Network Device Setting Verification Using Centralized Mediator
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current network device technologies face challenges in performing abnormality detection and setting verification that consider the dependency relationship between functional modules and statistical information, making it difficult to manage complex configurations and detect abnormalities across multiple modules and external environments.
Innovation Solution
A network device with a setting management unit, statistical information management unit, and setting verification unit that uses a common language (like Datalog) to collect and verify settings, dependency relationships, and statistical information, ensuring new settings conform to policies and normal ranges, thereby enabling effective abnormality detection and flexible policy changes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a unified management module is used to manage setting information and statistical information across multiple functional modules, then setting verification and abnormality detection can be performed, but the module configuration becomes complicated and dependency relationships between modules must be manually solved
Solution Approach 1:
The patent introduces a setting management unit as an intermediary component that centralizes the management of setting information and statistical information from multiple functional modules. This unit receives setting information from various modules, manages it in a unified manner, and performs verification against stored policies, thereby enabling comprehensive setting verification without requiring complex inter-module dependency solutions.
Solution Approach 2:
The setting management unit is designed to perform multiple functions: collecting setting information from different functional modules, storing policies, verifying settings against policies, collecting statistical information, and detecting abnormalities. This multi-functional approach eliminates the need for separate verification mechanisms in each module and simplifies the overall system configuration.
2Reliability
If each functional module collects information about other modules to solve dependency relationships, then setting verification can be performed, but the verification process becomes complicated and time-consuming
Solution Approach 1:
The setting management unit acts as a central intermediary that receives setting information from all functional modules and performs verification in a centralized manner. This eliminates the need for each module to independently collect information from others and solve dependency relationships, significantly reducing verification time while maintaining comprehensive verification accuracy through policy-based checking.
3Reliability
If existing verification techniques are applied to the entire network, then network-wide setting consistency can be verified, but verification at the individual device or module level cannot be performed
Solution Approach 1:
The patent segments the verification function by introducing a setting management unit at the device level that handles setting information from multiple functional modules. This segmentation enables verification at the individual device/module level while the unified management approach also supports network-wide verification, thus providing both granular and comprehensive verification capabilities.
Data Source
AI summary
An object of the present disclosure is to provide a network device and a method for setting the network device that can, in developing functional modules, perform abnormality detection based on statistical information and setting verification in consideration of a dependency relationship between the functional modules and statistical information and can address a change in a policy in the setting verification and a change in a condition in the abnormality detection. In the network device according to the present disclosure, an existing setting of each module, external information, a dependency relationship, and a policy are collected at one location (setting verification unit) by using a common language. When a new setting is made to the modules, a new dependency relationship is set, or new external information is acquired, the new setting is sent to the setting verification unit and checked against the existing setting, the external information, and the dependency relationship. Then, when the new setting is in a normal range of the policy, the new setting is made to the modules.