US5872928A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method and apparatus for defining and enforcing policies for configuration management in communications networks
Assignee: CA Inc
•
Filing: 1995-05-25
•
Granted: 1999-02-16
•
Expires: 2015-05-25
Abstract
Abstract Apparatus and method for monitoring parameters that govern the operational characteristics of a network device, including the use of templates for generating configuration records of network devices of a selected model type. A database of models is provided, each model representing an associated network device and including attribute values for the parameters of the associated network device. Templates are used to screen a model in order to retrieve values for each of the attributes and create a configuration record. The configuration records may be stored in the configuration manager or other storage device, and/or transferred to the pre-existing model database for use by a network management system in reconfiguring the associated network devices. Additionally, a method and apparatus is provided that defines network groups, defines network policies for groups, determines conflicts, and resolves conflicts among groups and devices. This system for configuration management is less time consuming, expensive, and error prone than prior systems.
Inventors
- 👤 Lundy Lewis
- 👤 Rajiv Malik
- 👤 Steve Sycamore
- 👤 Suzanne Thebaut
- 👤 Walter Scott
- 👤 Eric Rustici
- 👤 Prasan Kaikini
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-27 08:38
CPC Classifications
H; H04; H04L; H04L41/00; H04L41/20; H04L41/08; H04L41/0803; H04L41/084; H04L41/0843; H04L41/0846; H04L41/085; H04L41/0853; H04L41/0856; H04L41/0866; H04L41/0893; H04L41/0894; G; G06; G06F; G06F11/00; G06F11/30; G06F11/3003; G06F11/3006; G06F11/3051
Claims Analysis
Total Claims: 44
Claim 1
Independent Claim
140 words
A method for managing configurations of network devices connected in a network comprising the steps of: grouping at least one network device to create a network group; applying a policy to the network group by modifying a database to associate a configuration record with the network group, the step of applying a policy including the steps of: applying a first policy having a first ordering index to the network group; applying a second policy having a second ordering index to the network group; and loading, over the network, a configuration described by the configuration record into each network device in the network group, the step of loading including loading a first configuration defined by the first policy and a second configuration defined by the second policy in an order defined by the first ordering index and the second ordering index.
Claim 2
Independent Claim
140 words
A method for managing configurations of network devices connected in a network comprising the steps of: grouping at least one network device to create a network group; applying a policy to the network group by modifying a database to associate a configuration record with the network group, the step of applying a policy including the steps of: applying a first policy having a first ordering index to the network group; applying a second policy having a second ordering index to the network group; and loading, over the network, a configuration described by the configuration record into each network device in the network group, the step of loading including loading a first configuration defined by the first policy and a second configuration defined by the second policy in an order defined by the first ordering index and the second ordering index.
Claim 3
Dependent Claim
46 words
The method of claim 1, wherein the step of grouping includes the steps of: selecting the at least one network device; and modifying the database to include a group identifier and an association between the group identifier and each of the at least one network device.
Claim 4
Dependent Claim
23 words
The method of claim 2, wherein the step of selecting includes selecting an existing group that includes the at least one network device.
Claim 5
Dependent Claim
31 words
The method of claim 1, wherein the step of applying a policy includes the step of applying a policy to a second group of which the network group is a member.
Claim 6
Dependent Claim
102 words
The method of claim 1, wherein the step of loading the configuration includes the steps of: when the first ordering index has a value that is less than the second ordering index: loading the first configuration into each network device in the network group; and subsequently loading the second configuration into each network device in the network group; and when the second ordering index has a value that is less than the first ordering index: loading the second configuration into each network device in the network group; and subsequently loading the first configuration described into each network device in the network group.
Claim 7
Dependent Claim
57 words
The method of claim 1, wherein the step of applying a policy includes applying a policy having a condition, and wherein the step of loading includes the steps of: determining whether the condition is satisfied; and loading the configuration described by the configuration record into each network device in the network group when the condition is satisfied.
Claim 8
Dependent Claim
41 words
The method of claim 1, further comprising the steps of: triggering an enforcement; determining whether any conflicts exist among policies that are applied to the network group; when the step of determining determines that conflicts exist, resolving the conflicts that exist.
Claim 9
Independent Claim
159 words
A method for enforcing policies that apply to a device in a network, the method comprising the steps of: triggering an enforcement; determining whether any conflicts exist among policies that are applied to the network, the step of determining whether any conflicts exist including the steps of: determining at least one group of which the device is a member; determining applicable policies for the at least one group, the applicable policies each having a configuration record that includes attributes associated with attribute values; and determining whether a first applicable policy of the applicable policies has a first configuration record that includes a first value associated with a first attribute, and a second applicable policy of the applicable policies has a second configuration record that includes a second value associated with the first attribute, a conflict existing when the second value is different from the first value; when the step of determining determines that a conflict exists, resolving the conflict.
Claim 10
Independent Claim
159 words
A method for enforcing policies that apply to a device in a network, the method comprising the steps of: triggering an enforcement; determining whether any conflicts exist among policies that are applied to the network, the step of determining whether any conflicts exist including the steps of: determining at least one group of which the device is a member; determining applicable policies for the at least one group, the applicable policies each having a configuration record that includes attributes associated with attribute values; and determining whether a first applicable policy of the applicable policies has a first configuration record that includes a first value associated with a first attribute, and a second applicable policy of the applicable policies has a second configuration record that includes a second value associated with the first attribute, a conflict existing when the second value is different from the first value; when the step of determining determines that a conflict exists, resolving the conflict.
Claim 11
Dependent Claim
25 words
The method of claim 8, wherein the step of triggering includes the steps of: selecting a trigger event; and triggering according to the trigger event.
Claim 12
Dependent Claim
73 words
The method of claim 9, wherein the step of triggering includes determining at least one of: when a device on the network has been activated; when a device on the network has been deactivated; when the network has been activated; when the network has been deactivated when a device has been added to the network; when a scheduler has determined the trigger event; and when a user has manually triggered the trigger event.
Claim 13
Dependent Claim
103 words
The method of claim 8, wherein the step of determining applicable policies for the group includes the steps of: searching a database to determine a plurality of policies that are associated in the database with the group; characterizing each of the plurality of policies as one of a policy having a condition and a policy having no conditions; characterizing each of the plurality of policies having a condition as one of a policy having a satisfied condition and a policy having an unsatisfied condition; and determining the applicable policies to be each policy having a satisfied condition and each policy having no conditions.
Claim 14
Dependent Claim
33 words
The method of claim 8, wherein the step of resolving includes the steps of: selecting a resolution strategy; and selecting a policy from a plurality of applicable policies according to the resolution strategy.
Claim 15
Dependent Claim
120 words
The method of claim 12, wherein the step of selecting a resolution strategy includes selecting one of: a most specific group strategy that includes selecting an applicable policy that more specifically defines a policy of the device than the other of the plurality of applicable policies; a least specific group strategy that includes selecting an applicable policy that less specifically defines a policy of the device than the other of the plurality of applicable policies; a most conditions satisfied strategy that includes selecting from the plurality of applicable policy an applicable policy that includes a largest number of satisfied conditions; and a user adjudication strategy that includes enabling a user to select a policy from the plurality of applicable policies.
Claim 16
Dependent Claim
35 words
The method of claim 8, wherein the step of resolving includes the steps of: selecting a resolution strategy; and selecting a configuration record from a plurality of applicable configuration records according to the resolution strategy.
Claim 17
Dependent Claim
125 words
The method of claim 14, wherein the step of selecting a resolution strategy includes selecting one of: a most specific group strategy that includes selecting an applicable configuration record that more specifically defines a configuration of the device than the other of the plurality of applicable policies; a least specific group strategy that includes selecting an applicable configuration record that less specifically defines a configuration of the device than the other of the plurality of applicable policies; a most conditions satisfied strategy that includes selecting from the plurality of applicable configuration records an configuration record that includes a largest number of satisfied conditions; and a user adjudication strategy that includes enabling a user to select a configuration record from the plurality of applicable configuration records.
Claim 18
Dependent Claim
13 words
The method of claim 8, further comprising a step of providing an output.
Claim 19
Dependent Claim
34 words
The method of claim 16, wherein the step of providing an output includes the steps of: creating an enforceable configuration report; and loading a configuration associated with the enforceable configuration report into the device.
Claim 20
Dependent Claim
17 words
The method of claim 16, wherein the step of providing an output includes creating a conflict notice.
Claim 21
Dependent Claim
21 words
The method of claim 16, wherein the step of providing an output includes creating a notice that no action is needed.
Claim 22
Dependent Claim
25 words
The method of claim 16, wherein the step of providing an output includes creating a configuration report that defines an overall configuration of the network.
Claim 23
Independent Claim
128 words
An apparatus for managing configurations of network devices connected in a network comprising: a database that includes an association of a configuration record with at least one network device in a network group, the database including: an association of a first policy having a first ordering index with the network group; and an association of a second policy having a second ordering index with the network group; and means for loading, over a network, a configuration described by the configuration record into each network device in the network group, the means for loading including means for loading a first configuration defined by the first policy and a second configuration defined by the second policy in an order defined by the first ordering index and the second ordering index.
Claim 24
Independent Claim
128 words
An apparatus for managing configurations of network devices connected in a network comprising: a database that includes an association of a configuration record with at least one network device in a network group, the database including: an association of a first policy having a first ordering index with the network group; and an association of a second policy having a second ordering index with the network group; and means for loading, over a network, a configuration described by the configuration record into each network device in the network group, the means for loading including means for loading a first configuration defined by the first policy and a second configuration defined by the second policy in an order defined by the first ordering index and the second ordering index.
Claim 25
Dependent Claim
42 words
The apparatus of claim 21, further comprising: means for selecting the at least one network device; means for modifying the database to include a group identifier and an association between the group identifier and each of the at least one network device.
Claim 26
Dependent Claim
25 words
The apparatus of claim 22, wherein the means for selecting includes means for selecting an existing group that includes the at least one network device.
Claim 27
Dependent Claim
28 words
The apparatus of claim 21, wherein the database includes a second association that associates a policy with a second group of which the network group is a member.
Claim 28
Dependent Claim
104 words
The apparatus of claim 21, wherein the means for loading the configurations includes: means for loading the first configuration into each network device in the network group, and for subsequently loading the second configuration into each network device in the network group when the first ordering index has a value that is less than the second ordering index; and means for loading the second configuration into each network device in the network group, and for subsequently loading the first configuration into each network device in the network group when the second ordering index has a value that is less than the first ordering index.
Claim 29
Dependent Claim
56 words
The apparatus of claim 21, wherein the database includes an association of a policy having a condition, and wherein the means for loading includes: means for determining whether the condition is satisfied; and means for loading the configuration described by the configuration record into each network device in the network group when the condition is satisfied.
Claim 30
Dependent Claim
37 words
The apparatus of claim 21, further comprising: a trigger; an inference engine, responsive to the trigger, that determines whether any conflicts exist among policies that are applied to the network group, and resolves the conflicts that exist.
Claim 31
Independent Claim
151 words
An apparatus for enforcing policies that apply to a device in a network, the apparatus comprising: a trigger; an inference engine that determines whether any conflicts exist among policies that are applied to the network and resolves the conflicts that exist, the inference engine including: means for determining at least one group of which the device is a member; means for determining applicable policies for the at least one group, the applicable policies each having a configuration record that includes attributes associated with attribute values; and means for determining whether a first applicable policy of the applicable policies has a first configuration record that includes a first value associated with a first attribute, and a second applicable policy of the applicable policies has a second configuration record that includes a second value associated with the first attribute, wherein a conflict exists if the second value is different from the first value.
Claim 32
Independent Claim
151 words
An apparatus for enforcing policies that apply to a device in a network, the apparatus comprising: a trigger; an inference engine that determines whether any conflicts exist among policies that are applied to the network and resolves the conflicts that exist, the inference engine including: means for determining at least one group of which the device is a member; means for determining applicable policies for the at least one group, the applicable policies each having a configuration record that includes attributes associated with attribute values; and means for determining whether a first applicable policy of the applicable policies has a first configuration record that includes a first value associated with a first attribute, and a second applicable policy of the applicable policies has a second configuration record that includes a second value associated with the first attribute, wherein a conflict exists if the second value is different from the first value.
Claim 33
Dependent Claim
23 words
The apparatus of claim 28, wherein the trigger includes: a selected trigger event; and means for triggering according to the selected trigger event.
Claim 34
Dependent Claim
75 words
The apparatus of claim 29, wherein the means for triggering includes means for determining at least one of: when a device on the network has been activated; when a device on the network has been deactivated; when the network has been activated; when the network has been deactivated; when a device has been added to the network; when a scheduler has determined the trigger event; and when a user has manually triggered the trigger event.
Claim 35
Dependent Claim
108 words
The apparatus of claim 28, wherein the means for determining applicable policies for the group includes: means for searching a database to determine a plurality of policies that are associated in the database with the group; means for characterizing each of the plurality of policies as one of a policy having a condition and a policy having no conditions; means for characterizing each of the plurality of policies having a condition as one of a policy having a satisfied condition and a policy having an unsatisfied condition; and means for determining the applicable policies to be each policy having a satisfied condition and each policy having no conditions.
Claim 36
Dependent Claim
33 words
The apparatus of claim 28, wherein the inference engine includes: means for selecting a resolution strategy; and means for selecting a policy from a plurality of applicable policies according to the resolution strategy.
Claim 37
Dependent Claim
122 words
The apparatus of claim 32, wherein the means for selecting a resolution strategy includes means for selecting one of: a most specific group strategy that includes selecting an applicable policy that more specifically defines a policy of the device than the other of the plurality of applicable policies; a least specific group strategy that includes selecting an applicable policy that less specifically defines a policy of the device than the other of the plurality of applicable policies; a most conditions satisfied strategy that includes selecting from the plurality of applicable policy an applicable policy that includes a largest number of satisfied conditions; and a user adjudication strategy that includes enabling a user to select an applicable policy from the plurality of policies.
Claim 38
Dependent Claim
35 words
The apparatus of claim 28, wherein the inference engine includes: means for selecting a resolution strategy; and means for selecting a configuration record from a plurality of applicable configuration records according to the resolution strategy.
Claim 39
Dependent Claim
129 words
The apparatus of claim 34, wherein the means for selecting a resolution strategy includes means for selecting one of: a most specific group strategy that includes selecting an applicable configuration record that more specifically defines a configuration of the device than the other of the plurality of applicable configuration records; a least specific group strategy that includes selecting an applicable configuration that less specifically defines a configuration of the device than the other of the plurality of applicable configuration records; a most conditions satisfied strategy that includes selecting from the plurality of applicable configuration records an applicable configuration record that includes a largest number of satisfied conditions; and a user adjudication strategy that includes enabling a user to select a configuration record from the plurality of applicable configuration records.
Claim 40
Dependent Claim
18 words
The apparatus of claim 28, wherein the inference engine has an output that includes an enforceable configuration report.
Claim 41
Dependent Claim
21 words
The apparatus of claim 36, further comprising means for loading a configuration associated with the enforceable configuration report into the device.
Claim 42
Dependent Claim
17 words
The apparatus of claim 28, wherein the inference engine has an output that includes a conflict notice.
Claim 43
Dependent Claim
21 words
The apparatus of claim 28, wherein the inference engine has an output that includes a notice that no action is needed.
Claim 44
Dependent Claim
25 words
The apparatus of claim 28, wherein the inference engine has an output that includes a configuration report that defines an overall configuration of the network.
References Cited (Backward Citations)
US5193152A
Cited
US5247683A
Cited
US5265241A
Cited
EP0609990A2
Cited
US5557747A
Cited
US5509123A
Cited
US5793362A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2002-02-15 | 2002-08-17 | 2003-02-16 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2006-02-15 | 2006-08-17 | 2007-02-16 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2010-02-15 | 2010-08-17 | 2011-02-16 | $7700.00 | Window Closed / Lapsed |