# US 10,771,323 B2 · Alarm information processing method, related device, and system

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,771,323 B2
- Document ID: US10771323B2
- Status: Granted
- Kind: B2
- Application number: 15/675,105
- Filed: 2017-08-11
- Published: 2017-11-23
- Granted: 2020-09-08
- Earliest claimed: 2015-02-12
- Assignees: Huawei Technologies Co., Ltd.
- Applicants: Huawei Technologies Co., Ltd.
- Inventors: Shanshan Wang; Bingli Zhi; Jian Zhu; Wenyong Han; Lan Zou
- Web page: https://patentgrep.com/patent/US10771323B2

## CPC

- H04L 41/0631: using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
- H04L 12/4641: {Virtual LANs, VLANs, e.g. virtual private networks [VPN] (LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272)}
- H04L 41/0645: {by additionally acting on or stimulating the network after receiving notifications}
- H04L 41/065: {involving logical or physical relationship, e.g. grouping and hierarchies}
- H04L 41/0695: the faulty arrangement being the maintenance, administration or management system
- H04L 41/40: using virtualisation of network functions or resources, e.g. SDN or NFV entities
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

Embodiments of the present invention disclose an alarm information processing method, including: acquiring, by an EMS, a first alarm information set reported by a VNFM, where the first alarm information set is generated after the VNFM performs correlation analysis on at least one piece of NFVI alarm information and at least one piece of VIM alarm information; acquiring, by the EMS, a second alarm information set reported by a VNF, where the second alarm information set includes at least one piece of VNF alarm information; and performing, by the EMS, correlation analysis on the first alarm information set and the second alarm information set, and dispatching a configured work order for alarm information that has a correlation relationship. By using the present invention, a cross-layer association between alarm information can be implemented to reduce a quantity of work orders.

## Claims

### Claim 1

An alarm information processing method, comprising:
receiving, by an element management system (EMS), a first alarm message reported by a virtualized network function manager (VNFM), wherein the first alarm message comprises a first alarm association information and a first alarm information set, the first alarm association information comprising a first object identity comprising a virtualized network function (VNF) identity, wherein the first alarm information set is a fault tree;
receiving, by the EMS, a second alarm message reported by a VNF, the second alarm message comprising a second alarm association information and a second alarm information set, the second alarm association information comprising a second object identity, wherein the second object identity comprises a VNF identity, wherein the second alarm information set is a fault tree;
performing, by the EMS, correlation analysis on the first alarm message and the second alarm message according to the first alarm association information and the second alarm association information, and further according to a preset time correlation rule and a preset space correlation rule for grouping the alarm information having a correlation relationship; and
dispatching, by the EMS, a work order for the alarm information having the correlation relationship.

### Claim 2 (depends on 1)

The method according to claim 1, wherein the VNF identity comprises a VNF identifier (ID) or a VNF name.

### Claim 3 (depends on 1)

The method according to claim 1, wherein the first alarm information set comprises at least one of the following: network functions virtualization infrastructure (NFVI) alarm information, virtual machine (VM) alarm information, and VNFM alarm information.

### Claim 4 (depends on 1)

The method according to claim 1, wherein the second alarm information set comprises at least one piece of VNF alarm information.

### Claim 5 (depends on 1)

The method according to claim 1, further comprising:
receiving, by the virtualized network function manager (VNFM), the VM alarm information reported by a virtualized infrastructure manager (VIM), wherein the VM alarm information comprises a third object identity;
generating, by the VNFM, the first alarm message according to the VM alarm information, wherein the first alarm association information further comprises at least one of the following: a first object identity comprising a virtualized network function (VNF) identity, and a preset association between object identities; and
sending, by the VNFM, the first alarm message to the EMS.

### Claim 6 (depends on 5)

The method according to claim 5, wherein the third object identity comprises at least one of the following: a VM identity, a HOST identity at an NFVI infrastructure layer, and a virtual transmission resource identity of a VM, wherein
the VM identity comprises a VM identifier (ID) or a VM name, the HOST identity comprises a HOST ID or a HOST name, and the virtual transmission resource identity of a VM comprises a virtual transmission resource ID or a virtual transmission resource name.

### Claim 7 (depends on 5)

The method according to claim 5, wherein the preset association between object identities is used to indicate an association between different object identities.

### Claim 8 (depends on 5)

The method according to claim 5, wherein the first alarm message further comprises a first alarm information set, and the first alarm information set comprises at least one of the following: NFVI alarm information, VM alarm information, and VNFM alarm information.

### Claim 9 (depends on 5)

The method according to claim 5, wherein the generating the first alarm message according to the VM alarm information comprises:
obtaining, according to a preset correspondence between the third object identity and a VNF identity and the third object identity in the VM alarm information, a VNF identity associated with the third object identity, and using the obtained VNF identity as the first object identity to generate the first alarm message; or
performing correlation analysis on the VM alarm information to generate the first alarm message.

### Claim 10

An alarm information processing method, comprising:
performing, by a virtualized infrastructure manager (VIM), correlation analysis on at least two pieces of alarm information to generate virtual machine (VM) alarm information according to alarm information parameters; and
reporting, by the VIM, the generated VM alarm information to a virtualized network function manager (VNFM), wherein the VM alarm information is used for the VNFM reporting a first alarm message to an element management system (EMS) for performing correlation analysis according to a preset time correlation rule and a preset space correlation rule for grouping the alarm information having a correlation relationship on the first alarm message and a second alarm message that is reported by a virtualized network function (VNF), and for dispatching a work order for the alarm information having the correlation relationship, wherein the first alarm message comprises a first object identity comprising a VNF identity, wherein the first alarm message comprises a first alarm association information and a first alarm information set, the first alarm association information and the second alarm message comprises a second alarm association information and a second alarm information set, the second alarm association information and the first alarm information set is a fault tree and the second alarm information set is a fault tree.

### Claim 11

An alarm information processing apparatus, comprising wherein an element management system (EMS), the EMS comprising:
a first EMS communications interface, configured to receive a first alarm message reported by a virtualized network function manager (VNFM), wherein the first alarm message comprises a first alarm association information and a first alarm information set, the first alarm association information comprising a first object identity comprising a virtualized network function (VNF) identity, wherein the first alarm information set is a fault tree;
a second EMS communications interface, configured to receive a second alarm message reported by a VNF, the second alarm message comprising a second alarm association information and a second alarm information set, the second alarm association information comprising a second object identity, wherein the second object identity comprises a VNF identity, wherein the second alarm information set is a fault tree; and
an EMS processor, configured to:
perform, according to the first alarm association information and the second alarm association information, and further according to a preset time correlation rule and a preset space correlation rule for grouping the alarm information having a correlation relationship, correlation analysis on the first alarm message received by the first EMS communications interface and the second alarm message received by the second EMS communications interface; and
dispatch a work order for the alarm information having the correlation relationship.

### Claim 12 (depends on 11)

The apparatus according to claim 11, wherein the VNF identity comprises a VNF identifier (ID) or a VNF name.

### Claim 13 (depends on 11)

The apparatus according to claim 11, wherein the first alarm information set comprises at least one of the following: network functions virtualization infrastructure (NFVI) alarm information, VM alarm information, and VNFM alarm information.

### Claim 14 (depends on 11)

The apparatus according to claim 11, wherein the second alarm information set comprises at least one piece of VNF alarm information.

### Claim 15 (depends on 11)

The apparatus according to claim 11, further comprising a virtualized network function manager (VNFM), the VNFM comprising:
a first VNFM communications interface, configured to receive virtual machine (VM) alarm information reported by a virtualized infrastructure manager (VIM), wherein the VM alarm information comprises a third object identity;
a VNFM processor, configured to generate the first alarm message according to the VM alarm information received by the first VNFM communications interface, wherein the first alarm association information further comprises a preset association between object identities; and
a second VNFM communications interface, configured to send the first alarm message generated by the processor to the EMS.

### Claim 16 (depends on 15)

The apparatus according to claim 15, wherein the third object identity comprises at least one of the following: a VM identity, a HOST identity at an NFVI infrastructure layer, and a virtual transmission resource identity of a VM, wherein
the VM identity comprises a VM identifier (ID) or a VM name, the HOST identity comprises a HOST ID or a HOST name, and the virtual transmission resource identity of a VM comprises a virtual transmission resource ID or a virtual transmission resource name.

### Claim 17 (depends on 15)

The apparatus according to claim 15, wherein the preset association between object identities is used to indicate an association between different object identities.

### Claim 18 (depends on 15)

The apparatus according to claim 15, wherein the first alarm message further comprises a first alarm information set, and the first alarm information set comprises at least one of the following: NFVI alarm information, VM alarm information, and VNFM alarm information.

### Claim 19 (depends on 15)

The apparatus according to claim 15, wherein the VNFM_processor is further configured to:
obtain, according to a preset correspondence between the third object identity and a VNF identity and the third object identity in the VM alarm information, a VNF identity associated with the third object identity, use the obtained VNF identity as the first object identity, and generate the first alarm message according to the first object identity; or
perform correlation analysis on the VM alarm information to generate the first alarm message.

### Claim 20

An alarm information processing apparatus, wherein the apparatus is a virtualized infrastructure manager (VIM), the apparatus comprising:
a processor, configured to perform correlation analysis on at least two pieces of alarm information to generate virtual machine (VM) alarm information according to alarm information parameters; and
a first communications interface, configured to report the VM alarm information generated by the processor to a virtualized network function manager (VNFM), wherein the VM alarm information is used for the VNFM reporting a first alarm message to an element management system (EMS) for performing correlation analysis according to a preset time correlation rule and a preset space correlation rule for grouping the alarm information having a correlation relationship on the first alarm message and a second alarm message that is reported by a virtualized network function (VNF), and for dispatching a work order for the alarm information having the correlation relationship, wherein the first alarm message comprises a first object identity comprising a VNF identity, wherein the first alarm message comprises a first alarm association information and a first alarm information set, the first alarm association information and the second alarm message comprises a second alarm association information and a second alarm information set, the second alarm association information and the first alarm information set is a fault tree and the second alarm information set is a fault tree.