IP Library Granted Patent US 11,496,368
Granted Patent B2
US 11,496,368 · App. 17/013,361 · Granted Nov 8, 2022

Dynamically identifying criticality of services and data sources

Inventors: Thiago J. Macieira (Portland, OR); Ned M. Smith (Beaverton, OR); Zheng Zhang (Portland, OR); John Teddy (Butte, MT); Arthur S. Zeigler (Santa Clara, CA)
Assignee: MCAFEE, LLC
H04L41/12H04L41/065H04L41/0853H04L41/5009H04L43/08H04L67/51H04L41/0659
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,496,368
App. No.
17/013,361
Granted
Nov 8, 2022
Kind
B2
Abstract

A method, a computer-readable medium, and a device for dynamically identifying criticality of services and data sources. The computer-readable medium comprising instructions which, when executed, cause a programmable device to: determine, based on a plurality of service-related metrics from a network node, upstream network nodes and downstream network nodes in a network; query the upstream network nodes and the downstream network nodes with a multicast request for an additional plurality of service-related metrics; extrapolate a current network topology based on the plurality of service-related metrics and the additional plurality of service-related metrics; determine whether or not an upstream backup server is present for the network node; determine a set of critical service delivery points in the network based on the determination of the upstream backup server; and generate a network service alert responsive to a service interruption from the set of critical service delivery points.

Claims (59)

1. At least one computer readable storage device or storage disk comprising instructions which, when executed, cause a programmable device to at least:

determine, based on a plurality of service-related metrics from a network node, upstream network nodes and downstream network nodes in a network;

query the upstream network nodes and the downstream network nodes with a multicast request for an additional plurality of service-related metrics;

extrapolate a current network topology based on the plurality of service-related metrics and the additional plurality of service-related metrics;

determine whether or not an upstream backup server is present for the network node;

determine a set of critical service delivery points in the network based on the determination of the upstream backup server; and

generate a network service alert responsive to a service interruption from the set of critical service delivery points.

2. The at least one computer readable storage device or storage disk of claim 1 , wherein the instructions which, when executed, cause the programmable device to extrapolate the current network topology by extracting network topology information from the service-related metrics and the additional plurality of service-related metrics utilizing base stack layer application programming interfaces.

3. The at least one computer readable storage device or storage disk of claim 1 , wherein the instructions which, when executed, cause the programmable device to extrapolate by:

parsing the plurality of service-related metrics and the additional plurality of service-related metrics;

extracting a plurality of network element identifiers from the parsed plurality of service-related metrics and the additional plurality of service-related metrics; and

determining a relationship between each of the extracted plurality of network element identifiers.

4. The at least one computer readable storage device or storage disk of claim 1 , wherein the instructions which, when executed cause the programmable device to further determine the set of critical service delivery points in the network based on the network topology, the plurality of service-related metrics, and the additional plurality of service-related metrics, wherein the plurality of service-related metrics includes a first count of packets in data, a second count of errors in the data, and a third count of a volume of the data.

5. The at least one computer readable storage device or storage disk of claim 1 , wherein a service delivery point is less critical if there is a built in backup in the upstream backup server.

6. The at least one computer readable storage device or storage disk of claim 1 , wherein the network service alert is a first network service alert, and wherein the instructions which, when executed, cause the programmable device to:

compare the current network topology to a previous network topology to identify first network elements that have been added to the network and second network elements have been removed from the network between a time corresponding to the previous network topology and a time corresponding to the extrapolation of the current network topology;

translate the addition of the first network elements and the removal of the second network elements into a delta value; and

generate a second network service alert responsive to the delta value satisfying a threshold.

7. The at least one computer readable storage device or storage disk of claim 6 , wherein the instructions which, when executed, cause the programmable device to translate the addition of the first network elements and the removal of the second network elements into the delta value by applying a machine learning algorithm to the current network topology and the previous network topology.

8. A method comprising:

determining, based on a plurality of service-related metrics from a network node and by executing an instruction with a processor, upstream network nodes and downstream network nodes in a network;

querying, by executing an instruction with the processor, the upstream network nodes and the downstream network nodes with a multicast request for an additional plurality of service-related metrics;

extrapolating, by executing an instruction with the processor, a current network topology based on the plurality of service-related metrics and the additional plurality of service-related metrics;

determining, by executing an instruction with the processor, whether or not an upstream backup server is present for the network node;

determining, by executing an instruction with the processor, a set of critical service delivery points in the network based on the determination of the upstream backup server; and

generating, by executing an instruction with the processor, a network service alert responsive to a service interruption from the set of critical service delivery points.

9. The method of claim 8 , wherein the extrapolating of the current network topology includes extracting network topology information from the service-related metrics and the additional plurality of service-related metrics utilizing base layer application programming interfaces.

10. The method of claim 8 , wherein the extrapolating of the current network topology includes:

parsing the plurality of service-related metrics and the additional plurality of service-related metrics;

extracting a plurality of network element identifiers from the parsed plurality of service-related metrics and the additional plurality of service-related metrics; and

determining relationships between the plurality of network element identifiers.

11. The method of claim 8 , wherein the determining of the set of critical service delivery points is further based on the network topology, the plurality of service-related metrics, and the additional plurality of service-related metrics, wherein the plurality of service-related metrics includes a first count of packets in data, a second count of errors in the data, and a third count of a volume of the data.

12. The method of claim 8 , wherein a service delivery point is less critical if there is a built in backup in the upstream backup server.

13. The method of claim 8 , wherein the network service alert is a first network service alert, and wherein the method includes:

comparing, by executing an instruction with the processor, the current network topology to a previous network topology to identify first network elements that have been added to the network and second network elements have been removed from the network between a time corresponding to the previous network topology and a time corresponding to the extrapolation of the current network topology;

translating, by executing an instruction with the processor, the addition of the first network elements and the removal of the second network elements into a delta value; and

generating, by executing an instruction with the processor, a second alert responsive to the delta value satisfying a threshold.

14. A device for monitoring a network topology, the device comprising:

one or more processors;

a network adapter, communicatively coupled to the one or more processors; and

memory coupled to the one or more processors, the memory including instructions, the instructions, when executed, to cause the one or more processors to at least:

determine, based on a plurality of service-related metrics from a network node, upstream network nodes and downstream network nodes in a network;

query the upstream network nodes and the downstream network nodes for an additional plurality of service-related metrics;

extrapolate a current network topology based on the plurality of service-related metrics and the additional plurality of service-related metrics;

determine whether or not an upstream backup server is present for the network node;

determine a set of critical service delivery points in the network based on the determination of the upstream backup server; and

generate a network service alert responsive to a service interruption from the set of critical service delivery points.

15. The device of claim 14 , wherein the one or more processors are to extrapolate the current network topology by extracting network topology information from the service-related metrics and the additional plurality of service-related metrics utilizing base layer application programming interfaces.

16. The device of claim 14 , wherein the one or more processors are to extrapolate the current network topology by:

parsing the plurality of service-related metrics and the additional plurality of service-related metrics;

extracting a plurality of network element identifiers from the parsed plurality of service-related metrics and the additional plurality of service-related metrics; and

determining a relationship between the plurality of network element identifiers.

17. The device of claim 14 , wherein the one or more processors are to further determine the set of critical service delivery points in the network based on the network topology, the plurality of service-related metrics, and the additional plurality of service-related metrics, wherein the plurality of service-related metrics includes a first count of packets in data, a second count of errors in the data, and a third count of a volume of the data.

18. The device of claim 14 , wherein a service delivery point is less critical if there is a built in backup in the upstream backup server.

19. The device of claim 14 , wherein the network service alert is a first network service alert, and wherein the one or more processors are to:

compare the current network topology to a previous network topology to identify first network elements that have been added to the network and second network elements have been removed from the network between a time corresponding to the previous network topology and a time corresponding to the extrapolation of the current network topology;

translate the addition of the first network elements and the removal of the second network elements into a delta value representing an amount of change between the current network topology and the previous network topology; and

generate at least one of a first alert responsive to the service interruption or a second service alert responsive to a comparison of the delta value to a threshold.

20. The device of claim 19 , wherein the one or more processors are to determine the delta value by applying a machine learning algorithm to the current network topology and the previous network topology.

Assignments (4)
CORRECTIVE ASSIGNMENT TO CORRECT THE THE PATENT TITLES AND REMOVE DUPLICATES IN THE SCHEDULE PREVIOUSLY RECORDED AT REEL: 059354 FRAME: 0335. ASSIGNOR(S) HEREBY CONFIRMS THE ASSIGNMENT. Recorded Jun 23, 2022
From: MCAFEE, LLC
To: JPMORGAN CHASE BANK, N.A., AS ADMINISTRATIVE AGENT
Reel/Frame 060792/0307 →
SECURITY INTEREST Recorded Mar 3, 2022
From: MCAFEE, LLC
To: JPMORGAN CHASE BANK, N.A., AS ADMINISTRATIVE AGENT AND COLLATERAL AGENT
Reel/Frame 059354/0335 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 23, 2020
From: MACIEIRA, THIAGO; SMITH, NED; ZHANG, ZHENG; TEDDY, JOHN; ZEIGLER, ARTHUR S.
To: MCAFEE, INC.
Reel/Frame 054743/0677 →
CHANGE OF NAME Recorded Dec 23, 2020
From: MCAFEE, INC.
To: MCAFEE, LLC
Reel/Frame 054843/0456 →
Continuity (2)
Continuation 15278275 · Sep 28, 2016
Related Publication 20200403878A1 · Dec 24, 2020
Cited By (2)
US 12,450,126 US 12,579,018