KR101220174B1 - Method and Apparatus for Controlling Traffic According to User - Google Patents

Abstract

The present invention relates to a method and apparatus for controlling traffic for each user, wherein the amount of traffic used for each user is measured, the traffic change amount (ΔV) is calculated using the measured traffic amount, and the calculated traffic change amount (ΔV) is calculated. A statistics processor for updating the traffic user list by comparison, a traffic detector for determining whether an abnormal traffic has occurred in the network, and then transmitting a control command according to the priority of the traffic user list, and a control command received from the traffic detector. According to at least one of the packet control unit for controlling the traffic of the user, and the monitoring period (T), network-wide available traffic threshold (Vlim) and the maximum traffic usage (Vh) for each user from the administrator to process the abnormal traffic Interface unit for receiving the user-defined value to include, and output the processing result It includes.

Fault Traffic, By User, List, Control, Traffic Variation

Description

Method and Apparatus for Controlling Traffic by User {Method and Apparatus for Controlling Traffic According to User}

The present invention relates to a user-specific traffic control method and apparatus, and more specifically, to identify abnormal traffic signs according to the Internet usage habits for each user, and for each user to preferentially control the traffic of users outside the range of Internet usage habits It relates to a traffic control method and apparatus.

The present invention is derived from the research conducted as part of the IT growth engine technology development project of the Korea Communications Commission and the Korea Institute of Information and Telecommunications Promotion. [Task Management Number: 2006-S-065-03, Task Name: High-Speed Circuit (100Gbps, 25Gbps) Development of Measurement System for Cost Settlement]

Currently, various methods for detecting abnormal traffic or abnormal traffic on the network have been proposed, but most of the technologies applied to the network currently set the threshold of the total traffic volume and simply compare the threshold value with the current traffic volume to transmit the packet. I'm using a way to block it. Therefore, the prior art has the advantage that it is easy to apply to the network, it is difficult to effectively control the abnormal traffic.

In addition, there is a technique for controlling traffic having the same pattern by detecting traffic suspected of abnormal traffic in the network and analyzing the pattern of the traffic. This pattern analysis technique has the advantage of accurate detection and control of abnormal traffic, but it requires a complex algorithm for abnormal traffic pattern detection, which requires a large-scale resource allocation and expensive process. In particular, the recent network is rapidly speeding up the high-speed line, and the abnormal traffic detection method through the pattern recognition has a disadvantage that it is difficult to handle large traffic on the high-speed line due to a complex algorithm and difficult to effectively control the abnormal traffic in real time.

The present invention has been made to solve the above problems, the object of the present invention is to provide a user-specific traffic control method and apparatus for preventing the entire network damage due to the abnormal traffic of the management target network in advance, and to increase network stability. There is this.

In order to achieve the above object, the present invention measures a traffic amount used for each user, calculates a traffic change amount (ΔV) using the measured traffic amount, and compares the calculated traffic change amount (ΔV) traffic. A statistics processor for updating a user list; A traffic detector for determining whether an abnormal traffic has occurred in a network and transmitting a control command according to the priority of the traffic user list; A packet controller for controlling traffic of the user according to a control command received from the traffic detector; And a user-defined value including at least one of a monitoring period (T) required for processing the abnormal traffic, a network-wide available traffic threshold (Vlim), and a maximum traffic usage per user (Vh) from an administrator, and the processing result thereof. Provides a user-specific traffic control apparatus comprising; an interface unit for outputting the.

The present invention includes the steps of measuring the amount of traffic used for each user, and calculating the traffic change amount ΔV using the measured traffic amount; Updating a traffic user list based on a large value of the traffic change amount ΔV; Determining whether abnormal traffic has occurred in a network, and controlling traffic of a user according to a priority of the traffic user list; And deleting the user whose traffic is controlled from the traffic user list.

As described above, according to the present invention, the traffic control is performed for each user in consideration of the user usage characteristics when an abnormal traffic symptom occurs, compared to the method of controlling the abnormal traffic with only the traffic threshold, thereby minimizing the influence on the overall network traffic. It is effective to secure the stability of the network.

In addition, there is an advantage in cost and ease of implementation by using a simple algorithm compared to a method of detecting and blocking abnormal traffic through an abnormal traffic pattern recognition method.

Hereinafter, an embodiment of the present invention will be described in detail with reference to the accompanying drawings. In the following description of the present invention, a detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present invention rather unclear.

In the present invention, the monitoring period (T) is a cycle for monitoring the maximum traffic usage (Vh) for each user used for each user, the monitoring time (Tn) is a timer for checking the monitoring cycle, the maximum traffic usage (Vh) for each user The maximum amount of traffic used during the monitoring cycle (T), the amount of real-time traffic usage per user (Vn) is the amount of traffic being used in real time per user, the maximum amount of real-time traffic usage (Vmax) per user is the maximum amount of traffic used in real time, Traffic variation (△ V: Vn-Vh) is the difference between the real-time traffic usage (Vn) and the maximum traffic usage (Vh) per user, the network-available traffic threshold (Vlim) is the total available traffic threshold of the managed network and The network total traffic usage (Vtv) represents the total traffic volume of the network to be managed.

1 is a block diagram showing a schematic configuration of a user-specific traffic control apparatus according to an embodiment of the present invention.

Referring to FIG. 1, the traffic control apparatus 100 for each user according to the present invention includes a packet input unit 110, an interface unit 120, a statistical processing unit 130, a traffic detector 140, a packet controller 150, and the like. A packet transmitter 160 and the like.

The packet input unit 110 receives the packet, and transmits the received packet to each device of the statistical processor 130, the traffic detector 140, and the packet controller 150 for statistical processing and abnormal traffic detection.

The interface unit 120 receives a user-defined value including a monitoring cycle (T), a network-wide available traffic threshold (Vlim), a maximum traffic usage per user (Vh), and the like, required for processing the abnormal traffic from the administrator. Output the processing result.

The statistical processor 130 measures the amount of traffic used for each user, calculates the traffic change amount ΔV using the measured traffic amount, and compares the calculated traffic change amount ΔV to update the traffic user list. .

That is, the statistics processor 130 compares the updated maximum traffic usage per user (Vh) with the real time traffic usage (Vn) for each user, and then updates the maximum traffic usage per user (Vh) in the real time traffic usage (Vn) for each user. Calculate the traffic change amount ΔV minus) and continuously update the traffic user list based on the largest value among the calculated traffic change amounts ΔV. At this time, the statistics processing unit 130 preferably records the maximum traffic usage (Vh) for each user for a predetermined time (Tn), and updates the maximum traffic usage (Vh) for each user for each monitoring period (T).

The traffic detector 140 determines whether the abnormal traffic has occurred in the network, and then transmits a control command for controlling the traffic of the user to the packet controller 150 according to the priority of the traffic user list. Here, the traffic detection unit 140 when the network-wide traffic usage (Vtv) exceeds the network-wide available traffic threshold (Vlim), when the network-wide traffic usage (Vtv) is less than the network-wide available traffic threshold (Vlim) Until the packet control unit 150 controls the traffic of the user.

The packet controller 150 controls the traffic of the user according to the control command received from the traffic detector 140.

The packet transmitter 160 converts the packet transmitted through the packet controller 150 into a format that can be connected to an external network device (not shown), and transmits the packet to the external network device (not shown).

2 is a flowchart illustrating a traffic user list updating method according to an embodiment of the present invention.

Referring to FIG. 2, it is determined whether the traffic is first input for each user (S210), and when the traffic is initially input, the maximum traffic usage (Vh) per user and the real-time maximum traffic usage (Vmax) for each user are initialized (S212). ).

If the traffic is not input for the first time in step S210, the real-time traffic usage (Vn) for each user is updated, and it is determined whether the real-time traffic usage (Vn) for each user is greater than the real-time maximum traffic usage (Vmax) for each user (S220). .

If the real-time traffic usage (Vn) for each user is greater than the real-time maximum traffic usage (Vmax) for each user, the real-time traffic usage (Vn) for each user is used as the real-time maximum traffic usage (Vmax) for each user (S230).

Subsequently, it is determined whether the monitoring period T is greater than the monitoring time Tn (S240), and when the monitoring time Tn is greater than or equal to the monitoring period T, the monitoring time Tn is initialized (S250).

If the monitoring period (T) is greater than the monitoring time (Tn) in step S240, it is determined whether the real-time maximum traffic usage (Vmax) per user is greater than the maximum traffic usage (Vh) for each user (S260).

If the real-time maximum traffic usage (Vmax) per user is greater than the maximum traffic usage (Vh) for each user in step S260, the real-time maximum traffic usage (Vmax) for each user is used as the maximum traffic usage (Vh) for each user (S270).

Subsequently, it is determined whether the real-time traffic usage per user Vn is greater than the maximum traffic usage per user Vh (S280), and when the real-time traffic usage per user Vn is greater than the maximum traffic usage per user Vh, The traffic change amount ΔV, which is a difference between the real-time traffic usage per user Vn and the maximum traffic usage per user Vh, is calculated (S290).

Finally, the traffic user list is updated based on the large traffic change amount ΔV (S300).

Therefore, when abnormal traffic occurs in the network, the traffic of the user is controlled according to the priority of the traffic user list. This will be described later with reference to FIG. 3.

3 is a flowchart illustrating a traffic control method according to the priority of the traffic user list.

First, a network-wide available traffic threshold Vlim representing the total available traffic threshold of the managed network is set.

Referring to FIG. 3, it is determined whether the network-wide traffic usage (Vtv) exceeds the network-wide available traffic threshold (Vlim) (S310), and the network-wide traffic usage (Vtv) determines the network-wide available traffic threshold (Vlim). If exceeded, the traffic of the user is controlled according to the priority of the traffic user list (S320). At this time, the traffic of the user is controlled until the overall network traffic usage (Vtv) is less than the network-wide available traffic threshold (Vlim).

Subsequently, by deleting the user whose traffic is controlled from the traffic user list (S330), it is possible to control a user who has a next priority in the traffic user list.

While the present invention has been particularly shown and described with reference to exemplary embodiments, it is to be understood that the invention is not limited to the disclosed exemplary embodiments, but, on the contrary, is intended to cover various modifications and equivalent arrangements included within the spirit and scope of the invention. Therefore, the embodiments disclosed in the present invention are intended to illustrate rather than limit the scope of the present invention, and the scope of the technical idea of the present invention is not limited by these embodiments. The protection scope of the present invention should be interpreted by the following claims, and all technical ideas within the equivalent scope should be interpreted as being included in the scope of the present invention.

1 is a block diagram showing a schematic configuration of a user-specific traffic control apparatus according to an embodiment of the present invention;

2 is a flowchart illustrating a traffic user list updating method according to an embodiment of the present invention;

3 is a flowchart illustrating a traffic control method according to the priority of the traffic user list.

Description of the Related Art

110: packet input unit 120: interface unit

130: statistical processing unit 140: traffic detection unit

150: packet control unit 160: packet transmission unit

Claims (13)

delete A statistical processor for measuring a traffic amount used for each user, calculating a traffic change amount ΔV using the measured traffic amount, and updating the traffic user list by comparing the calculated traffic change amount ΔV; A traffic detector for determining whether an abnormal traffic has occurred in a network and transmitting a control command according to the priority of the traffic user list; A packet controller for controlling traffic of the user according to a control command received from the traffic detector; And The user receives a user-defined value including at least one of a monitoring period (T), a network-wide available traffic threshold (Vlim), and a maximum traffic usage per user (Vh) required to process the abnormal traffic from an administrator, and receives the processing result. An output interface unit; User-specific traffic control device comprising a. 3. The method of claim 2, The statistical processing unit records the maximum traffic usage (Vh) for each user for a predetermined time (Tn), and updates the maximum traffic usage (Vh) for each user for each monitoring period (T). The method of claim 3, The statistical processor compares the updated maximum traffic usage (Vh) per user and the real-time traffic usage (Vn) for each user, and then compares the updated maximum traffic usage (Vh) with the updated user in real time traffic usage (Vn) for each user. A traffic control apparatus for each user, which calculates a subtracted traffic change amount ΔV and continuously updates the traffic user list based on the largest value among the calculated traffic change amounts ΔV. 3. The method of claim 2, When the network-wide traffic usage (Vtv) exceeds the network-wide available traffic threshold (Vlim), the traffic detection unit until the network-wide traffic usage (Vtv) falls below the network-wide available traffic threshold (Vlim). And a packet controller to control the traffic of the user. Measuring a traffic amount used for each user and calculating a traffic change amount ΔV using the measured traffic amount; Updating a traffic user list based on a large value of the traffic change amount ΔV; Determining whether abnormal traffic has occurred in a network, and controlling traffic of a user according to a priority of the traffic user list; And Deleting the traffic controlled user from the traffic user list; User-specific traffic control method comprising a. delete The method of claim 6, wherein the calculating of the traffic variation amount ΔV comprises: Determining whether it is the first input traffic for each user; If it is not the first input traffic for each user, comparing the real-time traffic usage (Vn) for each user and the real-time maximum traffic usage (Vmax) for each user, and updating the real-time maximum traffic usage (Vmax) for each user; Comparing the monitoring time Tn with the monitoring period T to determine whether an update period of the maximum traffic usage Vh for each user has arrived; When the update period of the maximum traffic usage per user Vh arrives, the maximum traffic usage per user Vh is compared after comparing the real-time maximum traffic usage per user Vmax with the maximum traffic usage per user Vh. Updating); And When the real-time traffic usage (Vn) for each user is greater than the maximum traffic usage (Vh) for each user, the traffic change amount that is a difference between the real-time traffic usage (Vn) for each user and the maximum traffic usage (Vh) for each user ( Calculating ΔV); User-specific traffic control method comprising a. The method of claim 8, wherein updating the real-time maximum traffic usage amount Vmax for each user comprises: When the real-time traffic usage (Vn) for each user is greater than the real-time maximum traffic usage (Vmax) for each user, the real-time traffic usage (Vn) for each user is used as the real-time maximum traffic usage (Vmax) for each user How to control traffic per user. The method of claim 8, wherein updating the maximum traffic usage amount Vh for each user comprises: When the real-time maximum traffic usage (Vmax) for each user is greater than the maximum traffic usage (Vh) for each user, the real-time maximum traffic usage (Vmax) for each user is used as the maximum traffic usage (Vh) for each user How to control traffic per user. 9. The method of claim 8, In the case of the first input traffic for each user, initializing the maximum traffic usage amount (Vh) for each user and the real-time maximum traffic usage amount (Vmax) for each user; Traffic control method for each user further comprising a. The method of claim 6, wherein controlling the traffic of the user comprises: Determining whether network total traffic usage (Vtv) exceeds the network total available traffic threshold (Vlim); And Controlling the traffic of the user according to the priority of the traffic user list when the network total traffic usage (Vtv) exceeds the network total available traffic threshold (Vlim); User-specific traffic control method comprising a. The method of claim 12, wherein controlling the traffic of the user according to the priority of the traffic user list comprises: And controlling the traffic of the user until the network total traffic usage (Vtv) is less than or equal to the network total available traffic threshold (Vlim).

Images