JP2002190800A - Policy management system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a policy input/setting aiding system capable of improving the operability of setting up policy by a network manager and reducing the number of errors at the time of setting up the policy. SOLUTION: The policy management system for managing various kinds of policy for managing and controlling a network is provided with a means for setting up a plurality of policy data corresponding to each of a plurality of management target identification information corresponding to the network and a means for referring to a policy application state data to be updated and stored on the basis of the performance result of a command updated and stored by the setting means and capable of setting up the stored policy data in the network and selecting a suitable command for setting up the policy data in the network.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a policy management system for setting and managing various policies for a communication network management system (NMS) for managing a communication network. The present invention relates to a method for setting a policy for a communication network management system that manages policies.

[0002]

2. Description of the Related Art At present, communication networks use SDH (Sy
nchronous Digital Hierarchy), ATM (Asynchrono)
us Transfer Mode), WDM (Wavelength Division Mu)
lutiplex), IP (Internet Protocol), etc., and its communication network is also an access network, a core network (backbone) network, and an S network.
It is composed of various sub-networks such as DH network, ATM network, WDM network, and IP network.

[0003] In recent years, communication traffic has become diversified from voice, data, fax, still image and moving image.

Conventionally, a public network through which such information passes and which provides a dedicated line to a company has provided a uniform high-reliability and high-quality network service that is satisfied by all users. In accordance with corporate policies, the communication service quality (QoS) desired by individual users
Service), a network service that can specify the quality according to the requirements has been required.

Accordingly, in the network management for promptly responding to the demand for such a network service, the input setting operation such as the quality of the network by the administrator who manages the network is becoming more and more complicated. There is a need for an input support system that is error free and has good operability.

The present invention provides a system that reduces the load on the administrator and supports error-free input operation in the input setting operation of the administrator when providing a network service that meets the needs of individual users. To provide.

FIG. 10 shows a general communication network management configuration diagram.

In FIG. 1, reference numeral 11 denotes a policy management system according to the present invention, reference numeral 3 denotes a communication network management system (NMS), and reference numerals 12 to 14 denote device management systems (IP, ATM, WDMEM) corresponding to each network for controlling a network.
S) and 15 are communication networks composed of various networks.

Conventionally, the communication network 15 has a policy management system, a communication network management system (NMS), and a device management system (IP, ATM, It is generally managed and controlled via WDM EMS).

FIG. 11 shows a configuration of the conventional policy management system 11 shown in FIG.

As shown in FIG. 1, the policy management system includes a display / input unit 1 for an administrator to input various policies, and the input and operation of various policies to set those policies, The system comprises a policy input system 2 and an input terminal 4 for constructing a command for setting a policy.

The policy input system 2 prompts the administrator to input parameters necessary for executing the command for each command provided by the communication network management system (NMS) 3 and the policy setting means 231 to 231 confirm the input.
232.., And data storage means 22 for storing data related thereto, and operation configuration means 241 for constructing a command corresponding to the policy to the communication network management system (NMS) 3.

Communication Network Management System (NMS)
Reference numeral 3 denotes an operation processing unit 311 for performing processing relating to command execution with the policy input system 2.

FIG. 12 shows various table diagrams and a list of commands in the conventional policy management system.

FIG. 12- (1) shows an example of a management object identification information table.

FIG. 12- (2) shows a policy data table, FIG. 12- (3) shows a policy application state table, and FIG. 12- (4) shows a list of operation configuration means commands.

A conventional operation when the administrator sets a policy composed of a plurality of pieces of policy data for each piece of management target identification information will be described with reference to FIGS.

According to the communication service quality QoS policy of the user, the link tg1 in the communication network 15 shown in FIG.
The conventional problems will be clarified by taking an example of an operation of an administrator when canceling the transmission delay time in a state where the transmission delay time is set to 15 Mbps and the transmission delay time is in operation.

In this case, the policy data relating to the transmission band is defined as a policy α, and the policy data relating to the transmission delay time is defined as a policy β.

The administrator inputs necessary parameters in accordance with the manual from the terminal 4 connected to the display / input means 1 shown in FIG.

In response to the input operation of the administrator, the policy input system 2 is started, and the policy α setting means 231 and the policy β setting means 232... Corresponding to the respective policy data are started. The values of the corresponding policies α and β are set.

FIG. 12- (1) shows an example of the management object identification information table set by the input operation described above.
(2) shows an example of the policy data table diagram.

Subsequently, the administrator activates the operation configuration means 241 according to the manual, and from the list of operation configuration means commands shown in FIG. 12- (4), a command for activating the communication network management system (NMS) 3. Call.

Conventionally, since a command has a wide variety of policy data corresponding to a policy to be set in a communication network, a configuration in which a plurality of pieces of policy data are collectively set and released instead of individually corresponding to the policy data. It has become.

In the case of this example, the administrator manually releases the transmission delay time by using Delete QoS (Quality of Service).
ervice) command or Update QoS command.

Next, when an attempt is made to call up the Delete QoS command, it is noticed that the command has a function of releasing the policy data all at once, and the application state of the policy data with respect to the link tg1 of the communication network 15 is determined. At tg1, it is confirmed that the policy data of the transmission band is set and is in operation.

FIG. 12 (3) shows an example of the policy application state table, in which "activate" indicates a state of operation.

As a result of the confirmation, the administrator sets the release command Del.
In the et QoS, even the policy data of the transmission band is released, so the Update QoS command is called, the transmission delay time release condition is set, and the Upd
Invoke the ate QoS command. Update
When the QoS command is activated, data relating to the release of the transmission delay time is transmitted to the operation processing means 311 of the communication network management system (NMS) 3, and the operation processing means 311 is activated.

Thereafter, the communication network management system (N
MS) via the management link t of the communication network 15
Only the release of the transmission delay time of g1 is executed.

[0030]

As is apparent from the above description of the operation of the administrator, conventionally, when the administrator sets various policies, the administrator performs the operation of reading the application state of the policy to the network according to the manual. The application state is read out, and a command is selected and activated according to the application state.However, since the number of operation procedures is large and the setting operation is complicated, erroneous setting due to an error in the selection of the command occurs. There have been problems such as a long time required for restoration and complaints from users.

An object of the present invention is to provide a policy input setting support system which can improve the operability when a network administrator sets a policy as described above and can perform setting with few errors. is there.

[0032]

According to a first aspect of the present invention, there is provided a policy management system for managing various policies for managing and controlling a network. Correspondingly, means for setting a plurality of policy data;
The policy application state data updated and stored by the means based on the execution result of the command for setting the stored policy data to the network is referred to, and the policy data is stored in the network. Means for selecting an appropriate command for setting.

According to a second aspect, when one or a plurality of pieces of policy data are deleted from the network according to the execution result of the command selected by the command selecting means, the policy setting means immediately sets and stores the data. A means for deleting the relevant policy data from the existing policy data.

According to a third aspect of the present invention, when one or a plurality of pieces of policy data are deleted from the network according to the execution result of the command selected by the command selecting means, the policy is set at a predetermined time or time interval. There is provided a means for deleting the relevant policy data from the policy data set and stored by the setting means.

[0035]

Embodiments of the present invention will be described below with reference to the drawings.

FIG. 1 shows a configuration diagram of a policy management system according to an embodiment of the present invention.

In FIG. 1, reference numeral 1 denotes display / input means for a network administrator to input various policies.
Reference numeral 2 denotes a policy input system, which is the center of the embodiment of the present invention.

The policy input system 2 includes a policy α setting means 231 and a policy β setting means 232... Provided corresponding to a plurality of policy data α, β. It is composed of operation command selection means 251.

The schedule management means 261 operates at predetermined time intervals.
Is to start.

The communication network management system (N
The operation processing means 311 of the MS 3 executes processing of the command received from the policy input system 2 corresponding to the command selection means.

FIG. 2 is a diagram of a management target identification information table stored in the data storage means 22, which is a table for designating a device or a transmission path to be managed on the network, and assigned to identify the management target. Target ID
(Identifier) and a start address and an end address that specify the range of the device and the section of the transmission path.

FIG. 2A shows an example in which an ID assigned to a device or the like is used as the target ID.
(2) shows an example in which an ID assigned to an owner of a device or the like is used.

FIG. 3 is a policy data table for storing a policy for a device to be managed, a transmission path, and the like, and is composed of a target ID and a plurality of pieces of policy data for each ID.

FIG. 4 is a diagram showing a policy application state management table. The table manages the application state of various policies to the network for each target ID, and is stored in the data storage means 22 in the same manner as the other tables.

FIG. 5 shows a policy application state transition table which stores the transition of the application state of the policy as a result of the execution of the command selected by the command selecting means.

FIGS. 6 to 9 are flowcharts (Nos. 1 to 4) of the policy setting / cancellation processing.

An embodiment of the present invention will be described below with reference to FIGS.

Now, in the communication network 15 shown in FIG. 10, the link between the sub-network ATM network-d and the sub-network WDM network-e is to be managed tg1, and a policy is set for the link.

The policy α is a policy relating to the transmission bandwidth of the link tg1, the transmission bandwidth is “10 Mbps”, and the policy β is a policy relating to the transmission delay time of the link, and “15 ms” is set.

In the flow chart of the policy setting / cancellation process shown in FIG. 6, the network administrator operates the terminal 4 shown in FIG.
Management target identification information, transmission bandwidth policy (policy α),
A parameter for designating a transmission delay time policy (policy β) is input (S1).

By this input operation, the display / input means 1 shown in FIG. 1 is started to execute the input processing (S2), and subsequently, the policy α setting means 231 and the policy β setting means 232 are started.

The policy α and β setting means 231 and 232 determine whether the contents are set or canceled based on the data transferred from the display / input means 1 (S3). FIG. 2 in which information and policy data set values are generated and read out from the data storage means
-Management object identification information table shown in (1) and FIG.
Is written and stored in the policy data setting table diagram (S4).

FIG. 2- (1) designates a link between the sub-networks shown in FIG. 10, and tg1 shown in the target ID column is an ID which designates a link between the ATM network-d and the WDM network-e. , SNd-TP1 of the starting address term
0 indicates an ATM network-d terminal point number 10,
The SNe-TP 30 in the term of the end point address is an example showing the terminal point 30 of the WDM network-e.

Similarly, tg2 of the target ID term is IP
This is the designation of a link between the network-a and the ATM network-b,
-TP11 is terminal point number 11 of the IP network-a,
SNb-TP15 is an example showing the 15th terminal point of ATM network-b.

FIG. 3 is a diagram showing a policy data table.
Target ID shown in the management target identification information table of FIG.
9 shows an example in which a policy relating to communication service quality corresponding to the above is specified.

In the same figure, the term "policy α" shows data designating a policy for the transmission band, and the term "policy β" shows data designating a policy regarding the transmission delay time.

Subsequently, policy α, β setting means 231
Reference numeral 232 reads out the policy application state table from the data storage unit 22, and designates a location corresponding to the policy data to be set for each target ID as “ena”.
ble ”and stored in the data storage table (S
5), end processing is performed (S10).

FIG. 4- (1) shows an example of setting in the policy application state table.

"Enable" is set when policy data is newly input or changed.
"Title" indicates that the specified policy data is being used, and is updated based on a command execution result by a command selection unit described later.

"Inactive" is set when the policy data is deleted.

FIG. 4A shows an example in which new policies α and β are input or changed for the target ID tg1.

When the policy setting means executes the end processing (S10), it transmits a completion signal to the display / input means 1, and upon receiving the signal, the display / input means 1 executes the completion display processing (S9), and A policy setting completion display is performed on the terminal of the user (S8).

At this stage, the policy data has just been stored in the data storage means, and the communication network management system (NMS) 3 has not been activated.

After confirming that the policy setting has been completed on the terminal, the administrator performs a command selection operation (S11).

Display and display are performed by the command selection operation of the administrator.
After the input processing, the input means 1 transmits a command selection processing start signal to the command selection means 251 (S12).

When the command selection means 251 receives the command selection processing start signal (S13), it reads out the policy data table from the data storage means, and
D is acquired (S14).

Subsequently, the policy data of the policy α and the policy β are obtained using the obtained target ID as a key (S15).

Further, the policy application state table is read from the data storage means 22 and the acquired target ID is obtained.
The application state of the policy α and the policy β is acquired by using the key as a key (S16).

Next, the acquired target ID, here, t
It is determined whether or not the policies α and β of g1 include a policy in the “enable” state (S17). If there is, the policy is subsequently activated or inactive.
ate ”status (S1).
8).

“Activate” selects a command to activate the communication network system (NMS) 3,
This indicates that the result of executing the setting of the policy data for the communication network 15 has been successfully completed.

In the above example, the policy α, the policy β
・ ・ "Activate" or "inactive"
It is assumed that no policy is in the “ate” state.

"Activate" or "inact"
determination result (S1)
8) Since there is no policy in such a state, "cre
"create" command is started (S19), and data relating to execution of the "create" command is transmitted to the communication network management system (NMS) 3 (S25).

Communication Network Management System (NMS)
In 3, when data related to the execution of the policy setting is received (S 29), the communication network 15 shown in FIG. 10 is controlled via the device management system (EMS) corresponding to each sub-network (S 30), and the control execution result is obtained. The command is transmitted to the command selection means 251 (S32).

Upon receiving the control execution result from the communication network management system (NMS) 3 (S 31), the command selection means 251 indicates the execution result of the command shown in FIG. 5 and the transition of the application state of the policy from the data storage means 22. The policy application state transition table is read out, the table is referred to (S33), and the state of the location corresponding to the policy of the target ID tg1 in the policy application state table is updated (S34).

In the case of this example, it is assumed that the “create” command has been successfully completed (“true”).

In this case, according to the command application state transition table, the state before execution of the “create” command is “enable” and the execution result is “true”, so that the state to be updated is “active”.
And the target ID t in the policy application state table
The location of the target α and β of g1 is “activate”
(S34).

FIG. 4- (2) shows an updated policy application state table.

Subsequently, the command selection means 251 determines whether there is another target ID to be command-selected (S26), and if not, notifies the terminal that the command execution to the communication network management system (NMS) 3 has been completed successfully. Is transmitted to the display / input means 1 (S27), and the process is terminated (S28).

The above is the description of the communication network 15 shown in FIG.
This is the operation when a new policy is set for.

Next, an operation in the case where a policy is set for the target ID tg1 of the communication network 15 according to the above-described procedure and only the transmission delay time is released for the same target ID tg1 during operation will be described.

As in the case of setting a new policy, the administrator inputs, from the terminal 4, management object identification information related to the target ID tg1 and a parameter for designating cancellation of the transmission delay time policy (S1).

By this input operation, the display / input means 1 is activated to execute the input processing (S2), and subsequently, the policy β setting means 232 is activated (S3).

The policy β setting means 232 determines from the data transferred from the display / input means 1 that the setting is not a policy setting (S3), and stores the policy in the policy data table since there is no need to set the policy. If it is determined that the policy is to be released (S6), the policy application state table is read from the data storage unit, and the item corresponding to the policy to be released is set to "" using the target ID acquired from the transfer data as a key.
After "inactive", the table is stored (S7), and the end processing is performed (S10).

FIG. 4- (3) shows an example of the policy application state table in which the item corresponding to the policy to be released is set to "inactive".

In this case, in order to cancel the transmission delay time,
The value of the target β of tg1 is set to “inactive”.
Is set.

After confirming the display of the completion of the setting of the policy release, the administrator performs a command selection operation (S11).

The display / display is performed by the command selection operation of the administrator.
The input means 1 transmits a command selection processing start signal to the command selection means (S12).

When the command selection means 251 receives the command selection processing start signal (S13), it reads out the policy data table from the data storage means, and
D is acquired (S14).

Subsequently, the policy data of the policy α and the policy β are obtained using the obtained target ID as a key (S15).

Further, the policy application state table is read from the data storage means 22, and the acquired target ID is obtained.
Then, the policy application state of the policy α and the policy β in the communication network 15 of FIG.

Next, the acquired target ID, here t
It is determined whether the policies α and β of g1 have a policy of “enable” (S17). In this case, the policy α is “active” and the policy β is “inactive”. "Ena
Since there is no “ble” state, it is determined whether there is an “activate” state (S20), and “inactivat” is determined.
e ”through the result of the determination (S21) of the presence or absence of the state of“ e ”.
"date" command is selected and activated (S22).

When the "update" command is activated,
Data relating to the execution of the policy update is transmitted to the communication network management system (NMS) 3 (S25).

Communication Network Management System (NMS)
In 3, when data relating to the execution of the policy update is received (S 29), the communication network 15 shown in FIG. 10 is controlled via the device management system (EMS) corresponding to each sub-network (S 30), and the control execution result is obtained. The command is transmitted to the command selection means (S32).

When the command selection means 251 receives the control execution result from the communication network management system (NMS) 3 (S31), the command application state transition table is read from the data storage means and the table is read as in the case described above. With reference to (S33), the status of the location corresponding to β is updated in the policy of the target ID tg1 in the policy application status table (S34).

As a result of executing the "update" command shown in FIG. 4- (4), the release of the policy β relating to the target ID tg1 of the communication network 15 in FIG. 10 is successfully completed, and the policy is applied when the policy β is updated to "disable". 9 shows an example of a state table.

Subsequently, when the command selecting means 251 determines that the update result is "disable" (S35), the command selecting means 251 reads the policy data table from the data storage means, and reads "disable" of the updated policy application state table. Is deleted (S36), and if there is no command selection processing for another target ID (S2).
6) and transmits a completion display processing request signal to the terminal (S
27), and end (S28).

In the case of this example, the policy data "15 ms" corresponding to the policy β is deleted.

When a plurality of pieces of policy data are set for the target IDtg1 and all the policies are released during operation, the command selection means 251 in the flowchart of FIG. When the application status is acquired, all the policies are in the "inactive" state (S23), so the "delete" command is activated (S24).

The operation in this case is a repetition of the operation in the case where the above-mentioned policy application state is “inactive”, and is the same, so that the description is omitted.

The communication network 15 shown in FIG.
This operation is performed when part or all of the policy for the target ID tg1 is released.

In the description of the embodiment of the present invention, an example in which a device ID such as a link between sub-networks is used as the management target identification information of the policy is shown in FIG.
As shown in (2), a case where an owner ID such as a subnetwork or a link is used is also considered.

In the description of the embodiment of the present invention, when an "update" command or a "delete" command is executed for canceling a policy, information based on the execution result from the communication network management system (NMS) 3 is used. Shows an example in which the policy application state table is updated, the policy in the policy data table is immediately deleted according to the table, and the policy data table is updated to the latest state. When the administrator starts the policy management system for setting or canceling the next policy, the policy data table is read from the data storage means, and "di" in the policy application state table is deleted.
It is also considered that the relevant policy is deleted from the policy data table in accordance with the location in the “sable” state.

Furthermore, the policy already deleted from the communication network management system (NMS) is activated by the schedule management means 261 or the like shown in FIG. 1 at a predetermined time or time interval to activate the command selection means and store the policy. It is also considered that the policy data table and the policy application status table are read from the means 22, and the relevant policy data is deleted from the policy data table in accordance with the "disable" status portion of the policy application status table.

As described above, in addition to the present embodiment, various different embodiments are considered, and the present embodiment is merely an example and is not limited.

[0105]

As is apparent from the above description, when setting and canceling a policy for a communication network, the administrator manually checks the policy application state of the target network one by one, without selecting a command.
By simply performing one command selection operation, a command suitable for the network policy application state is automatically selected and executed, thereby improving the operability of the administrator and realizing a setting method with few errors. .

[Brief description of the drawings]

FIG. 1 is a configuration diagram of a policy management system according to an embodiment of the present invention.

FIG. 2 is a management target identification information table according to the embodiment of the present invention;

FIG. 3 is a diagram illustrating a policy data table according to the embodiment of the present invention;

FIG. 4 is a diagram showing a policy application state management table according to the embodiment of the present invention;

FIG. 5 is a diagram showing a policy application state transition table according to the embodiment of the present invention;

FIG. 6 is a flowchart (part 1) of a policy setting / cancellation process according to the embodiment of the present invention.

FIG. 7 is a flowchart of a policy setting / release processing according to the embodiment of the present invention (part 2);

FIG. 8 is a flowchart of a policy setting / release processing according to the embodiment of the present invention (part 3).

FIG. 9 is a flowchart of a policy setting / release processing according to the embodiment of the present invention (part 4).

FIG. 10 is a general communication network management configuration diagram.

FIG. 11 is a configuration diagram of a conventional policy management system.

FIG. 12 shows various table diagrams and command lists in a conventional policy management system.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 Display / input means 2 Policy input system 3 Communication network management system (NMS) 4 Terminal 11 Policy management system 12 IP equipment management system (IP EMS) 13 ATM equipment management system (ATM EMS) 14 WDM equipment management system (WDM EMS) 15 Communication Network 22 Data Storage Means 231 Policy α Setting Means 232 Policy β Setting Means 241 Operation Configuration Means 251 Command Selection Means 261 Schedule Management Means 311 Operation Processing Means

 ────────────────────────────────────────────────── ─── Continuing on the front page (72) Inventor Kenichi Fukuda 4-1-1, Kamiodanaka, Nakahara-ku, Kawasaki-shi, Kanagawa F-term in Fujitsu Limited (Reference) 5K030 GA17 KA02 LC09 MD00

Claims (3)

[Claims] 1. A policy management system for managing various policies for managing and controlling a network, comprising: means for setting a plurality of pieces of policy data in correspondence with a plurality of pieces of management target identification information for a network; Setting the policy data in the network by referring to the updated and stored policy application status data based on the execution result of the command for setting the stored policy data in the network; Means for selecting an appropriate command. 2. When one or a plurality of pieces of policy data are deleted from a network according to a result of execution of a command selected by the command selecting means, the policy data is immediately set by the policy setting means and stored from the stored policy data. 2. The policy management system according to claim 1, further comprising means for deleting the relevant policy data. 3. When one or a plurality of pieces of policy data are deleted from a network according to an execution result of a command selected by the command selection unit, the policy setting unit sets the policy data at a predetermined time or time interval. 2. The policy management system according to claim 1, further comprising means for deleting the relevant policy data from the stored policy data.