Path management system, path management method, and path management program
Patent Information
- Application Number
- PCT/JP2025/012721
- Authority / Receiving Office
- WO · WO
- Patent Type
- Applications
- Current Assignee / Owner
- Filing Date
- 2025-03-28
- Publication Date
- 2026-10-01
Smart Images
Figure JP2025012721_01102026_PF_FP_ABST
Abstract
Description
Path management system, path management method, and path management program
[0001] The present disclosure relates to a path management system, a path management method, and a path management program.
[0002] In an optical network such as an APN (All-Photonics Network), low-latency, low-cost optical transmission end-to-end paths (optical E2E paths) between a plurality of segments are required. For such optical E2E paths, when an alarm is notified from a device within a segment, rapid failure analysis through centralized monitoring of optical E2E paths that span multiple segments is required.
[0003] Therefore, there is a method in which a representative controller is determined from among the controllers for each segment, and a non-representative controller transmits the path configuration information and alarm / PM (Performance Monitoring) information of its own segment to the representative controller, thereby realizing centralized monitoring of optical E2E paths by the representative controller (Non-Patent Document 1).
[0004] Wu, three other authors, "A Study on Inter-segment Optical Path Monitoring Method via Representative Controller Installation", IEICE General Conference, B-6-51, March 2024
[0005] However, in the conventional technology, since the non-representative controller transmits all information included in the path configuration information and the alarm / PM information to the representative controller, confidential information of the non-representative segment is disclosed to the representative segment.
[0006] The present disclosure has been made in view of the above circumstances, and an object of the present disclosure is to provide a technology capable of keeping path configuration information confidential.
[0007] A path management system according to one aspect of the present disclosure comprises a plurality of controllers for managing the components of an optical network for each segment, wherein one of the plurality of controllers is designated as the representative controller and the rest as non-representative controllers, wherein the non-representative controllers include a collection unit for collecting path configuration information of its own segment, a masking unit for masking confidential information among the information included in the path configuration information, and a transmission unit for transmitting the masked path configuration information to the representative controller, and the representative controller includes a collection unit for collecting path configuration information of other segments from the non-representative controllers, a registration unit for registering the collected path configuration information of other segments in a storage unit, and a processing unit for generating path configuration information for all segments using the path configuration information of other segments and the path configuration information of its own segment.
[0008] A path management method according to one aspect of the present disclosure is a path management method performed by a plurality of controllers that manage the constituent devices of an optical network for each segment, wherein one of the plurality of controllers is designated as a representative controller and the rest are non-representative controllers, wherein the non-representative controllers collect path configuration information for their own segment, mask confidential information included in the path configuration information, and transmit the masked path configuration information to the representative controller, the representative controller collects path configuration information for other segments from the non-representative controllers, registers the collected path configuration information for other segments in a storage unit, and generates path configuration information for all segments using the path configuration information for other segments and the path configuration information for their own segment.
[0009] A path management program in one aspect of this disclosure causes a non-representative controller to perform the following processes: collecting path configuration information for its own segment; masking information to be kept confidential among the information contained in the path configuration information; and transmitting the masked path configuration information to the representative controller.
[0010] A path management program in one aspect of the present disclosure causes a representative controller to perform the following processes: collect path configuration information of other segments from a non-representative controller; register the collected path configuration information of other segments in a storage unit; and generate path configuration information for all segments using the path configuration information of other segments and the path configuration information of its own segment.
[0011] According to this disclosure, path configuration information can be kept confidential.
[0012] Figure 1 shows an example of the overall configuration of the path management system. Figure 2 shows an example of the functional configuration of a non-representative controller. Figure 3 shows an example of the functional configuration of a representative controller. Figure 4 is a sequence diagram showing an example of the overall operation of the path management system. Figure 5 shows a specific example of path configuration information. Figure 6 shows a specific example of path configuration information. Figure 7 shows a specific example of security level 2. Figure 8 shows a specific example of security level 1. Figure 9 shows a specific example of security level 0. Figure 10 shows an example of changing the path configuration. Figure 11 shows an example of changing the path configuration. Figure 12 shows an example of the hardware configuration of a non-representative controller.
[0013] Embodiments of this disclosure will be described below with reference to the drawings. In the drawings, the same parts are denoted by the same reference numerals and their descriptions are omitted.
[0014] Conventional non-representative controllers transmitted all information, including path configuration information and alarm / PM information, to the representative controller, resulting in confidential information from the non-representative segment being disclosed to the representative segment.
[0015] Therefore, this disclosure describes a path management system having a representative controller and non-representative controllers, which masks confidential information from the path configuration information. Specifically, it masks the path configuration information of a non-representative segment according to a specified level of confidentiality between the representative segment and the non-representative segment.
[0016] This allows for the concealment of path configuration information. Furthermore, for example, the path configuration information of non-representative segments can be concealed according to the relationship between non-representative segments and representative segments, or according to the confidentiality levels defined between segments.
[0017] Furthermore, every time a change occurred in the path configuration managed by a non-representative segment, the maintainer of the non-representative segment and the maintainer of the representative segment had to manually confirm the changes in the path configuration and share the path configuration information each time, which was cumbersome.
[0018] Therefore, this disclosure describes a system in which a non-representative controller automatically tracks changes in the path configuration, automatically sends the necessary information to the representative controller, and the representative controller automatically registers the received information in a database.
[0019] This allows maintenance personnel in non-representative segments to automatically send necessary information to the representative controller in response to changes in the path configuration of their own segment, without needing to be aware of those changes. Furthermore, it eliminates the need for maintenance personnel in representative segments to manually register path configuration information.
[0020] Figure 1 shows an example of the overall configuration of the path management system according to this embodiment.
[0021] The path management system monitors optical E2E paths passing through an optical network such as an APN. The optical network includes, for example, a plurality of optical relay devices 4 that are interconnected via optical fibers and can communicate with each other, and an optical termination device 5 connected to a predetermined connection end.
[0022] The optical network is divided into multiple segments A to D, and each segment is equipped with an EMS (Element Management System) 3 that manages the constituent devices within the segment, and a controller that controls the EMS 3. A representative controller 1 and a non-representative controller 2 are determined from among the multiple controllers.
[0023] The non-representative controller 2 transmits path configuration information IA and alarm / PM information IB for its own segment to the representative controller 1 at predetermined times, such as when the optical relay device 4 fails. The representative controller 1 centrally monitors the optical E2E paths using the path configuration information IA and alarm / PM information IB for all segments.
[0024] Figure 2 shows an example of the functional configuration of a non-representative controller 2 according to this embodiment.
[0025] The non-representative controller 2 comprises a data collection unit 21, a masking unit 22, and a transmission unit 23.
[0026] The collection unit 21 has a function to collect path configuration information for its own segment, for example, when a new entry is registered in the path configuration of its own segment or when there is a change in the path configuration of its own segment. Path configuration information includes, for example, device information of the optical relay device 4, trail information, and redundant path system information.
[0027] The collection unit 21 has a function to collect alarm / PM information notified from the optical relay device 4 or optical termination device 5 when, for example, the optical relay device 4 or optical termination device 5 of its own segment malfunctions.
[0028] The masking unit 22 has a function to mask information that is to be kept secret from the information included in the path configuration information of its own segment, according to the relationship between the non-representative segment and the representative segment, and according to the level of confidentiality defined between the segments.
[0029] The masking unit 22 has a function to mask information to be kept confidential from the information included in the alarm / PM information, for example, according to the confidentiality level to which the path configuration information has been masked.
[0030] The masking unit 22 has the function of selecting a specified security level from among multiple security levels with different security ranges, and masking the information within the security range corresponding to the selected security level.
[0031] Information to be kept confidential includes, for example, information that the maintainers of their own segment want to hide, or information that is unnecessary for maintainers of other segments. Masking is the process of hiding and keeping information private, such as deleting or redacting information.
[0032] The transmission unit 23 has a function to transmit masked path configuration information to the representative controller 1.
[0033] The transmitting unit 23 has a function to transmit masked alarm / PM information to the representative controller 1.
[0034] The transmission unit 23 has a function to automatically send modified path configuration information to the representative controller 1 each time the path configuration changes, according to the changed path configuration.
[0035] Figure 3 shows an example of the functional configuration of a representative controller 1 according to this embodiment.
[0036] The representative controller 1 comprises a data collection unit 11, a registration unit 12, and a processing unit 13.
[0037] The data collection unit 11, like the data collection unit 21 of the non-representative controller 2, has the function of collecting path configuration information for its own segment.
[0038] The collection unit 11, like the collection unit 21 of the non-representative controller 2, has the function of collecting alarm / PM information notified from the optical relay device 4 and optical termination device 5 of its own segment.
[0039] The collection unit 11 has the function of collecting path configuration information of other segments transmitted from the non-representative controller 2.
[0040] The collection unit 11 has the function of collecting alarm / PM information from other segments transmitted from the non-representative controller 2.
[0041] The registration unit 12 has the function of registering the path configuration information of its own segment and other segments in the configuration management DB 6 (storage unit).
[0042] The registration unit 12 has a function to automatically register the changed path configuration information in the configuration management DB 6 each time it collects the changed path configuration information.
[0043] The registration unit 12 has the function of registering alarm / PM information for its own segment and other segments in the alarm / PM information management DB 7.
[0044] The registration unit 12 has a function of automatically registering alarm / PM information in the alarm / PM information management DB 7 each time alarm / PM information is collected.
[0045] The processing unit 13 has a function of generating an optical end-to-end (E2E) path (path configuration information for all segments) using each piece of path configuration information of the own segment and other segments read from the configuration management DB 6.
[0046] The processing unit 13 has a function of mapping each piece of alarm / PM information of the own segment and other segments read from the alarm / PM information management DB 7 to the optical E2E path.
[0047] Mapping refers to, for example, processing that indicates the failure position of the optical repeater 4 or optical fiber with respect to the optical E2E path.
[0048] Figure 4 is a sequence diagram showing an example of the overall operation of the path management system.
[0049] Step S1: When the optical repeater 4 in the own segment fails, for example, the non-representative controller 2 collects path configuration information of the own segment, and collects the alarm / PM information notified from the optical repeater 4.
[0050] Step S2: The non-representative controller 2 masks confidential information among the information included in the path configuration information, and masks confidential information among the information included in the alarm / PM information, in accordance with, for example, the confidentiality level defined between segments.
[0051] Step S3: The non-representative controller 2 transmits the masked path configuration information and the masked alarm / PM information to the representative controller 1.
[0052] Step S4: The representative controller 1 collects the path configuration information and alarm / PM information transmitted from the non-representative controller 2. At this time, as necessary, the representative controller 1 collects path configuration information of the own segment, and checks whether there is alarm / PM information from the optical repeater 4 of the own segment.
[0053] Step S5: The representative controller 1 registers the path configuration information of the non-representative controller 2 in the configuration management DB 6 and registers the alarm / PM information of the non-representative controller 2 in the alarm / PM information management DB 7. At this time, if the representative controller 1 has collected path configuration information and alarm / PM information for its own segment, it also registers that path configuration information and that alarm / PM information in the configuration management DB 6 and alarm / PM information management DB 7, respectively.
[0054] Step S6; The representative controller 1 generates an optical E2E path using the path configuration information for its own segment and other segments registered in the configuration management DB 6, and maps the alarm / PM information for its own segment and other segments registered in the alarm / PM information management DB 7 to the optical E2E path.
[0055] Next, we will explain specific examples of masks for path configuration information and alarm / PM information.
[0056] The non-representative controller 2 can change the confidentiality level when sending path configuration information and alarm / PM information to the representative controller 1. In other words, the non-representative controller 2 applies a confidentiality level selected from several confidentiality levels to the path configuration information and alarm / PM information. For example, the following three levels of confidentiality, 0 to 3, are possible.
[0057] At security level 0, only the network name information included in the path configuration information and alarm / PM information is disclosed, while all other information is masked.
[0058] At security level 1, device information and link information included in path configuration information and alarm / PM information are further disclosed, while information other than "network name information, device information, and link information" is masked.
[0059] At security level 2, package and module information included in path configuration information and alarm / PM information is further disclosed, while information other than "network name information, device information, link information, package information, and module information" is masked.
[0060] Confidentiality levels can be set in more detail, such as in five stages. Multiple non-representative segments may use the same confidentiality level or different levels. Generally, confidentiality policies differ from one business to another, so confidentiality levels are likely to differ from segment to segment.
[0061] However, regardless of the level of confidentiality, information necessary to understand the connection configuration of the optical E2E path, such as information regarding the location and connection order (arrangement) of the optical relay devices 4 and optical termination devices 5, and information regarding the location and order (arrangement) of trail information between optical relay devices 4 and between optical relay devices 4 and optical termination devices 5, will not be masked.
[0062] Here, I will provide some additional explanation regarding path configuration information.
[0063] Path configuration information refers to information about optical relay devices 4 and optical termination devices 5 that the optical path passes through at a given time. For example, as mentioned above, the path configuration information includes device information for the optical relay device 4, trail information, and redundant path system information.
[0064] The device information for optical relay device 4, as shown in Figure 5, includes the device name, package name, module name, and port name of optical relay device 4. The trail information, as shown in Figure 6, includes the OTS (Optical Transmission Section) and OMS (Optical Multiplex Section). The system information for redundant paths, as shown in Figure 6, indicates which of the active and backup systems the main signal is passing through at a given time.
[0065] Next, we will explain specific examples for each level of confidentiality.
[0066] Figure 7 shows a specific example of security level 2.
[0067] In the non-representative segment of non-representative controller 2, optical relay device C, optical relay device D, and optical termination device E are connected in series in that order.
[0068] The name of optical repeater device C shall be 1. Optical repeater device C comprises packages C-a, C-b, ..., and the names of each package shall be 1.1, 1.2, ... Optical repeater device C comprises modules C-a-α, C-a-β, ..., and the names of each module shall be 1.1.1, 1.1.2, ...
[0069] The name of optical repeater D shall be 2. Optical repeater D comprises packages D-a, D-b, ..., and the names of each package shall be 2.1, 2.2, ... Optical repeater D comprises modules D-a-α, D-a-β, ..., and the names of each module shall be 2.1.1, 2.1.2, ...
[0070] The name of the optical termination device E shall be 3. The optical termination device E comprises packages E-a, E-b, ..., and the names of each package shall be 3.1, 3.2, ... The optical termination device E comprises modules E-a-α, E-a-β, ..., and the names of each module shall be 3.1.1, 3.1.2, ...
[0071] Assume that a malfunction occurs in module D-a-β of optical relay device D, and that optical relay device D broadcasts alarm / PM information with the following information: "Network name: hoge, Alarm level: MAJOR, Location: D-a-β".
[0072] In the case of confidentiality level 2, as mentioned above, information other than "network name information, device information, link information, package information, and module information" is masked, and only "network name information, device information, link information, package information, and module information" is disclosed.
[0073] Therefore, non-representative controller 2 transmits the above alarm / PM information as alarm / PM information IB to representative controller 1. However, since the location of the fault is not known from "Location of occurrence: D-a-β" included in the above alarm / PM information, non-representative controller 2 replaces "D-a-β" with the package name "2.1.1".
[0074] Furthermore, in the case of confidentiality level 2, as mentioned above, the non-representative controller 2 transmits path configuration information IA, which includes "network name information, device information, link information, package information, and module information," to the representative controller 1. In this case as well, the non-representative controller 2 transmits path configuration information IA using the device name, package name, and module name of the optical relay device 4 and optical termination device 5, as shown in Figure 7.
[0075] Figure 8 shows a specific example of security level 1.
[0076] In the case of confidentiality level 1, as mentioned above, information other than "network name information, device information, and link information" is masked, and only "network name information, device information, and link information" is disclosed.
[0077] Therefore, non-representative controller 2 deletes "Alarm level: MAJOR, Location: D-a-β" from the above alarm / PM information and sends the deleted alarm / PM information IB to representative controller 1. However, since "device information" is disclosed, non-representative controller 2 replaces "D-a-β" with the device name "2" as shown in Figure 8. Also, since "Alarm level: MAJOR" is not generally considered information to be hidden, it does not need to be deleted as shown in Figure 8.
[0078] Furthermore, in the case of confidentiality level 1, as mentioned above, the non-representative controller 2 sends path configuration information IA containing "network name information, device information, and link information" to the representative controller 1. In other words, as shown in Figure 8, it sends path configuration information IA with "package information and module information" removed from the path configuration information in Figure 7.
[0079] Figure 9 shows a specific example of security level 0.
[0080] In the case of confidentiality level 0, as mentioned above, information other than "network name information" is masked, and only "network name information" is disclosed.
[0081] Therefore, non-representative controller 2 deletes "Alarm level: MAJOR, Location: D-a-β" from the above alarm / PM information and sends the deleted alarm / PM information IB to representative controller 1. In addition, non-representative controller 2 sends path configuration information IA containing only the "Network name" to representative controller 1.
[0082] Next, we will explain the automatic transmission and registration of path configuration information and alarm / PM information.
[0083] The non-representative controller 2 constantly monitors changes in the path configuration of its own segment and alarm / PM information notification using the collection function of the collection unit 21. The representative controller 1 also constantly monitors changes in the path configuration of its own segment and all segments and alarm / PM information notification using the collection function of the collection unit 11.
[0084] Whenever the path configuration of its own segment changes, the non-representative controller 2 automatically sends the updated path configuration information to the representative controller 1, masked according to the confidentiality level. In this case, the non-representative controller 2 may also automatically send only the changed portion, masked according to the confidentiality level.
[0085] Changes in the path configuration include, for example, when an optical relay device 4' is newly installed on the optical E2E path as shown in Figure 10, when an optical relay device on the optical E2E path is removed, or when the optical E2E path route is switched from the active system to the backup system as shown in Figure 11.
[0086] Each time the representative controller 1 receives updated path configuration information from the non-representative controller 2, it automatically registers the updated path configuration information in the configuration management DB 6 and automatically updates the optical E2E path using that path configuration information.
[0087] The same applies to alarm / PM information. In other words, whenever alarm / PM information is reported by the non-representative controller 2, it masks the reported alarm / PM information according to the confidentiality level and automatically transmits it to the representative controller 1. Every time the representative controller 1 collects alarm / PM information from the non-representative controller 2, it automatically registers the collected alarm / PM information in the alarm / PM information management DB 7 and maps (remaps) the alarm / PM information to the optical E2E path.
[0088] As described above, according to this embodiment, the non-representative controller 2 collects path configuration information for its own segment, masks the information to be kept confidential from the information included in the path configuration information, and transmits the masked path configuration information to the representative controller 1. The representative controller 1 collects path configuration information for other segments from the non-representative controller 2, registers the collected path configuration information for other segments in the configuration management DB 6, and generates an optical E2E path (path configuration information for all segments) using the path configuration information for other segments and the path configuration information for its own segment, thereby keeping the path configuration information confidential.
[0089] Furthermore, according to this embodiment, the non-representative controller 2 selects a specified confidentiality level from among a plurality of confidentiality levels with different confidentiality ranges, and masks the confidentiality range information corresponding to the selected confidentiality level. For example, the path configuration information of the non-representative segment can be kept confidential according to the relationship between the non-representative segment and the representative segment, or according to the confidentiality levels defined between the segments.
[0090] Furthermore, according to this embodiment, whenever the path configuration changes, the non-representative controller 2 automatically sends the modified path configuration information to the representative controller 1 according to the changed path configuration, and whenever the representative controller 1 collects the modified path configuration information, it automatically registers the modified path configuration information in the configuration management DB 6. As a result, the maintenance personnel of the non-representative segment can automatically send the necessary information to the representative controller in response to changes in the path configuration of their own segment without having to be aware of the changes in the path configuration of their own segment. In addition, the maintenance personnel of the representative segment can avoid the trouble of manually registering the path configuration information.
[0091] Furthermore, the above makes it possible to centrally manage multiple non-representative segments with different levels of confidentiality within a representative segment.
[0092] Finally, this disclosure is not limited to the embodiments described above. This disclosure can be modified in numerous ways within the scope of its essence.
[0093] The non-representative controller 2 of this embodiment described above can be realized using a general-purpose computer system, for example, as shown in Figure 12, which includes a CPU 901, a memory 902, a storage 903, a communication device 904, an input device 905, and an output device 906. The memory 902 and the storage 903 are storage devices. In this computer system, the CPU 901 executes a predetermined program loaded onto the memory 902, thereby realizing each function of the non-representative controller 2.
[0094] The non-representative controller 2 may be implemented on a single computer. The non-representative controller 2 may be implemented on multiple computers. The non-representative controller 2 may be a virtual machine implemented on a computer.
[0095] The program for the non-representative controller 2 can be stored on a computer-readable recording medium such as an HDD, SSD, USB memory, CD, or DVD. A computer-readable recording medium is, for example, a non-transitory recording medium. The program for the non-representative controller 2 can also be distributed via a communication network.
[0096] The representative controller 1 has the same hardware configuration as the non-representative controller 2.
[0097] 1 Representative Controller 2 Non-Representative Controller 3 EMS 4 Optical Repeater 5 Optical Termination Device 6 Configuration Management DB 7 Alarm / PM Information Management DB 11 Collection Unit 12 Registration Unit 13 Processing Unit 21 Collection Unit 22 Mask Unit 23 Transmission Unit 901 CPU 902 Memory 903 Storage 904 Communication Device 905 Input Device 906 Output Device
Claims
1. A path management system comprising multiple controllers for managing the components of an optical network for each segment, wherein one of the multiple controllers is designated as the representative controller and the rest as non-representative controllers, wherein the non-representative controllers include: a collection unit for collecting path configuration information of its own segment; a masking unit for masking confidential information among the information included in the path configuration information; and a transmission unit for transmitting the masked path configuration information to the representative controller; and the representative controller includes: a collection unit for collecting path configuration information of other segments from the non-representative controllers; a registration unit for registering the collected path configuration information of other segments in a storage unit; and a processing unit for generating path configuration information for all segments using the path configuration information of other segments and the path configuration information of its own segment.
2. The path management system according to claim 1, wherein the masking unit masks information to be kept confidential from the information included in the alarm information of its own segment, and the processing unit maps the masked alarm information to the path configuration information of all segments.
3. The path management system according to claim 1, wherein the masking unit selects a specified confidentiality level from among a plurality of confidentiality levels with different confidentiality ranges, and masks the confidentiality range information corresponding to the selected confidentiality level.
4. The path management system according to claim 1, wherein the transmission unit automatically transmits modified path configuration information to the representative controller each time the path configuration changes, and the registration unit automatically registers the modified path configuration information in the storage unit each time it collects the modified path configuration information.
5. A path management method in which multiple controllers manage the components of an optical network for each segment, with one of the multiple controllers designated as the representative controller and the rest as non-representative controllers, wherein the non-representative controllers collect path configuration information for their own segment, mask confidential information included in the path configuration information, and transmit the masked path configuration information to the representative controller; the representative controller collects path configuration information for other segments from the non-representative controllers, registers the collected path configuration information for other segments in a storage unit, and generates path configuration information for all segments using the path configuration information for other segments and the path configuration information for their own segment.
6. A path management program that causes a non-representative controller to perform the following processes: collecting path configuration information for its own segment; masking information to be kept confidential from the information contained in the path configuration information; and sending the masked path configuration information to the representative controller.
7. A path management program that causes the representative controller to execute the following: a process to collect path configuration information of other segments from non-representative controllers; a process to register the collected path configuration information of other segments in a storage unit; and a process to generate path configuration information for all segments using the path configuration information of other segments and the path configuration information of its own segment.