Network Anomaly Root Cause Scoping With Transformer Analysis
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing network management systems struggle to quickly identify the scope and root cause of network anomalies in complex wireless networks, leading to inefficient remedial actions.
Innovation Solution
A network management system (NMS) aggregates connection event data across multiple network scope levels to detect network anomalies and determine the root cause simultaneously, using a transformer model to process data efficiently and identify the appropriate remedial action.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If network management systems use traditional sequential analysis methods to detect anomalies and determine root causes, then they can identify the scope of network issues, but the process takes excessive time and delays remedial actions
Solution Approach 1:
The patent combines anomaly detection and root cause determination into a single simultaneous process using a transformer model. The model processes connection event data from multiple network scope levels (service provider, organization, site) in parallel, generating both anomaly detection and root cause identification in one operation, thereby eliminating the sequential time delay while maintaining detection accuracy
Solution Approach 2:
The patent introduces a hierarchical scope dimension with three levels (service provider, organization, site) to organize connection event data. This dimensional structure allows the transformer model to process data across different network scopes simultaneously, enabling rapid root cause identification by analyzing patterns at multiple hierarchical levels in parallel rather than sequentially
2Loss of information
If network management systems analyze connection event data across multiple network scope levels, then they can determine the scope of network anomalies, but the data processing complexity increases
Solution Approach 1:
The patent employs a dynamic transformer model that adaptively processes connection event data across varying network scope levels. The model dynamically adjusts its analysis depth and focus based on the hierarchical structure (service provider, organization, site), optimizing processing complexity by allocating computational resources according to the specific anomaly patterns detected at each scope level
Solution Approach 2:
The patent segments the network management system into three distinct scope levels (service provider, organization, site), each handling specific types of connection event data. This segmentation allows the transformer model to process data in manageable hierarchical chunks rather than as a monolithic complex dataset, reducing overall processing complexity while maintaining complete anomaly scope information
3Productivity
If network management systems process connection event data from multiple access points simultaneously, then they can detect network anomalies faster, but the computational resources required increase
Solution Approach 1:
The patent applies partial action by having the transformer model process only the most relevant connection event data features at each network scope level, rather than analyzing every possible data point in detail. This selective processing approach maintains high anomaly detection speed by focusing computational resources on critical patterns while reducing overall computational resource consumption
Data Source
AI summary
A network management system includes a memory and processing circuitry in communication with the memory. The processing circuitry is configured to obtain connection event data. The connection event data indicates a plurality of disconnection events. The processing circuitry is also configured to generate, from the connection event data, aggregate data according to a plurality of network scope levels and detect, based on the aggregate data, one or more network anomalies. Additionally, the processing circuit is configured to determine, based on the aggregate data, whether a root cause of the one or more network anomalies is associated with each network scope level of the plurality of network scope levels and output an indication of the determined network scope level associated with the root cause or performing a remedial action to address the root cause at the determined network scope level.


