System and method for distributing information in a network environment

• US 7,292,538 B1
• Filed: 12/06/2002
• Issued: 11/06/2007
• Est. Priority Date: 12/06/2002
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Albert, Mark, Mackie, Robert A., O'Rourke, Chris, Schomburg, Keith R., Menditto, Louis F., Bakita, Thomas R., Pittenger, Frank W., Frye, Dwight R. Jr., Dixon, Walter G., White, John G.
• Primary Examiner(s): MARCELO, MELVIN C
• Application Number:
  US10/313,403
• Time in Patent Office: 1,796 Days
• Field of Search: 370/230.1, 370/252, 709/245
• US Class Current: 370/252
• CPC Class Codes: G06Q 20/102 Bill distribution or payments
• CPC Class Codes: H04L 43/026 using flow identification
• CPC Class Codes: H04L 63/0892 by using authentication-authorization-accounting [AAA] servers or protocols
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/088 using filters or firewalls

Abstract

A method for distributing information in a network environment is provided that includes receiving one or more packets from a communication flow initiated by an end user and selectively communicating information associated with the communication flow to a network element so that the network element may correlate a source with the communication flow.

Claims

1. An apparatus for monitoring information in a network environment, comprising:

an identity broker operable to receive one or more packets from a communication flow and to selectively communicate information associated with the communication flow to a network element so that the network element may correlate a source with the communication flow, wherein the information associated with the communication flow is communicated to the network element in response to a query from the network element, and wherein the query is generated by a selected one of a server and the network element, the identity broker correlating a network address of either the server or the network element to an identity associated with an end user that initiated the communication flow.

2. The apparatus of claim 1, wherein the network element provisions one or more services based on a situation associated with the end user, the situation reflecting an end user parameter selected from the group consisting of:

a physical location associated with the end user;

a network access technology associated with the end user;

a network service preference associated with the end user; and

a quality of service associated with the end user.

3. The apparatus of claim 1, further comprising:

a server coupled to the identity broker and operable to provide authorization, authentication, and accounting (AAA) functions to an end user associated with the communication flow.

4. The apparatus of claim 1, wherein the identity broker comprises a database element operable to store portions of data from the communication flow, the portions being communicated intermittently to the network element.

5. The apparatus of claim 1, wherein the identity broker comprises a table that stores one or more relationships reflecting which types of information associated with the communication flow are to be selectively communicated to the network element.

6. The apparatus of claim 1, wherein the network element uses the information in order to provide client-specific capabilities to an end user associated with the communication flow.

7. The apparatus of claim 1, wherein the identity broker comprises an intelligence element that instructs the identity broker to communicate the information associated with the communication flow to a backup network element in response to the network element being inoperative.

8. The apparatus of claim 1, wherein the identity broker provides a point of management in order to control one or more network operations associated with an end user that initiated the communication session.

9. A method for monitoring information in a network environment, comprising:

receiving one or more packets from a communication flow initiated by an end user; and

selectively communicating information associated with the communication flow to a network element so that the network element may correlate a source with the communication flow, wherein the information associated with the communication flow is communicated to the network element in response to a query from the network element, and wherein the query is generated by a selected one of a server and the network element, the identity broker correlating a network address of either the server or the network element to an identity associated with an end user that initiated the communication flow.

10. The method of claim 9, further comprising:

provisioning one or more services based on a situation associated with the end user, the situation reflecting an end user parameter selected from the group consisting of;

a physical location associated with the end user;

a network access technology associated with the end user;

a network service preference associated with the end user; and

a quality of service associated with the end user.

11. The method of claim 9, further comprising:

providing authorization, authentication, and accounting (AAA) functions to the end user associated with the communication flow.

12. The method of claim 9, further comprising:

storing portions of data from the communication flow in a database; and

communicating the portions intermittently to the network element.

13. The method of claim 9, further comprising:

using the information in order to provide client-specific capabilities to the end user associated with the communication flow.

14. The method of claim 9, further comprising:

providing an instruction to communicate the information associated with the communication flow to a backup network element in response to the network element being inoperative.

15. A system for monitoring information in a network environment, comprising:

means for receiving one or more packets from a communication flow initiated by an end user; and

means for selectively communicating information associated with the communication flow to a network element so that the network element may correlate a source with the communication flow, wherein the information associated with the communication flow is communicated to the network element in response to a query from the network element, and wherein the query is generated by a selected one of a server and the network element, the identity broker correlating a network address of either the server or the network element to an identity associated with an end user that initiated the communication flow.

16. The system of claim 15, further comprising:

means for provisioning one or more services based on a situation associated with the end user, the situation reflecting an end user parameter selected from the group consisting of;

a physical location associated with the end user;

a network access technology associated with the end user;

a network service preference associated with the end user; and

a quality of service associated with the end user.

17. The system of claim 15, further comprising:

means for providing authorization, authentication, and accounting (AAA) functions to the end user associated with the communication flow.

18. The system of claim 15, further comprising:

means for storing portions of data from the communication flow in a database; and

means for communicating the portions intermittently to the network element.

19. A computer readable medium encoded with software for monitoring information in a network environment, the software operable to:

receive one or more packets from a communication flow initiated by an end user; and

selectively communicate information associated with the communication flow to a network element so that the network element may correlate a source with the communication flow, wherein the information associated with the communication flow is communicated to the network element in response to a query from the network element, and wherein the query is generated by a selected one of a server and the network element, the identity broker correlating a network address of either the server or the network element to an identity associated with an end user that initiated the communication flow.

20. The computer readable medium of claim 19, the software further operable to:

provision one or more services based on a situation associated with the end user, the situation reflecting an end user parameter selected from the group consisting of;

a physical location associated with the end user;

a network access technology associated with the end user;

a network service preference associated with the end user; and

a quality of service associated with the end user.

21. The computer readable medium of claim 19, the software further operable to:

provide authorization, authentication, and accounting (AAA) functions to the end user associated with the communication flow.

22. The computer readable medium of claim 19, the software further operable to:

store portions of data from the communication flow in a database; and

communicate the portions intermittently to the network element.

23. The computer readable medium of claim 19, the software further operable to:

use the information in order to provide client-specific capabilities to the end user associated with the communication flow.

24. An apparatus for monitoring information in a network environment, comprising:

an identity broker operable to receive one or more packets from a communication flow and to selectively communicate information associated with the communication flow to a network element, wherein the information associated with the communication flow is communicated to the network element in response to a query from the network element, the query being generated by the network element in order to correlate a network address to an identity associated with an end user that initiated the communication flow, the network element provisioning one or more services based on the identity of the end user, the identity broker further comprising;

a database element operable to store portions of data from the communication flow, the portions being communicated intermittently to the network element;

a table that stores one or more relationships reflecting which types of information associated with the communication flow are to be selectively communicated to the network element; and

an intelligence element that instructs the identity broker to communicate the information associated with the communication flow to a backup network element in response to the network element being inoperative.