Business to business network management event detection and response system and method

• US 8,799,722 B2
• Filed: 11/08/2012
• Issued: 08/05/2014
• Est. Priority Date: 08/15/2001
• Status: Expired due to Term

• Current Assignee: Fidelity Information Services, LLC (Fidelity National Information Services Incorporated)
• Original Assignee: Metavante Corporation (Fidelity National Information Services Incorporated)
• Inventors: Neuhaus, Scott E., Swessel, Scott D., Senkevitch, Alexander A.
• Primary Examiner(s): Nooristany, Sulaiman
• Application Number:
  US13/671,967
• Publication Number:
  US 20130073913A1
• Time in Patent Office: 635 Days
• Field of Search: 709/224
• US Class Current: 714/48
• CPC Class Codes: H04L 41/0613 based on the type or category of the network elements
• CPC Class Codes: H04L 41/0686 Additional information in the notification, e.g. enhancement of specific meta-data

Abstract

A network management system includes an automatic reconnaissance (resolution) component which, in one embodiment, includes four main operational components, namely a real-time parse/analysis component, a data merge component, a data analysis component, and a response capability component. These four components interact to provide real-time event recognition and response. The network management system efficiently receives, parses, and comprehends a large amount of event and statistical data that could be indicative of a network systems operation failure with resultant response actions initiated through such an infrastructure improving mean time to recovery.

Claims

1. A method of processing events in a network, comprising:

receiving, from at least one source, at least one data record identifying at least one event events in the network,

conducting pattern recognition for each data record, wherein the pattern recognition comprises;

comparing each data record with at least one predetermined logic parameter associated with a known type of network event; and

based on the comparison, adding information to the data record to create a corresponding modified data record; and

analyzing at least one of the modified data records to determine whether a response is required; and

based on the analysis, automatically responding to the events corresponding to at least one of the modified data records based on the information added to the at least one corresponding data record;

wherein the at least one event in the network is associated with a vendor, and wherein adding information to a data record further comprises;

determining data corresponding to the at least one vendor; and

adding the data corresponding to the vendor to the data record.

2. The method of claim 1, wherein automatically responding to the events comprises at least one of initiating communication with the vendor or opening a work ticket for the vendor.

3. The method of claim 1, wherein adding information to a data record further comprises:

determining a severity associated with the data record;

based on the determination, adding a severity code to the data record.

4. The method of claim 3, wherein automatically responding to the events comprises generating a notification based on the severity code added to the data record.

5. The method of claim 1, wherein the at least one event represents at least one of a network failure, an operation error, a network outage, or an application error.

6. The method of claim 1, wherein the network is associated with a client that operates the network, and with at least one vendor that maintains at least a portion of the network.

7. The method of claim 6, wherein the information added to the at least data record comprises contact information for at least one of the client or the at least one vendor, and wherein automatically responding to the events comprises contacting at least one of the client or the at least one vendor using respective contact information.

8. The method of claim 1, wherein the at least one source comprises at least one of a secondary network, an application on a remote computer, or an operating system on a remote computer.

12. The method of claim 3, wherein automatically responding to the events comprises generating a notification based on the severity code added to the data record.

9. A system for processing events in a network, comprising:

a processor; and

a data store comprising information associated with network events;

wherein the processor is configured to;

receive, from at least one source, at least one data record identifying at least one event in the network;

conduct, using a pattern recognition processor, pattern recognition for each data record, wherein the pattern recognition comprises;

comparing each data record with at least one predetermined logic parameter associated with a known type of network event; and

based on the comparison, adding information from the data store to the data record to create a corresponding modified data record; and

analyze at least one of the modified data records to determine whether a response is required, and based on the analysis, automatically respond to the events corresponding to at least one of the modified data records based on the information added to the at least one corresponding data record;

wherein the at least one event in the network is associated with a vendor, and wherein adding information to a data record further comprises;

determining data corresponding to the at least one vendor; and

adding the data corresponding to the vendor to the data record.

10. The system of claim 9, wherein automatically responding to the events comprises at least one of initiating communication with the vendor or opening a work ticket for the vendor.

11. The system of claim 9, wherein adding information to a data record further comprises:

determining a severity associated with the data record;

based on the determination, adding a severity code to the data record.

13. The system of claim 9, wherein the at least one event represents at least one of a network failure, an operation error, a network outage, or an application error.

14. The system of claim 9, wherein the network is associated with a client that operates the network, and with at least one vendor that maintains at least a portion of the network.

15. The system of claim 14, wherein the information added to the at least one data record comprises contact information for at least one of the client or the at least one vendor, and wherein automatically responding to the events comprises contacting at least one of the client or the at least one vendor using respective contact information.

16. The system of claim 9, wherein the at least one source comprises at least one of a secondary network, an application on a remote computer, or an operating system on a remote computer.