US Patent No: 6,301,613

Number of patents in Portfolio can not be more than 2000

Verifying that a network management policy used by a computer system can be satisfied and is feasible for use

Stats

ATTORNEY / AGENT: (SPONSORED)
 

Importance

Loading Importance Indicators... loading....

Abstract

A method and apparatus are provided for verifying policies that govern a policy-based system. The method and apparatus may be implemented as a policy verifier that acts upon one or more policies. Each policy comprises a condition and a consequent. The policy verifier acquires configuration information about the system under management, thereby acquiring an understanding of the system. The policy verifier determines whether all the policies can be satisfied by the system, and if not, reports problems or errors in the policies that cause the policies to be non-satisfiable. The policy verifier determines whether all the policies are feasible for the system, and if not, reports problems or errors that cause the policies to be non-feasible. The policy verifier also verifies that a configuration required by a particular policy consequent can be actually carried out by the managed system. In one embodiment, the policy verifier operates on network management policies, of a policy-based network management system. As a result, the invention improves the accuracy and safety of policies prepared for a network that previously did not use policy-based management.

Loading the Abstract Image... loading....

First Claim

Related Publications

Loading Related Publications... loading....

Patent Owner(s)

Patent OwnerAddressTotal Patents
CISCO TECHNOLOGY, INC.SAN JOSE, CA9213

International Classification(s)

  • [Classification Symbol]
  • [Patents Count]

Inventor(s)

Inventor Name Address # of filed Patents Total Citations
Ahlstrom, John K Cupertino, CA 17 545
Schleimer, Stephen I San Jose, CA 29 1156

Cited Art

Patent Info (Count) # Cites Year
 
COMPUTER ASSOCIATES THINK, INC. (3)
5,832,503 Method and apparatus for configuration management in communications networks 167 1995
5,872,928 Method and apparatus for defining and enforcing policies for configuration management in communications networks 297 1995
5,889,953 Policy management and conflict resolution in computer networks 204 1996
 
SUN MICROSYSTEMS, INC. (2)
5,797,128 System and method for implementing a hierarchical policy for computer system administration 126 1997
6,064,656 Distributed system and method for controlling access control to network resources 79 1997
 
CISCO TECHNOLOGY, INC. (1)
6,167,445 Method and apparatus for defining and implementing high-level quality of service policies in computer networks 444 1998
 
HEWLETT-PACKARD DEVELOPMENT COMPANY, L.P. (1)
5,968,176 Multilayer firewall system 408 1997
 
INTEL CORPORATION (1)
6,125,390 Method and apparatus for monitoring and controlling in a network 113 1997
 
MCAFEE, INC. (1)
5,950,195 Generalized security policy management system and method 190 1996
 
ST. BERNARD SOFTWARE, INC. (1)
5,557,747 Network policy implementation system for performing network control operations in response to changes in network state 131 1993

Patent Citation Ranking

Forward Cites

Patent Info (Count) # Cites Year
 
ORACLE INTERNATIONAL CORPORATION (38)
7,392,546 System and method for server security and entitlement processing 17 2001
7,418,484 System and method for actively managing an enterprise of configurable components 6 2001
7,499,948 System and method for web-based personalization and ecommerce management 28 2002
7,350,226 System and method for analyzing security policies in a distributed computer network 29 2002
7,472,342 System and method for portal page layout 12 2002
7,451,163 Data synchronization 17 2002
7,451,477 System and method for rule-based entitlements 6 2002
7,367,014 System and method for XML data representation of portlets 7 2002
7,653,930 Method for role and resource policy management optimization 3 2003
7,591,000 System and method for hierarchical role-based entitlements 4 2003
7,725,560 Web service-enabled portlet wizard 4 2003
7,496,687 Enterprise application platform 9 2003
7,840,614 Virtual content repository application program interface 3 2003
7,562,298 Virtual content repository browser 1 2003
7,483,904 Virtual repository content model 0 2003
7,415,478 Virtual repository complex content model 1 2003
7,810,036 Systems and methods for personalizing a portal 2 2004
7,774,601 Method for delegated administration 1 2004
7,644,432 Policy inheritance through nested groups 23 2004
7,603,547 Security control module 10 2004
7,603,548 Security provider development model 10 2004
7,594,112 Delegated administration for a distributed security system 9 2004
7,594,224 Distributed enterprise security system 15 2004
7,240,076 System and method for providing a lifecycle for information in a virtual content repository 4 2004
7,580,953 System and method for schema lifecycles in a virtual content repository that integrates a plurality of content repositories 0 2005
7,516,167 Data synchronization 0 2005
7,434,041 Infrastructure for verifying configuration and health of a multi-node computer system 0 2005
7,433,896 Federated management of content repositories 3 2006
7,487,207 System and method for determining the functionality of a software application based on nodes within the software application and transitions between the nodes 0 2006
7,953,734 System and method for providing SPI extensions for content management system 0 2006
7,917,537 System and method for providing link property types for content management 0 2006
7,818,344 System and method for providing nested types for content management 1 2006
7,752,205 Method and system for interacting with a virtual content repository 3 2006
7,483,893 System and method for lightweight loading for managing content 0 2006
7,426,548 Enterprise application platform 3 2007
8,099,779 Federated management of content repositories 0 2008
7,992,189 System and method for hierarchical role-based entitlements 0 2009
8,316,025 System and method for providing SPI extensions for content management system 0 2011
 
CISCO TECHNOLOGY, INC. (27)
7,346,677 Method and apparatus for creating policies for policy-based management of quality of service treatments of network data traffic flows 11 1999
6,466,984 Method and apparatus for policy-based management of quality of service treatments of network data traffic flows by integrating policies with application programs 155 1999
6,463,470 Method and apparatus of storing policies for policy-based management of quality of service treatments of network data traffic flows 177 1999
6,546,547 Method and system for an automated net booting tool 9 1999
6,952,703 Subsystem application notification method in a centralized router database 6 1999
6,728,723 Method and system for verifying configuration transactions managed by a centralized database 4 1999
6,704,752 Method and system for executing, tracking and restoring temporary router configuration change using a centralized database 7 1999
6,788,647 Automatically applying bi-directional quality of service treatment to network data flows 25 1999
6,959,332 Basic command representation of quality of service policies 28 2000
7,099,932 Method and apparatus for retrieving network quality of service policy information from a directory in a quality of service policy management system 20 2000
7,096,260 Marking network data packets with differentiated services codepoints based on network load 45 2000
6,822,940 Method and apparatus for adapting enforcement of network quality of service policies based on feedback about network conditions 71 2000
6,988,133 Method and apparatus for communicating network quality of service policy information to a plurality of policy enforcement points 81 2000
7,050,396 Method and apparatus for automatically establishing bi-directional differentiated services treatment of flows in a network 77 2000
7,636,937 Method and apparatus for comparing access control lists for configuring a security policy on a network 2 2002
7,333,432 Method and apparatus for configuring network elements to support real time applications 3 2002
6,718,380 Method and apparatus for storing policies for policy-based management of network quality of service 96 2002
7,765,283 Network provisioning in a distributed network management architecture 1 2002
7,477,600 Method and apparatus for configuring network elements to support real time applications based on meta-templates 1 2003
7,237,267 Policy-based network security management 22 2003
7,607,021 Isolation approach for network users associated with elevated risk 2 2004
8,090,806 Two-stage network device configuration process 0 2004
7,853,676 Protocol for efficient exchange of XML documents with a network device 1 2004
7,660,882 Deploying network element management system provisioning services 1 2004
7,640,317 Configuration commit database approach and session locking approach in a two-stage network device configuration process 3 2004
7,505,408 Automatically applying bi-directional quality of service treatment to network data flows 1 2004
7,751,331 Technique for policy conflict resolution using priority with variance 1 2005
 
SUN MICROSYSTEMS, INC. (12)
6,938,263 SYSTEM AND METHOD FOR FACILITATING DYNAMIC LOADING OF "STUB" INFORMATION TO ENABLE A PROGRAM OPERATING IN ONE ADDRESS SPACE TO INVOKE PROCESSING OF A REMOTE METHOD OR PROCEDURE IN ANOTHER ADDRESS SPACE 7 1996
6,957,427 Remote object activation in a distributed system 9 1997
7,296,275 Method and system for passing objects in a distributed system using serialization contexts 3 2001
7,210,148 Method and apparatus for dynamic distributed computing over a network 24 2001
7,089,263 Apparatus and method for dynamically verifying information in a distributed system 3 2002
6,983,285 Apparatus and method for dynamically verifying information in a distributed system 0 2002
6,934,758 Stack-based access control using code and executor identifiers 5 2002
6,925,644 Method, apparatus, and product for leasing of group membership in a distributed system 3 2003
7,660,887 Systems and methods for providing dynamic quality of service for a distributed system 8 2003
7,756,969 Dynamic provisioning of identification services in a distributed system 10 2004
7,509,360 Methods, apparatus, and product for distributed garbage collection 4 2004
7,792,874 Dynamic provisioning for filtering and consolidating events 1 2005
 
MICROSOFT CORPORATION (4)
7,533,407 System and methods for providing network quarantine 7 2004
7,526,677 Fragility handling 3 2005
7,827,545 Dynamic remediation of a client computer seeking access to a network with a quarantine enforcement policy 4 2005
7,793,096 Network access protection 1 2006
 
INTEL CORPORATION (3)
6,611,864 Extensible policy-based network management architecture 38 1999
6,578,076 Policy-based network management system using dynamic policy generation 94 1999
7,072,958 Identifying network management policies 12 2001
 
INTERNATIONAL BUSINESS MACHINES CORPORATION (2)
7,552,472 Developing and assuring policy documents through a process of refinement and classification 7 2002
7,171,393 Solving constraint satisfaction problems using variable-range hopping 4 2003
 
ORACLE AMERICA, INC. (2)
7,734,747 Dynamic lookup service in a distributed system 3 2003
8,103,760 Dynamic provisioning of service components in a distributed system 0 2005
 
SKYBOX SECURITY, INC. (2)
6,952,779 System and method for risk detection and analysis in a computer network 75 2002
8,099,760 System and method for risk detection and analysis in a computer network 0 2005
 
ALCATEL LUCENT (1)
8,145,784 Distributed network management system using policies 0 2002
 
CIENA CORPORATION (1)
7,062,642 Policy based provisioning of network device resources 50 2000
 
ENTERASYS NETWORKS, INC. (1)
7,526,541 System and method for dynamic network policy management 14 2003
 
FUJITSU LIMITED (1)
7,395,326 Network management apparatus 0 2003
 
HEWLETT-PACKARD DEVELOPMENT COMPANY, L.P. (1)
7,333,999 Expression editor 21 2003
 
JUNIPER NETWORKS, INC. (1)
8,166,140 Automatic application of implementation-specific configuration policies 0 2009
 
MASERGY COMMUNICATIONS, INC. (1)
7,191,229 System and method for providing a customer controlled network 6 2003
 
NETWORK EQUIPMENT TECHNOLOGIES, INC. (1)
7,085,830 System and method to manage inconsistency problems between network management systems and network elements 1 2001
 
SIEMENS AKTIENGESELLSCHAFT (1)
7,895,305 Web-based management engine and system 0 2001
 
TREND MICRO INCORPORATED (1)
6,662,235 Methods systems and computer program products for processing complex policy rules based on rule form type 29 2000

Maintenance Fees

Fee Large entity fee small entity fee micro entity fee due date
11.5 Year Payment $7400.00 $3700.00 $1850.00 Apr 9, 2013
Fee Large entity fee small entity fee micro entity fee
Surcharge - 11.5 year - Late payment within 6 months $160.00 $80.00 $40.00
Surcharge after expiration - Late payment is unavoidable $700.00 $350.00 $175.00
Surcharge after expiration - Late payment is unintentional $1,640.00 $820.00 $410.00