# US 10,484,300 B2 · Admission control based on the end-to-end availability > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,484,300 B2 - Document ID: US10484300B2 - Status: Granted - Kind: B2 - Application number: 15/146,229 - Filed: 2016-05-04 - Published: 2016-08-25 - Granted: 2019-11-19 - Earliest claimed: 2014-06-12 - Assignees: International Business Machines Corporation - Applicants: International Business Machines Corporation - Inventors: Ashish Kundu; Ruchi Mahindru; Valentina Salapura - Web page: https://patentgrep.com/patent/US10484300B2 ## CPC - H04L 41/40: using virtualisation of network functions or resources, e.g. SDN or NFV entities - H04L 47/801: {Real time traffic} - G06F 11/0709: {in a distributed system consisting of a plurality of standalone computer nodes, e.g. clusters, client-server systems} - G06F 11/0712: {in a virtual computing platform, e.g. logically partitioned systems} - G06F 11/0715: {in a system implementing multitasking (multitasking per se G06F9/46)} - G06F 11/0751: {Error or fault detection not based on redundancy (power supply failures G06F1/30; network fault management H04L41/06)} - G06F 11/0793: {Remedial or corrective actions (recovery from an exception in an instruction pipeline G06F9/3861; by retry G06F11/1402; for recovering from a failure of a protocol instance or entity H04L69/40)} - G06F 11/30: Monitoring - G06N 5/02: Knowledge representation; Symbolic representation - H04L 41/5054: Automatic deployment of services triggered by the service manager, e.g. service implementation by automatic configuration of network components - H04L 43/026: using flow identification - H04L 43/55: Testing of service level quality, e.g. simulating service usage - H04L 47/829: {Topology based} - H04L 67/10: in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46) - H04L 41/5025: by proactively reacting to service quality change, e.g. by reconfiguration after service quality degradation or upgrade - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - G06N: COMPUTING ARRANGEMENTS BASED ON SPECIFIC COMPUTATIONAL MODELS ## Abstract Providing admission control for a request may comprise creating a process flow associated with the request, the process flow identifying a plurality of computer-implemented components and a flow of transactions occurring between the computer-implemented components; executing the flow of transactions on the plurality of computer-implemented components; monitoring the flow of transactions to detect a problem in the flow; responsive to not detecting a problem in the flow, allowing the request to proceed; and responsive to detecting a problem in the flow, not allowing the request to proceed. ## Claims ### Claim 1 A method for providing admission control associated with a request in a computer system, comprising: creating, by a processor, a process flow associated with the request, the process flow identifying a plurality of computer-implemented components and a flow of transactions occurring between the computer-implemented components, the process flow further identifying dependency in the process flow; executing the flow of transactions via the plurality of computer-implemented components identified in the process flow; monitoring the flow of transactions to detect a problem in the process flow and in at least one of the plurality of computer-implemented components via which the flow of transactions is executed, wherein transactions occurring between the computer-implemented components in the process flow are monitored, wherein a determination is made of whether the request can be completely processed without a problem in the process flow, the determination including at least determining whether a link in the dependency has a failure; responsive to determining the request can be completely processed without a problem in the process flow, allowing the request to proceed; and responsive to detecting a problem in the process flow, not allowing the request to proceed. ### Claim 2 (depends on 1) The method of claim 1, wherein the process flow is created based on a knowledge base that stores a topology associated with the request, a process pattern associated with the request, and configuration of the plurality of computer-implemented components. ### Claim 3 (depends on 2) The method of claim 2, wherein the knowledge base stores multiple topologies and multiple process patterns, wherein a topology corresponds to a class of requests and a process pattern corresponds to the class of requests. ### Claim 4 (depends on 1) The method of claim 1, further comprising logging the flow of transactions and updating the process flow based on the logging of the flow of transactions. ### Claim 5 (depends on 1) The method of claim 1, further comprising taking a corrective action based on one or more policies and environmental changes responsive to detecting a problem in the process flow. ### Claim 6 (depends on 1) The method of claim 1, wherein the request comprises a request to provision a virtual or physical machine in a cloud environment or another action that involves processing of automated transaction on the server comprising one or more of adding memory, adding a central processing unit, adding a disk, and applying patching. ### Claim 7 (depends on 1) The method of claim 1, wherein the method is performed periodically. ### Claim 8 (depends on 1) The method of claim 1, wherein the monitoring the flow of transactions to detect a problem in the process flow comprises: checking whether a load at a computer-implemented component will persist until the request reaches the computer-implemented component, and responsive to determining that the load at a computer-implemented component will persist, at least one of dropping the request and queuing the request; checking whether a password failure has occurred, and responsive to determining that the password failure has occurred, at least one of dropping the request and queuing the request; checking whether a certificate has expired, and responsive to determining that the certificate has expired, at least one of dropping the request and queuing the request; checking whether a security service is not available, and responsive to determining that the security service is not available, at least one of dropping the request and queuing the request; checking whether a communication channel request is not secure, and responsive to determining that the communication channel request is not secure, at least one of dropping the request and queuing the request; and checking whether a firewall is not allowing the flow of transactions, and responsive to determining that the firewall is not allowing the flow of transactions, at least one of dropping the request and queuing the request. ### Claim 9 A computer readable storage medium storing a program of instructions executable by a machine to perform a method of providing admission control associated with a request in a computer system, the method comprising: creating a process flow associated with the request, the process flow identifying a plurality of computer-implemented components and a flow of transactions occurring between the computer-implemented components, the process flow further identifying dependency in the process flow; executing the flow of transactions via the plurality of computer-implemented components identified in the process flow; monitoring the flow of transactions to detect a problem in the process flow and in at least one of the plurality of computer-implemented components via which the flow of transactions is executed, wherein transactions occurring between the computer-implemented components in the process flow are monitored, wherein a determination is made of whether the request can be completely processed without a problem in the process flow, the determination including at least determining whether a link in the dependency has a failure; responsive to determining the request can be completely processed without a problem in the process flow, allowing the request to proceed; and responsive to detecting a problem in the process flow, not allowing the request to proceed. ### Claim 10 (depends on 9) The computer readable storage medium of claim 9, wherein the process flow is created based on a knowledge base that stores a topology associated with the request, a process pattern associated with the request, and configuration of the plurality of computer-implemented components. ### Claim 11 (depends on 10) The computer readable storage medium of claim 10, wherein the knowledge base stores multiple topologies and multiple process patterns, wherein a topology corresponds to a class of requests and a process pattern corresponds to the class of requests. ### Claim 12 (depends on 9) The computer readable storage medium of claim 9, further comprising logging the flow of transactions and updating the process flow based on the logging of the flow of transactions. ### Claim 13 (depends on 9) The computer readable storage medium of claim 9, further comprising taking a corrective action based on one or more policies and environmental changes responsive to detecting a problem in the process flow. ### Claim 14 (depends on 9) The computer readable storage medium of claim 9, wherein the request comprises one or more of a request to provision a virtual or physical machine in a cloud environment or another action involving processing of automated transaction on a server comprising adding memory, adding a central processing unit, adding a disk, and applying patching. ### Claim 15 (depends on 9) The computer readable storage medium of claim 9, wherein the method is performed periodically. ### Claim 16 A system for providing admission control associated with a request in a computer system, comprising: a hardware processor; a storage device storing a plurality of topologies associated with a plurality of requests respectively, a plurality of process patterns associated with the plurality of requests respectively, and configurations of computer-implemented components, the hardware processor operable to create a process flow associated with the request, the process flow identifying a plurality of the computer-implemented components and a flow of transactions occurring between the computer-implemented components in fulfilling the request based on the topology associated with the request and the process pattern associated with the request, the process flow further identifying dependency in the process flow, the hardware processor further operable to execute the flow of transactions via the plurality of computer-implemented components identified in the process flow, the hardware processor further operable to monitor the process flow of transactions to detect a problem in the process flow and in at least one of the plurality of computer-implemented components via which the flow of transactions is executed, wherein transactions occurring between the computer-implemented components in the process flow are monitored, wherein a determination is made of whether the request can be completely processed without a problem in the process flow, the determination including at least determining whether a link in the dependency has a failure, responsive to determining the request can be completely processed without a problem in the process flow, the hardware processor further operable to allow the request to proceed, and responsive to detecting a problem in the process flow, the hardware processor not allowing the request to proceed. ### Claim 17 (depends on 16) The system of claim 16, wherein the hardware processor further updates the process flow based on the logging of the flow of transactions. ### Claim 18 (depends on 16) The system of claim 16, wherein the hardware processor is further operable to take a corrective action based on one or more policies and environmental changes responsive to detecting a problem in the process flow. ### Claim 19 (depends on 16) The system of claim 16, wherein the request comprises one or more of a request to provision a virtual or physical machine in a cloud environment or another action that involves processing of automated transaction on a server comprising adding memory, adding a central processing unit, adding a disk, and applying patching.