Method for detecting, reporting and responding to network node-level events and a system thereof

• US 7,669,207 B2
• Filed: 07/01/2004
• Issued: 02/23/2010
• Est. Priority Date: 07/17/2003
• Status: Expired due to Fees

• Current Assignee: Gradient Enterprises Incorporated
• Original Assignee: Gradient Enterprises Incorporated
• Inventors: Johnson, Kristaps
• Primary Examiner(s): Ho; Andy
• Application Number:
  US10/882,833
• Publication Number:
  US 20050015435A1
• Time in Patent Office: 2,063 Days
• Field of Search: 709/202, 709/224, 709/238, 719/318
• US Class Current: 719/318
• CPC Class Codes: H04L 41/0686 Additional information in the notification, e.g. enhancement of specific meta-data
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 24/00 Supervisory, monitoring or testing arrangements
• CPC Class Codes: H04W 48/10 using broadcasted information
• CPC Class Codes: H04W 48/17 Selecting a data network PoA [Point of Attachment]
• CPC Class Codes: H04W 74/00 Wireless channel access

Abstract

A system for detecting, reporting and responding to network node-level occurrences on a network-wide level includes one or more first mobile agents, each of the one or more first mobile agents is hosted by one of a plurality of nodes in the network. An event detection system communicates network event information associated with an event detected at one or more of the nodes in the network to the one or more first mobile agents, and a reporting system disseminates from the one or more first mobile agents information describing the detected event to one or more other nodes.

Claims

1. A method for detecting, reporting and responding to network node-level occurrences on a network-wide level, the method comprising:

providing a plurality of mobile agents, each of the mobile agents is hosted by one of a plurality of nodes in a network which each detect for one or more events;

designating one of the mobile agents hosted at one of the nodes as a controlling mobile agent;

designating another one of the mobile agents hosted at another one of the nodes as the controlling mobile agent when the one of the mobile agents previously designated as the controlling mobile agent is unavailable;

communicating network event information associated with an event detected at one or more of the nodes in the network to the controlling mobile agent; and

disseminating from the controlling mobile agent information describing the detected event to one or more other nodes.

2. The method as set forth in claim 1 wherein the designating another one of the mobile agents as the controlling mobile agent further comprises:

determining which one of the nodes is best suited to host the controlling mobile agent; and

selecting the one of the nodes to host the controlling mobile agent based on the determining.

3. The method as set forth in claim 2 further comprising utilizing at least one of a voting and an artificial intelligence algorithm to perform the determining which one of the nodes is best suited to host the controlling mobile agent.

4. The method as set forth in claim 1 wherein the disseminating from the controlling mobile agent further comprises disseminating the information describing the detected event to each of the nodes.

5. The method as set forth in claim 1 further comprising notifying one or more of the nodes that another one of the mobile agents is designated as the controlling mobile agent when the one of the mobile agents previously designated as the controlling mobile agent is determined to be unavailable.

6. The method as set forth in claim 1 wherein the designating another one of the mobile agents as the controlling mobile agent further comprising determining when the one of the mobile agents previously designated as the controlling mobile agent is unavailable.

7. The method as set forth in claim 1 wherein each of the one or more nodes that receives the disseminated information describing the detected event uses the information to protect the node.

8. The method as set forth in claim 1 further comprising protecting each of the one or more other nodes against a network-based attack associated with the detected event using the information describing the detected event.

9. The method as set forth in claim 1, wherein the one of the nodes hosting the controlling mobile agent is selected based upon information about a state of the network, the information comprising metadata including a list of available nodes for hosting the controlling mobile agent.

10. The method as set forth in claim 1 further comprising designating mobile agents other than the controlling mobile agent as non-controlling mobile agents.

11. The method as set forth in claim 1, wherein the controlling mobile agent is configured to continually poll one or more outside sources for new information prior to the disseminating.

12. The method as set forth in claim 1, wherein the communicating comprises transmitting a hash to the controlling mobile agent.

13. The method as set forth in claim 1, wherein the controlling mobile agent is configured to determine if a virus protection module is up to date with respect to the detected event.

14. A computer-readable medium having stored thereon instructions for detecting, reporting and responding to network node-level occurrences on a network-wide level, which when executed by at least one processor, causes the processor to perform:

providing a plurality of mobile agents, each of the mobile agents is hosted by one of a plurality of nodes in a network which each detect for one or more events;

designating one of the mobile agents hosted at one of the nodes as a controlling mobile agent;

designating another one of the mobile agents hosted at another one of the nodes as the controlling mobile agent when the one of the mobile agents previously designated as the controlling mobile agent is unavailable;

communicating network event information associated with an event detected at one or more of the nodes in the network to the controlling mobile agent; and

disseminating from the controlling mobile agent information describing the detected event to one or more other nodes.

15. The medium as set forth in claim 14 wherein the designating another one of the mobile agents as the controlling mobile agent further comprises:

determining which one of the nodes is best suited to host the controlling mobile agent; and

selecting the one of the nodes to host the controlling mobile agent based on the determining.

16. The medium as set forth in claim 15 further comprising utilizing at least one of a voting and an artificial intelligence algorithm to perform the determining which one of the nodes is best suited to host the controlling mobile agent.

17. The medium as set forth in claim 14 wherein the disseminating from the controlling mobile agent further comprises disseminating the information describing the detected event to each of the nodes.

18. The medium as set forth in claim 14 further comprising notifying one or more of the nodes that another one of the mobile agents is designated as the controlling mobile agent when the one of the mobile agents previously designated as the controlling mobile agent is determined to be unavailable.

19. The medium as set forth in claim 14 wherein the designating another one of the mobile agents as the controlling mobile agent further comprising determining when the one of the mobile agents previously designated as the controlling mobile agent is unavailable.

20. The medium as set forth in claim 19 wherein each of the one or more nodes that receives the disseminated information describing the detected event uses the information to protect the node.

21. The medium as set forth in claim 14 further comprising protecting each of the one or more other nodes against a network-based attack associated with the detected event using the information describing the detected event.

22. The medium as set forth in claim 14, wherein the one of the nodes hosting the controlling mobile agent is selected based upon information about a state of the network, the information comprising metadata including a list of available nodes for hosting the controlling mobile agent.

23. The medium as set forth in claim 14 further comprising designating mobile agents other than the controlling mobile agent as non-controlling mobile agents.

24. The medium as set forth in claim 14, wherein the controlling mobile agent is configured to continually poll one or more outside sources for new information prior to the disseminating.

25. The medium as set forth in claim 14, wherein the communicating comprises transmitting a hash to the controlling mobile agent.

26. The medium as set forth in claim 14, wherein the controlling mobile agent is configured to determine if a virus protection module is up to date with respect to the detected event.

27. A system for detecting, reporting and responding to network node-level occurrences on a network-wide level, the system comprising:

a plurality of mobile agents, each of the mobile agents is hosted by one of a plurality of nodes in a network which each detect for one or more events;

a designation system that designates one of the mobile agents hosted at one of the nodes as a controlling mobile agent and designates another one of the mobile agents hosted at another one of the nodes as the controlling mobile agent when the one of the mobile agents previously designated as the controlling mobile agent is unavailable;

an event detection system that communicates network event information associated with an event detected at one or more of the nodes in the network to the controlling mobile agent; and

a reporting system that disseminates from the controlling mobile agent information describing the detected event to one or more other nodes.

28. The system as set forth in claim 27 wherein the designation system determines which one of the nodes is best suited to host the controlling mobile agent and selects the one of the nodes to host the controlling mobile agent based on the determination.

29. The system as set forth in claim 28 wherein the designation system utilizes at least one of a voting and an artificial intelligence algorithm to determine which one or more of the nodes is best suited to host the controlling mobile agent.

30. The system as set forth in claim 27 wherein the reporting system disseminates information describing the detected event to each of the nodes.

31. The system as set forth in claim 27 wherein the reporting system notifies one or more of the nodes that another one of the mobile agents is designated as the controlling mobile agent when the one of the mobile agents previously designated as the controlling mobile agent is determined to be unavailable.

32. The system as set forth in claim 27 wherein the designation system determines when the one of the mobile agents previously designated as the controlling mobile agent is unavailable.

33. The system as set forth in claim 27 wherein the second system responds to the detected event using the network event information to protect the node each of the one or more nodes that receives the disseminated information describing the detected event uses the information to protect the node.

34. The system as set forth in claim 27 wherein each of the one or more nodes comprises a first system that protects the nodes against a network-based attack associated with the detected event using the information describing the detected event.

35. The system as set forth in claim 27, wherein the one of the nodes hosting the controlling mobile agent is selected based upon information about a state of the network, the information comprising metadata including a list of available nodes for hosting the controlling mobile agent.

36. The system as set forth in claim 27 wherein the designation system designates mobile agents other than the controlling mobile agent as non-controlling mobile agents.

37. The system as set forth in claim 27, wherein the controlling mobile agent is configured to continually poll one or more outside sources for new information for the reporting system to disseminate.

38. The system as set forth in claim 27, wherein the communicated network event information comprises a hash transmitted to the controlling mobile agent.

39. The system as set forth in claim 27, wherein the controlling mobile agent is configured to determine if a virus protection module is up to date with respect to the detected event.