# US 2019/0356565 A1 · Systems and methods for network analysis and management > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2019/0356565 A1 - Document ID: US20190356565A1 - Status: Published application - Kind: A1 - Application number: 15/982,204 - Filed: 2018-05-17 - Published: 2019-11-21 - Earliest claimed: 2018-05-17 - Assignees: AT&T Intellectual Property I, L.P. - Applicants: AT&T Intellectual Property I, L.P. - Inventors: Helen Zeng; Guanying Ru; Srikanth Hariharan - Web page: https://patentgrep.com/patent/US20190356565A1 ## CPC - H04L 41/0816: the condition being an adaptation, e.g. in response to network events - H04L 43/065: related to network devices - H04L 41/064: {involving time analysis} - H04L 41/069: using logs of notifications; Post-processing of notifications - H04L 43/04: Processing captured monitoring data, e.g. for logfile generation - H04L 43/0876: Network utilisation, e.g. volume of load or congestion level - H04L 43/14: {using software, i.e. software packages (network security related monitoring H04L63/1408)} - H04W 24/02: Arrangements for optimising operational condition - H04W 24/08: Testing, {supervising or monitoring} using real traffic - H04W 36/0061: {of neighbour cell information} - H04W 52/146: {Uplink power control} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract A network analysis and management system includes a processor coupled to a communications interface and a non-transitory memory. The processor is configured to read instructions from the non-transitory memory to cause the system to perform operations comprising receiving log data associated with communication between a first user device and a network using a first protocol stack including a plurality of layers. A plurality of network events are generated based on the log data. Each network event is associated with a respective log data entry of the log data and a respective layer of the plurality of layers. First network analysis information is generated by correlating first and second network events using a correlation configuration associated with a network management task. A network management message is generated using the first network analysis information, and transmitted to one of the first user device and the network for performing the network management task. ## Claims ### Claim 1 A network analysis and management system comprising: at least one communications interface; at least one non-transitory memory; one or more processors coupled to the communications interface and non-transitory memory and configured to read instructions from the non-transitory memory to cause the system to perform operations comprising: receiving log data associated with communication between a first user device and a network using a first protocol stack including a plurality of layers; generating, from the log data, a plurality of network events including first and second network events, each network event associated with a respective log data entry of the log data and a respective layer of the plurality of layers; generating first network analysis information by correlating the first and second network events based on a correlation configuration associated with a network management task associated with the network, wherein first and second correlation keys associated with the first and second network events respectively are generated based on a correlation key configuration of the correlation configuration, and wherein the first and second network events are correlated by matching the first and second correlation keys; generating a network management message based on the first network analysis information; and transmitting the network management message to one of the first user device and the network for performing the network management task. ### Claim 2 (depends on 1) The network analysis and management system of claim 1, wherein the network management task is associated with uplink power control of the first user device, and wherein the network management message includes one or more uplink power control parameters associated with the first user device. ### Claim 3 (depends on 2) The network analysis and management system of claim 2, wherein the first network event includes serving cell information associated with a serving cell of the network for the communication; and wherein the second network event includes neighboring cell information associated with one or more neighboring cells of the serving cell. ### Claim 4 (depends on 2) The network analysis and management system of claim 2, wherein the first user device is an unmanned aerial vehicle apparatus, wherein the first and second network events are associated with a first height of the first user device, wherein the operations include: generating second network analysis information using third and fourth network events based on the correlation configuration; and generating the network management message based on the first network analysis information and the second network analysis information. ### Claim 5 (depends on 1) The network analysis and management system of claim 1, wherein the first network event is associated with a first layer of the plurality of layers, and wherein the second network event is associated with a second layer of the plurality of layers. ### Claim 6 (depends on 1) The network analysis and management system of claim 1, wherein the first network event is associated with a downlink of the communication, and wherein the second network event is associated with an uplink of the communication. ### Claim 7 (depends on 1) The network analysis and management system of claim 1, wherein the correlating the first and second network events based on the correlation configuration includes: correlating the first and second network events based on a correlation time interval configuration of the correlation configuration. ### Claim 8 A method of network analysis and management, comprising: receiving log data associated with communication between a first user device and a network using a first protocol stack including a plurality of layers; generating, from the log data, a plurality of network events including first and second network events, each network event associated with a respective log data entry of the log data and a respective layer of the plurality of layers; generating first network analysis information by correlating the first and second network events based on a correlation configuration associated with a network management task associated with the network, wherein first and second correlation keys associated with the first and second network events respectively are generated based on a correlation key configuration of the correlation configuration, and wherein the first and second network events are correlated by matching the first and second correlation keys; generating a network management message based on the first network analysis information; and transmitting the network management message to one of the first user device and the network for performing the network management task. ### Claim 9 (depends on 8) The method of claim 8, wherein the network management task is associated with uplink power control of the first user device, and wherein the network management message includes one or more uplink power control parameters associated with the first user device. ### Claim 10 (depends on 9) The method of claim 9, wherein the first network event includes serving cell information associated with a serving cell of the network for the communication; and wherein the second network event includes neighboring cell information associated with one or more neighboring cells of the serving cell. ### Claim 11 (depends on 9) The method of claim 9, wherein the first user device is an unmanned aerial vehicle apparatus, and wherein the first and second network events are associated with a first height of the first user device, further comprising: generating second network analysis information using third and fourth network events based on the correlation configuration; and generating the network management message based on the first network analysis information and the second network analysis information. ### Claim 12 (depends on 8) The method of claim 8, wherein the first network event is associated with a first layer of the plurality of layers, and wherein the second network event is associated with a second layer of the plurality of layers. ### Claim 13 (depends on 8) The method of claim 8, wherein the first network event is associated with a downlink of the communication, and wherein the second network event is associated with an uplink of the communication. ### Claim 14 (depends on 8) The method of claim 8, wherein the correlating the first and second network events based on the correlation configuration includes: correlating the first and second network events based on a correlation time interval configuration of the correlation configuration. ### Claim 15 A non-transitory machine-readable medium having stored thereon machine-readable instructions executable to cause a machine to perform operations comprising: receiving log data associated with communication between a first user device and a network using a first protocol stack including a plurality of layers; generating, from the log data, a plurality of network events including first and second network events, each network event associated with a respective log data entry of the log data and a respective layer of the plurality of layers; generating first network analysis information by correlating the first and second network events based on a correlation configuration associated with a network management task associated with the network, wherein first and second correlation keys associated with the first and second network events respectively are generated based on a correlation key configuration of the correlation configuration, and wherein the first and second network events are correlated by matching the first and second correlation keys; generating a network management message based on the first network analysis information; and transmitting the network management message to one of the first user device and the network for performing the network management task. ### Claim 16 (depends on 15) The non-transitory machine-readable medium of claim 15, wherein the network management task is associated with uplink power control of the first user device, and wherein the network management message includes one or more uplink power control parameters associated with the first user device. ### Claim 17 (depends on 16) The non-transitory machine-readable medium of claim 16, wherein the first network event includes serving cell information associated with a serving cell of the network for the communication; and wherein the second network event includes neighboring cell information associated with one or more neighboring cells of the serving cell. ### Claim 18 (depends on 16) The non-transitory machine-readable medium of claim 16, wherein the first user device is an unmanned aerial vehicle apparatus, and wherein the first and second network events are associated with a first height of the first user device, further comprising: generating second network analysis information using third and fourth network events based on the correlation configuration; and generating the network management message based on the first network analysis information and the second network analysis information. ### Claim 19 (depends on 15) The non-transitory machine-readable medium of claim 15, wherein the first network event is associated with a first layer of the plurality of layers, and wherein the second network event is associated with a second layer of the plurality of layers. ### Claim 20 (depends on 15) The non-transitory machine-readable medium of claim 15, wherein the first network event is associated with a downlink of the communication, and wherein the second network event is associated with an uplink of the communication.