System for determining mass outage and method of using

A system includes a non-transitory computer readable medium configured to store instructions thereon; and a processor. The processor is configured to receive alarm data related to equipment in a telecommunication network. The processor is configured to receive a correlation rule and a mass outage rule, wherein each mass outage rule is associated with a correlation rule. The processor is configured to perform a first aggregation using the alarm data based on domain, vendor, equipment type, classification, or geographic information; and associate the aggregated alarm data with a corresponding correlation rule. The processor is configured to determine a number of pieces of equipment that are associated with each correlation rule; determine whether the determined number is equal to or greater than a threshold value; and generate an incident report in response to the number of pieces of equipment being equal to or greater than the at least one threshold value.

RELATED APPLICATIONS

The present application is a National Phase of International Application No. PCT/US2021/065627, filed Dec. 30, 2021.

BACKGROUND

Telecommunication networks are implemented using equipment located over a large geographic area. Alarms are generated when the equipment experiences a problem, such as a malfunction or a deterioration in performance. In some instances, wide-ranging events, such as engineering faults, natural disasters or other events, cause problems in a large number of equipment components across a geographic area. In some instances, these wide-ranging events cause damage to components, such as fiber optic cables, that connect the equipment to a datacenter. As a result, users of the telecommunication network are likely to experience slower upload and download speeds, which reduces customer satisfaction with a service provider.

These equipment problems generate alarms within the telecommunication network to be resolved by the service provider. In some approaches, alarms are generated based on users reporting issues with the telecommunication network. In some approaches, these alarms are addressed one at a time. For example, in some approaches, the alarms are addressed based on an order in which the alarms are received.

DETAILED DESCRIPTION

Approaches that address alarms generated by problems with equipment in a telecommunication network one at a time rely on manual intervention in order to identify a common geographic area for the alarms. That is, a human network monitor would identify that a significant number of alarms are originating from equipment in a similar geographic area. A significant number of alarms within a geographic region is called a mass outage in some embodiments. Based on this identification by the network monitor, an incident report is generated in order to repair or replace equipment experiencing a problem. Relying on human intervention or recognition to determine whether a mass outage has occurred reduces response time to the mass outage and consumes more manpower to identify the mass outage. As a result, users of the telecommunication network are without service or have slower service within the impacted geographic area. The loss or reduction of service quality reduces customer satisfaction.

In order to maintain customer satisfaction and automatically identify mass outages, the current description includes a system in which a service provider is able to generate relationship rules between equipment in order to automatically identify mass outages and generate incident reports for repair or replacement of equipment within the telecommunication network. In some embodiments, the relationship rules are generated by a network monitor after installation of equipment is completed. In some embodiments, the relationship rules are generated by an installer at the time of installation of a piece of equipment. In some embodiments, the network monitor establishes the relationship rules prior to installation of a piece of equipment and the installer adds the piece of equipment to the relationship rules during the installation of the piece of equipment. In some embodiments, the relationship rules are based on at least one of domain of the telecommunication network, vendor information, equipment type, problem classification, or geographic location.

The system is able to receive alarms from the telecommunication system. The system is able to determine whether the alarm originated from a piece of equipment that has at least one relationship rule and aggregate the alarms within the telecommunication system based on the at least one relationship rule. Based on analysis of the alarms and predetermined relationship rules, the system is able to determine whether a mass outage has occurred. The system is also able to determine an importance level of the mass outage, such as minor, major, critical or emergency, based on a number of nodes impacted by the mass outage. The system is able to automatically generate an incident report based on the determined mass outage. In some embodiments, the system automatically transmits the incident report to one or more technicians for repair or replacement of equipment within the telecommunication network. In some embodiments, the system generates the incident report including an importance level of an identified mass outage. In some embodiments, the system is configured to automatically manage the incident report differently for different importance levels.

FIG.1is a schematic view of a telecommunication network100in accordance with some embodiments. The telecommunication network100includes a plurality of nodes110. The nodes110include nodes115having no alarms and nodes117having alarms with a same alarm code. An alarm code indicates a type of problem with the node. Based on the nodes117having a same alarm code, a system, such as a controller130or system500(FIG.5) is able to identify a mass outage including the nodes117. The nodes110are located within a first geographic area120. The first geographic area120is within a second geographic area125. WhileFIG.1does not include nodes in a space between a boundary of the first geographic area120and the second geographic area130for the sake of clarity of the drawing, one of ordinary skill would understand that in nodes would be present between the boundary of the first geographic area120and the second geographic area125. The telecommunication network100further includes the controller130configured to monitor the performance of nodes110. The controller130is configured to receive alarms from each of the nodes110and to provide communication with each of the nodes110. The controller130is further configured to generate incident reports in response to the controller130determining that a mass outage exists within the nodes110.

The nodes110include equipment, such as base stations, for implementing the telecommunication network100. In some embodiments, each of the nodes110includes the same equipment. In some embodiments, at least one node110has different equipment from at least one other node110. In some embodiments, at least one node110includes a nodeB base station. In some embodiments, at least one node110includes an evolved nodeB (eNodeB) base station. In some embodiments, at least one node110includes a gNodeB base station. In some embodiments, at least one node110includes a next-generation evolved NodeB (ng-eNodeB) base station. In some embodiments, at least one node110includes a different base station type from at least one other node110.

In some embodiments, the nodes110include equipment such as routers, signaling protocols and switching (SPS) equipment, transceivers, mobility management entity (MME) equipment, carrier grade network address translation (CGNAT) equipment, or other suitable equipment. In some embodiments, at least one node110includes redundant equipment to provide a backup in response to the primary equipment failing. For example, in some embodiments, at least one node110includes a primary router and a redundant router. The primary router is used during normal operation; and when the primary router fails or experiences a problem, the redundant router is used to maintain operation of the node110.

In some embodiments, equipment in each of the nodes110includes a correlation flag indicating a relationship to other nodes110. In some embodiments, at least one piece of equipment in a node110does not include a correlation flag. The correlation flag indicates relationships between an alarm code associated with each of the nodes110. In some embodiments, the correlation flag is stored in a library accessible by the controller130. In some embodiments, the relationship between the alarm code and the correlation flag is stored in the library accessible by the controller130. The correlation flag is established by generating a correlation rule for a piece of equipment. Each correlation rule includes a rule identification (ID) to differentiate correlation rules for different pieces of equipment. In some embodiments, the correlation flag is generated by an installer at the time the pieces of equipment is installed. In some embodiments, the correlation flag is generated by a network monitor after the piece of equipment is installed. In some embodiments, a piece of equipment includes a single correlation rule. In some embodiments, a piece of equipment includes multiple correlation rules, which are differentiated based on rule ID. Additional details for generating correlation rules is described below with respect toFIG.3, in some embodiments.

The nodes115do not have any alarms pending in the arrangement ofFIG.1. In contrast, each of the nodes117has at least one alarm pending. The alarm includes an alarm code, which indicates both the equipment experiencing a problem as well as the type of problem experienced. For example, in some embodiments, the alarm code indicates that a router in a node117has a low battery. In some embodiments, the alarm code indicates that the router in the node117has a damaged port. The alarm codes are stored in a library accessible by the controller130, so that the controller130is able to determine the equipment experiencing a problem and the problem experienced based on a received alarm code. In some embodiments, each of the nodes117is experiences a same problem. For examples, during a natural disaster, power to the nodes117is interrupted in some instances and batteries within the equipment of the nodes117are all low. In some embodiments, at least one node117is experiencing a different problem from at least one other node117. The controller130is able to determine the problems for each node117based on the received alarm codes.

Each of the nodes110is within the first geographic area120. In some embodiments, the first geographic area120represents a state or a prefecture. In some embodiments, the first geographic area120represents a city or a town. In some embodiments, the first geographic area120represents a portion of a city or a portion of a town. In some embodiments, the equipment in each of the nodes110is assigned a geographic location of the first geographic area120when the equipment is installed. In some embodiments, the equipment in each of the nodes110is assigned a geographic location based on instructions received from the controller130. In some embodiments, the equipment in at least one node110retrieves geographic information indicating the first geographic area120from a neighboring node110.

The second geographic area125is larger than the first geographic area120and encompasses the first geographic area120. In some embodiments, the second geographic area125represents a region or zone. In some embodiments, the second geographic area125represents a state or a prefecture. In some embodiments, the second geographic area125represents a city or a town. In some embodiments, the second geographic area125represents a portion of a city or a portion of a town larger than a portion represented by the first geographic area120. In some embodiments, the controller130is able to directly communicate with nodes in the second geographic area125other than nodes110. In some embodiments, the controller130is limited to direct communication with the nodes110. In some embodiments, the controller130is able to indirectly communicate with nodes in the second geographic area125other than nodes110, such as through a data center.

The controller130is configured to receive alarms from the nodes110. The controller130then determines whether any of the alarms are related to equipment which have one or more correlation flags. The controller130then aggregates alarms from equipment determined based on the correlation flags associated with the received alarms. Based on a number of alarms and the alarm codes, the controller130is able to determine whether a mass outage has occurred. In response to a determination that a mass outage has occurred, the controller130is able to generate one or more incident reports for repairing or replacement equipment associated with the determined mass outage. In some embodiments, the controller130is able to transmit the incident report, either wirelessly or through a wired connection, to repair and maintenance personnel. In some embodiments, the controller130transmits the incident report, either wirelessly or through a wired connection, to alert a network monitor to the mass outage. In some embodiments, the incident report includes an importance level of the mass outage. In some embodiments, the incident report includes recommended actions for addressing the mass outage. In some embodiments, the controller130performs different actions with respect to the incident report based on a determined importance level of the mass outage. Additional details of operations of the controller130are described below with respect toFIG.2, in some embodiments.

FIG.2is a flowchart of a method200of determining a mass outage in accordance with some embodiments. The method200is capable of being implemented using controller130(FIG.1), system500(FIG.5), or another suitable system. The method200determines whether a mass outage has occurred in a telecommunication network, such as telecommunication network100(FIG.1), and generates an incident report in response to a determination that a mass outage has occurred.

In operation205, alarm data having a correlation flag is received. The alarm includes information related to the equipment experiencing a problem as well as information related to the problem experienced, such as an alarm code. The correlation flag indicates a relationship between the equipment experiencing a problem and at least one other piece of equipment in the telecommunication network. In some embodiments, the alarm is received directly from the equipment experiencing the problem. In some embodiments, the alarm is received indirectly, such as through a data center. In some embodiments, the alarm is received wirelessly. In some embodiments, the alarm is received through a wired connection. Additional information related to the correlation flag are described below with respect toFIG.3, in some embodiments.

In some embodiments, the operation205includes a further step of determining whether a received alarm has a correlation flag. That is, the alarm is received and then analyzed to determine whether the alarm has a correlation flag. In response to a determination that the alarm has a correlation flag, the method200proceeds to operation215. In response to a determination that the alarm does not include a correlation flag, the method200repeats operation205until an alarm having a correlation flag is received.

In operation210, mass outage and correlation rules are received. The mass outage rules include information related to importance level of a mass outage. The importance level information is predetermined by the network monitor. In some embodiments, the importance level information includes information related to a number of affected pieces of equipment for different importance levels. As a number of affected pieces of equipment increases, an importance level of the mass outage increases. In some embodiments, the importance level information includes predetermined threshold values set by the network monitor. The predetermined threshold values are set in order to efficiently balance repair/replacement effort with customer/user satisfaction with the telecommunication network. In some embodiments, the predetermined threshold values are set based on a number of nodes, e.g., nodes110(FIG.1), with a geographic area, e.g., first geographic area120(FIG.1). In some embodiments, the predetermined threshold values are set based on overlapping coverage areas of nodes, e.g., nodes110(FIG.1).

The correlation rules identify relationships between equipment within the telecommunication network. The correlation rules are set by the network monitor based on key parameter indicators (KPIs) for the telecommunication system to determine what types of equipment relationships are likely to impact performance of the telecommunication network. Additional details for setting correlation rules are described below with respect toFIG.3, in some embodiments. The correlation rules include rule ID information.

In operation215, the received alarms are aggregated based on the correlation flag. In some embodiments, the alarms are aggregated based on at least one of domain of the received alarm, vendor of the received alarm, equipment type of the received alarm, classification of the received alarm, geographic area of the received alarm or other suitable criteria. In some embodiments, the aggregation is performed for each of the options above. In some embodiments, the aggregation is filtered such that only equipment having an alarm which satisfies each of the criteria of the aggregation are aggregated together. For example, in some embodiments where the aggregation criteria includes domain and equipment type, the operation215will aggregate equipment having alarms that share a domain and equipment type with the received alarm regardless of a vendor of the equipment. One of ordinary skill in the art would recognize that this description covers any combination of the above criteria for performing the aggregation of operation215.

The domain of the received alarm indicates a type of communication protocol in which the impacted equipment operations. In some embodiments, the domain is radio access network (RAN), open RAN (ORAN), local access network (LAN), a data center, a cloud system or another suitable domain. Aggregating the alarms based domain helps to ensure that customers are able to reliably utilize communication protocols associated with their respective mobile device.

The vendor of the received alarm refers to a service provider for the telecommunication network. In some instances, communication towers include equipment from more than one service provider. Aggregating alarms based on vendor allows the network monitor to service multiple vendors simultaneously with a reduced risk of erroneously transmitting replace/repair incident report to an incorrect vendor.

The classification of the received alarm refers to the impact of the alarm for the piece of equipment. In some embodiments, options for the classification include outage, deterioration, notification, normal, or another suitable classification. An outage classification indicates that the equipment is non-operational. A deterioration classification indicates that the equipment is operation, but at a lower efficiency than normal. A notification classification indicates that the equipment is able to function at or near normal efficiency, but that an error is likely to occur. For example, a low battery or error corrections in a memory approaching capacity generates a notification alarm in some instances. A normal classification indicates that the equipment is operating at or near normal efficiency. Aggregating based on classification helps to prioritize replace/repair operations on equipment that is non-functional or functioning inefficiently.

The equipment type indicates a functionality of the equipment of the received alarm. In some embodiments, the equipment type includes routers, SPS equipment, transceivers, MME equipment, CGNAT equipment, or other suitable equipment. Aggregating based on equipment type helps to determine whether a replace/repair operation is able to be performed remotely. In addition, aggregating based on equipment type helps to ensure that a technician has the proper tools and parts to perform repair/replace operations.

The geographic area indicates a location of the equipment of the received alarm. In some embodiments, the geographic area includes the first geographic area120(FIG.1) or the second geographic area125(FIG.1). Aggregating based on geographic area helps to improve efficiency of replace/repair operations because technicians are able to reduce travel time between equipment during the replace/repair operations to return the telecommunication network to normal performance faster.

In operation220, the aggregated alarms are associated with correlation rules received in operation210. The rule ID is associated with each of the aggregated alarms relevant to the rule ID. By associating the rule IDs with the corresponding alarms, the method200is able to determine whether a mass outage has occurred based on the parameters set by the network monitor.

In operation225, the alarms that are associated with the rule IDs are aggregated. In operation225, the aggregation is performed based on rule ID, alarm codes, and geographic area of the alarms. Aggregating the alarms based on rule ID helps to determine how many pieces of equipment that are related together by a rule ID are experiencing problems. The rule ID also helps to relate the predetermined threshold values for the determining an importance level for an identified mass outage. Aggregating based on alarm codes helps to determine whether the alarms are likely stemming from a same cause. For example, a natural disaster causing a loss of power resulting in low battery alarms would produce a large number of alarms having a low battery alarm code. In another example, a natural disaster resulting in physical damage to the equipment is also likely to produce a large number of alarms having a same alarm code. In still another example, damage to a fiber optic cable connecting a data center to a number of nodes, e.g., nodes110(FIG.1), would also likely produce a large number of alarms having a same alarm code. Aggregating based on geographic area also helps to improve efficiency of replace/repair operations because technicians are able to reduce travel time between equipment during the replace/repair operations to return the telecommunication network to normal performance faster.

In operation230, a number of nodes in each of the aggregated combinations is determined. The number of nodes is determined based on the aggregation performed in operation225.

In operation235, the number of nodes in each of the aggregation combination is compared with a corresponding threshold values based on the mass outage rules corresponding to the rule IDs from the correlation rules. Each of the correlation rules has a rule ID and is associated with one or more threshold values determined by corresponding mass outage rules. In some embodiments, the threshold values are usable to determine both whether a mass outage has occurred and an importance level of an identified mass outage.

In operation240, a determination is made whether the number of nodes in each of the aggregation combinations is greater than or equal to any of the threshold values from the corresponding mass outage rules. For example, in response to a determination that 10 nodes have alarms which satisfy rule ID123and a threshold value of determining a mass outage is 9 nodes for rule ID123, the operation240will determine that a mass outage occurred. In contrast, in response to a determination that 7 nodes have alarms which satisfy rule ID123and a threshold value of determining a mass outage is 9 nodes for rule ID123, the operation240will determine that no mass outage has occurred with respect to rule ID123.

In some embodiments where the mass outage rules include multiple threshold values indicating different importance levels, the operation240determines an importance level of an identified mass outage. For example, in response to a determination that 15 nodes have alarms which satisfy rule ID345; a threshold value for a major mass outage is 12 nodes; and a threshold value for a critical mass outage is 16 nodes, the operation240will determine that a mass outage occurred and that an importance level of the mass outage is major. In another example, in response to a determination that 30 nodes have alarms which satisfy rule ID345; a threshold value for a critical mass outage is 16 nodes; and a threshold value for an emergency mass outage is 24 nodes, the operation240will determine that a mass outage occurred and that an importance level of the mass outage is emergency. Examples of correlation rules and associated mass outage rules having various threshold values for different importance levels is provided inFIG.4, in some embodiments. One of ordinary skill in the art would recognize that different correlation rules and threshold values are within the scope of this disclosure.

In response to a determination that no mass outage has occurred, the method200returns to operations205and210. In response to a determination that a mass outage has occurred, the method200proceeds to operation245.

In operation245, an incident report is generated in response to a determination that a mass outage has occurred. An incident report is generated for each rule ID having a number of nodes that is equal to or greater than a corresponding threshold value. In some embodiments, the incident report includes an importance value of the determined mass outage. In some embodiments, the independent report does not include an importance value of the determined mass outage. The incident report indicates which nodes and which equipment are having problems as well as the types of problems.

In some embodiments, the incident report is transmitted to a replace/repair technician for addressing the problems at the nodes that are part of the mass outage. In some embodiments, the incident report is transmitted to a network monitor for developing a response to the mass outage. In some embodiments, the incident report includes suggestions for addressing the mass outage. In some embodiments, the incident report is transmitted wirelessly to the technician or network monitor. In some embodiments, the incident report is transmitted through a wired connection to the technician or the network monitor. In some embodiments, the incident report is configured to cause a device controlled by the technician or network monitor, such as a mobile device, to generate an alert in response to receipt of the incident report. In some embodiments, the alert includes an audio alert or visual alert. In some embodiments, a type of alert generated at the device controlled by the technician or network monitor is based on an importance level of the mass outage. In some embodiments, a color of a visual alert indicates the importance level of the mass outage. In some embodiments, a lower importance level generates only a visual alert while a higher importance level generates both a visual alert and an audio alert.

In some embodiments, the method200implements the incident report differently depending on the importance level of the mass outage. For example, in some embodiments, an incident report for a mass outage having a minor importance level is transmitted to a single technician while an incident report for a mass outage having a critical importance level is transmitted to multiple technicians. A number of technicians that receive the incident report is based on a number of nodes to be replaced/repaired, in some embodiments. In some embodiments, an incident report for a mass outage having a major importance level is transmitted to one or more technicians while an incident report for a mass outage having an emergency importance level is transmitted to one or more technicians as well as a network monitor. One of ordinary skill in the art would recognize that different combinations of importance levels and incident report transmission are within the scope of this disclosure.

In some embodiments, the incident report is transmitted based on an alarm code associated with the rule ID associated with the mass outage. For example, in some embodiments, the rule ID indicates a problem that is able to be addressed remotely, such as by remotely resetting the equipment. In such a situation, the incident report is transmitted to a network monitor, in some embodiments. In some embodiments, the incident report is transmitted to the network monitor and the remote resetting signal is automatically transmitted to the equipment without interaction from the network monitor. In some embodiments, the rule ID indicates a problem that is only able to be addressed at the location of the equipment. In some embodiments, the incident report is transmitted to one or more technicians in response to a determination that the problem is only able to be addressed at the location of the equipment.

In some embodiments, the incident report includes an incident start time. The incident start time is a time stamp of an earliest alarm received which is part of the rule ID that resulted in a determination of a mass outage.

In some embodiments, the method200further includes receiving information from the technician or network monitor indicating progress for resolving the mass outage. In some embodiments, the method200is configured to determine an end time for an incident report in response to receiving information indicating that all equipment associated with the mass outage has been replaced/repaired. In some embodiments, the incident report will close automatically in response to receiving information that all equipment associated with the mass outage has been replaced/repaired. In some embodiments, an end time of the incident report is set to a time stamp at which confirmation of a last equipment associated with the incident report is replaced/repaired.

One of ordinary skill in the art would understand that the operations of method200are not limited to the operations described above or the order of the operations described above. In some embodiments, the method200includes at least one additional operation. For example, in some embodiments, the method200includes transmitting a notification to customers of the telecommunication network regarding an identified mass outage. In some embodiments, at least one operation of the method200is omitted. For example, in some embodiments, operation235is omitted and the comparison is made as part of operation240. In some embodiments, an order of operations of the method200is adjusted. For example, in some embodiments, operations215,220and225are combined into a single operation.

FIG.3is a graphical user interface (GUI)300for receiving information for determining a mass outage in accordance with some embodiments. The GUI300is usable to receive information for establishing correlation rules and mass outage rules, such as those described with respect to method200(FIG.2) or telecommunication network100(FIG.1), in some embodiments. One of ordinary skill in the art would understand that information for establishing correlation rules and mass outage rules is also possible using an input/output (I/O) interface other than GUI300. In some embodiments, the GUI300displayed on a touch screen. In some embodiments, the GUI300is configured to receive data from a user, such as a network monitor, touching a screen; using a mouse; using a keyboard; using speech; or using another suitable I/O device.

The GUI300includes a first field305for receiving name for a name of a correlation rule. The name of the correlation rule is usable as a rule ID, in some embodiments. In some embodiments, the rule ID is generated automatically and is different from the correlation rule name. The first field305is configured to receive text or numerical values. A user is able to enter a name for the correlation rule.

The GUI300further includes a second field310configured to receive an equipment type. InFIG.3, the second field310is a drop down menu. In some embodiments, the second field310is configured to receive text or numerical values. The second field310includes a drop down menu of equipment types within a telecommunication network, such as telecommunication network100(FIG.1). A user is able to select the equipment type from the list of available equipment in the telecommunication network. In some embodiments, the list of available equipment types is updated as new types of equipment are added into the telecommunication network. In some embodiment, the updating is performed automatically upon the telecommunication network detecting a new piece of equipment. In some embodiments, the updating is performed by the network monitor.

The GUI300further includes a third field315configured to receive geographic information. InFIG.3, the third field315is a drop down menu. In some embodiments, the third field315is configured to receive text or numerical values. The third field315includes a drop down menu of geographic locations within the telecommunication network. In some embodiments, the drop down menu includes geographic areas, such as the first geographic area120(FIG.1) or the second geographic area125(FIG.1). In some embodiments, the drop down menu includes names of cities, towns, prefectures, or other areas. In some embodiments, the drop down menu includes other geographic area identifying information such as an identification number or name.

The GUI300further includes a fourth field320configured to receive information relate to a domain. InFIG.3, the fourth field320is a drop down menu. In some embodiments, the fourth field320is configured to receive text or numerical values. The fourth field320includes a drop down menu of domains supported by a telecommunication network, such as telecommunication network100(FIG.1). A user is able to select the domain from the list of available equipment in the telecommunication network. In some embodiments, the list of available domains is updated as new domains are added into the telecommunication network. In some embodiment, the updating is performed automatically. In some embodiments, the updating is performed by the network monitor.

The GUI300further includes a fifth field325configured to indicate a number of available pieces of equipment within the telecommunication network that satisfy the information entered into the other fields of the GUI300. The fifth field325is automatically populated based on known equipment within the telecommunication network, such as telecommunication network100(FIG.1).

The GUI300further includes a sixth field330configured to receive information related to a vendor. InFIG.3, the sixth field330is a drop down menu. In some embodiments, the sixth field330is configured to receive text or numerical values. The sixth field330includes a drop down menu of vendors whose equipment is being monitored. A user is able to select the vendor from the list of available vendors in the telecommunication network. In some embodiments, the list of available vendors is updated as new vendors are added into the monitoring system. In some embodiment, the updating is performed automatically. In some embodiments, the updating is performed by the network monitor.

The GUI300further includes a seventh field335configured to receive information related to a vendor. InFIG.3, the seventh field335is a drop down menu. In some embodiments, the seventh field335is configured to receive text or numerical values. The seventh field335includes a drop down menu of classifications of types of conditions of equipment. In some embodiments, the classifications include outage, deterioration, notification, normal, or other suitable classifications. A user is able to select the classification from the list of available classifications. In some embodiments, the list of available classifications is updated as new classifications are permitted by the monitoring system. In some embodiment, the updating is performed automatically. In some embodiments, the updating is performed by the network monitor.

Using the first field305through the seventh field335, the network monitor is able to establish correlation rules that relate pieces of equipment within a telecommunication network, such as telecommunication network100(FIG.1), with one another. These correlation rules are usable by the controller130(FIG.1), the method200(FIG.2), or other systems or methods to determine whether a mass outage has occurred within the telecommunication network.

The GUI300further includes an eighth field340configured to receive a numerical value indicating a threshold value for a number of pieces of equipment in the correlation rule defined by the first field305through the seventh field335to have an importance level of “emergency.” The emergency threshold is the most critical type of mass outage in systems or methods using GUI300. In some embodiments, the GUI300is configured to generate an alert indicating an unacceptable value in the eighth field340in response to the number of in the eighth field340exceeding the number in the fifth field325.

The GUI300further includes a ninth field345configured to receive a numerical value indicating a threshold value for a number of pieces of equipment in the correlation rule defined by the first field305through the seventh field335to have an importance level of “critical.” The critical threshold is the second most critical type of mass outage in systems or methods using GUI300. In some embodiments, the GUI300is configured to generate an alert indicating an unacceptable value in the ninth field345in response to the number of in the ninth field345exceeding the number in the eighth field340.

The GUI300further includes a tenth field350configured to receive a numerical value indicating a threshold value for a number of pieces of equipment in the correlation rule defined by the first field305through the seventh field335to have an importance level of “major.” The major threshold is the third most critical type of mass outage in systems or methods using GUI300. In some embodiments, the GUI300is configured to generate an alert indicating an unacceptable value in the tenth field350in response to the number of in the tenth field350exceeding the number in the ninth field345.

The GUI300further includes an eleventh field355configured to receive a numerical value indicating a threshold value for a number of pieces of equipment in the correlation rule defined by the first field305through the seventh field335to have an importance level of “minor.” The minor threshold is the least critical type of mass outage in systems or methods using GUI300. In some embodiments, the GUI300is configured to generate an alert indicating an unacceptable value in the eleventh field355in response to the number of in the eleventh field355exceeding the number in the tenth field350.

Using the eighth field340through the eleventh field355, the network monitor is able to establish mass outage rules that determine a number pieces of equipment having alarms in a telecommunication network, such as telecommunication network100(FIG.1), to generate an incident report having a corresponding importance value. These mass outage rules are usable by the controller130(FIG.1), the method200(FIG.2), or other systems or methods to assign an importance value a mass outage that has occurred within the telecommunication network.

The GUI300further includes a cancel button360configured to cause the fields of the GUI300to return to default values; or to close the GUI300. The GUI300further includes a create button370configured to enter the correlation rule and mass outage rule defined by the fields of the GUI300into a system monitoring a telecommunication network, such as telecommunication network100(FIG.1). In some embodiments, the above described alerts are generated in response to the user selecting the create button370. In some embodiments, the GUI300is configured to generate an alert in response to the user failing to enter information into at least one of the fields of the GUI300. One of ordinary skill in the art would recognize that a GUI include additional fields or alternative fields is within the scope of this description. For example, in some embodiments, a “notes” field is included in the GUI300to allow a user to enter notes regarding the correlation rule or mass outage rule defined by the values in the fields of the GUI300.

FIG.4is a table400of correlation rules and threshold values for importance levels in accordance with some embodiments. The table400is a visual representation of correlation rules and mass outage rules usable for monitoring a telecommunication network, such as telecommunication network100(FIG.1). In some embodiments, the table400is generated based on information entered into GUI300(FIG.3). In some embodiments, the table400is usable to implement the method200(FIG.2). One of ordinary skill in the art would recognize that the table400is mere exemplary to assist in understanding this description and that different values within the table400are within the scope of this description.

The first three columns of the table400define equipment type, classification and geographic information for a correlation rule. The fourth through seventh columns of the table400define threshold values for different importance levels for the correlation rule. Each row of the table400defines a correlation rule and mass outage rule for determining whether to generate an incident report and an importance level of any generated incident report.

FIG.5is a block diagram of a system for determining a mass outage in accordance with some embodiments. System500includes a hardware processor502and a non-transitory, computer readable storage medium504encoded with, i.e., storing, the computer program code506, i.e., a set of executable instructions. Computer readable storage medium504is also encoded with instructions507for interfacing with manufacturing machines for producing the memory array. The processor502is electrically coupled to the computer readable storage medium504via a bus508. The processor502is also electrically coupled to an I/O interface510by bus508. A network interface512is also electrically connected to the processor502via bus508. Network interface512is connected to a network514, so that processor502and computer readable storage medium504are capable of connecting to external elements via network514. The processor502is configured to execute the computer program code506encoded in the computer readable storage medium504in order to cause system500to be usable for performing a portion or all of the operations as described with respect to telecommunication system100(FIG.1) or method200(FIG.2).

In some embodiments, the processor502is a central processing unit (CPU), a multi-processor, a distributed processing system, an application specific integrated circuit (ASIC), and/or a suitable processing unit.

In some embodiments, the storage medium504stores the computer program code506configured to cause system500to perform method300or method400. In some embodiments, the storage medium504also stores information for performing a portion or all of the operations as described with respect to telecommunication system100(FIG.1) or method200(FIG.2) as well as information generated during performing a portion or all of the operations as described with respect to telecommunication system100(FIG.1) or method200(FIG.2), such as a rule parameter516, a threshold parameter518, a classification parameter520, an equipment type parameter522, a location parameter524, an incident report parameter526and/or a set of executable instructions to perform a portion or all of the operations as described with respect to telecommunication system100(FIG.1) or method200(FIG.2).

In some embodiments, the storage medium504stores instructions507for interfacing with external devices including equipment within the telecommunication network. The instructions507enable processor502to generate instructions readable by the external devices to effectively implement a portion or all of the operations as described with respect to telecommunication system100(FIG.1) or method200(FIG.2).

System500also includes network interface512coupled to the processor502. Network interface512allows system500to communicate with network514, to which one or more other computer systems are connected. Network interface512includes wireless network interfaces such as BLUETOOTH, WIFI, WIMAX, GPRS, or WCDMA; or wired network interface such as ETHERNET, USB, or IEEE-1394. In some embodiments, a portion or all of the operations as described with respect to telecommunication system100(FIG.1) or method200(FIG.2) is implemented in two or more systems500, and information is exchanged between different systems500via network514.

An aspect of this description relates to a system. The system includes a non-transitory computer readable medium configured to store instructions thereon. The system further includes a processor connected to the non-transitory computer readable medium. The processor is configured to execute the instructions for receiving alarm data, wherein the alarm data is related to equipment in a telecommunication network. The processor is further configured to execute the instructions for receiving at least one correlation rule. The processor is further configured to execute the instructions for receiving at least one mass outage rule, wherein each mass outage rule of the at least one mass outage rule is associated with a corresponding correlation rule of the at least one correlation rule. The processor is further configured to execute the instructions for performing a first aggregation using the received alarm data based on at least one of domain, vendor, equipment type, classification, or geographic information. The processor is further configured to execute the instructions for associating each of the aggregated alarm data with a corresponding correlation rule of the at least one correlation rule. The processor is further configured to execute the instructions for determining a number of pieces of equipment in the telecommunication network that are associated with each of the at least one correlation rule. The processor is further configured to execute the instructions for determining whether the determined number of pieces of equipment is equal to or greater than at least one threshold value based on the mass outage rule. The processor is further configured to execute the instructions for generating an incident report in response to the number of pieces of equipment being equal to or greater than the at least one threshold value. In some embodiments, the processor is further configured to execute the instructions for wirelessly transmitting the generated incident report to a device controllable by a repair technician. In some embodiments, the processor is configured to execute the instructions for generating the incident report including an importance level of a mass outage. In some embodiments, the processor is configured to execute the instructions for determining the importance level of the mass outage based on the determined number of pieces of equipment. In some embodiments, the processor is configured to execute the instructions for performing a second aggregation using the number of pieces of equipment in the telecommunication network based on the at least one correlation rule, alarm codes of the received alarm data, and geographic information. In some embodiments, the processor is configured to execute the instructions for determining the number of pieces of equipment in the telecommunication network associated with each of the at least one correlation rule based on results of the second aggregation. In some embodiments, the processor is configured to execute the instructions for performing the first aggregation based on equipment type, classification, and geographic information.

An aspect of this description relates to a method. The method includes receiving alarm data, wherein the alarm data is related to equipment in a telecommunication network. The method further includes receiving at least one correlation rule. The method further includes receiving at least one mass outage rule, wherein each mass outage rule of the at least one mass outage rule is associated with a corresponding correlation rule of the at least one correlation rule. The method further includes performing a first aggregation using the received alarm data based on at least one of domain, vendor, equipment type, classification, or geographic information. The method further includes associating each of the aggregated alarm data with a corresponding correlation rule of the at least one correlation rule. The method further includes determining a number of pieces of equipment in the telecommunication network that are associated with each of the at least one correlation rule. The method further includes determining whether the determined number of pieces of equipment is equal to or greater than at least one threshold value based on the mass outage rule. The method further includes generating an incident report in response to the number of pieces of equipment being equal to or greater than the at least one threshold value. In some embodiments, the method further includes wirelessly transmitting the generated incident report to a device controllable by a repair technician. In some embodiments, generating the incident report includes generating the incident report including an importance level of a mass outage. In some embodiments, the method further includes determining the importance level of the mass outage based on the determined number of pieces of equipment. In some embodiments, the method further includes performing a second aggregation using the number of pieces of equipment in the telecommunication network based on the at least one correlation rule, alarm codes of the received alarm data, and geographic information. In some embodiments, the method further includes determining the number of pieces of equipment in the telecommunication network associated with each of the at least one correlation rule based on results of the second aggregation. In some embodiments, performing the first aggregation includes performing the first aggregation based on equipment type, classification, and geographic information.

An aspect of this description relates to a telecommunication system. The telecommunication system includes a plurality of nodes, wherein each of the plurality of nodes includes at least one piece of equipment. The telecommunication system includes a controller connected to each of the plurality of nodes. The controller includes a non-transitory computer readable medium configured to store instructions thereon. The controller further includes a processor connected to the non-transitory computer readable medium. The processor is configured to execute the instructions for receiving alarm data, wherein the alarm data is related to the plurality of nodes. The processor is further configured to execute the instructions for receiving at least one correlation rule. The processor is further configured to execute the instructions for receiving at least one mass outage rule, wherein each mass outage rule of the at least one mass outage rule is associated with a corresponding correlation rule of the at least one correlation rule. The processor is further configured to execute the instructions for performing a first aggregation using the received alarm data for the plurality of nodes based on at least one of domain, vendor, equipment type, classification, or geographic information. The processor is further configured to execute the instructions for associating each of the aggregated alarm data with a corresponding correlation rule of the at least one correlation rule. The processor is further configured to execute the instructions for determining a number of nodes of the plurality of nodes that are associated with each of the at least one correlation rule. The processor is further configured to execute the instructions for determining whether the determined number of nodes is equal to or greater than at least one threshold value based on the mass outage rule. The processor is further configured to execute the instructions for generating an incident report in response to the number of nodes being equal to or greater than the at least one threshold value. In some embodiments, the processor is further configured to execute the instructions for wirelessly transmitting the generated incident report to a device controllable by a repair technician. In some embodiments, a first node of the plurality of nodes has a different base station type from a second node of the plurality of nodes. In some embodiments, each of the plurality of nodes had a same base station type. In some embodiments, the processor is configured to execute the instructions for receiving the at least one mass outage rule comprising a plurality of threshold values, wherein the at least one threshold value is one of the plurality of threshold values; and determining an importance value of a mass outage based on the plurality of threshold values; and generating the incident report including the determined importance value. In some embodiments, the processor is configured to execute the instructions for performing a second aggregation using the number of pieces of equipment in the telecommunication network based on the at least one correlation rule, alarm codes of the received alarm data, and geographic information.