Computer system

Patent metadata

Field	Value
Publication number	US-11240245-B2
Application number	US-201916561833-A
Country	US
Kind code	B2
Filing date	Sep 5, 2019
Priority date	Dec 14, 2018
Publication date	Feb 1, 2022
Grant date	Feb 1, 2022

Abstract

A computer system includes one or more storage devices, and one or more processors. The one or more storage devices store permission management information specifying relations between combinations of an information source and an information type and whether sending information from the information source to an external network system is permitted or prohibited. The one or more processor is configured to receive an information transmission request specifying an information type of first information from a first system of an information source, determine whether sending the first information to outside a network system the first system belongs to is permitted with reference to the permission management information, and select a monitoring/analysis server to receive the first information from the monitoring/analysis servers based on the determination.

First claim

What is claimed is:

1. A computer system configured to manage a plurality of systems to be monitored that belong to a plurality of networks and a plurality of monitoring/analysis servers that belong to the plurality of networks,
the plurality of monitoring/analysis servers being configured to monitor or analyze the plurality of systems, and
the computer system comprising:
one or more storage devices; and
one or more processors that operate in accordance with a program stored in the one or more storage devices,
wherein the one or more storage devices store permission management information specifying relations between combinations of an information source and an information type and whether sending information from the information source to an external network system is permitted or prohibited, and
wherein the one or more processors are configured to:
receive an information transmission request specifying an information type of first information from a first system of an information source;
determine whether sending the first information to outside a network system the first system belongs to is permitted with reference to the permission management information; and
select a monitoring/analysis server to receive the first information from the plurality of monitoring/analysis servers based on the determination; and

wherein the one or more storage devices store:
information recipient management information associating each of the plurality of systems to be monitored with a monitoring/analysis server of a potential recipient of information on the system; and
resource usage threshold management information managing thresholds for usage of computer resources of the plurality of monitoring/analysis servers, and
wherein the one or more processors are configured to:
select a monitoring/analysis server as a primary potential recipient of information generated in the first system with reference to the information recipient management information; and
select another monitoring/analysis server as another potential recipient from a plurality of remaining monitoring/analysis servers based on usage of computer resources of the plurality of remaining monitoring/analysis servers in a case where usage of a computer resource of the monitoring/analysis server of the primary potential recipient is higher than a threshold specified in the resource usage threshold management information.

2. The computer system according to claim 1 , wherein the one or more processors are configured to select a monitoring/analysis server as a potential recipient of the first information from the plurality of monitoring/analysis servers based on usage of computer resources of the plurality of monitoring/analysis servers.

3. The computer system according to claim 1 , wherein the one or more processors are configured to select the monitoring/analysis servers as potential recipients of information generated in the plurality of systems in order of priorities assigned to the plurality of systems.

4. The computer system according to claim 1 ,
wherein the one or more storage devices store history of information sent from the plurality of systems to the plurality of monitoring/analysis servers, and
wherein the one or more processors are configured to select a record from the history in accordance with a request from a client and send the selected record to the client.

5. The computer system according to claim 4 ,
wherein the one or more storage devices store separate history tables about individual systems to be monitored, each history table including history of information sent from a system to the plurality of monitoring/analysis servers, and
wherein the one or more processors are configured to select a record from the history table about a system designated in the request from the client and send the selected record to the client.

6. The computer system according to claim 1 ,
wherein the one or more storage devices store:
history of information sent from the plurality of systems to be monitored to the plurality of monitoring/analysis servers; and
presumed failure cause management information associating information generated in the plurality of systems with presumed causes of failures, and

wherein the one or more processors are configured to:
receive designation of a system from a client;
create an image showing a determination result on a failure occurring in the system based on history of information generated in the system and the presumed failure cause management information; and
send the created image to the client.

7. The computer system according to claim 1 ,
wherein the one or more storage devices store guidance management information specifying guidance messages for individual combinations of a system to be monitored and a category of permission defined in the permission management information, and
wherein the one or more processors are configured to:
receive designation of a second system from a client;
select a guidance message from the guidance management information based on a category of permission assigned to information generated in the second system, a network system the client belongs to, and a network system the second system belongs to; and
send the selected guidance message to the client.

8. The computer system according to claim 1 , wherein categories of permission included in the permission management information include unconditional permission, conditional permission, and prohibition.

9. A computer system,
configured to manage a plurality of systems to be monitored that belong to a plurality of networks and a plurality of monitoring/analysis servers that belong to the plurality of networks,
the plurality of monitoring/analysis servers being configured to monitor or analyze the plurality of systems, and
the computer system comprising:
one or more storage devices; and
one or more processors that operate in accordance with a program stored in the one or more storage devices,
wherein the one or more storage devices store permission management information specifying relations between combinations of an information source and an information type and whether sending information from the information source to an external network system is permitted or prohibited, and
wherein the one or more processors are configured to:
receive an information transmission request specifying an information type of first information from a first system of an information source;
determine whether sending the first information to outside a network system the first system belongs to is permitted with reference to the permission management information; and
select a monitoring/analysis server to receive the first information from the plurality of monitoring/analysis servers based on the determination; and

wherein the one or more storage devices store:
information recipient management information associating each of the plurality of systems to be monitored with a monitoring/analysis server of a potential recipient of information on the system; and
expected threshold exceedance pattern management information including patterns each composed of a plurality of conditional elements under which usage of a computer resource of a monitoring/analysis server is predicted to exceed a threshold,
wherein the plurality of conditional elements include a condition on usage of a computer resource of a monitoring/analysis server, and
wherein the one or more processors are configured to:
select a monitoring/analysis server as a primary potential recipient of information generated in the first system with reference to the information recipient management table; and
select another monitoring/analysis server as another potential recipient from a

Assignees

• Hitachi Ltd

Inventors

• Nishihara Shin
• Morimura Tomohiro

Classifications

• H04L43/16 Primary

  Threshold monitoring · CPC title

• H04L67/1004

  Server selection for load balancing · CPC title

• H04L63/10 Primary

  for controlling access to devices or network resources · CPC title

• H04L67/1001

  for accessing one among a plurality of replicated servers · CPC title

• H04L63/20

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title