KR20090001293A - Apparatus and method for managing policy of policy-based management framework - Google Patents

Abstract

A policy management method for generating policy data efficiently in a policy-based management framework and a device thereof are provided to reduce troublesomeness for repeatedly converting the policy data into the same type as PIB(Policy Information Base) when a policy server transfers the transfer data to a policy client. A policy repository(300) stores the same policy data as the PIB to be transmitted to a linked policy client. A policy managing module(110) converts the generated policy data into the same form as the PIB and stores the converted policy data in the policy storage. The policy managing module comprises an event receiver(120) receiving a policy application event from a policy manager, a policy generator(130) generating the policy data corresponding to the policy application event, and a policy converter(140) converting the policy data into the same type as the PIB and storing the converted policy data to the policy repository.

Description

Apparatus and Method for Managing Policy of Policy-Based Management Framework}

1 is a block diagram showing a general policy-based management framework,

2 is a block diagram illustrating a policy server in a general policy based management framework;

3 is a block diagram illustrating a policy server in a policy based management framework according to an embodiment of the present invention;

4 is a flowchart illustrating a configuration operation of a policy server in a policy based management framework according to an embodiment of the present invention; and

5 is a flowchart illustrating a method for delivering a policy to a policy client by a policy server in a policy-based management framework according to an exemplary embodiment of the present invention.

* Description of the symbols for the main parts of the drawings *

100: Policy Server 110: Policy Management Module

120: event receiving unit 130: policy generation unit

140: policy conversion unit 150: policy decision module

200: Policy Client 300: Policy Store

The present invention relates to a method and apparatus for managing a policy in a policy-based management framework, and more particularly to a policy server in the policy-based management framework to efficiently generate policy data in the same form as a policy information base (PIB). .

Due to the recent increase and complexity of the network, the conventional network management technology has revealed many problems in the utility and expandability. In contrast, the Policy Based Management Framework structure is emerging as a new paradigm for network operation and management.

Such a policy-based management framework provides services such as quality of service (QoS) and security based on policy, and is independent and interoperable to manage heterogeneous systems. It is proposed to efficiently manage services by defining policies and managing and distributing the policies on a role basis. Models such as IETF's Policy Core Information Model (PCIM), PCIMe and DMTF's Common Information Model (CIM) Much research is underway.

1 is a block diagram showing a general policy-based management framework.

As shown in FIG. 1, the general policy based management framework includes a plurality of policy servers 11 to 13 and a plurality of policy clients 21 to 28. The policy-based management framework is such that each network 30, 40, 50 is formed around each policy server 11-13 and policy clients 21-28 connected to each policy server 11-13. do.

Here, the policy servers 11 to 13 are network servers that deal with policy matters such as voice prioritization of traffic, mass data, video, video conferencing, or network traffic movement control. Each policy is determined by applying a policy to the network. Perform the function provided to the clients 21 to 28.

The policy clients 21 to 28 are network clients that apply and execute the policies determined by the policy servers 11 to 13, and routers or third layer switches correspond to them.

2 is a block diagram illustrating a policy server in a general policy based management framework. As shown in FIG. 2, the policy server 10 that determines and applies a policy to be applied to a network in the policy-based management framework includes a policy management module 1, a policy decision module 2, and a policy store 3. It is configured to include.

The policy server 10 having such a configuration generates policy data corresponding to the policy application event through the policy management module 1 and stores the policy data in the policy store 3 when the policy application event occurs from the policy manager. After determining the policy client 20 to deliver the policy data stored in the policy store 3 through the policy decision module 2, the policy data is delivered to the determined policy client 20.

Here, the policy server 10 transmits the policy data to the policy client 20 through the policy decision module 2, whereby the policy decision module 2 is pre-scheduled policy data obtained from the policy store 3. After converting to the same form as the PIB (Policy Information Base), it is delivered to the policy client 20 using the Common Open Policy Service (COPS) protocol.

Therefore, whenever the policy server 10 of the current policy-based management framework delivers the policy data to the policy client 20, the policy data retrieved and parsed from the policy store 3 must be converted into the same form as the previously promised PIB. Have a hassle. In particular, the policy server 10 has a problem of retrieving and parsing the policy data to be delivered from the policy store 3 every time even if the policy data to be delivered to the connected policy clients 20 are the same, and converting the same into the PIB.

For example, the source port number is stored in the policy store as a string as "SrcPortRange: 80..8080", and the source port number in the PIB is an integer as "SrcPortStart = 80" and "SrcPortEnd = 8080". If it has a format, the Policy Decision Module of the Policy Server parses the start number of the source port and the end number of the source port from the value of "SrcPortRange" and converts the string form into an integer form to generate a PIB for the source port number. Whenever you pass the policy data, you have to do it repeatedly.

Accordingly, the policy server of the policy-based management framework requires a policy that can reduce the trouble of repeatedly converting the policy data into the same form as the PIB in delivering the policy data to the policy client.

An object of the present invention for solving the above problems is to reduce the hassle of repeatedly converting the policy data to the same form as the PIB in the policy server delivers the policy data to the policy client in the policy-based management framework The present invention provides a method and apparatus for managing a policy in a policy-based management framework.

Policy management apparatus in the policy-based management framework according to an embodiment of the present invention for achieving the above object, and stores the policy data of the same type as the PIB (Policy Information Base) that can be transmitted to the linked policy client and Managing policy stores; And a policy management module for generating policy data corresponding to the policy application event according to a policy application event provided from a policy manager, converting the generated policy data into the same form as the PIB, and storing the policy data in the policy repository.

The policy management module may include an event receiver configured to receive a policy application event provided from the policy manager; A policy generator configured to generate policy data corresponding to the policy application event; And a policy conversion unit converting the policy data generated from the policy generation unit into the same form as the PIB and storing the policy data in a policy store.

Preferably, the policy management apparatus in the policy-based management framework, when the application of the stored policy is required for the policy client, determines a policy client to deliver the policy, and the data of the policy in the same form as the PIB And a policy determination module obtained from a policy repository and delivered to the policy client.

The policy determination module, when detecting a connection of a new policy client, determines policies to be provided to the policy client, and acquires data of the determined policy from the policy repository in the same form as a PIB and delivers the same to the policy client. It is characterized by.

Policy management method in a policy-based management framework according to another embodiment of the present invention for achieving the above object, when a policy application event is provided from a policy manager, generates policy data corresponding to the policy application event Doing; Converting the generated policy data into policy data in the form of a policy information base (PIB) that can be transmitted to a linked policy client; Storing the converted policy data in a policy store.

Advantageously, the policy management method in the policy based management framework comprises: determining a policy client to which the policy is to be delivered when the stored policy is to be applied to the policy client; Obtaining data of the policy to be applied from the policy repository in the same form as a PIB; And delivering the obtained policy data to the policy client.

Advantageously, the policy management method in the policy based management framework comprises: determining policies to be provided to the policy client when a new policy client's connection is detected; Obtaining data of the determined policy from the policy repository in the same form as a PIB; And delivering the obtained policy data to the policy client.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. However, in describing in detail the operating principle of the preferred embodiment of the present invention, if it is determined that the detailed description of the related known function or configuration may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted.

In addition, the same reference numerals are used for parts having similar functions and functions throughout the drawings.

3 is a block diagram illustrating a policy server in a policy based management framework according to an exemplary embodiment of the present invention. As shown in FIG. 3, in the policy-based management framework of the present invention, the policy server 100 includes an event receiver 120, a policy generator 130, and a policy converter 140. And the policy determination module 150.

In the policy server 100, the policy management module 110 generates or changes policy data corresponding to a policy application event when a policy application event is provided by a policy manager who wants to create, modify, or delete an arbitrary policy. It converts the generated or changed policy data into the same form as the PIB and stores it in the policy store 300.

Accordingly, the event receiver 120 of the policy management module 110 receives a policy application event provided from a policy manager, and the policy generator 130 generates or changes policy data corresponding to the policy application event. Perform. That is, the policy generation unit 130 generates new policy data when the policy application event is an event for generating a new policy, and when the policy application event is an event for modifying or deleting an existing policy. The policy data is retrieved and acquired from the policy store 300 to modify or delete the policy data. The policy conversion unit 140 of the policy management module 110 converts the policy data generated or changed by the policy generation unit 130 into the same form as the PIB and stores the policy data in the policy store 300. Therefore, the policy store 300 stores and manages policy data of the same type as the PIB.

Meanwhile, the policy determination module 150 of the policy server 100 determines the policy clients 200 to deliver a policy, obtains the policy data to be delivered from the policy store 300, and delivers the policy data to the forwarded and determined policy client 200. It performs the function. Here, the policy determination module 150 transmits the policy data to the policy client 200 by using a common open policy service (COPS) protocol.

In addition, the policy determination module 150 determines policies to be provided to the corresponding policy client 200 for the connected policy client 200, obtains the determined policy data from the policy store 300, and obtains the determined policy data. It performs a function of delivering to the policy client 200.

Next, the configuration operation of the policy server 100 having such a configuration will be described in detail with reference to the accompanying drawings.

4 is a flowchart illustrating a configuration operation of a policy server in a policy based management framework according to an exemplary embodiment of the present invention.

As shown in FIG. 4, when the event receiving unit 120 of the policy management module 110 receives the policy application event from the policy manager (S101), the policy server generates the provided policy application event (S101). 130) (S102).

Accordingly, the policy generator 130 generates policy data corresponding to the received policy application event (S103), and transmits the generated policy data to the policy converter 140 (S104). Here, policy data generation refers to creation of a new policy, modification and deletion of an existing policy.

When the policy data is delivered from the policy generator 130, the policy converter 140 converts the corresponding policy data into the same form as the PIB (S105), and converts the policy data having the same form as the converted PIB into the policy store 300. In step S106, the policy data having the same form as the corresponding PIB is stored in the policy store 300 (S107).

When the policy management module 110 wants to apply the policy stored in the policy store 300 to the policy client 200, a policy delivery request including the corresponding policy data information is provided through the policy converter 140. The message is sent to the policy determination module 150 (S108).

When the policy determination module 150 transmits a policy delivery request message from the policy management module 110, the policy determination module 150 determines a policy client 200 to transfer policy data included in the transmitted policy delivery request message (S109), and stores the policy store ( In operation S110, the control server 300 acquires policy data included in the policy delivery message. The policy determination module 150 transmits the policy data obtained from the policy store 300 to the forwarded and determined policy client 200 (S111). Here, the policy determination module 150 transmits the policy data to the policy client 200 using the COPS protocol.

Meanwhile, in accordance with the policy application event provided by the policy manager, the policy server 100 that generates, stores, and provides the policy data of the same type as the PIB to the policy client 200 is newly created through the policy decision module 150. When the connection of the policy client 200 is detected (S121), the policies to be provided to the corresponding policy client 200 are determined through the corresponding policy determination module 150 (S122). Accordingly, when the policies to be provided to the connected policy client 200 are determined, the policy determination module 150 searches the policy store 300 to obtain data of the determined policy (S123). The policy determination module 150 transmits the obtained policy data as it is to the connected policy client 200 (S124). Here, the policy determination module 150 transmits the policy data to the policy client 200 using the COPS protocol.

5 is a flowchart illustrating a method for delivering a policy to a policy client by a policy server in a policy-based management framework according to an exemplary embodiment of the present invention.

As shown in FIG. 5, when the policy server 100 receives a policy application event from the policy manager (S201), the policy server 100 generates policy data corresponding to the provided policy application event (S202). Here, policy data generation collectively refers to creation of a new policy, modification and deletion of an existing policy. The policy server 100 converts the generated policy data into the same form as the PIB (S203), and stores the policy data having the same form as the converted PIB in the policy store 300 (S204).

When it is determined that the application of the policy stored in the policy store 300 is required (S205), the policy server 100 determines a policy client 200 to which the policy is to be delivered (S206).

Next, the policy server 100 searches for policy data of the policy store 300 to generate a PIB (S207), and then delivers the PIB to the determined policy client 200 (S208).

Here, since the policy data of the policy store 300 is already the same type of data as the PIB, the policy server 100 repeatedly parses the policy data of the policy store 300 and converts the same into the same form as the PIB. Without the need, a single search can obtain policy data of the same type as the PIB and deliver it to the policy client 300 as a PIB.

The present invention described above is not limited to the above-described embodiments and the accompanying drawings, and it is common in the art that various substitutions, modifications, and changes can be made without departing from the technical spirit of the present invention. It will be apparent to those skilled in the art.

The policy management method and apparatus in the policy-based management framework according to the present invention as described above, by converting the policy data generated by the policy server each time a policy application event occurs in the policy-based management framework to the same form as the PIB By storing it in the policy store, it is not necessary to repeatedly convert the policy data of the policy store to the policy client in the same form as the PIB, and has an effect of improving the delivery speed of the policy data.

Claims (7)

A policy store for storing and managing policy data in the same form as a PIB (Policy Information Base) that can be transmitted to an associated policy client; And A policy management module for generating policy data corresponding to the policy application event according to a policy application event provided from a policy manager, converting the generated policy data into the same form as the PIB, and storing the policy data in the policy repository; Policy management device in an underlying management framework. The method of claim 1, The policy management module, An event receiver configured to receive a policy application event provided from the policy manager; A policy generator configured to generate policy data corresponding to the policy application event; And And a policy converter for converting the policy data generated from the policy generator into the same form as the PIB and storing the policy data in a policy store. The method of claim 1, A policy decision module for determining a policy client to which the policy is delivered to the policy client, and obtaining data of the policy from the policy repository in the same form as a PIB and delivering it to the policy client. Policy management apparatus in the policy-based management framework, characterized in that further comprising. The method of claim 3, The policy determination module, When the connection of the new policy client is detected, the policy-based policy may include determining policies to be provided to the policy client, and obtaining data of the determined policy from the policy repository in the same form as a PIB and delivering the data to the policy client. Policy management device in the management framework. Generating policy data corresponding to the policy application event when a policy application event is provided from a policy manager; Converting the generated policy data into policy data in the form of a policy information base (PIB) that can be transmitted to a linked policy client; And And storing the converted policy data in a policy store. The method of claim 5, Determining a policy client to forward the policy to if the stored policy is to be applied to the policy client; Obtaining data of the policy to be applied from the policy repository in the same form as a PIB; And The policy management method of the policy-based management framework, characterized in that it further comprises the step of delivering the obtained policy data to the policy client. The method of claim 5, When a connection of a new policy client is detected, determining policies to be provided to the policy client; Obtaining data of the determined policy from the policy repository in the same form as a PIB; And The policy management method of the policy-based management framework, characterized in that it further comprises the step of delivering the obtained policy data to the policy client.

Images