Graphical policy interface for network control systems

Patent metadata

Field	Value
Publication number	US-10284428-B2
Application number	US-201615177966-A
Country	US
Kind code	B2
Filing date	Jun 9, 2016
Priority date	Jun 9, 2016
Publication date	May 7, 2019
Grant date	May 7, 2019

Abstract

A graphical policy interface architecture may enable simplified graphical development of customized policy logic for software controllers to control network services, connections, and devices. The policy logic based on graphical policy logic notation may be compiled and installed at run-time into a software controller.

First claim

What is claimed is:

1. A method for executing software controllers in networks, the method comprising:
based on policy rules, using graphical policy notation to design a graphical policy logic for controlling a network using a software controller;
compiling the graphical policy logic as a run-time module usable by a graphical policy executor to determine control logic within the software controller; and
accessing the control logic by the software controller, wherein the control logic is determined at least in part by the run-time module,
wherein the graphical policy executor,
sends actions based on the graphical policy logic to the software controller, the actions representing network commands for execution by the software controller; and
receives events occurring in the network from the software controller.

2. The method of claim 1 , further comprising:
receiving, at the graphical policy executor from an operator, control requests to control functionality at the network;
generating the actions based on the control requests; and
generating notifications for the operator, the notifications based on the events.

3. The method of claim 1 , wherein the run-time module comprising the graphical policy logic is accessed by the software controller while the software controller is executing to control the network.

4. The method of claim 1 , wherein using graphical policy notation further comprises:
using a graphical notation editor to design the graphical policy logic.

5. The method of claim 1 , wherein the graphical policy logic is usable with a plurality of different software controllers.

6. The method of claim 1 , wherein the software controller supports a plurality of network protocols to communicate with the network.

7. A network comprising:
a software controller for accessing control logic to control the network; and
a graphical policy executor for,
receiving a graphical policy logic as a run-time module usable by the graphical policy executor to determine the control logic within the software controller, wherein the graphical policy logic is designed based on policy rules using graphical policy notation, and wherein the control logic is determined at least in part by the run-time module;
sending actions based on the graphical policy logic to the software controller, the actions representing network commands for execution by the software controller; and
receiving events occurring in the network from the software controller.

8. The network of claim 7 , wherein the graphical policy executor further:
receives, from an operator, control requests to control functionality at the network;
generates the actions based on the control requests; and
generates notifications for the operator, the notifications based on the events.

9. The network of claim 7 , wherein the run-time module comprising the graphical policy logic is accessed by the software controller while the software controller is executing to control the network.

10. The network of claim 7 , wherein using graphical policy notation further comprises:
using a graphical notation editor to design and compile the graphical policy logic.

11. The network of claim 7 , wherein the graphical policy logic is usable with a plurality of different software controllers.

12. The network of claim 7 , wherein the software controller supports a plurality of network protocols to communicate with the network.

Assignees

• Fujitsu Ltd

Inventors

• Mao Kai
• Komine Hiroaki
• Kawakami Takaaki
• Arai Toshimasa
• Sakurai Kenichi
• Takimoto Minoru

Classifications

• H04L63/20

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title

• H04L41/0893 Primary

  Assignment of logical groups to network elements · CPC title

• H04L41/145

  involving simulating, designing, planning or modelling of a network · CPC title

• H04L41/14

  Network analysis or design · CPC title

• H04L41/22 Primary

  comprising specially adapted graphical user interfaces [GUI] · CPC title