Patent US6301613B1 successfully refreshed from Google Patents.
US6301613B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
Verifying that a network management policy used by a computer system can be satisfied and is feasible for use
Assignee: Cisco Technology Inc
•
Filing: 1998-12-03
•
Granted: 2001-10-09
•
Expires: 2018-12-03
Abstract
Abstract A method and apparatus are provided for verifying policies that govern a policy-based system. The method and apparatus may be implemented as a policy verifier that acts upon one or more policies. Each policy comprises a condition and a consequent. The policy verifier acquires configuration information about the system under management, thereby acquiring an understanding of the system. The policy verifier determines whether all the policies can be satisfied by the system, and if not, reports problems or errors in the policies that cause the policies to be non-satisfiable. The policy verifier determines whether all the policies are feasible for the system, and if not, reports problems or errors that cause the policies to be non-feasible. The policy verifier also verifies that a configuration required by a particular policy consequent can be actually carried out by the managed system. In one embodiment, the policy verifier operates on network management policies, of a policy-based network management system. As a result, the invention improves the accuracy and safety of policies prepared for a network that previously did not use policy-based management.
Inventors
- 👤 John K. Ahlstrom
- 👤 Stephen I. Schleimer
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-02 17:40
CPC Classifications
H; H04; H04L; H04L41/00; H04L41/08; H04L41/0866; H04L41/0873; H04L41/085; H04L41/0853; H04L41/0893; H04L41/0894; H04L63/00; H04L63/10; H04L63/102; H04L63/20; H04L41/12
Claims Analysis
Total Claims: 22
Claim 1
Independent Claim
104 words
A method of verifying a policy used by a management system that manages a computer system, comprising the computer-implemented steps of: receiving configuration information that identifies one or more devices in the computer system and one or more characteristics of each of the devices; verifying that the computer system can satisfy the policy, based on the configuration information; verifying that the policy is feasible for use with the computer system, based on the configuration information; verifying that conditions and consequent actions of the policy may be applied to the computer system, based on the configuration information; and applying the policy to the computer system.
Claim 2
Independent Claim
104 words
A method of verifying a policy used by a management system that manages a computer system, comprising the computer-implemented steps of: receiving configuration information that identifies one or more devices in the computer system and one or more characteristics of each of the devices; verifying that the computer system can satisfy the policy, based on the configuration information; verifying that the policy is feasible for use with the computer system, based on the configuration information; verifying that conditions and consequent actions of the policy may be applied to the computer system, based on the configuration information; and applying the policy to the computer system.
Claim 3
Independent Claim
122 words
A method of a verifying a policy used by a management system that manages a network, comprising the steps of: (A) receiving information identifying a configuration of a network under management and for converting the configuration information into a standard format; (B) receiving information defining the policy, the policy comprising a condition and a consequent to be applied to the network when the condition is true; (C) comparing the policy with the configuration information to determine whether the network can satisfy the condition and the consequent of the policy; (D) comparing the policy with the configuration information to determine whether the policy is feasible when applied to the network; and (E) generating information that identifies whether the policy is satisfiable and feasible.
Claim 4
Independent Claim
122 words
A method of a verifying a policy used by a management system that manages a network, comprising the steps of: (A) receiving information identifying a configuration of a network under management and for converting the configuration information into a standard format; (B) receiving information defining the policy, the policy comprising a condition and a consequent to be applied to the network when the condition is true; (C) comparing the policy with the configuration information to determine whether the network can satisfy the condition and the consequent of the policy; (D) comparing the policy with the configuration information to determine whether the policy is feasible when applied to the network; and (E) generating information that identifies whether the policy is satisfiable and feasible.
Claim 5
Dependent Claim
30 words
The method recited in claim 2 , wherein step (C) further comprises the steps of reporting whether, and if not why not, the policy can be applied to the network.
Claim 6
Dependent Claim
31 words
The method recited in claim 2 , wherein step (D) further comprises the steps of reporting whether, and if not why not, the policy is unfeasible as applied to the network.
Claim 7
Dependent Claim
34 words
The method recited in claim 2 , wherein step (E) further comprises the steps of comparing requirements, constraints and configurations specified by policies with the actual configurations of equipment or services of the network.
Claim 8
Dependent Claim
154 words
A computer-readable medium carrying one or more sequences of instructions for verifying a policy used by a management system that manages a network, wherein execution of the one or more sequences of instructions by one or more processors causes the one or more processors to perform the steps of: (A) receiving information identifying a configuration of a network under management and for converting the configuration information into a standard format; (B) receiving information defining at least one policy, comprising a condition and a consequent to be applied to the network when the condition is true; (C) comparing the policy with the configuration information to determine whether the network can satisfy the condition and the consequent of the policy; (D) comparing the policy with the configuration information to determine whether the policy is feasible when applied to the network; and (E) informing the network or a user thereof whether the policy is satisfiable and feasible.
Claim 9
Dependent Claim
154 words
A computer-readable medium carrying one or more sequences of instructions for verifying a policy used by a management system that manages a network, wherein execution of the one or more sequences of instructions by one or more processors causes the one or more processors to perform the steps of: (A) receiving information identifying a configuration of a network under management and for converting the configuration information into a standard format; (B) receiving information defining at least one policy, comprising a condition and a consequent to be applied to the network when the condition is true; (C) comparing the policy with the configuration information to determine whether the network can satisfy the condition and the consequent of the policy; (D) comparing the policy with the configuration information to determine whether the policy is feasible when applied to the network; and (E) informing the network or a user thereof whether the policy is satisfiable and feasible.
Claim 10
Dependent Claim
31 words
The computer-readable medium recited in claim 6 , wherein step (C) further comprises the steps of reporting whether, and if not why not, the policy can be applied to the network.
Claim 11
Dependent Claim
32 words
The computer-readable medium recited in claim 6 , wherein step (D) further comprises the steps of reporting whether, and if not why not, the policy is unfeasible as applied to the network.
Claim 12
Dependent Claim
35 words
The computer-readable medium recited in claim 6 , wherein step (E) further comprises the steps of comparing requirements, constraints and configurations specified by policies with the actual configurations of equipment or services of the network.
Claim 13
Dependent Claim
118 words
A network management policy verification apparatus, comprising: first means for reading information identifying a configuration of a network under management and for converting the configuration information into a standard format; information defining at least one policy, comprising a condition and a consequent to be applied to the network when the condition is true; second means for comparing the policy with the configuration information to determine whether the network can satisfy the condition and the consequent of the policy; third means for comparing the policy with the configuration information to determine whether the policy is feasible when applied to the network; and fourth means for informing the network or a user thereof whether the policy is satisfiable and feasible.
Claim 14
Dependent Claim
118 words
A network management policy verification apparatus, comprising: first means for reading information identifying a configuration of a network under management and for converting the configuration information into a standard format; information defining at least one policy, comprising a condition and a consequent to be applied to the network when the condition is true; second means for comparing the policy with the configuration information to determine whether the network can satisfy the condition and the consequent of the policy; third means for comparing the policy with the configuration information to determine whether the policy is feasible when applied to the network; and fourth means for informing the network or a user thereof whether the policy is satisfiable and feasible.
Claim 15
Dependent Claim
30 words
The apparatus recited in claim 10 , wherein the second means further comprises means for reporting whether, and if not why not, the policy can be applied to the network.
Claim 16
Dependent Claim
31 words
The apparatus recited in claim 10 , wherein the third means further comprises means for reporting whether, and if not why not, the policy is unfeasible as applied to the network.
Claim 17
Dependent Claim
35 words
The apparatus recited in claim 10 , wherein the fourth means further comprises means to compare the requirements, constraints and configurations specified by policies with the actual configurations of equipment or services of the network.
Claim 18
Independent Claim
165 words
An apparatus for verifying a policy used by a management system that manages a network, comprising: a network interface; a processor coupled to the network interface and receiving information from the network interface; a computer-readable medium accessible by the processor and comprising one or more sequences of instructions which, when executed by the processor, cause the processor to carry out the steps of: (A) receiving information identifying a configuration of a network under management and for converting the configuration information into a standard format; (B) receiving information defining the policy, the policy comprising a condition and a consequent to be applied to the network when the condition is true; (C) comparing the policy with the configuration information to determine whether the network can satisfy the condition and the consequent of the policy; (D) comparing the policy with the configuration information to determine whether the policy is feasible when applied to the network; and (E) generating information that identifies whether the policy is satisfiable and feasible.
Claim 19
Independent Claim
165 words
An apparatus for verifying a policy used by a management system that manages a network, comprising: a network interface; a processor coupled to the network interface and receiving information from the network interface; a computer-readable medium accessible by the processor and comprising one or more sequences of instructions which, when executed by the processor, cause the processor to carry out the steps of: (A) receiving information identifying a configuration of a network under management and for converting the configuration information into a standard format; (B) receiving information defining the policy, the policy comprising a condition and a consequent to be applied to the network when the condition is true; (C) comparing the policy with the configuration information to determine whether the network can satisfy the condition and the consequent of the policy; (D) comparing the policy with the configuration information to determine whether the policy is feasible when applied to the network; and (E) generating information that identifies whether the policy is satisfiable and feasible.
Claim 20
Dependent Claim
30 words
The apparatus recited in claim 14 , wherein step (C) further comprises the steps of reporting whether, and if not why not, the policy can be applied to the network.
Claim 21
Dependent Claim
31 words
The apparatus recited in claim 14 , wherein step (D) further comprises the steps of reporting whether, and if not why not, the policy is unfeasible as applied to the network.
Claim 22
Dependent Claim
34 words
The apparatus recited in claim 14 , wherein step (E) further comprises the steps of comparing requirements, constraints and configurations specified by policies with the actual configurations of equipment or services of the network.
References Cited (Backward Citations)
US5557747A
Cited
US6125390A
Cited
US5832503A
Cited
US5872928A
Cited
US5889953A
Cited
US5797128A
Cited
US5950195A
Cited
US5968176A
Cited
US6064656A
Cited
US6167445A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2004-10-08 | 2005-04-09 | 2005-10-09 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2008-10-08 | 2009-04-09 | 2009-10-09 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2012-10-08 | 2013-04-09 | 2013-10-09 | $7700.00 | Window Closed / Lapsed |