Method and system for near real-time IP user mapping
Systems and methods are provided for near real-time IP user mapping. Such methods may include obtaining IP address assignment data points from different sources including an authentication, authorization, and accounting (AAA) server of a private network, a service provider that provides a computer-based service within the private network, and user devices that have access to the private network. The methods may also include applying an IP mapping rule to the obtained IP address assignment data points to generate IP address mapping.
1. A method comprising:
obtaining first IP address assignment data points from an authentication, authorization, and accounting (AAA) server of a private network;
obtaining second IP address assignment data points from a service provider that provides a computer-based service within the private network;
obtaining third IP address assignment data points from user devices that have access to the private network;
wherein each data point of the obtained first, second, and third IP address assignment data points indicates a correspondence between an IP address of the private network, a user identifier to which the IP address has been assigned, and a point in time at which the IP address has been assigned to the user identifier; and
applying an IP mapping rule to the obtained first, second, and third IP address assignment data points to generate an IP address mapping, the IP address mapping includes a plurality of entries, wherein each entry comprises a respective IP address indicated in one of the obtained first, second, and third IP address assignment data points and a point in time during which a respective user identifier indicated in the one of the obtained first, second, and third IP address assignment data points is assigned to the respective IP address, and wherein the applying the IP mapping rule comprises:
determining whether or not a conflict of data points exists among the obtained first, second, and third IP address assignment data points, wherein the conflict of data points is determined to occur when a first point in time corresponding with a first IP address indicated in a first IP address assignment data point of the obtained first, second, and third IP address assignment data points is within a predetermined period of time of a second point in time corresponding with a first IP address indicated in a second IP address assignment data point of the obtained first, second, and third IP address assignment data points, and when user identifiers indicated in the first IP address assignment data point and the second IP address assignment data point are different from each other; and
dropping one or more of conflicting data points, wherein the dropping comprises the first IP address assignment data points being in conflict with the second IP address assignment data points and the second IP address assignment points is dropped, and wherein the IP address mapping is generated based on non-dropped data points of the obtained first, second, and third IP address assignment data points.
2. The method of claim 1 , wherein when the second IP address assignment data point is in conflict with a third IP address assignment data point, the third IP address assignment data point is dropped.
3. The method of claim 1 , wherein when the first IP address assignment data point is in conflict with a third IP address assignment data point, the third IP address assignment data point is dropped.
4. The method of claim 1 , wherein the user identifiers indicated in each data point of the obtained first, second, and third IP address assignment data points include a user name of a user using a user device.
5. The method of claim 1 , wherein the user identifiers indicated in each data point of the obtained first, second, and third IP address assignment data points include a user device identifier of a user device.
6. A computing system comprising:
one or more processors; and
a memory storing instructions, when executed by the one or more processors, cause the one or more processors to:
obtain first IP address assignment data points from an authentication, authorization, and accounting (AAA) server of a private network;
obtain second IP address assignment data points from a service provider that provides a computer-based service within the private network;
obtain third IP address assignment data points from user devices that have access to the private network; and
wherein each data point of the obtained first, second, and third IP address assignment data points indicates a correspondence between an IP address of the private network, a user identifier to which the IP address has been assigned, and a point in time at which the IP address has been assigned to the user identifier; and
apply an IP mapping rule to the obtained first, second, and third IP address assignment data points to generate an IP address mapping, wherein the IP address mapping includes a plurality of entries, wherein each entry comprises a respective IP address indicated in one of the obtained first, second, and third IP address assignment data points and a point in time during which a respective user identifier indicated in the one of the obtained first, second, and third IP address assignment data points is assigned to the respective IP address and wherein the applying the IP mapping rule comprises:
determining whether or not a conflict of data points exists among the obtained first, second, and third IP address assignment data points, wherein the conflict of data points is determined to occur when a first point in time corresponding with a first IP address indicated in a first IP address assignment data point of the obtained first, second, and third IP address assignment data points is within a predetermined period of time of a second point in time corresponding with the first IP address indicated in a second IP address assignment data point of the obtained first, second, and third IP address assignment data points, and when user identifiers indicated in the first IP address assignment data point and the second IP address assignment data point are different from each other; and
dropping one or more of conflicting data points, wherein the dropping comprises the first IP address assignment data points being in conflict with the second IP address assignment points and the second IP address assignment points is dropped, and wherein the IP address mapping is generated based on non-dropped data points of the obtained first, second, and third IP address assignment data points.
7. The computing system of claim 6 , wherein when the second IP address assignment data point is in conflict with a third IP address assignment data point, the third IP address assignment data point is dropped.
8. The computing system of claim 6 , wherein when the first IP address assignment data point is in conflict with a third IP address assignment data point, the third IP address assignment data point is dropped.
9. The computing system of claim 6 , wherein the user identifiers Indicated in each data point of the obtained first, second, and third IP address assignment data points include a user name of a user using a user device.
10. The computing system of claim 6 , wherein the user identifiers indicated in each data point of the obtained first, second, and third IP address assignment data points include a user device identifier of a user device.
11. A computer system comprising:
an authentication, authorization, and accounting (AAA) server for a network;
a service provider configured to provide a computer-based service within the network;
a plurality of user devices configured to access the network; and an IP mapping server configured to:
obtain first IP address assignment data points from the AAA server;
obtain second IP address assignment data points from the service provider;
obtain third IP address assignment data points from the user devices;
wherein each data point of the obtained first, second, and third IP address assignment data points indicates a correspondence between an IP address of the private network, a user identifier to which the IP address has been assigned, and a point in time at which the IP address has been assigned to the user identifier; and
apply an IP mapping rule to the obtained first, second, and third IP address assignment data points to generate an IP address mapping, wherein the IP address mapping includes a plurality of entries, wherein each entry comprises a respective IP address indicated in one of the obtained first, second, and third IP address assignment data points and a point in time during which a respective user identifier indicated in the one of the obtained first, second, and third IP address assignment data points is assigned to the respective IP address, and wherein the applying the IP mapping rule comprises:
determining whether or not a conflict of data points exists among the obtained first, second, and third IP address assignment data points, wherein the conflict of data points is determined to occur when a first point in time corresponding with a first IP address indicated in a first IP address assignment data point of the obtained first, second, and third IP address assignment data points is within a predetermined period of time of a second point in time corresponding with the first IP address indicated in a second IP address assignment data point of the obtained first, second, and third IP address assignment data points, and when user identifiers indicated in the first IP address assignment data point and the second IP address assignment data point are different from each other; and
dropping one or more of conflicting data points, wherein the dropping comprises the first IP address assignment data points being in conflict with the second IP address assignment points and the second IP address assignment points is dropped, and wherein the IP address mapping is generated based on non-dropped data points of the obtained first, second, and third IP address assignment data points.