Policy enforcement as a service for third party platforms with asynchronous user tracking mechanisms

A computing system, comprising:

• a processing system communicatively coupled with a memory system, wherein the processing system is configured to:
• collect and store one or more sets of policy parameter values from one or more third party platforms (TPPs), respectively, wherein each set of policy parameter values corresponds to a service provided by a TPP of the one or more of TPPs, and each set of policy parameter values defines when to issue a user suspension for the service provided by the TPP,
• collect and store one or more usage metric sets provided by the one or more TPPs, respectively, based on receipt of user requests to access services provided by respective TPPs of the one or more TPPs, wherein each usage metric set includes one or more usage metrics for one or more users, respectively, the usage metrics being based on interactions between the one or more users and the respective TPP,
• generate or update alert attribute value pairs (AVPs) based on each received user request to access the service, each alert AVP including a value to indicate a client identifier (client_id) of a user or user system that sent a user request to access an individual service provided by an individual TPP, and an attribute to indicate a policy identifier (policy_id), the policy_id to indicate a set of policy parameter values defined by the individual TPP to correspond to the individual service,
• store each alert AVP in a message queue,
• compare, in response to obtaining a dequeued alert AVP, each of the usage metrics to a corresponding one of the sets of policy parameter values to identify users that have committed one or more infractions for one or more services, each of the one or more infractions being a violation of the policy indicated by the policy_id of the dequeued alert AVP that is committed by a user indicated by the client_id of the dequeued alert AVP,
• generate, in response to identification of ones of the identified users that have committed one or more infractions, infraction records indicative of a the infractions committed by corresponding ones of the identified users, and
• generate or update a suspension database object (DBO) to include the infraction records, each infraction record comprising:
• an infraction client_id field to indicate a client_id of a user that has committed one or more infractions, and a suspension period field to indicate a suspension period, the suspension period being a period that a user indicated by the suspended client_id field is to be prevented from accessing the service, and
• delete an individual infraction record from the suspension DBO when a suspension period indicated by the individual infraction record has expired;
• and
• a communication system communicatively coupled with the processing system, the communication system configured to:
• transmit suspension indications to corresponding ones of the TPPs, the suspension indications usable by the corresponding ones of the TPPs to determine whether to deny requests from the ones of the identified users for respective services;
• and
• transmit reinstatement messages to corresponding ones of the TPPs when the suspension period indicated by corresponding infraction records has expired, the reinstatement message to indicate that the suspension period indicated by the individual corresponding infraction records has expired.

A system for providing Policy Enforcement as a Service (PEaaS) comprising:

• a plurality of third party platforms (TPPs), each of which includes at least one hardware processor and a memory, and each TPP of the plurality of TPPs is to provide one or more services and implement a PEaaS interface, each TPP of the plurality of TPPs is to register a policy for corresponding ones of the one or more services with the PEaaS interface, and each of the services are to stream user and service parameters to the PEaaS interface;
• one or more application servers, each of which includes at least one hardware processor and a memory, the one or more application servers to implement a PEaaS web service (PEaaS-WS) that is in communication with each PEaaS interface implemented by each of the plurality of TPPs, the PEaaS-WS to:
• obtain registered policies and the user and service parameters from each TPP via respective PEaaS interfaces,
• store the registered policies and the user and service parameters in respective databases,
• generate alerts, each generated alert comprising an alert attribute value pair (AVP), each alert AVP comprising a value to indicate a user identifier of a user or user system that requests use of a service of the one or more services provided by an individual TPP and an attribute to indicate a policy identifier (policy_id), the policy_id to indicate a policy associated with the requested service as defined by the individual TPP, and
• store the generated AVPs in a message queue;
• and
• a PEaaS backend system (PEaaS-BES) in communication with the PEaaS-WS, the PEaaS-BES to:
• generate or update a suspension database object (DBO) to include infraction records for each user indicated by a dequeued alert that is been determined to have violated corresponding policy indicated by the dequeued alert, each infraction record comprising:
• an infraction client_id field to indicate a client_id of a user that has committed one or more infractions, and a suspension period field to indicate a suspension period, the suspension period being a period of time that a user indicated by the suspended client_id field is to be prevented from accessing the service,
• delete an individual infraction record from the suspension DBO when a suspension period indicated by an individual suspension record has expired,
• transmit a suspension indications to the PEaaS-WS for delivery to corresponding ones of the TPPs, the suspension indications usable by the corresponding ones of the TPPs to determine whether to deny requests from the ones of the identified users for respective services, and
• transmit reinstatement messages to the PEaaS-WS for delivery to corresponding ones of the TPPs when the suspension period indicated by the individual infraction record has expired, the reinstatement message to indicate that the suspension period indicated by the individual infraction record has expired.