Approach for managing mobile agents in networks

• US 8,903,976 B2
• Filed: 12/15/2011
• Issued: 12/02/2014
• Est. Priority Date: 06/11/2002
• Status: Expired due to Term

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Roberts, Kenneth John
• Primary Examiner(s): ZHANG, SHIRLEY X
• Application Number:
  US13/327,666
• Publication Number:
  US 20120089661A1
• Time in Patent Office: 1,083 Days
• Field of Search: 709/202, 709/223, 709/226
• US Class Current: 709/223
• CPC Class Codes: G06F 9/4875 with migration policy, e.g. auction, contract negotiation
• CPC Class Codes: H04L 41/048 mobile agents

Abstract

An approach for managing mobile agents in a network generally comprises configuring a mobile agent in a secure manner such that the mobile agent will automatically terminate itself if the mobile agent cannot communicate with a specified entity before moving, or the mobile agent cannot successfully communicate with a specified entity within a specified period of time. According to another embodiment, if a management process cannot communicate with a mobile agent within a specified period of time, then the management process attempts to cause the termination of the mobile agent. The management process may contact another management process that has the ability to terminate the mobile agent and request that other management process to cause the termination of the mobile agent. According to other embodiment, the management process may cause the creation and dispatch of a “hunter-killer” mobile agent configured to locate and cause the termination of other mobile agents.

Claims

1. A method for managing a mobile agent process of a plurality of mobile agent processes in a network comprising:

the mobile agent process, of the plurality of mobile agent processes, sending, to a management process configured to manage moving any of the plurality of mobile agent processes to any of a plurality of network elements, a communication relating to the mobile agent process moving from a first network element in the network to a second network element of the plurality of network elements in the network;

the mobile agent process detecting whether the mobile agent process received from the management process a response to the communication relating to the mobile agent process moving from the first network element in the network to the second network element in the network;

in response to detecting that the mobile agent process received from the management process the response to the communication relating to the mobile agent process moving from the first network element in the network to the second network element in the network and detecting that the response to the communication includes an authorization for the mobile agent process to move from the first network element to the second network element, causing the mobile agent process to be moved from the first network element in the network to the second network element in the network; and

in response to detecting that the mobile agent process did not receive from the management process the response to the communication relating to the mobile agent process moving from the first network element in the network to the second network element in the network, causing the mobile agent process itself to be terminated;

wherein the method is performed by one or more computing devices.

2. The method as recited in claim 1, further comprising:

causing one or more sequences of code instructions on the first network element in the network to be replicated on the second network element in the network, and

causing the one or more sequences of code instructions on the first network element in the network to be deleted from the first network element.

3. The method as recited in claim 1, further comprising:

in response to determining that the mobile agent process does not communicate with a specified entity within a specified period of time, the mobile agent process causing the mobile agent process itself to be terminated.

4. The method as recited in claim 1, wherein the mobile agent process causing the process to be terminated comprises causing execution of a set of one or more protected instructions in the mobile agent process.

5. A non-transitory computer-readable storage medium for managing a mobile agent process of a plurality of mobile agent processes in a network, the computer-readable storage medium storing one or more sequences of instructions which, when executed by one or more processors, cause the one or more processors to perform:

sending, to a management process configured to manage moving any of the plurality of mobile agent processes to any of a plurality of network elements, a communication relating to the mobile agent process moving from a first network element in the network to a second network element of the plurality of network elements in the network;

detecting whether the mobile agent process received from the management process a response to the communication relating to the mobile agent process moving from the first network element in the network to the second network element in the network;

in response to detecting that the mobile agent process received from the management process the response to the communication relating to the mobile agent process moving from the first network element in the network to the second network element in the network and detecting that the response to the communication includes an authorization for the mobile agent process to move from the first network element to the second network element, causing the mobile agent process to be moved from the first network element in the network to the second network element in the network; and

in response to detecting that the mobile agent process did not receive from the management process the response to the communication relating to the mobile agent process moving from the first network element in the network to the second network element in the network, causing the mobile agent process itself to be terminated.

6. The non-transitory computer-readable storage medium as recited in claim 5, further comprising one or more additional instructions which, when executed, cause the one or more processors to perform:

causing one or more sequences of code instructions on the first network element in the network to be replicated on the second network element in the network, and

causing the one or more sequences of code instructions on the first network element in the network to be deleted from the first network element.

7. The non-transitory computer-readable storage medium as recited in claim 5, further comprising one or more additional instructions which, when executed, cause the one or more processors to perform:

in response to determining that the mobile agent process does not communicate with a specified entity within a specified period of time, the mobile agent process causing the mobile agent process itself to be terminated.

8. A computer system for managing a mobile agent process of a plurality of mobile agent processes in a network, the computer system comprising a memory that comprises instructions which, when processed by one or more processors, cause the one or more processors to perform:

the mobile agent process, of the plurality of mobile agent processes, sending, to a management process configured to manage moving any of the plurality of mobile agent processes to any of a plurality of network elements, a communication relating to the mobile agent process moving from a first network element in the network to a second network element of the plurality of network elements in the network;

the mobile agent process detecting whether the mobile agent process received from the management process a response to the communication relating to the mobile agent process moving from the first network element in the network to the second network element in the network;

in response to detecting that the mobile agent process received from the process the response to the communication relating to the process moving from the first network element in the network to the second network element in the network and detecting that the response to the communication includes an authorization for the mobile agent process to move from the first network element to the second network element, causing the mobile agent process to be moved from the first network element in the network to the second network element in the network; and

in response to detecting that the mobile agent process did not receive from the management the response to the communication relating to the mobile agent process moving from the first network element in the network to the second network element in the network, causing the mobile agent process itself to be terminated.

9. The computer system as recited in claim 8, wherein the memory further comprises one or more additional instructions which, when processed by the one or more processors, cause the one or more processors to perform:

causing one or more sequences of code instructions on the first network element in the network to be replicated on the second network element in the network, and

causing the one or more sequences of code instructions on the first network element in the network to be deleted from the first network element.

10. The computer system as recited in claim 8, wherein the memory further comprises one or more additional instructions which, when processed by the one or more processors, cause the one or more processors to perform:

in response to determining that the mobile agent process does not communicate with a specified entity within a specified period of time, the mobile agent process causing the mobile agent process itself to be terminated.

11. The computer system as recited in claim 8, wherein the memory further comprises one or more additional instructions which, when processed by the one or more processors, cause the one or more processors to perform:

the mobile agent process causing execution of a set of one or more protected instructions in the mobile agent process.

12. A method for managing a mobile agent process that is configured to move between network elements in a network, the method comprising:

determining whether one or more code instructions in the mobile agent process have been modified;

in response to determining that the one or more code instructions in the mobile agent process have been modified, the mobile agent process itself causing the mobile agent process to be terminated on the network element;

wherein the method is performed by one or more computing devices.

13. The method as recited in claim 12, wherein determining whether one or more code instructions in the mobile agent process have been modified comprises computing and analyzing a checksum value for the mobile agent process.

14. A non-transitory computer-readable storage medium for managing a mobile agent process that is configured to move between network elements in a network, the computer-readable storage medium storing one or more sequences of instructions which, when executed by one or more processors, cause the one or more processors to perform:

determining whether one or more code instructions in the mobile agent process have been modified;

in response to determining that the one or more code instructions in the mobile agent process have been modified, the mobile agent process itself causing the mobile agent process to be terminated on the network element.

15. The non-transitory computer-readable storage medium as recited in claim 14, further comprising one or more additional instructions which, when executed by the one or more processors, cause the one or more processors to perform:

computing and analyzing a checksum value for the mobile agent process.