Invention Grant
- Patent Title: Policy based auditing of workflows
- Patent Title (中): 基于策略的工作流审核
-
Application No.: US12176101Application Date: 2008-07-18
-
Publication No.: US07769807B2Publication Date: 2010-08-03
- Inventor: Rhonda L. Childress , Edmond Chow , David Bruce Kumhyr , Stephen James Watt
- Applicant: Rhonda L. Childress , Edmond Chow , David Bruce Kumhyr , Stephen James Watt
- Applicant Address: US NY Armonk
- Assignee: International Business Machines Corporation
- Current Assignee: International Business Machines Corporation
- Current Assignee Address: US NY Armonk
- Agency: Yee & Associates, P.C.
- Agent William H. Steinberg; Rudolf O. Siegesmund
- Main IPC: G06F15/16
- IPC: G06F15/16

Abstract:
An auditing system is disclosed comprising a Policy Validation Mechanism Program (PVMP) that operates in conjunction with a Workflow Engine (WE), and a Policy Validation Server Program (PVSP) that operates on a Policy Validation Server (PVS) connected to the WE by a secure communication link. The PVMP converts a workflow to a workflow representation (WR) and sends the WR to the PVS. The PVSP compares the steps in the WR to a security policy identified for that WR and determines whether the WR is in compliance. In addition, the PVSP validates a checksum for the WR and logs the checksum for subsequent comparisons. The PVSP uses the checksum to determine whether a policy has changed during execution of the workflow. If the WR is not in compliance, if the checksum cannot be validated, or if a policy has changed, then a failure notification is sent to the WE. Otherwise, a success notification is sent to the WR.
Public/Granted literature
- US20090019123A1 Session Management Enhancements for Instant Messaging Applications Public/Granted day:2009-01-15
Information query