Automated Network Policy Generation via Correlated Operational Data
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional enterprise management systems employ a disjointed bottom-up approach, separating management and control planes, leading to inefficient management of diverse and complex computer networks with multiple protocols, which hampers quick reaction to operational changes.
Innovation Solution
An automated management process integrates management and control planes through a closed feedback loop, utilizing automated intelligence to correlate operational data from various protocols, generate policies, and enforce dynamic rules, enabling self-regulation and adaptability in heterogeneous systems.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If a conventional disjointed management system with separate management and control planes is used, then system structure is simple and easy to implement, but the system cannot quickly and effectively react to changes in diverse networks
Solution Approach 1:
The patent merges the management plane and control plane into an integrated automated management system. The system combines data collection, correlation, policy generation, and enforcement capabilities in a unified architecture, enabling the management functions to directly influence control actions without disjointed interfaces, thereby improving reaction speed to network changes.
Solution Approach 2:
The patent implements dynamic policy generation and enforcement capabilities that adapt to changing network conditions. The system continuously correlates operational data, dynamically generates updated policies, and enforces them in real-time, allowing the management system to respond flexibly and quickly to network changes rather than relying on static pre-configured rules.
2Adaptability or versatility
If separate management processes are used for different network functions (FCAPS model), then each function can be managed independently, but the functions are not integrated and cannot correlate data across different management areas
Solution Approach 1:
The patent implements a universal correlation engine that processes and correlates data from all FCAPS management areas (fault, configuration, accounting, performance, security) through a single integrated system. The correlation engine applies unified correlation rules and logic across diverse data types, enabling the system to adapt to and manage any network function through the same mechanism rather than requiring separate specialized processes.
Solution Approach 2:
The patent combines multiple separate management processes into a single integrated automated management system that handles fault management, configuration management, accounting management, performance management, and security management through unified data collection, correlation, policy generation, and enforcement mechanisms, thereby integrating previously separate functions.
3Adaptability or versatility
If proprietary semantics from various manufacturers and protocols are maintained, then device-specific functionality is preserved, but the management system becomes complex and cannot generalize across diverse network elements
Solution Approach 1:
The patent introduces an intermediary layer in the form of a correlation engine that translates and correlates data from diverse proprietary protocols and manufacturers into a unified internal representation. This intermediary correlation layer abstracts away protocol-specific semantics while preserving the essential operational data, enabling the system to handle diverse network elements without being burdened by proprietary complexity.
Solution Approach 2:
The patent applies homogeneity by standardizing the representation and processing of operational data from diverse network sources. The system converts heterogeneous data from different protocols and manufacturers into a uniform format that can be processed by the correlation engine using consistent correlation rules, thereby eliminating the need to handle each proprietary format separately while maintaining compatibility with diverse network elements.
Data Source
AI summary
A method and apparatus for an automated system management process are described. According to an embodiment of the invention, a method comprises receiving data regarding operation of a network; automatically generating network policies based at least in part on the data regarding operation of the network using automation intelligence; applying the network policies to modify operations of the network; and receiving data regarding the operation of the network after the modification of the operations of the network.