Ciena Corporation

Other

James R Perry

Darryl Black

Thomas R Perry

Kevin D Snow

Brian Branscomb

Daniel J Sullivan, Jr

Christine Pecina

The present invention provides a method and apparatus for granular management of network resources by accessing network device resources through associated references. In one embodiment, the references are group names, and one or more resources (i.e., a resource collection) within each network device in a telecommunications network may be linked with one or more group names. Group names (or other types of references) may then be used to limit a user's access to particular network device resources. That is, a user may only have access to those resources associated with group names to which the user has access. Over time, network device resources may be associated or disassociated with particular group names. As a result, group names provide users with dynamic access to network device resources. In one embodiment, the groups to which a user has access are defined within a user profile associated with the user. Grouping network device resources, therefore, allows for a granular view of each network device in the network by limiting a user's access to those resources corresponding to group names listed in their user profile. As one example, grouping may allow for customer network management&#x2014;that is a customer's view is limited to only those network device resources for which they have subscribed.

Granular management of network resources

The present invention provides a method for managing telecommunications networks through user profiles that establish management capabilities and lists of network devices capable of being managed through each user profile. Through profiles, users may be given controlled access to configure network devices, provision services or simply view the network devices, services or portions thereof. For example, customers may be enabled to view services dedicated to their particular networks while being simultaneously prevented from viewing services particular to other customer's networks. This provides security while enabling controlled customer network management. In addition, profiles may be used to limit the management capabilities of network managers to only those network devices and capabilities for which each network manager is responsible and authorized. This controlled access again provides security and may prevent network outages due to inexperienced network management errors as well as simplify network management for each level of network manager. The user profiles may also be used to customize the user interface each user accesses to improve efficiency and ease of network management. Profiles may also be used to establish local network connections and set up appropriate network communication channels to improve the efficiency of user access.

Providing network management access through user profiles

The present invention provides a method and apparatus for authenticating the identities of network devices within a telecommunications network. In particular, multiple identifiers associated with a network device are retrieved from and used to identify the network device. Use of multiple identifiers provides fault tolerance and supports full modularity of hardware within a network device. Authenticating the identity of a network device through multiple identifiers allows for the possibility that hardware associated with one or more of the identifiers may be removed from the network device. For example, a network device may still be automatically authenticated even if more than one card within the device are removed as long as at least one card corresponding to an identifier being used for authentication is within the device during authentication. In addition, the present invention allows for dynamic authentication, that is, the NMS is able to update its records, including the identifiers, over time as cards (or other hardware) within network devices are removed and replaced.

Network device identity authentication

The present invention provides a method for upgrading embedded configuration databases while a network device is operating and with minimal disruption to network device operation. While a network device is operating and using an embedded primary configuration database, an embedded backup configuration database stops performing as a backup database and is upgraded. The upgraded configuration database is then switched over to become the primary configuration database. The original primary configuration database may immediately become the backup configuration database, or the original primary configuration database may remain unchanged until the upgrade is committed. If the upgrade is not committed, for example, due to errors, then the original primary configuration database may be quickly switched over to again become the primary configuration database. As a result, embedded configuration databases may be upgraded while a network device is operating and with minimal disruption to network device operation.

Method for upgrading embedded configuration databases

The present invention provides a method and apparatus for implementing distributed user management information in telecommunications networks. At least a portion of a user's management information is stored in a team session file that is accessible by a network management system (NMS) client. For example, the team session file may be saved in memory that is local to the NMS client or, if a user logs in through a remote system using a web browser, the team session file may be saved as a cookie in memory local to the remote system. The NMS client may then utilize the user management information in the team session file while the user is logged into the NMS client. In one embodiment, the user management information stored within the team session file includes NMS server connection information. Thus, when a user logs into an NMS client, the NMS client uses the NMS server connection information to connect to an NMS server. The user management information stored within the team session file may be retrieved from user profile information corresponding to the user and stored in a central data repository, and since the user profile data is stored in a central repository, changes may be easily made to the user profile data and consequently pushed out to the team session files accessible by one or more NMS clients. Consequently, a user's management data may widely distributed for access by NMS clients located anywhere in the network.

Distributed user management information in telecommunications networks

A theft prevention device for T-tops. A first latch panel opens and closes over the latch handle of the T-top latch assembly. A conventional lock is used to lock the first panel in the closed position preventing access to the latch handle and, thus, removal of the T-top. The device is supported over the latch housing by ends which cooperate with the latch pins of the T-top.

Growing community of inventors

Merrimack, NH, United States of America

James R Perry