公开(公告)号：US11075956B2

公开(公告)日：2021-07-27

申请号：US16868946

申请日：2020-05-07

申请人： INTERNATIONAL BUSINESS MACHINES CORPORATION

发明人： Thomas C. Burke ,  Mario E. De Armas ,  Oswaldo Gago ,  Gaurang Shah ,  Maria E. Smith

IPC分类号： G06F15/173 ,  H04L29/06 ,  H04L12/927 ,  H04L12/813 ,  H04L12/24

摘要： At least one set of enforceable policy provisions is identified within at least one defined service level policy to be enforced during runtime by a policy enforcement point (PEP). Each set of enforceable policy provisions includes a policy subject, a reference to a policy domain, and at least one assertion. Each identified set of enforceable policy provisions is transformed by the PEP into at least one runtime-executable processing rule that each includes at least one PEP processing action that each represents an atomic unit of policy enforcement level behavior executable by the PEP to enforce the respective at least one assertion against runtime objects associated with the policy subject within an area of runtime policy enforcement specified by the policy domain.

公开(公告)号：US10263857B2

公开(公告)日：2019-04-16

申请号：US15147760

申请日：2016-05-05

申请人： International Business Machines Corporation

发明人： Thomas C. Burke ,  Mario E. De Armas ,  Oswaldo Gago ,  Srinivasan Muralidharan ,  Gaurang Shah ,  Maria E. Smith

IPC分类号： H04L12/24 ,  H04L29/06

摘要： Source policy identification information of a registry service policy is captured. The source policy identification information includes a source policy identifier (ID), a source policy name, and a source policy uniform resource locator (URL). The captured source policy identification information is correlated with configured policy enforcement processing rules and processing actions using a source policy reference key. Per-transaction service policy enforcement information that documents policy enforcement activities performed by a policy enforcement point (PEP) is captured. The captured per-transaction service policy enforcement information is correlated with the captured source policy identification information using the source policy reference key.

公开(公告)号：US09363289B2

公开(公告)日：2016-06-07

申请号：US13764895

申请日：2013-02-12

申请人： International Business Machines Corporation

发明人： Thomas C. Burke ,  Mario E. De Armas ,  Oswaldo Gago ,  Srinivasan Muralidharan ,  Gaurang Shah ,  Maria E. Smith

IPC分类号： G06F15/16 ,  H04L29/06

CPC分类号： H04L41/5019 ,  H04L41/5029 ,  H04L41/5032 ,  H04L63/20

摘要： Source policy identification information of a registry service policy is captured. The source policy identification information includes a source policy identifier (ID), a source policy name, and a source policy uniform resource locator (URL). The captured source policy identification information is correlated with configured policy enforcement processing rules and processing actions using a source policy reference key. Per-transaction service policy enforcement information that documents policy enforcement activities performed by a policy enforcement point (PEP) is captured. The captured per-transaction service policy enforcement information is correlated with the captured source policy identification information using the source policy reference key.

摘要翻译： 捕获注册服务策略的源策略标识信息。 源策略识别信息包括源策略标识符（ID），源策略名称和源策略统一资源定位符（URL）。 捕获的源策略识别信息与配置的策略执行处理规则和使用源策略参考密钥的处理动作相关联。 捕获由策略执行点（PEP）执行的策略执行活动的每个事务服务策略执行信息。 捕获的每个事务服务策略执行信息使用源策略参考密钥与捕获的源策略标识信息相关联。

公开(公告)号：US20140230006A1

公开(公告)日：2014-08-14

申请号：US13764895

申请日：2013-02-12

申请人： INTERNATIONAL BUSINESS MACHINES CORPORATION

发明人： Thomas C. Burke ,  Mario E. De Armas ,  Oswaldo Gago ,  Srinivasan Muralidharan ,  Gaurang Shah ,  Maria E. Smith

IPC分类号： H04L29/06

CPC分类号： H04L41/5019 ,  H04L41/5029 ,  H04L41/5032 ,  H04L63/20

摘要： Source policy identification information of a registry service policy is captured. The source policy identification information includes a source policy identifier (ID), a source policy name, and a source policy uniform resource locator (URL). The captured source policy identification information is correlated with configured policy enforcement processing rules and processing actions using a source policy reference key. Per-transaction service policy enforcement information that documents policy enforcement activities performed by a policy enforcement point (PEP) is captured. The captured per-transaction service policy enforcement information is correlated with the captured source policy identification information using the source policy reference key.

摘要翻译： 捕获注册服务策略的源策略标识信息。 源策略识别信息包括源策略标识符（ID），源策略名称和源策略统一资源定位符（URL）。 捕获的源策略识别信息与配置的策略执行处理规则和使用源策略参考密钥的处理动作相关联。 捕获由策略执行点（PEP）执行的策略执行活动的每个事务服务策略执行信息。 捕获的每个事务服务策略执行信息使用源策略参考密钥与捕获的源策略标识信息相关联。

公开(公告)号：US20200267188A1

公开(公告)日：2020-08-20

申请号：US16868946

申请日：2020-05-07

申请人： INTERNATIONAL BUSINESS MACHINES CORPORATION

发明人： Thomas C. Burke ,  Mario E. De Armas ,  Oswaldo Gago ,  Gaurang Shah ,  Maria E. Smith

IPC分类号： H04L29/06 ,  H04L12/24 ,  H04L12/813 ,  H04L12/927

摘要： At least one set of enforceable policy provisions is identified within at least one defined service level policy to be enforced during runtime by a policy enforcement point (PEP). Each set of enforceable policy provisions includes a policy subject, a reference to a policy domain, and at least one assertion. Each identified set of enforceable policy provisions is transformed by the PEP into at least one runtime-executable processing rule that each includes at least one PEP processing action that each represents an atomic unit of policy enforcement level behavior executable by the PEP to enforce the respective at least one assertion against runtime objects associated with the policy subject within an area of runtime policy enforcement specified by the policy domain.

公开(公告)号：US10666514B2

公开(公告)日：2020-05-26

申请号：US13764847

申请日：2013-02-12

申请人： International Business Machines Corporation

发明人： Thomas C. Burke ,  Mario E. De Armas ,  Oswaldo Gago ,  Gaurang Shah ,  Maria E. Smith

IPC分类号： H04L12/24

摘要： A peer policy object named with a policy enforcement metric context identifier is created at a first policy enforcement point (PEP) platform of a group of peered PEP platforms. The peer policy object uniquely identifies a registered service policy to be enforced during runtime as a shared runtime policy enforcement activity by the group of peered PEP platforms within a peered policy enforcement deployment. The peer policy object named with the policy enforcement metric context identifier is deployed to at least one other peered PEP platform within the peered policy enforcement deployment to initiate the shared runtime policy enforcement activity by the group of peered PEP platforms. At least one runtime policy enforcement metric associated with runtime enforcement of the registered service policy is shared with the at least one other peered PEP platform during runtime using the policy enforcement metric context identifier.

公开(公告)号：US20160248639A1

公开(公告)日：2016-08-25

申请号：US15147760

申请日：2016-05-05

申请人： International Business Machines Corporation

发明人： Thomas C. Burke ,  Mario E. De Armas ,  Oswaldo Gago ,  Srinivasan Muralidharan ,  Gaurang Shah ,  Maria E. Smith

IPC分类号： H04L12/24

CPC分类号： H04L41/5019 ,  H04L41/5029 ,  H04L41/5032 ,  H04L63/20

摘要： Source policy identification information of a registry service policy is captured. The source policy identification information includes a source policy identifier (ID), a source policy name, and a source policy uniform resource locator (URL). The captured source policy identification information is correlated with configured policy enforcement processing rules and processing actions using a source policy reference key. Per-transaction service policy enforcement information that documents policy enforcement activities performed by a policy enforcement point (PEP) is captured. The captured per-transaction service policy enforcement information is correlated with the captured source policy identification information using the source policy reference key.

摘要翻译： 捕获注册服务策略的源策略标识信息。 源策略识别信息包括源策略标识符（ID），源策略名称和源策略统一资源定位符（URL）。 捕获的源策略识别信息与配置的策略执行处理规则和使用源策略参考密钥的处理动作相关联。 捕获由策略执行点（PEP）执行的策略执行活动的每个事务服务策略执行信息。 捕获的每个事务服务策略执行信息使用源策略参考密钥与捕获的源策略标识信息相关联。

公开(公告)号：US20160119383A1

公开(公告)日：2016-04-28

申请号：US14989268

申请日：2016-01-06

申请人： International Business Machines Corporation

发明人： Thomas C. Burke ,  Mario E. De Armas ,  Oswaldo Gago ,  Gaurang Shah ,  Maria E. Smith

IPC分类号： H04L29/06

摘要： At least one set of enforceable policy provisions is identified within at least one defined service level policy to be enforced during runtime by a policy enforcement point (PEP). Each set of enforceable policy provisions includes a policy subject, a reference to a policy domain, and at least one assertion. Each identified set of enforceable policy provisions is transformed by the PEP into at least one runtime-executable processing rule that each includes at least one PEP processing action that each represents an atomic unit of policy enforcement level behavior executable by the PEP to enforce the respective at least one assertion against runtime objects associated with the policy subject within an area of runtime policy enforcement specified by the policy domain.

摘要翻译： 至少一组可执行的策略规定在至少一个定义的服务级别策略中被识别，以在运行时由策略执行点（PEP）执行。 每套可执行的政策规定包括政策主体，对政策领域的引用，以及至少一个断言。 每个确定的可执行策略规定集合被PEP转换成至少一个运行时可执行处理规则，每个运行时可执行处理规则每个包括至少一个PEP处理动作，每个PEP处理动作各自表示由PEP执行的策略执行级别行为的原子单元，以执行相应的 在策略域指定的运行时策略实施区域内，针对与策略主题关联的运行时对象，至少有一个断言。

公开(公告)号：US20140229594A1

公开(公告)日：2014-08-14

申请号：US13764847

申请日：2013-02-12

申请人： INTERNATIONAL BUSINESS MACHINES CORPORATION

发明人： Thomas C. Burke ,  Mario E. De Armas ,  Oswaldo Gago ,  Gaurang Shah ,  Maria E. Smith

IPC分类号： H04L12/24

摘要： A peer policy object named with a policy enforcement metric context identifier is created at a first policy enforcement point (PEP) platform of a group of peered PEP platforms. The peer policy object uniquely identifies a registered service policy to be enforced during runtime as a shared runtime policy enforcement activity by the group of peered PEP platforms within a peered policy enforcement deployment. The peer policy object named with the policy enforcement metric context identifier is deployed to at least one other peered PEP platform within the peered policy enforcement deployment to initiate the shared runtime policy enforcement activity by the group of peered PEP platforms. At least one runtime policy enforcement metric associated with runtime enforcement of the registered service policy is shared with the at least one other peered PEP platform during runtime using the policy enforcement metric context identifier.

摘要翻译： 在一组对等PEP平台的第一个策略执行点（PEP）平台上创建一个以策略执行度量标识上下文标识符命名的对等策略对象。 对等策略对象唯一地标识在执行期间被强制执行的注册服务策略，作为被对等的策略执行部署中的对等PEP平台组的共享运行时策略执行活动。 使用策略执行度量标识符标识符命名的对等策略对象被部署到对等策略执行部署中的至少一个其他对等PEP平台，以启动由对等PEP平台组进行的共享运行时策略执行活动。 在运行时间期间使用策略实施度量上下文标识符，与所注册的服务策略的运行时执行相关联的至少一个运行时策略实施度量与所述至少一个其他对等PEP平台共享。

公开(公告)号：US09270541B2

公开(公告)日：2016-02-23

申请号：US14224456

申请日：2014-03-25

申请人： International Business Machines Corporation

发明人： Thomas C. Burke ,  Mario E. De Armas ,  Oswaldo Gago ,  Gaurang Shah ,  Maria E. Smith

IPC分类号： G06F15/16 ,  H04L12/24 ,  H04L29/06 ,  H04L12/927 ,  H04L12/813

CPC分类号： H04L63/20 ,  H04L41/0893 ,  H04L41/5019 ,  H04L47/20 ,  H04L47/805 ,  H04L63/0281 ,  H04L63/102

摘要： At least one defined service policy to be enforced by a policy enforcement point (PEP) is obtained. The obtained at least one defined service policy is parsed to identify at least one set of enforceable policy provisions and the at least one set of enforceable policy provisions is identified. Each set of enforceable policy provisions includes a policy subject, a policy domain, and at least one assertion as the enforceable policy provisions within the at least one defined service policy. At least one runtime processing rule including at least one processing action usable by the PEP is created to enforce the policy subject, the policy domain, and the at least one assertion of each identified at least one set of enforceable policy provisions.

摘要翻译： 获得由策略执行点（PEP）执行的至少一个定义的服务策略。 所获得的至少一个定义的服务策略被解析以识别至少一组可执行的策略规定，并且识别出至少一组可强制执行的策略规定。 每套可执行的政策规定包括政策主体，政策领域以及至少一个断言，作为至少一个定义的服务政策中可执行的政策规定。 创建包括由PEP可用的至少一个处理动作的至少一个运行时处理规则，以执行策略主体，策略域以及每个所确定的至少一组可执行策略规定的至少一个断言。