Back to results
US 10,855,540 B2Granted
System and method for policy based networked application management
AssigneeHitachi, Ltd.
InventorSatoshi Kaneko
Life of this patent
Estimating the term…
Abstract
Example implementations described herein are directed to systems and methods for policy based management of access to networked applications in compliance with rules or policies. An example implementation includes a method to manage access to a program where in response to receiving a request, the method identifies a source location indicated by program information and a destination location indicated by user information, determines a rule type based on the source location and the destination location, determines a rule for the program based on the source location, the destination location, and the rule type, applies a procedure to approve access based on the rule; and allows access to the program based on successful completion of the procedure.
Claims16
A method for access management of programs comprising:
- in response to receiving a request from a user that comprises program information and user information:
- identifying a source location and an access location of a program indicated by the program information and a destination location indicated by the user information, the source location of a program being a geographic location where the program was designed or is currently stored, the access location being a geographic location where the program can be accessed, and the destination location being a geographic location of the user;
- determining that the program is valid based on one or more rules being associated with the program;
- determining a rule type based on the source location and the destination location;
- determining a rule for the program based on the source location, the destination location, and the rule type;
- applying a procedure to approve access to the program based on the rule;
- determining whether the program can be accessed based on the destination location indicated by the user information and the access location;
- if the program can be accessed based on the access location, and can be accessed at the destination location:
- configuring the program, by the procedure, for access at the destination location indicated by the user information, and
- allowing access to the program at the destination location based on successful completion of the procedure, and
- updating, by the procedure, a program table with the program configuration;
- and
- if the program can be accessed based on the access location, but cannot be accessed at the destination location:
- providing a clone of the program based on successful completion of the procedure, and
- updating the program information in the program table with an indication that the clone was provided to the destination location indicated by the user information.
12 more elements
A method for access approval to networked programs comprising:
- in response to receiving an event of a program and a program identifier:
- determining a geographic destination location of a user based on user information related to the user included in a user table;
- determining a source location and an access location of the program, included in a program table, based on the program identifier, the source location of the program being a geographic location where the program was designed or is currently stored and the access location being a geographic location where the program can be accessed;
- determining that the program is valid based on one or more rules associated with the program;
- determining a rule assigned to the program based on the program identifier and an application table, the source location, and the geographic destination;
- applying a procedure to approve access to the program based on the rule;
- determining whether the program can be accessed based on the geographic destination location and the access location;
- if the program can be accessed based on the access location, and can be accessed at the geographic destination location:
- configuring the program for the user, by the procedure, for access at the geographic destination location, and
- allowing access to the program at the geographic destination location based on successful completion of the procedure, and
- updating, by the procedure, the program table with the program configuration;
- and
- if the program can be accessed based on the access location, but cannot be accessed at the geographic destination location:
- providing a clone of the program based on successful completion of the procedure, and
- updating the program information in the program table with an indication that the clone was provided to the geographic destination.
12 more elements
A non-transitory computer-readable medium storing instructions for a policy based network application management system including a processing device configured to:
- identify a source location and an access location of a program indicated by program information and a destination location indicated by user information, the source location of a program being a geographic location where the program was designed or is currently stored the access location being a geographic location where the program can be accessed, and the destination location being a geographic location for a user;
- determine that the program is valid based on one or more rules being associated with the program;
- determine a rule type based on the source location and the destination location;
- determine a rule for the program based on the source location, the destination location, and the rule type;
- apply a procedure to approve access to the program based on the rule;
- determining whether the program can be accessed based on the destination location indicated by the user information and the access location;
- if the program can be accessed based on the access location, and can be accessed at the destination location:
- configure the program, by the procedure, for access at the destination location indicated by the user information, and
- allow access to the program at the destination location based on successful completion of the procedure;
- updating, by the procedure, a program table with the program configuration;
- and
- if the program can be accessed based on the access location, but cannot be accessed at the destination location:
- provide a clone of the program based on successful completion of the procedure, and
- update the program information in the program table with an indication that the clone was provided to the destination location indicated by the user information.
11 more elements
Dependencies are inferred from the claim text.