System and method for restricting access to network performance information tables

• US 8,407,765 B2
• Filed: 05/31/2007
• Issued: 03/26/2013
• Est. Priority Date: 08/22/2006
• Status: Active Grant

• Current Assignee: CenturyLink Intellectual Property LLC (Lumen Technologies, Inc.)
• Original Assignee: CenturyLink Intellectual Property LLC (Lumen Technologies, Inc.)
• Inventors: Wiley, William L., Bugenhagen, Michael K.
• Primary Examiner(s): Shiferaw, Eleni
• Assistant Examiner(s): SIMS, JING F
• Application Number:
  US11/809,400
• Publication Number:
  US 20080052784A1
• Time in Patent Office: 2,126 Days
• Field of Search: 726 1- 20, 726 26- 29, 709/224
• US Class Current: 726/4
• CPC Class Codes: H04L 41/0896 Bandwidth or capacity management, i.e. automatically increasing or decreasing capacities flow or congestion control using dynamic resource allocation, e.g. in-call renegotiation, H04L47/76
• CPC Class Codes: H04L 43/0829 Packet loss
• CPC Class Codes: H04L 43/0847 Transmission error
• CPC Class Codes: H04L 43/0852 Delays
• CPC Class Codes: H04L 43/087 Jitter
• CPC Class Codes: H04L 43/16 Threshold monitoring
• CPC Class Codes: H04W 12/088 using filters or firewalls

Abstract

A system and method for restricting access to network performance information associated with communications over a packet network. A request may be received from a user to access network performance information associated with communications of data packets over a packet network. A determination as to whether the user has permission to access the network performance information may be made. In response to determining that the user has permission to access the network performance information, the user may be enabled to access the network performance information; otherwise, the user may be prevented from accessing the network performance information. The network performance information may include information associated with communications of data packets including real-time content and non-real-time content.

Claims

1. A method for restricting access to network performance information associated with communications over a packet network, said method comprising:

receiving a request from a user to access network performance information associated with communications of data packets over a packet network;

accessing a permission table for determining whether the user has permission to access the network performance information, including retrieving an entity identifier for determining user type of the user, retrieving a segment identifier for determining a portion of the acket network in which the network performance information is accessible to the user, and retrieving a network performance information identifier for determining categories of the network performance information accessible to the user;

in response to determining that the user has permission to access the network performance information, enabling the user to access only the determined categories of the network performance information of the portion of the packet network in which the network performance information is accessible to the user; and

restricting the user from accessing the network performance information outside of the portion of the packet network in which the network performance information is accessible to the user and outside of the determined categories of the network performance information accessible to the user.

2. The method according to claim 1, wherein the segment identifier indicates that the portion of the packet network in which the network performance information is accessible to the user is limited to only those network segments between a customer'"'"'s CPE and a network access point.

3. The method according to claim 1, wherein the categories of the network performance information accessible to the user is limited to total bandwidth usage.

4. The method according to claim 1, wherein the categories of the network performance information accessible to the user is limited to network performance information associated with real-time data packets.

5. The method according to claim 1, wherein receiving the request from the user includes receiving the request at a central location on the packet network.

6. The method according to claim 1, wherein the categories of the network performance information accessible to the user is not limited.

7. A system for restricting access to network performance information associated with communications over a packet network, said system comprising:

a storage unit configured to store network performance information associated with communications of data packets over a packet network, and further configured to store a permission table indicating access permission to the network performance information;

an input/output (I/O) unit configured to communicate with the packet network;

a processing unit in communication with said storage unit and said I/O unit, said processing unit configured to;

receive a request from a user to access network performance information associated with communications of data packets over a packet network;

access the permission table to determine whether the user has permission to access the network performance information, including retrieving an entity identifier for determining user type of the user, retrieving a segment identifier for determining a portion of the packet network in which the network performance information is accessible to the user, and retrieving a network performance information identifier for determining categories of the network performance information accessible to the user; and

enable the user to access only the determined categories of the network performance information in response to determining that the user has permission to access the network performance information,

prevent the user from accessing the network performance information outside of the portion of the packet network in which the network performance information is accessible to the user and outside of the determined categories of the network performance information accessible to the user.

8. The system according to claim 7, wherein the segment identifier indicates that the portion of the packet network in which the network performance information is accessible to the user is limited to only those network segments between a customer'"'"'s CPE and a network access point.

9. The system according to claim 7, wherein the categories of the network performance information accessible to the user is limited to total bandwidth usage.

10. The system according to claim 7, wherein the categories of the network performance information accessible to the user is limited to network performance information associated with real-time data packets.

11. The system according to claim 7, wherein said processing unit is operating at a central location on the packet network.

12. The system according to claim 7, wherein the categories of the network performance information accessible to the user is not limited.