Cloud computing enhanced gateway for communication networks

• US 9,148,381 B2
• Filed: 10/18/2012
• Issued: 09/29/2015
• Est. Priority Date: 10/21/2011
• Status: Expired due to Fees

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: Dunlap, Wayne G., Menchaca, Benjamin M., Nowakowski, Ryan A.
• Primary Examiner(s): Gilles, Jude Jean
• Application Number:
  US13/655,399
• Publication Number:
  US 20130103827A1
• Time in Patent Office: 1,076 Days
• Field of Search: 709/224, 709/244, 709/220
• US Class Current: 1/1
• CPC Class Codes: H04L 41/0816 the condition being an adaptation, e.g. in response to network events
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management
• CPC Class Codes: H04L 47/13 in a LAN segment, e.g. ring or bus
• CPC Class Codes: H04L 47/19 at layers above the network layer network arrangements for networked applications for scheduling or organising the servicing of application requests H04L67/60
• CPC Class Codes: H04L 47/20 Traffic policing
• CPC Class Codes: H04L 47/2441 relying on flow classification, e.g. using integrated services [IntServ]
• CPC Class Codes: H04L 47/2475 for supporting traffic characterised by the type of applications
• CPC Class Codes: H04L 47/2483 involving identification of individual flows

Abstract

A network traffic managing node of a local area network, such as a router or gateway, can monitor network traffic of the local area network. A network event associated with the local area network is detected using the network traffic managing node. The network event is reported from the network traffic managing node to one or more servers of a cloud-based computing network. A network policy update for the network traffic managing node is received from the cloud-based computing network. The network policy update is based, at least in part, on a type of network event reported to the cloud-based computing network. The network policy update is implemented at the network traffic managing node to process and/or resolve the network event.

Claims

1. A method comprising:

monitoring network traffic of a first network;

detecting a network event associated with the first network;

reporting the network event to a server of a second network;

receiving a network policy update for the first network from the server, wherein the network policy update is based, at least in part, on an event type of the network event reported to the server; and

implementing the network policy update at the first network.

2. The method of claim 1, wherein said monitoring, detecting, reporting, receiving, and implementing are performed by a managing node of the first network.

3. The method of claim 2, wherein the managing node comprises a router of the first network.

4. The method of claim 2, wherein the managing node comprises a computer system including at least one member of a group consisting of a router, an access point, a cable modem, and a network switch of the first network.

5. The method of claim 1, wherein said detecting the network event associated with the first network comprises at least one member of a group consisting of, detecting an oversubscription event at the first network, detecting an unknown packet stream at the first network, and detecting a network failure event at the first network.

6. The method of claim 1, wherein said implementing the network policy update comprises implementing the network policy update after configuring a managing node of the first network to process and resolve the network event.

7. The method of claim 1, wherein said monitoring the network traffic comprises,

monitoring the network traffic sent from a plurality of devices of the first network to a wide area network;

and

monitoring the network traffic sent from a remote network node of the wide area network to the plurality of devices of the first network.

8. The method of claim 1, wherein the network policy update is based at least in part, on the event type and an analysis of aggregate data associated with the event type that is collected at the second network from a third network, wherein the first network and the third network are local area networks.

9. The method of claim 1, further comprising:

detecting network activity associated with the first network;

reporting the network activity to the server; and

receiving network alerts at the first network from the second network.

10. A method comprising:

detecting an unknown packet stream at a managing node of a first network;

selecting a default classification for the unknown packet stream;

reporting information associated with the unknown packet stream from the managing node to a server of a second network;

receiving, at the managing node, a policy update for the unknown packet stream from the second network, wherein the policy update indicates how to detect and classify a subsequent instance of the unknown packet stream; and

implementing the policy update at the managing node.

11. The method of claim 10, further comprising:

detecting a packet stream characteristic associated with a packet stream detected at the managing node;

determining an application associated with the packet stream based, at least in part, on the packet stream characteristic; and

classifying the packet stream based, at least in part, on the application.

12. The method of claim 11, wherein

said classifying the packet stream is based, at least in part, on an application type of the application.

13. The method of claim 10, wherein said detecting the unknown packet stream and selecting the default classification comprises:

determining that an application associated with the unknown packet stream is unknown to the managing node; and

selecting the default classification for the unknown packet stream in response to determining that the application is unknown.

14. The method of claim 10, wherein said detecting the unknown packet stream at the managing node and selecting the default classification comprises:

determining that an application associated with the unknown packet stream is unknown to the managing node;

determining an application type associated with the unknown packet stream; and

selecting the default classification for the unknown packet stream based, at least in part, on the application type.

15. The method of claim 10, wherein said reporting the information comprises reporting at least one packet stream characteristic associated with the unknown packet stream.

16. The method of claim 10, further comprising receiving classifying information indicating an application associated with the unknown packet stream and a classification for the unknown packet stream.

17. The method of claim 10, wherein said implementing the policy update at the managing node comprises:

detecting, at the managing node, a packet stream characteristic associated with a previously unknown packet stream according to the policy update;

determining an application associated with the packet stream characteristic according to the policy update; and

selecting a classification for the previously unknown packet stream based on the application.

18. A method comprising:

receiving, at a server of a first network, a report message from a first router of a second network indicating a first network event that was detected at the first router;

determining an event type of the first network event;

aggregating data associated with the event type with data previously received from a second router that detected a second network event of the event type;

analyzing the aggregated data;

determining a network policy update associated with the event type based on a result of analyzing the aggregated data; and

sending the network policy update to the first router to configure the first router with the network policy update.

19. The method of claim 18, wherein said determining the event type comprises determining that the event type is at least one member of a group consisting of an oversubscription event at the second network, a detection of an unknown packet stream at the first router, a receipt of a network analysis report from the first router, and a detection of a network failure event at the second network.

20. The method of claim 18, further comprising requesting temporary storage of content related to the event type at the first router based, at least in part, on the result of analyzing of the aggregated data.

21. The method of claim 18, wherein the network policy update indicates operations to process and resolve a network event of the event type detected at the first router.

22. A network router comprising:

a processor; and

a memory unit configured to store instructions which, when executed by the processor, cause the network router to,

monitor network traffic of a first network;

detect a network event associated with the first network;

report the network event to a server of a second network;

receive a network policy update for the network router from the server, wherein the network policy update is based, at least in part, on an event type of the network event; and

implement the network policy update at the network router.

23. The network router of claim 22, wherein the network event comprises at least one member of group consisting of an oversubscription event at the first network, an unknown packet stream received at the network router, and a network failure event at the first network.

24. The network router of claim 22, wherein the instructions executed by the processor further cause the network router to process and resolve the network event by implementing the network policy update after configuring the network router.

25. The network router of claim 22, wherein the instructions executed by the processor further cause the network router to,

detect network activity associated with the first network;

report the network activity to the server; and

receive network alerts from the second network.

26. A network router comprising:

a processor; and

a network monitoring unit coupled with the processor and configured to,

detect an unknown packet stream received at the network router of a first network;

select a default classification for the unknown packet stream;

report information associated with the unknown packet stream to a server of a second network;

receive, from the second network, a policy update for the unknown packet stream, wherein the policy update indicates how to detect and classify a subsequent instance of the unknown packet stream; and

implement the policy update at the network router.

27. The network router of claim 26, wherein the network monitoring unit is further configured to,

detect a packet stream characteristic associated with a packet stream detected at the network router;

determine an application associated with the packet stream based, at least in part, on the packet stream characteristic; and

classify the packet stream based, at least in part, on the application.

28. The network router of claim 27, wherein the network monitoring unit is configured to classify the packet stream based, at least in part, on an application type associated with the application.

29. The network router of claim 26, wherein the network monitoring unit configured to detect the unknown packet stream and select the default classification comprises the network monitoring unit configured to,

determine that an application associated with the unknown packet stream is unknown to the network router;

and

select the default classification for the unknown packet stream in response to determining the application is unknown.

30. The network router of claim 26, wherein the network monitoring unit configured to detect the unknown packet stream and select the default classification comprises the network monitoring unit configured to,

determine that an application associated with the unknown packet stream is unknown to the network router;

determine an application type associated with the unknown packet stream; and

select the default classification for the unknown packet stream based on the application type.

31. The network router of claim 26, wherein the network monitoring unit configured to report the information comprises the network monitoring unit configured to report at least one packet stream characteristics associated with the unknown packet stream.

32. The network router of claim 26, wherein the network monitoring unit configured to implement the policy update comprises the network monitoring unit configured to,

detect a packet stream characteristic associated with a previously unknown packet stream according to the policy update;

determine an application associated with the packet stream characteristics according to the policy update; and

select a classification for the previously unknown packet stream based on the application.

33. A non-transitory machine-readable storage media having stored therein instructions, which when executed by a processor causes the processor to,

detect an unknown packet stream at a first network;

select a default classification for the unknown packet stream;

report information associated with the unknown packet stream to a server of a second network;

receive a policy update for the unknown packet stream from the second network, wherein the policy update indicates how to detect and classify a subsequent instance of the unknown packet stream; and

implement the policy update.

34. The non-transitory machine-readable storage media of claim 33, wherein the instructions, when executed by the processor, are further to,

classify a packet stream detected at the first network, wherein

said classifying the packet stream is based, at least in part, on at least one member of a group consisting of an application associated with the packet stream, and an application type associated with the application.

35. The non-transitory machine-readable storage media of claim 33, wherein the instructions, when executed by the processor to detect the unknown packet stream and select the default classification are further to,

determine that an application associated with the unknown packet stream is unknown;

and

select the default classification for the unknown packet stream in response to determining that the application is unknown.

36. The non-transitory machine-readable storage media of claim 33, wherein the instructions, when executed by the processor to detect the unknown packet stream and select the default classification are further to,

determine that an application associated with the unknown packet stream received at the first network is unknown;

determine an application type associated with the unknown packet stream; and

select the default classification for the unknown packet stream based on the application type.