Method and apparatus for telecommunications network performance anomaly events detection and notification

Abstract

In order to provide an early and more accurate determination of network problems, current NPI OMs are compared with samples of recent historical NPI OMs so that changes in the NPI OM are detected based on current overall network conditions rather than on conditions that may have existed at statistically insignificant earlier operational periods. By constantly adjusting a performance threshold, against which the current NPI OM is compared, by using a smaller and very recent sampling of NPIs (in the case of sudden and abrupt performance-NPI degradation detection) or a larger and greater number of NPIs over a wider time period (in the case of slow and persistent NPI degradation detection) to establish the threshold, detection results are more accurate and meaningful.

We claim: 
     
         1 . A system for detecting performance anomaly events in a communication network, the system comprising at least one processor coupled to the communication network and configured:
 to determine a dynamic performance degradation threshold based on a plurality of Network Performance Indication Operations Measurements (NPI OMs) immediately preceding current NPI OMs;   to compare the current NPI OMs with the dynamic performance degradation threshold; and   to generate an indication of an alarm condition when the comparison indicates a performance degradation condition.   
     
     
         2 . The system of  claim 1 , wherein the at least one processor is configured to acquire the current NPI OMs. 
     
     
         3 . The system of  claim 1 , wherein the processor is configured to repeatedly acquire NPI OMs during NPI measurement periods, and wherein the dynamic performance degradation threshold is determined using an average value and a variance value of the NPI OMs during no more than ten NPI measurement periods immediately preceding a current measurement period. 
     
     
         4 . The system of  claim 1 , wherein the at least one processor is configured to repeatedly acquire NPI OMs during NPI measurement periods, and wherein the dynamic performance degradation threshold is determined using an average value and a variance value of the NPI OMs during no more than five NPI measurement periods immediately preceding a current measurement period. 
     
     
         5 . The system of  claim 1 , wherein the performance degradation condition is deemed to be a severe and abrupt performance degradation. 
     
     
         6 . The system of  claim 1 , wherein the at least one processor is configured:
 to monitor a number of indications of alarm conditions generated during a particular NPI measurement period;   to compare the number of indications of alarm conditions during the particular NPI measurement period with a potential outage alarm threshold value; and   to generate a potential outage alarm when the comparison of the number of indications of alarm conditions and the potential outage alarm threshold value indicates a potential outage condition.   
     
     
         7 . The system of  claim 6 , wherein the potential outage alarm threshold corresponds to occurrence of a predetermined plurality of alarm condition indications being generated within one NPI measurement period. 
     
     
         8 . The system of  claim 6 , wherein the potential outage alarm threshold is predetermined. 
     
     
         9 . The system of  claim 8 , wherein the predetermined potential outage alarm threshold is provided to the at least one processor. 
     
     
         10 . The system of  claim 1 , wherein the at least one processor is configured:
 to compare NPI OMs made after generation of an indication of an alarm condition to at least one abatement threshold; and   to cease generation of the alarm condition when the comparison indicates an abatement condition.   
     
     
         11 . The system of  claim 10 , wherein:
 the at least one processor is configured to compare the NPI OMs made after generation of an indication of an alarm condition to at least one abatement threshold by comparing the NPI OMs to multiple abatement thresholds; and   the at least one processor is configured to cease generation of the alarm condition when the comparison indicates an abatement condition by ceasing generation of the alarm condition only the comparison to all abatement thresholds indicates an abatement condition.   
     
     
         12 . The system of  claim 11 , wherein the multiple abatement thresholds comprise:
 a first abatement threshold deemed to indicate abatement of a severe and sudden degradation;   a second abatement threshold deemed to indicate abatement of a slow and persistent degradation; and   a third abatement threshold deemed to indicate recovery of long term average performance.   
     
     
         13 . A system for detecting performance anomaly events in a communication network comprising at least one processor configured:
 to determine a data trend line based on a moving average of Network Performance Indication Operations Measurements (NPI OMs) taken over a preceding interval of time;   to determine a slope of the data trend line;   to compare the slope of the data trend line with a degradation threshold; and   to generate an indication of an alarm condition when the comparison indicates a long-term performance anomaly.   
     
     
         14 . The system of  claim 13 , wherein the long-term performance anomaly is deemed to be a slow and persistent degradation of performance. 
     
     
         15 . The system of  claim 13 , wherein the degradation threshold is predetermined. 
     
     
         16 . The system of  claim 15 , wherein the predetermined degradation threshold is provided to the at least one processor. 
     
     
         17 . The system of  claim 13 , wherein the at least one processor is configured to acquire the current NPI OMs. 
     
     
         18 . The system of  claim 17 , wherein the at least one processor is configured to repeatedly acquire NPI OMs during NPI measurement periods and to determine the data trend line based on a moving average of NPI OMs acquired by the at least one processor during more than ten NPI measurement periods immediately preceding a current measurement period. 
     
     
         19 . The system of  claim 13 , wherein the at least one processor is configured:
 to compare NPI OMs made after generation of an indication of an alarm condition to at least one abatement threshold; and   to cease generation of the alarm condition when the comparison indicates an abatement condition.   
     
     
         20 . The system of  claim 19 , wherein:
 the at least one processor is configured to compare the NPI OMs made after generation of an indication of an alarm condition to at least one abatement threshold by comparing the NPI OMs to multiple abatement thresholds; and   the at least one processor is configured to cease generation of the alarm condition when the comparison indicates an abatement condition by ceasing generation of the alarm condition only the comparison to all abatement thresholds indicates an abatement condition.   
     
     
         21 . The system of  claim 20 , wherein the multiple abatement thresholds comprise:
 a first abatement threshold deemed to indicate abatement of a severe and sudden degradation;   a second abatement threshold deemed to indicate abatement of a slow and persistent degradation; and   a third abatement threshold deemed to indicate recovery of long term average performance.