Efficient policy conflict detection
AssigneeMotorola, Inc.
InventorsGregory W. Cox, David L. Raymer, John C. Strassner
Life of this patent
Estimating the term…
Abstract
A method and computer program product for detecting a policy conflict in a managed system includes examining a plurality of policy rules for overlapping policy targets, in response to finding no overlapping policy targets, reporting that the policy rules do not conflict, and in response to finding overlapping policy targets, examining the plurality of policy rules for at least two rules having a same condition and a same event, and, in response to not finding at least two rules having a same condition and a same event, reporting that the policy rules do not conflict.
Claims13
A method for detecting a policy conflict in a managed system, the method comprising:
- examining a plurality of policy rules for overlapping policy targets;
- and
- in response to no policy target overlaps being determined, reporting that the plurality of policy rules do not conflict.
A method for detecting a policy conflict in a managed system, the method comprising:
- creating a model of policy targets, the model capable of simulating the effects of applying policy rules to the policy targets;
- applying the action of the rules to the model;
- comparing at least two resulting macro states of the model with each other;
- and
- in response to the at least two macro states differing, reporting a conflict.
A computer program product for detecting a policy conflict in a managed system, the computer program product comprising:
- a storage medium readable by a processing circuit and storing instructions for execution by the processing circuit for performing a method comprising:
- examining a plurality of policy rules for overlapping policy targets;
- in response to finding no overlapping policy targets, reporting that the policy rules do not conflict;
- and
- in response to finding overlapping policy targets:
- examining the plurality of policy rules for at least two rules having a same condition and a same event;
- and
- in response to not finding at least two rules having a same condition and a same event, reporting that the policy rules do not conflict.
Dependencies are inferred from the claim text.