facility via at least one network, each of the at least one computers executing virtualization software implementing a plurality of guest and/or host machines configured to generate respective telemetry data, information usable to form an association between the telemetry data generated by each of the plurality of guest and/or host machines; and

form an association between the telemetry data received from each of the plurality of guest and/or host machines.

9. The system of claim 8, further comprising the at least one computer.

10. The system of claim 8, wherein the information usable to form an association between the telemetry data generated by each of the plurality of guest and/or host machines comprises a one-way hash of information included within the telemetry data by each of the plurality of guest and/or host machines, and the information collection facility is configured to form the association between the telemetry data received from each of the plurality of guest and/or host machines using the one-way hash.

11. The system of claim 10, wherein the at least one computer is a plurality of computers, each of the plurality of computers has an identifier of which at least a portion is common to each of the plurality of computers, and the information comprises the at least a portion of the identifier that is common to each of the plurality of computers.

12. The system of claim 11, wherein the at least a portion of the identifier comprises a portion of an FQDN of each of the plurality of computers that is common to each of the plurality of computers.

13. The system of claim 11, wherein the plurality of computers each belong to a same network domain, and the at least a portion of the identifier is a globally unique identifier (GUID) for the domain.

14. The system of claim 8, wherein the at least one computer is a single computer, and wherein the information collection facility is configured to form an association between telemetry data received from guest and/or host machines implemented on the single computer.

15. The system of claim 8, wherein the at least one computer is a plurality of computers, and wherein the information collection facility is configured to form an association between telemetry data received from guest and/or host machines implemented on each of the plurality of computers.

16. A method for use in a system comprising a plurality of computers each coupled to an information collection facility via at least one network, the method comprising:

(A) each of the plurality of computers generating respective telemetry data for transmission to the information collection facility, the telemetry data generated by each of the plurality of computers comprising a same item of information which can not be used to identify any of the plurality of computers but which can be used to form an association between the telemetry data generated by each of the plurality of computers; and

(B) transmitting the telemetry data generated by the plurality of computers to the information collection facility via the at least one network.

17. The method of claim 16, wherein at least one of the plurality of computers executes virtualization software.

18. The method of claim 16, further comprising an act of:

(C) the information collection facility receiving the telemetry data generated by the plurality of computers; and

(D) the information collection facility using the item of information to form an association between the telemetry data generated by the plurality of computers.

19. The method of claim 16, wherein at least one of the plurality of computers is a server computer.

20. The method of claim 16, wherein the item of information generated by each one of the plurality of computers comprises a one-way hash of information descriptive of the one computer.