Auditing-as-a-service
AssigneeNCR Corporation
InventorMichael Schechter
Life of this patent
Estimating the term…
Abstract
Auditing information is captured from a processing stack of an invoked application. An annotation customized for that invocation context is processed to filter and/or add additional audition information available from the processing stack. The customized auditing information is then sent to a destination based on a processing context of the invoked application when the invoked application completes processing. In an embodiment, the customized auditing information is housed in a data store and an interface is provided for customized query processing, report processing, event processing, a notification processing.
Claims19
A method, comprising:
- obtaining an annotation for an application invoked within a processing context;
- acquiring first information associated with auditing data from a processing stack that is associated with the application by obtaining first types of auditing data as defined in the annotation, wherein the first types of auditing data are associated with a first type of data, wherein the first type of data at least comprises a function name processed by the application, a calling application name for a calling application that called the application, an operation result provided by a function associated with the function name, originating host identifier for a host device, and classification data for the audit data;
- adding a customized tag to the first information based on an expression language statement processed against the first information by parsing or applying the expression language statement defined in the annotation to identify a pattern of data available from the processing stack and including with the auditing data, wherein the expression language statement is defined by a user;
- modifying the first information to produce second information by processing transformations defined in the annotation, wherein processing the transformation further includes formatting second information based on a data format defined in the annotation;
- and
- storing the second information in an object that is accessible when the application exits processing.
A method, comprising:
- process a service provider interface with an annotation upon invocation of a micro service;
- obtaining auditing information from a processing stack during the processing of the micro service based on types of auditing information defined in the annotation, wherein a first type of data at least comprises a function name processed by the micro service, a calling application name for a calling application that called the micro service, an operation result provided by a function associated with the function name, originating host identifier for a host device, and classification data for the audit information;
- adding a customized tag to the auditing information based on an expression language statement processed against the auditing information by parsing or applying the expression language statement defined in the annotation to identify a pattern of data available from the processing stack and including with the auditing information, wherein the expression language statement is defined by a user;
- processing transformations defined in the annotation on the auditing information to transform the auditing information;
- retaining the auditing information that is transformed in a data structure when the micro service exits processing;
- obtaining the auditing information from the data structure;
- and
- sending the auditing information to one or more destination resources based on a processing context.
A system, comprising:
- a server that includes a processor and a non-transitory computer-readable storage medium having executable instructions;
- the executable instructions when executed by the processor from the non-transitory computer-readable storage medium cause the processor to:
- obtain pre-defined audit information from a processing stack upon invocation of an application for processing within a processing context, wherein types of pre-defined audit information is obtained from an annotation associated with the application, wherein a first type of data at least comprises a function name processed by the application, a calling application name for a calling application that called the application, an operation result provided by a function associated with the function name, originating host identifier for a host device, and classification data for the pre-defined audit information;
- add a customized tag to the pre-defined audit information based on an expression language statement processed against the pre-defined audit information by parsing or applying the expression language statement defined in the annotation to identify a pattern of data available from the processing stack and including with the pre-defined audit information, wherein the expression language statement is defined by a user;
- modify the pre-defined audit information by processing transformations defined in the annotation to produce modified audit information;
- store the modified audit information in an object that is accessible when the application exits processing;
- and
- direct the modified audit information to a destination associated with the processing context.
Dependencies are inferred from the claim text.