US5748098A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Event correlation
Assignee: British Telecommunications PLC
•
Filing: 1994-02-22
•
Granted: 1998-05-05
•
Expires: 2014-02-22
Abstract
Abstract Simultaneous events reported to an equipment management system are compared with historical data in order to establish whether there is a relationship between the events. Historical data is used to determined the statistical probability of the events occurring independently simultaneously. If this probability is below a predetermined threshold this will suggest that the events are not independent, but are relaxed. Such relationships are alerted to an operator, for example by highlighting or grouping on a screen display, assisting the operator in identification of related events, without the need for prior knowledge of the relationships in the system. The events may be alarms generated by faults in a network. The identification of related faults at different points in the network assists identification of their common cause. The historical database may be updated by further event occurrences as they are reported to the equipment management system, thereby enlarging the database to make the results more statistically accurate. Events may be reported to the system automatically or by human agency. To allow for systematic delays in event reporting, alarms from one source may be compared with alarms from another source occurring a fixed time later or earlier.
Inventors
- 👤 Andrew Grace
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-31 17:27
CPC Classifications
H; H04; H04Q; H04Q3/00; H04Q3/0016; H04Q3/0062; H04Q3/0075; H04L; H04L41/00; H04L41/06; H04L41/0631; H04L41/14; H04L41/142; H04M; H04M3/00; H04M3/08; H04M3/22; H04M3/24; H04M3/247; H04L43/00; H04L43/16; H04Q2213/00; H04Q2213/13521
Claims Analysis
Total Claims: 25
Claim 1
Independent Claim
149 words
A method for automatically processing alarm signals in a network management system for a telecommunications network, said method comprising: generating alarm signals in the telecommunications network as a result of alarm conditions occurring in a plurality of components of the telecommunications network, transmitting alarm signals from the telecommunications network to the network management system, storing historical data concerning the times at which alarm conditions occur in the telecommunications network during a reference time period in a store forming part of the network management system, identifying alarm conditions occurring in the telecommunications network within one of a number of predetermined temporal windows, correlating the identified alarm conditions by analysing the historical data to determine the statistical probabilities of pairs of the identified alarm conditions occurring by chance within the same temporal window, and displaying at least some of the statistical probabilities on a display device of the network management system.
Claim 2
Independent Claim
149 words
A method for automatically processing alarm signals in a network management system for a telecommunications network, said method comprising: generating alarm signals in the telecommunications network as a result of alarm conditions occurring in a plurality of components of the telecommunications network, transmitting alarm signals from the telecommunications network to the network management system, storing historical data concerning the times at which alarm conditions occur in the telecommunications network during a reference time period in a store forming part of the network management system, identifying alarm conditions occurring in the telecommunications network within one of a number of predetermined temporal windows, correlating the identified alarm conditions by analysing the historical data to determine the statistical probabilities of pairs of the identified alarm conditions occurring by chance within the same temporal window, and displaying at least some of the statistical probabilities on a display device of the network management system.
Claim 3
Dependent Claim
45 words
A method as in claim 1 further comprising: selecting one of the identified alarm conditions, and for each of the remaining identified alarm conditions, determining the statistical probability of that alarm condition and the selected alarm condition occurring by chance in the same temporal window.
Claim 4
Dependent Claim
17 words
A method as in claim 2 further comprising: ranking the statistical probabilities in ascending order of magnitude.
Claim 5
Dependent Claim
19 words
A method as in claim 3 further comprising: identifying the statistical probabilities which are below a predetermined threshold value.
Claim 6
Dependent Claim
23 words
A method as in claim 4 further comprising: highlighting on the display device said statistical probabilities which are below the predetermined threshold value.
Claim 7
Dependent Claim
101 words
A method as in claim 1 wherein: the reference time period is divided into a plurality of temporal windows of equal duration and the statistical probability of a pair of alarm conditions AR m and AR n occurring by chance in the same temporal window is determined by the following expression: ##EQU4## where: k number of temporal windows in which AR m occurs r probability of AR m being active in one of the temporal windows p=number of temporal windows in which events AR m and AR n both occur; when testing the dependency of AR n upon AR m .
Claim 8
Dependent Claim
38 words
A method as in claim 1 wherein: the step of storing historical data relating to the times at which alarm conditions occur is repeated periodically by adding data relating to alarm conditions occurring within the predetermined temporal windows.
Claim 9
Dependent Claim
124 words
A network management system for automatically processing alarm signals, said system comprising: means for generating alarm signals generated by monitors as a result of alarm conditions occurring in a plurality of components of a telecommunications network, receiving means for receiving said alarm signals, storing means for storing historical data including a representation of the times at which alarm conditions occur in the telecommunications network during a reference time period, correlating means for correlating alarm conditions identified as occurring within a predetermined temporal window, said correlating means including means for determining the statistical probabilities of pairs of the identified alarm conditions occurring by chance within the some temporal window, and means for displaying at least some of the statistical probabilities determined by the correlating means.
Claim 10
Dependent Claim
124 words
A network management system for automatically processing alarm signals, said system comprising: means for generating alarm signals generated by monitors as a result of alarm conditions occurring in a plurality of components of a telecommunications network, receiving means for receiving said alarm signals, storing means for storing historical data including a representation of the times at which alarm conditions occur in the telecommunications network during a reference time period, correlating means for correlating alarm conditions identified as occurring within a predetermined temporal window, said correlating means including means for determining the statistical probabilities of pairs of the identified alarm conditions occurring by chance within the some temporal window, and means for displaying at least some of the statistical probabilities determined by the correlating means.
Claim 11
Dependent Claim
60 words
A network management system as in claim 8 wherein the network management system includes: means for permitting an operator of the system to select one of the identified alarm conditions, said correlating means including means for determining the statistical probability of each of the remaining alarm conditions occurring by chance in the same temporal window as the selected alarm condition.
Claim 12
Dependent Claim
24 words
A network management system as in claim 9 wherein: the correlating means includes means for ranking the statistical probabilities in ascending order of magnitude.
Claim 13
Dependent Claim
106 words
A network management system as in claim 8 wherein: the reference time period is divided into a plurality of temporal windows of equal duration, and the correlating means includes means for determining the statistical probability of a pair of alarm conditions AR m and AR n occurring by chance in the some temporal window by the following expression: ##EQU5## where: k=number of temporal windows in which AR m occurs r=probability of AR m being active in one of the temporal windows p=number of temporal windows in which events AR m and AR n both occur when testing the dependency of AR n upon AR m .
Claim 14
Dependent Claim
28 words
A network management system as in claim 8 wherein the network management system includes means for periodically supplying data held in the receiving means to the storing means.
Claim 15
Dependent Claim
26 words
A network management system as in claim 8 wherein the network management system includes means for manually supplying data on alarm conditions to the receiving means.
Claim 16
Dependent Claim
141 words
A self-learning adaptive network management system comprising: network condition detectors distributed within the network and disposed to generate respectively corresponding alarm signals in response to detected abnormalities; an alarm monitoring means connected to receive said alarm signals and to assign the occurrence of each to an associated time; a historical data storage means connected to receive and store historical data representing the identity of alarm signals historically received in the past from the network; correlation means connected to process said stored historical data and generate statistical data therefrom representing the probability of a predetermined plurality of predetermined alarm signals independently occurring within the same time window by chance; and means for using said statistical data to identify and display concurrently received new incoming alarm signals that are most probably not independent occurrences but, instead, are most probably inter-dependent related alarm conditions.
Claim 17
Dependent Claim
141 words
A self-learning adaptive network management system comprising: network condition detectors distributed within the network and disposed to generate respectively corresponding alarm signals in response to detected abnormalities; an alarm monitoring means connected to receive said alarm signals and to assign the occurrence of each to an associated time; a historical data storage means connected to receive and store historical data representing the identity of alarm signals historically received in the past from the network; correlation means connected to process said stored historical data and generate statistical data therefrom representing the probability of a predetermined plurality of predetermined alarm signals independently occurring within the same time window by chance; and means for using said statistical data to identify and display concurrently received new incoming alarm signals that are most probably not independent occurrences but, instead, are most probably inter-dependent related alarm conditions.
Claim 18
Dependent Claim
38 words
A self-learning adaptive network management system as in claim 14 wherein new incoming alarm signals within a common time window are displayed with a visual indication of the relative probability that such alarms are inter-dependent related alarm conditions.
Claim 19
Dependent Claim
33 words
A self-learning adaptive network management system as in claim 15 wherein said new incoming alarm signals are displayed in a sequence related to the relative probability of such alarms being inter-dependent and related.
Claim 20
Dependent Claim
40 words
A self-learning adaptive network management system as in claim 15 wherein a plurality of new incoming alarm signals are visually distinguished on a display if they have a relative probability of being independent occurrences that is below a predetermined threshold.
Claim 21
Independent Claim
112 words
A method for self-learning adaptive network management, said method comprising: generating alarm signals in response to detected abnormalities within the network; receiving said alarm signals and assigning the occurrence of each to an associated time; storing historical data representing the identity of alarm signals historically received in the past from the network; processing said stored historical data to generate statistical data representing the probability of a predetermined plurality of predetermined alarm signals independently occurring within the same time window by chance; and using said statistical data to identify and display concurrently received new incoming alarm signals that are most probably not independent occurrences but, instead, are most probably inter-dependent related alarm conditions.
Claim 22
Independent Claim
112 words
A method for self-learning adaptive network management, said method comprising: generating alarm signals in response to detected abnormalities within the network; receiving said alarm signals and assigning the occurrence of each to an associated time; storing historical data representing the identity of alarm signals historically received in the past from the network; processing said stored historical data to generate statistical data representing the probability of a predetermined plurality of predetermined alarm signals independently occurring within the same time window by chance; and using said statistical data to identify and display concurrently received new incoming alarm signals that are most probably not independent occurrences but, instead, are most probably inter-dependent related alarm conditions.
Claim 23
Dependent Claim
34 words
A method as in claim 18 wherein new incoming alarm signals within a common time window are displayed with a visual indication of the relative probability that such alarms are inter-dependent related alarm conditions.
Claim 24
Dependent Claim
29 words
A method as in claim 19 wherein said new incoming alarm signals are displayed in a sequence related to the relative probability of such alarms being inter-dependent and related.
Claim 25
Dependent Claim
36 words
A method as in claim 19 wherein a plurality of new incoming alarm signals are visually distinguished on a display if they have a relative probability of being independent occurrences that is below a predetermined threshold.
References Cited (Backward Citations)
US4550278A
Cited
US5265103A
Cited
US5528759A
Cited
US5155480A
Cited
US5309448A
Cited
US5334970A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2001-05-04 | 2001-11-03 | 2002-05-05 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2005-05-04 | 2005-11-03 | 2006-05-05 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2009-05-04 | 2009-11-03 | 2010-05-05 | $7700.00 | Window Closed / Lapsed |