KR20090056628A - Method and apparauts for detecting policy control objects of the access network and for controlling policy to the objects for ip communication services - Google Patents

Abstract

A method for recognizing a policy control target equipment and controlling a hierarchical policy to offer the IP communication service and an apparatus thereof are provided to extract access network configuration information dynamically, and improve the control method for policies related to component equipments within an access network. A subscriber IP address receiver(810) receives the IP address of a subscriber terminal in which an IP packet network connection is authenticated. A path tracking unit(820) traces the path to the subscriber terminal by using the received IP address of the subscriber terminal as a destination. A equipment detecting unit(830) detects equipments comprising an access network which are connected to the subscriber terminal from the result of the path tracing. A policy control unit(840) controls IP communications service policies related to the detected equipments.

Description

Method and apparauts for detecting policy control objects of the access network and for controlling policy to the objects for IP communication services}

TECHNICAL FIELD The present invention relates to an access network, and more particularly, to a technique for controlling information collection and service policies for component devices constituting an access network.

The present invention is derived from a study conducted as part of the IT new growth engine core technology development project of the Ministry of Information and Communication and the Ministry of Information and Telecommunications Research and Development. Management technology]

There is an increasing demand for multimedia internet protocol communication services such as VoIP, MMoIP, VoD, and IPTV, which are of the same quality as those of an IP packet network and a circuit network. In order to guarantee the quality of the multimedia IP communication service, it is essential to guarantee the quality of service in the IP packet network of the end-to-end section, and to the end-to-end network by the network policy control server. Policies should be managed.

The policy control server is a system for controlling a policy of a network, and provides a policy decision function and a function of setting a determined policy in a network. The policy management function is a function for defining a policy for accommodating multimedia IP communication services and ensuring quality based on the status of network resources and the service profile status information of subscribers. To this end, it is essential to collect information about the network equipment that constitutes the end-to-end network.

The information collection method for the conventional network equipment is made static. That is, it receives and manages the configuration information about the network equipment from the operator. This approach is fine for network equipment in the edge-to-edge section. This is because the number of network equipment in edge-to-edge range is very small enough to be manageable and the equipment is not fluctuated so that static management does not put a heavy load on network operation. However, for an access network including multiple levels of subscriber aggregation equipment, starting from the subscriber terminal, it is inefficient for the operator to manage each one statically. This is because not only the diversity and quantity of equipment constituting the access network, but also the factors of change such as network expansion, change, and the introduction of new technologies are frequent.

Meanwhile, when a policy to be applied to all or part of the access network is determined during network operation, the policy control server controlling the policy for the access network individually sets policy for each device constituting the access network. However, because the combination of CLI (Command Line Interface) commands or SNMP MIB (Management Information Base) settings for the same policy are different depending on the device manufacturer and the type of equipment, the policy is directly set for each device. CLI or SNMP interface must be implemented and managed separately.

In summary, the access network policy control server collects configuration information of the access network by receiving information such as the name and IP address of the equipment constituting the access network directly from the operator through a user interface. In addition, in the conventional access network policy control server, information management for converting network-level policies into commands that can be set for individual devices should be implemented. In addition, a CLI or SNMP interface must be implemented to set policies for each device. In addition, each time a new type of equipment is accepted or the functionality of an existing equipment is changed, the relevant changes must be further reflected.

As a result, in the related art, information on a large amount of devices constituting the access network is statically set in the access network policy control server, and an interface for setting policy for various types of devices is implemented in the access network policy control server for each device. It must, therefore, lead to waste of time and manpower.

SUMMARY OF THE INVENTION The present invention is derived from such a background and aims at presenting a technical scheme for dynamically extracting configuration information for an access network.

In addition, an object of the present invention is to improve the policy control method for the components in the access network required to provide Internet protocol communication (IP communication) service to the subscriber.

The policy control method performed in the policy control server for controlling a policy for an access network according to the present invention for achieving the above technical problem, a) an access network configuration connected to a subscriber station authenticated IP packet network access Detecting equipments; And b) controlling an Internet protocol communication (IP) communication service policy for the detected access network components.

Wherein step a) comprises: a1) receiving an IP address of a subscriber station authorized to access an IP packet network; a2) tracing a route to the subscriber station by using the received IP address of the subscriber station as a destination; And a3) detecting component devices of an access network connected to the subscriber station through the result of the path tracking.

And step b) instructs the network management system to manage the equipment management systems for managing the devices configuring the access network to instruct policy control on the components of the detected access network, thereby causing the network management system to Preferably, at least one corresponding device management system for managing the component devices of the detected access network sets a policy for the component devices of the detected access network.

On the other hand, the access network control apparatus according to the present invention for achieving the above technical problem, the subscriber IP address receiving unit for receiving the IP address of the subscriber station, the IP packet network connection is authenticated; A route tracking unit tracking a route to the subscriber station by using the received IP address of the subscriber station as a destination; An equipment detector for detecting access network components connected to the subscriber station from the route tracking result; And a policy controller configured to control an internet protocol communication (IP) communication service policy for the detected access network components.

The policy controller may include a policy information manager configured to manage application programming interface (API) information based on XML (eXtensible Markup Language), which is policy control information mapped by policy criteria; And a network management system for managing device management systems for managing devices constituting the access network using API information mapped to the determined policy criteria, to instruct policy control for the constituent devices of the detected access network. And a policy indicating unit for causing a management system to manage at least one corresponding device management system for managing the components of the detected access network to set a policy for the components of the detected access network.

On the other hand, the device management apparatus for managing the components of the access network according to the present invention for achieving the above technical problem, from a policy control server for controlling the policy of the access network to a network management system for managing a plurality of device management systems A policy information receiver configured to receive, from the network management system, policy information for controlling a policy of corresponding access network components required to provide an internet protocol communication service to a subscriber station; A control command manager configured to manage control command data for setting policy of access network elements by policy information; And a policy setting unit configured to search for a control command corresponding to the received policy information in the control command management unit and set a policy for the corresponding access network configuration devices using the retrieved control command data.

The present invention utilizes the access network equipment by utilizing the unique functions of the existing network management system (NMS) and equipment management system (EMS) necessarily installed in the access network together with a dynamic configuration information extraction method and network equipment for the access network. It presents a hierarchical policy control plan for these systems. As a result, it is possible to quickly adopt equipment of new access technology as well as network changes such as expansion, reduction, and change of access network, and furthermore, to efficiently perform policy control required to provide multimedia IP communication service of access network. Can be.

As such, the present invention proposes a network control based technology capable of providing multimedia IP communication services such as VoIP, MMoIP, and VoD of the same quality as a circuit in an IP packet network, and as a result, provides a new form through providing differentiated services. It will be possible to create a variety of business models and profits.

The foregoing and further aspects of the present invention will become more apparent through the preferred embodiments described with reference to the accompanying drawings. Hereinafter, the present invention will be described in detail to enable those skilled in the art to easily understand and reproduce the present invention.

1 is a schematic configuration diagram of an IP packet network according to the present invention.

The subscriber station 100 may be a wired terminal or a wireless terminal. A wired terminal is a terminal in a home such as a PC, a set-top box, or a VoIP phone, and a wireless terminal is a terminal such as a PC or PDA in a home or an external device connected through a wireless communication interface, for example, a WiFi interface. to be. The network termination equipment (Network Termination / Residential Gateway, NT / RG) 200 is a device that connects the subscriber terminal 100 and the network, and is a device such as a modem or a home gateway. The subscriber aggregation equipment 300 is a switch equipment such as a digital subscriber line access multiplexer (DSLAM) or a fast ethernet switch (FES) such as ADSL and VDSL, and connects the subscriber terminal 100 and receives traffic from the subscriber terminal 100. It is responsible for the function of collecting and delivering to the metro network (10). The network access device 400 is a device such as a BRAS (Broadband Remote Access Server) in charge of subscriber management, IP granting, and subscriber service provision.

The network connection equipment 400 from the network termination equipment 200 to the subscriber aggregation equipment 300 is called an access network (access network). The access network performs IP allocation and service control so that the subscriber station 100 can access and communicate with the metro network 10 through various interfaces, and the up and down traffic between the subscriber station 100 and the metro network 10 is controlled. It is in charge of delivering function.

Most of the devices constituting the access network, except the network access device 400, are two-layer devices, and are used in technical fields such as Ethernet, Digital Subscriber Line (DSL), and Passive Optical Network (PON). Because it performs relatively standardized functions and is installed in the access network, it is difficult for the operator to access and manage all the systems. Therefore, it is generally required to provide equipment management system (EMS) that controls equipment according to the equipment-specific control format and provides a standardized control interface to the upper control server. In accordance with such a request, the equipment management system 600 installed in the local bureau remotely controls the equipment.

The network management system (NMS) 600 manages an entire network or a partial network, and interworkes with the device management systems 600 belonging to the management section for this purpose. The network management system 500 receives information generated from each device through the device management system 600 and performs state determination on the entire network based on the transmitted information.

Meanwhile, the subscriber information management server 700 stores and manages subscriber service profile information in the subscriber DB 710 and performs network access authentication for the subscriber terminal 100. The policy control server 800 determines a policy for the access network to be applied to the subscriber station 100 and performs resource management and service control of the access network. Finally, the call establishment server 800 performs IP communication call setting for the subscriber station 100 in association with the policy control server 500.

2 is a diagram illustrating a layered IP communication service policy control structure of an access network.

The control structure of the access network recommended by the International Telecommunication Union-Telecommunication Standardization Sector (ITU-T), which is an international telecommunication standardization section, includes a network transport layer, a network control layer, and a service control layer. Stratum). The network transport layer is composed of network elements (NEs) of access, edge, and core sections, and is responsible for end-to-end data transmission. The network control layer includes an access network policy control server 800, network management systems 500, and a device management system 600.

The access network equipment is not operated by a system that directly monitors or controls the equipment due to the enormous quantity of the quantity and geographically distributed installation, and is managed by the equipment management system 600 that can monitor and control the status of the equipment remotely. It is common to operate. One device management system 600 integrates and manages / manages several devices of the same type. That is, there are various types of device management systems in the access network that manage different types of devices. Each device management system receives the control information through the defined Graphic User Interface (GUI) or the North-bound interface and sets the values of commands or SNMP MIBs specific to each network device. Control practically.

The network management system 500 integrates several device management systems 600 of different types to perform a function of monitoring and controlling a network at a network level. Information collected by the network management system 500 at the network level is reported to the access network policy control server 800, and the reported information is the basis for determining the policy to be performed on the network by the access network policy control server 800. Is utilized.

According to a characteristic aspect of the present invention, the policy determined by the access network policy control server 800 is delivered to the network management system 500 through a well-defined XML-based application programming interface (API). The management system 500 sets the actual contents of the policy in the network equipment through the lower device management systems 600 so that the delivered policy contents can be applied to the access network. That is, the access network policy control server 800 according to the present invention does not directly perform policy control on network equipment, but utilizes the existing network management system 500 and the device management system 600 in a hierarchical policy. To control.

On the other hand, the service control layer is connected with the access network policy control server 800 of the network control layer of network resources to ensure the service policy in order to accommodate the multimedia IP communication services required by the subscriber in the network and ensure the quality. It is responsible for controlling call acceptance by determining availability.

3 is a diagram illustrating an overall procedure for layered IP communication service policy control according to the present invention.

When the subscriber station 100 requests connection authentication to the metro network 10 through various access interfaces and protocols such as PPP, DHCP, and 802.1x (step S300), the network access equipment 400 receives the request and receives the subscriber. The authentication request is made to the information management server 700 (step S302). The subscriber information management server 700 searches the subscriber database 710 to determine whether the network connection is authenticated to the subscriber, and returns the result to the network connection equipment 400 (step S304) (step S306).

If the network 10 connection is authenticated, the network connection device 400 assigns an IP address to the subscriber station 100 to allow the network 10 connection (step S308). In step S308, the network access equipment 400 mainly allocates an IP address for accessing the network 10 to the subscriber station 100 by using its own IP pool or by interworking with an external DHCP server. Then allow network 10 access.

Meanwhile, the state in which the subscriber is connected to the network 10 and the assigned IP address information are recorded in the subscriber DB 710 by the subscriber information management server 700. In addition, the subscriber information management server 700 transmits the access notification to the authenticated subscriber terminal 100 and the assigned IP address information to the policy control server 800 (step S310). Accordingly, the policy control server 800 performs a trace route function for tracking a route to the subscriber station 100 using the transferred IP address information of the subscriber station 100 (step S212).

The trace route function sets the IP address of the subscriber station 100 as the destination address, adjusts the TTL value small, transmits the ICMP echo request message, and the routers in the network through which the packet is delivered to the destination perform error processing. It is a function to search for routers participating in the path from the source of the packet to the destination by inducing a packet to be sent. Specifically, the first packet or the switch is detected by setting the TTL (Time To Live) value to '0' so that the router that first receives the packet returns an ICMP destination unreachable message of 'Time exceeded'. Next, set the TTL value to '1' so that the second router that receives this packet also returns an ICMP destination unreachable message that says 'Time exceeded' to detect the second router. Continue to do this and return an ICMP destination unreachable message with an error value of 'Destination port unreachable' (an error message indicating that the destination has arrived but a valid application port is not open), confirming that the message has arrived at the destination. IP information of routers participating from the destination to the destination can be detected.

The policy control server 800 determines that the routers and switches returning 'Time exceeded' are routers and switch devices that constitute an access network path to which the subscriber station 100 accesses. As a subscriber, it stores as a list of access network configuration equipment for each subscriber (step S314). Then, if the subscriber station 100 attempts an IP communication service by interworking with the call setup server 900, the call setup server 900 accesses the network resource for providing the IP communication service to the subscriber to the policy control server 800. It is requested to check whether this is available (step S316) (step S318). In response, the policy control server 800 checks whether the access network resource is available and allocates a resource for the IP communication service if it is available (step S320).

In addition, the policy control server 800 determines a service policy for accommodating the requested multimedia IP communication service in the network 10 by searching a table as shown in FIG. 6 (step S322). In this case, the service policy may be defined by operators, and may be variously defined by policy criteria such as packet transmission delay, packet loss rate, packet guarantee bandwidth, and packet transmission region variation. have.

The policy control server 800 transmits the determined policy information to the network management system 500 to instruct policy control for the corresponding equipment for the IP communication service to the subscriber station 100 (step S324). To this end, the policy control server 800 manages XML-based well-defined API information for delivering policy criteria for the corresponding multimedia service to the network management system 500, as shown in FIG. have. The policy control server 800 calls an XML-based well-defined API mapped to policy criteria for an IP communication service together with the IP list obtained through the trace route function described above. Control policy).

The network management system 500 receives, from the policy control server 800, an IP list of network devices on which a policy is to be executed and policy information to be performed, and manages each network device on which a policy is to be executed. Search for the management information table as described above and request setting of the policy to the corresponding equipment management systems 600 (step S326) (step S328). At this time, the network management system 500 requests the setting of the policy to the device management system 600 by using or changing the same well-defined XML-based API information received from the policy control server 800, the policy control server If the API protocol between 800 and the network management system and between the network management system 500 and the device management system 600 is the same, the API protocol is used as it is, and if it is different, the policy request is set.

The device management systems 600, which have been requested to set policy for a specific network device from the network management system 500, set the requested policy for each network device (step S330). To this end, the device management system 600 manages a unique CLI command list or SNMP MIB configuration information for controlling network equipment for each API information as shown in FIG. 8. Therefore, if there is a policy setting request, the device management system 600 sets the policy by searching for and performing a network device specific CLI command list or SNMP MIB setting information corresponding to the requested policy from the information table shown in FIG. 8. Can be.

When all policy setting procedures are finished, the network management system 500 reports to the policy control server 800 that policy application is completed (step S332). The policy control server 800 informs the call setup server 900 that the resources are available and that network resource allocation for call setup is completed (step S334). Finally, the call establishment server 900 notifies the subscriber station 100 that the multimedia IP communication service requested by the subscriber has been accepted (step S336).

4 is a flowchart illustrating a method of controlling an IP communication service policy performed in an access network policy control server according to the present invention.

The policy control server 800 receives information from the subscriber information management server 700 indicating that the subscriber terminal 100 has connected to the network 10 and IP address information allocated to the subscriber terminal 100 (step S400). . The policy control server 800 receiving the IP address of the subscriber station 100 performs the trace route function as described above using the received IP address of the subscriber station 100 as a destination (step S402). If the content of the ICMP destination unreachable message received to the Policy Control Server 800 according to the trace route is 'Time exceeded', the source IP address of the device that returned the error response forms the access network access path of the subscriber. Stored as network equipment information (step S404) (step S406).

The trace route function is repeatedly executed until an error response of 'port unreachable' is received, and the source IP addresses of the error message having the 'Time exceeded' value received in this process are connected to the access network of the subscriber station 100. Stores network device information that constitutes a path. When finally receiving the 'port unreachable' error response according to the trace route execution process, the policy control server 800 determines that all IP addresses of the access network configuration equipment connected to the subscriber station 100 are acquired, and the acquired network IP address information about the device is stored in the table of FIG. 5 and managed (step S408).

Thereafter, the policy control server 800 receives a resource availability survey request from the call establishment server 900 according to the IP communication service request of the subscriber station 100 connected to the network 10 (step S410). Accordingly, the policy control server 800 checks the IP address list of the network equipment stored in the management table of FIG. 5, investigates the resource availability of the corresponding network equipment and the path between the equipment, and allocates resources if available (step S412). In addition, the policy control server 800 determines the IP communication service policy and delivers the determined policy information to the network management system 500 through a well-defined XML-based API along with the IP list of the network equipment. ) Directs policy control to set a policy for the network equipment (step S414) (step S416).

9 is a block diagram of an access network policy control apparatus (server) according to the present invention.

As shown, the policy control server 800 according to the present invention includes a subscriber IP address receiving unit 810, a path tracking unit 820, an equipment detector 830, and a policy controller 840. The subscriber IP address receiving unit 810 receives IP address information of the subscriber station 100 allocated by the subscriber station 100 during the metro network 10 connection authentication process from the subscriber information management server 700. The route tracer 820 sets the IP address of the subscriber station 100 received by the subscriber IP address receiver 510 as a destination to perform the trace route function as described above.

The device detector 830 detects network device information configuring an access network access path of the subscriber station 100 through an error message returned from a router and a switch located in a path to the subscriber station 100 according to the trace route. In detail, the device detection unit 830 detects IP addresses of routers and switches that return an ICMP destination unreachable message, which is an error message having a 'Time exceeded' value as described above. The detected IP addresses are IP addresses of network devices constituting the access network access path of the subscriber station 100.

The policy controller 840 includes a policy information manager 843 and a policy indicating unit 845. The policy information manager 843 stores and manages IP address information of the access network devices detected by the device detector 830 in the management table of FIG. 5. In addition, the policy information management unit 843 stores and manages policy criteria for policy determination and policy information for applying the determined policy to the access network in the management table of FIG. 6. The policy indicating unit 845 sets the policy to access network devices having an IP address managed by the policy information managing unit 843 according to the IP communication service attempt of the subscriber station 100. In this case, the policy indicating unit 845 delivers well-defined XML-based API information corresponding to the policy determined by referring to FIG. 5 and the policy determined by referring to FIG. Instructs the management system 600 to set a policy on the access network device.

10 is a block diagram of another access network policy control apparatus (server) according to the present invention.

As shown, the policy control server 800 according to the present invention includes a policy information management unit 847 and a policy indicating unit 849. The policy information manager 847 stores and manages policy criteria for policy determination and policy information for applying the determined policy to the access network in the management table of FIG. 6. The policy indicating unit 849 determines the policy by referring to the policy information management unit 847 according to the IP communication service attempt of the subscriber station 100, and attempts to control well-defined XML-based API information and policy corresponding to the determined policy. The network device information is transmitted to the network management system 500 to instruct the corresponding device management system 600 to set a policy for the corresponding access network device. At this time, the access network equipment information to control the policy may be obtained from the information statically input by the operator as in the prior art, or may be dynamically obtained according to the network 10 connection of the subscriber station 100 as described above. have. That is, the configuration of FIG. 10 does not limit the access network equipment information acquisition scheme to control the policy.

11 is a block diagram of an equipment management apparatus (system) according to the present invention.

As shown, the equipment management system 600 includes a policy information receiver 510, a control command manager 520, and a policy setter 530. The policy information receiver 510 receives policy information from the network management system 500 through a well-defined XML-based API. This policy information is transmitted from the policy control server 800 to the network management system 500 through a well-defined XML-based API, and the corresponding equipment through the XML-based API well defined in the network management system 500. Delivered to management system 600.

The control command management unit 520 stores and manages a CLI command or SNMP MIB setting information for setting a policy with a corresponding access network device for each API information in the management table of FIG. 8. Since the device management system 600 controls the access network devices using the CLI or the SNMP interface, the device management system 600 accesses the received API information even when receiving the API information, which is policy information to be transmitted hierarchically from the policy control server 800. You cannot set policies for network equipment. Therefore, the control command management unit 520 manages the CLI command or SNMP MIB configuration information that can actually control the policy for the access network equipment for each API information.

The policy setting unit 530 retrieves a CLI command or SNMP MIB setting information corresponding to the API information received from the policy information receiving unit 510 from the management table of FIG. 8, and has a corresponding CLI command or SNMP MIB setting information. Set the policy for the equipment. In this case, information on the corresponding network equipment that is subject to policy control is also provided from the policy control server 800 via the network management system 500, as described above.

So far I looked at the center of the preferred embodiment for the present invention. Those skilled in the art will appreciate that the present invention can be implemented in a modified form without departing from the essential features of the present invention. Therefore, the disclosed embodiments should be considered in descriptive sense only and not for purposes of limitation. The scope of the present invention is shown in the claims rather than the foregoing description, and all differences within the scope will be construed as being included in the present invention.

1 is a schematic configuration diagram of an IP packet network according to the present invention;

2 is a diagram illustrating a layered policy control structure of an access network according to the present invention.

3 is a diagram illustrating an overall procedure for layered IP communication service policy control according to the present invention.

4 is a flowchart illustrating a method of controlling an IP communication service policy performed in an access network policy control server according to the present invention.

5 is a diagram illustrating a management information table for each subscriber of an access network policy control server.

6 is an exemplary policy information table of an access network policy control server.

7 is an exemplary diagram of a management information table of a network management system.

8 is an exemplary view of a management information table of an equipment management system.

9 is a block diagram of an apparatus for controlling access network policy according to the present invention;

10 is a block diagram of another access network policy control apparatus according to the present invention.

11 is a block diagram of a device management apparatus according to the present invention.

Claims (14)

In the policy control method performed in the policy control server for controlling the policy for the access network, a) detecting access network configuration equipment connected to a subscriber station authorized for IP packet network connection; And b) controlling an IP protocol service policy for detected access network constituent devices; Policy control method comprising a. The method of claim 1, wherein step a) is: a1) receiving an IP address of a subscriber station authorized to access an IP packet network; a2) tracing a route to the subscriber station by using the received IP address of the subscriber station as a destination; And a3) detecting component devices of an access network connected to the subscriber station through the result of the path tracking; Policy control method comprising a. The method of claim 2, Step a2) is to transmit a packet to the subscriber station while increasing the time to live (TTL) value from 0, And said step a3) detects constituent equipment of an access network connected to said subscriber station via the error message received by said step a2). The method of claim 1, The step b) instructs the network management system to manage the device management systems for managing the devices configuring the access network to instruct policy control on the detected devices of the access network, thereby causing the network management system to detect the detection. At least one corresponding device management system for managing components of the access network configured to set a policy for the components of the detected access network. The method of claim 4, wherein The step b), the policy control, characterized in that the control policy for the configuration management equipment of the detected access network to the network management system using an XML (Application Programming Interface) based on XML (eXtensible Markup Language) Way. In the method performed by the policy control server that controls the policy for the access network, Receiving an IP address of a subscriber station authorized to access an IP packet network; Tracing a route to the subscriber station by using the received IP address of the subscriber station as a destination; And Detecting component devices of an access network connected to the subscriber station through a result of the path tracking; Policy control target device recognition method comprising a. The method of claim 6, The path tracking step is to transmit a packet to the subscriber station while increasing a time to live (TTL) value from 0, The detecting of the device comprises: detecting component devices of an access network connected to the subscriber station through an error message received by the packet transmission. A subscriber IP address receiver configured to receive an IP address of a subscriber station authorized to access an IP packet network; A route tracking unit tracking a route to the subscriber station by using the received IP address of the subscriber station as a destination; An equipment detector for detecting access network components connected to the subscriber station from the route tracking result; And A policy controller configured to control an internet protocol communication (IP communication) service policy for the detected access network components; Access network policy control apparatus comprising a. The method of claim 8, The path tracking unit transmits a packet to the subscriber station while increasing a time to live (TTL) value from 0, And the device detecting unit detects components of an access network connected to the subscriber station through an error message received by the packet transmission. The method of claim 8, wherein the policy control unit: A policy information manager for managing API (Application Programming Interface) information based on XML (eXtensible Markup Language), which is policy control information mapped by policy criteria; And Instructs the network management system to manage device management systems for managing devices constituting the access network by using API information mapped to the determined policy criterion to instruct policy control of the detected devices of the access network. A policy indicating unit for causing a system to set at least one corresponding device management system for managing components of the detected access network to set a policy for components of the detected access network; Access network policy control apparatus comprising a. A policy information manager for managing API (Application Programming Interface) information based on XML (eXtensible Markup Language), which is policy control information mapped by policy criteria; And Instructs the network management system to manage device management systems for managing devices constituting the access network by using API information mapped to the determined policy criterion to instruct policy control of the detected devices of the access network. A policy indicator configured to cause a system to set at least one corresponding device management system for managing components of the detected access network, to set a policy for components of the detected access network; Access network policy control apparatus comprising a. In the device management device for managing the components of the access network, Policy for policy control of corresponding access network components required to provide Internet protocol communication service to subscriber station, which is transferred from policy control server that controls policy of access network to network management system that manages multiple device management systems A policy information receiver for receiving information from the network management system; A control command manager configured to manage control command data for setting policy of access network elements by policy information; And A policy setting unit for retrieving a control command corresponding to the received policy information from the control command management unit and setting a policy for the corresponding access network equipments using the retrieved control command data; Access network configuration equipment management apparatus comprising a. The method of claim 12, And the policy information receiver receives the policy information through an XML based API. The method of claim 13, The control command data is access network configuration equipment management apparatus, characterized in that the data of the CLI (Command Line Interface) or SNMP Simple Network Management Protocol, Management Information Base (MIB) format.

Images