Method and system for registering deep packet inspection (DPI) device

• US 8,838,785 B2
• Filed: 04/09/2010
• Issued: 09/16/2014
• Est. Priority Date: 07/24/2009
• Status: Expired due to Fees

• Current Assignee: ZTE Corporation
• Original Assignee: ZTE Corporation
• Inventors: Yang, Bo, Song, Xiaoli
• Primary Examiner(s): WASEL, MOHAMED A
• Application Number:
  US13/258,436
• Publication Number:
  US 20120110169A1
• Time in Patent Office: 1,621 Days
• Field of Search: 709/223, 709/224
• US Class Current: 709/224
• CPC Class Codes: H04L 41/00 Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
• CPC Class Codes: H04L 41/085 Retrieval of network configuration; Tracking network configuration history
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management
• CPC Class Codes: H04L 43/028 by filtering
• CPC Class Codes: H04L 63/0209 Architectural arrangements, e.g. perimeter networks or demilitarized zones
• CPC Class Codes: H04L 63/0245 Filtering by information in the payload
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A method and system for registering a Deep Packet Inspection (DPI) device. The method comprises: a DPI device sends registration information to a linkage information control center and requests to register with a network; when the DPI device is valid, the linkage information control center classifies the DPI device into a corresponding device group, and reports the registration information to a DPI linkage policy decision module; the DPI linkage policy decision module distributes a corresponding performing policy and/or identifying template to the DPI device according to the registration information; and the linkage information control center notifies a DPI information collection database to add an information item corresponding to the DPI device, to complete the registration of the DPI device.

Claims

1. A method for registering a Deep Packet Inspection (DPI) device, wherein each newly added DPI device has to be registered with a network, such that all DPI devices can be managed as a whole, wherein each DPI device is operable to analyze and control a network flow in a level of user and application, the method comprising:

sending, by a DPI device, registration information to a linkage information control center and requesting to register with the network;

determining, by the linkage information control center, a type of the DPI device when verifying according to the registration information and a policy of an operator that the DPI device is valid, and reporting the registration information to a DPI linkage policy decision module;

distributing, by the DPI linkage policy decision module, a corresponding performing policy and/or identifying template to the DPI device according to the registration information; and

notifying, by the linkage information control center, a DPI information collection database to add an information item corresponding to the DPI device,

wherein all the DPI devices are managed centrally by using their respective information items in the DPI information collection database.

2. The method for registering a DPI device according to claim 1, wherein the registration information comprises:

device information, status information and routing information.

3. The method for registering a DPI device according to claim 1, wherein the step of determining the type of the DPI device comprises:

determining whether the DPI device is a DPI control device or a DPI identification device, if the DPI device is a DPI control device, classifying the DPI device into a corresponding DPI control device group; and

if the DPI device is a DPI identification device, classifying the DPI device into a corresponding DPI identification device group.

4. The method for registering a DPI device according to claim 1, further comprising:

refusing, by the linkage information control center, the registration of the DPI device when verifying that the DPI device is invalid, and returning a registration failure message to the DPI device.

5. The method for registering a DPI device according to claim 1, wherein the step of sending the registration information to the linkage information control center by the DPI device comprises:

initiatively sending, by the DPI device, the registration information to the linkage information control center;

or sending, by the DPI device, the registration information in response to a request of the linkage information control center.

6. The method for registering a DPI device according to claim 1, wherein the step of distributing a corresponding performing policy and/or identifying template to the DPI device comprises:

distributing a corresponding performing policy if the DPI device is a DPI control device; and

distributing a corresponding identifying template if the DPI device is a DPI identification device.

11. The method for registering a DPI device according to claim 2, wherein the step of determining the type of the DPI device comprises:

if the DPI device is a DPI control device, classifying the DPI device into a corresponding DPI control device group; and

if the DPI device is a DPI identification device, classifying the DPI device into a corresponding DPI identification device group.

12. The method for registering a DPI device according to claim 2, further comprising:

refusing, by the linkage information control center, the registration of the DPI device when verifying that the DPI device is invalid, and returning a registration failure message to the DPI device.

13. The method for registering a DPI device according to claim 2, wherein the step of sending the registration information to the linkage information control center by the DPI device comprises:

initiatively sending, by the DPI device, the registration information to the linkage information control center;

or sending, by the DPI device, the registration information in response to a request of the linkage information control center.

14. The method for registering a DPI device according to claim 2, wherein the step of distributing a corresponding performing policy and/or identifying template to the DPI device comprises:

distributing a corresponding performing policy if the DPI device is a DPI control device; and

distributing a corresponding identifying template if the DPI device is a DPI identification device.

7. A system for registering a Deep Packet Inspection (DPI) device, where in each newly added DPI device has to be registered with a network, such that all DPI devices can be managed as a whole, and each DPI device is operable to analyze and control a network flow in a level of user and application, the system comprising:

a DPI device, a linkage information control center, a DPI linkage policy decision module and a DPI information collection database, wherein

the DPI device is configured to send registration information to the linkage information control center and request to register with the network; and

further configured to receive an performing policy and/or identifying template distributed by the DPI linkage policy decision module;

the linkage information control center is configured to determine a type of the DPI device when verifying that the DPI device is valid according to the registration information and a policy of an operator, and report the registration information to the DPI linkage policy decision module;

the DPI linkage policy decision module is configured to distribute a corresponding performing policy and/or identifying template to the DPI device according to the registration information; and

the DPI information collection database is configured to add an information item corresponding to the DPI device according to a notice from the linkage information control center,

wherein all the DPI devices are managed centrally by using their respective information items in the DPI information collection database.

8. The system for registering a DPI device according to claim 7, wherein the registration information comprises:

device information, status information and routing information.

9. The system for registering a DPI device according to claim 7, wherein the linkage information control center is further configured to determine whether the DPI device is a DPI control device or a DPI identification device, classify a DPI control device into a corresponding DPI control device group and classify a DPI identification device into a corresponding DPI identification device group.

10. The system for registering a DPI device according to claim 7, wherein the linkage information control center is further configured to refuse the registration of the DPI device when verifying that the DPI device is invalid, and return a registration failure message to the DPI device.

15. The system for registering a DPI device according to claim 8, wherein the linkage information control center is further configured to determine whether the DPI device is a DPI control device or a DPI identification device, classify a DPI control device into a corresponding DPI control device group and classify a DPI identification device into a corresponding DPI identification device group.

16. The system for registering a DPI device according to claim 8, wherein the linkage information control center is further configured to refuse the registration of the DPI device when verifying that the DPI device is invalid, and return a registration failure message to the DPI device.