Network Event Correlation for Multi-Layer Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current communication technologies, such as LTE networks, lack comprehensive and flexible methods to analyze and manage network performance across different layers and vendors, limiting their ability to optimize key performance indicators and address issues like interference and drone control effectively.
Innovation Solution
A network analysis and management system that includes a log parser and network event generator to create events from log data, correlating them based on specific configurations to generate analysis information and management messages for optimizing network performance, applicable to various communication networks including LTE, 3G, 4G, 5G, and satellite networks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If comprehensive network analysis across multiple layers and vendors is implemented, then network management capability and performance optimization are improved, but system complexity increases
Solution Approach 1:
The system segments network analysis by protocol layer (L1, L2, L3) and by functional module (log parser, event generator, correlator, task provider, analyzer). Each layer and module handles specific tasks independently, enabling comprehensive multi-layer analysis while maintaining manageable system complexity through modular architecture.
Solution Approach 2:
The patent introduces intermediate components including a log parser that standardizes vendor-specific logs, an event generator that creates uniform network events, and a correlator that bridges events across layers. These intermediaries enable vendor-neutral, layer-agnostic analysis while managing the complexity of heterogeneous network data.
2Measurement precision
If detailed log data from multiple protocol layers is collected and correlated, then measurement precision of network events is improved, but loss of time for data processing increases
Solution Approach 1:
The system performs preliminary actions by pre-parsing log data into standardized events with pre-defined correlation keys and attributes. Network events are generated with embedded metadata (timestamps, layer identifiers, correlation keys) that enable rapid subsequent correlation without re-processing raw logs, thus improving measurement precision while reducing processing time.
Solution Approach 2:
The patent transforms raw log data into structured network events by changing parameters from unstructured text to standardized fields (event type, layer, correlation key, timestamp). This parameter transformation enables efficient filtering, correlation, and analysis across layers without re-parsing original logs, balancing precision with processing speed.
3Adaptability or versatility
If network events from different layers are correlated using configuration-based methods, then adaptability to different network management tasks is improved, but device complexity increases
Solution Approach 1:
The system implements dynamic correlation through configurable parameters that can be adjusted based on network management tasks. The correlator adapts correlation keys, time windows, and event combinations dynamically according to task requirements (e.g., handover analysis, interference detection, drone control), providing task adaptability without hardcoding multiple specialized correlators.
Solution Approach 2:
The patent creates a universal correlation engine that handles multiple network management tasks through a single configurable system. The same correlator infrastructure supports diverse tasks (scheduling optimization, interference management, drone control) by changing correlation configurations rather than requiring separate specialized systems, thus improving adaptability while controlling complexity.
Data Source
AI summary
A network analysis and management system includes a processor coupled to a communications interface and a non-transitory memory. The processor is configured to read instructions from the non-transitory memory to cause the system to perform operations comprising receiving log data associated with communication between a first user device and a network using a first protocol stack including a plurality of layers. A plurality of network events are generated based on the log data. Each network event is associated with a respective log data entry of the log data and a respective layer of the plurality of layers. First network analysis information is generated by correlating first and second network events using a correlation configuration associated with a network management task. A network management message is generated using the first network analysis information, and transmitted to one of the first user device and the network for performing the network management task.