Method and System for Handling Dynamic Incidents

• US 20080280637A1
• Filed: 05/10/2007
• Published: 11/13/2008
• Est. Priority Date: 05/10/2007
• Status: Active Grant

• Current Assignee: STA Group, LLC
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Shaffer, Shmuel, Nagesh, Kittur V.
• Granted Patent: US 8,874,159 B2
• Time in Patent Office: Days
• US Class Current: 455/519
• CPC Class Codes: H04L 41/069 using logs of notifications; Post-processing of notifications
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management
• CPC Class Codes: H04L 69/40 for recovering from a failure of a protocol instance or entity, e.g. service redundancy protocols, protocol state redundancy or protocol service redirection management of faults, events, alarms or notifications in data switching networks H04L41/06
• CPC Class Codes: H04Q 2213/13098 Mobile subscriber
• CPC Class Codes: H04Q 2213/13103 Memory
• CPC Class Codes: H04Q 2213/13109 Initializing, personal profile
• CPC Class Codes: H04Q 2213/13288 Closed user groups, CUG
• CPC Class Codes: H04Q 2213/1337 Operator, emergency services
• CPC Class Codes: H04Q 2213/13389 LAN, internet
• CPC Class Codes: H04W 4/10 Push-to-Talk [PTT] or Push-On-Call services
• CPC Class Codes: H04W 76/45 for Push-to-Talk [PTT] or Push-to-Talk over cellular [PoC] services

Abstract

A method for handling dynamic incidents includes initiating a first policy in response to a first incident. The first policy comprises a plurality of actions to be performed in response to the first incident. The method also includes creating at least one virtual talk group comprising a plurality of endpoints of different communication networks communicating using a respective communication protocol. The method further includes monitoring a plurality of events via a plurality of sources. At least one source comprises an endpoint from the plurality of endpoints of the virtual talk group. The method additionally includes detecting a deviation event and storing information indicative of the deviation event.

Claims

1. A method for handling dynamic incidents, comprising:

initiating a first policy in response to a first incident, the first policy comprising a plurality of actions to be performed in response to the first incident;

creating at least one virtual talk group comprising a plurality of endpoints of different communication networks communicating using a respective communication protocol;

monitoring a plurality of events via a plurality of sources, at least one source comprising an endpoint from the plurality of endpoints of the virtual talk group;

detecting a deviation event; and

storing information indicative of the deviation event.

2. The method of claim 1, wherein the deviation event comprises an unexpected event.

3. The method of claim 1, wherein the deviation event is similar to a previously detected event, the previously detected event occurring during a second incident.

4. The method of claim 1, further comprising modifying the first policy based on the deviation event.

5. The method of claim 1, further comprising creating a second policy based on the first policy and the deviation event.

6. The method of claim 1, further comprising, upon detecting the deviation event, generating a suggestion comprising at least one modification to the first policy.

7. The method of claim 1, further comprising:

receiving a post incident assessment request;

presenting a user with the plurality of events that occurred during the first incident; and

receiving a modification request indicating that the first policy is to be modified based on the deviation event or that a second policy is to be created based on the first policy and the deviation event.

8. A system for handling dynamic incidents, comprising:

a processor operable to;

initiate a first policy in response to a first incident, the first policy comprising a plurality of actions to be performed in response to the first incident; and

create at least one virtual talk group comprising a plurality of endpoints of different communication networks communicating using a respective communication protocol; and

an interface coupled to the processor, the interface operable to;

monitor a plurality of events via a plurality of sources, at least one source comprising an endpoint from the plurality of endpoints of the virtual talk group; and

detect a deviation event; and

the processor is further operable to store information indicative of the deviation event.

9. The system of claim 8, wherein the deviation event comprises an unexpected event.

10. The system of claim 8, wherein the deviation event is similar to a previously detected event, the previously detected event occurring during a second incident.

11. The system of claim 8, wherein the processor is further operable to modify the first policy based on the deviation event.

12. The system of claim 8, wherein the processor is further operable to create a second policy based on the first policy and the deviation event.

13. The system of claim 8, wherein the interface is further operable to, upon detecting the deviation event, generate a suggestion comprising at least one modification to the first policy.

14. The system of claim 8, wherein the interface is further operable to:

receive a post incident assessment request;

present a user with the plurality of events that occurred during the first incident; and

receive a modification request indicating that the first policy is to be modified based on the deviation event or that a second policy is to be created based on the first policy and the deviation event.

15. Logic embodied in a computer readable medium, the computer readable medium comprising code operable to:

initiate a first policy in response to a first incident, the first policy comprising a plurality of actions to be performed in response to the first incident;

create at least one virtual talk group comprising a plurality of endpoints of different communication networks communicating using a respective communication protocol;

monitor a plurality of events via a plurality of sources, at least one source comprising an endpoint from the plurality of endpoints of the virtual talk group;

detect a deviation event; and

store information indicative of the deviation event.

16. The medium of claim 15, wherein the deviation event comprises an unexpected event.

17. The medium of claim 15, wherein the deviation event is similar to a previously detected event, the previously detected event occurring during a second incident.

18. The medium of claim 15, wherein the code is further operable to modify the first policy based on the deviation event.

19. The medium of claim 15, wherein the code is further operable to create a second policy based on the first policy and the deviation event.

20. The medium of claim 15, wherein the code is further operable to, upon detecting the deviation event, generate a suggestion comprising at least one at least one modification to the first policy.

21. The medium of claim 15, wherein the code is further operable to:

receive a post incident assessment request;

present a user with the plurality of events that occurred during the first incident; and

receive a modification request indicating that the first policy is to be modified based on the deviation event or that a second policy is to be created based on the first policy and the deviation event.

22. A system for handling dynamic incidents, comprising:

means for initiating a first policy in response to a first incident, the first policy comprising a plurality of actions to be performed in response to the first incident;

means for creating at least one virtual talk group comprising a plurality of endpoints of different communication networks communicating using a respective communication protocol;

means for monitoring a plurality of events via a plurality of sources, at least one source comprising an endpoint from the plurality of endpoints of the virtual talk group;

means for detecting a deviation event; and

means for storing information indicative of the deviation event.