Network management service system, control apparatus, method, and program

Patent metadata

Field	Value
Publication number	US-9544194-B2
Application number	US-201214343711-A
Country	US
Kind code	B2
Filing date	Sep 7, 2012
Priority date	Sep 9, 2011
Publication date	Jan 10, 2017
Grant date	Jan 10, 2017

Abstract

A network management service system includes a policy management apparatus that receives updating of a communication policy from an user and manages the communication policy for each user; a control apparatus that generates a packet handling operation of a packet associated with the communication policy of the user, in response to a request from the user, and sets the generated packet handling operation in a forwarding node(s); and the forwarding node(s) that processes the packet using the packet handling operation generated by the control apparatus.

First claim

What is claimed is:

1. A network management service system, including:
a policy management apparatus that receives updating of a communication policy from a user and manages the communication policy for each user;
a control apparatus that generates a packet handling operation of a packet associated with the communication policy of the user, in response to a request from the user, and sets the generated packet handling operation in a forwarding node(s);
the forwarding node(s) that processes the packet, using the packet handling operation generated by the control apparatus; and
in a same region as a region where the forwarding node(s) physically exists:
a local control apparatus that is configured a same process as the control apparatus; and
a local policy management apparatus that is configured to execute a same process as the policy management apparatus,

wherein, when a fault occurs in one or both of the control apparatus and the policy management apparatus, management of the communication policy for each user and process of generating the packet handling operation in accordance with the communication policy are requested to the local control apparatus and the local policy management apparatus.

2. The network management service system according to claim 1 , wherein the control apparatus receives a request for generating the packet handling operation from the user through Internet, generates the packet handling operation of the packet associated with the communication policy of the user, and sets the generated packet handling operation in the forwarding node(s).

3. The network management service system according to claim 2 , wherein the control apparatus generates the communication policy of each user, using information on a role given to each user and an authorization of access to a resource for each role, and generates the packet handling operation of the packet associated with the communication policy.

4. The network management service system according to claim 1 , wherein the control apparatus generates the communication policy of each user, using information on a role given to each user and an authorization of access to a resource for each role, and generates the packet handling operation of the packet associated with the communication policy.

5. The network management system according to claim 1 , wherein the local control apparatus generates the packet handling operation of the packet associated with the communication policy of the user, in response to the request from the user, sets the generated packet handling operation in the forwarding node(s), and transmits the packet handling operation to the control apparatus to synchronize the packet handling operation between the control apparatus and the local control apparatus.

6. The network management service system according to claim 1 , wherein the local policy management apparatus transmits the communication policy for each user to the policy management apparatus to synchronize the communication policy between the policy management apparatus and the local policy management apparatus.

7. The network management service system according to claim 1 , wherein, when an abnormality occurs in one or both of the local control apparatus and the local policy management apparatus, the management of the communication policy for each user and the process of generating the packet handling operation in accordance with the communication policy are requested to the control apparatus and the policy management apparatus.

8. The network management service system according to claim 1 , further comprising:
a resource packet handling operation generation unit that generates a packet handling operation indicating a right of access to the resource(s), using the communication policy for each user held by the policy management apparatus, and causes the resource(s) to perform access control in accordance with the packet handling operation.

9. The network management service system according to claim 1 , wherein the policy management apparatus and the control apparatus are disposed in a first region,
wherein the forwarding node(s) is disposed in a second region different from the first region, and
wherein the policy management apparatus and an authentication apparatus that performs user authentication with the user terminal are connected through the Internet, and the control apparatus and the forwarding node(s) are connected through a wide area network.

10. A network management service system, including:
a policy management apparatus that receives updating of a communication policy from a user and manages the communication policy for each user;
a control apparatus that generates a packet handling operation of a packet associated with the communication policy of the user, in response to a request from the user, and sets the generated packet handling operation in a forwarding node(s);
the forwarding node(s) that processes the packet, using the packet handling operation generated by the control apparatus; and
a monitoring apparatus that monitors an operational status of the forwarding node(s) and a network configuration of the forwarding node(s),
wherein, when the monitoring apparatus detects an abnormality of the forwarding node(s), the monitoring apparatus requests the policy management apparatus to check the communication policy immediately after occurrence of the abnormality again,
wherein the policy management apparatus checks content of the communication policy based on the request, and when the content of the communication policy immediately after the occurrence of the abnormality of the forwarding node(s) differs from content of the communication policy immediately before the occurrence of the abnormality of the forwarding node(s), the policy management apparatus transmits to the control apparatus the communication policy including a portion of the communication policy that is different from the content of the communication policy immediately before the occurrence of the abnormality of the forwarding node(s), and
wherein the control apparatus receives the communication policy from the policy management apparatus, generates a packet handling operation based on the communication policy, and sets the packet handling operation in the forwarding node(s).

11. The network management service system according to claim 10 , further comprising in a same region as a region where the control apparatus and the policy management apparatus physically exist:
an auxiliary forwarding node(s) that receives the packet handling operation generated by the control apparatus and then processes the packet; and
an auxiliary resource(s) connected to the forwarding node(s).

12. The network management service system according to claim 11 , wherein, when an abnormality occurs in the forwarding node and the resource, the control apparatus sets in the auxiliary forwarding node(s) a packet handling operation for implementing communication to the auxiliary resource(s), and permits communication from a user terminal to the auxiliary resource(s).

13. The network management service system according to claim 10 , wherein the monitoring apparatus further notifies the occurrence of an abnormality of the forwarding node(s) to the control apparatus when the monitoring apparatus detects the abnormality of the forwarding node(s), and
wherein the control apparatus checks information on the network configuration of the forwarding node(s) held by the control apparatus again, based on the notification from the monitoring apparatus, and dynamically updates the held network configuration information.

14. A control apparatus connected to a pol

Assignees

• Sonoda Kentaro
• Shimonishi Hideyuki
• Koide Toshio
• Hatano Yoichi
• Nec Corp

Inventors

• Sonoda Kentaro
• Shimonishi Hideyuki
• Koide Toshio
• Hatano Yoichi

Classifications

• H04L41/0893 Primary

  Assignment of logical groups to network elements · CPC title

• H04L41/5064 Primary

  Customer relationship management · CPC title

• H04L41/0894

  Policy-based network configuration management · CPC title