# US 2019/0318019 A1 · System and Method for Run-Time Adaptable Policy Engine for Heterogeneous Managed Entities > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2019/0318019 A1 - Document ID: US20190318019A1 - Status: Published application - Kind: A1 - Application number: 15/952,181 - Filed: 2018-04-12 - Published: 2019-10-17 - Earliest claimed: 2018-04-12 - Assignees: CloudHealth Technologies, Inc. - Applicants: CloudHealth Technologies, Inc. - Inventors: Andi Abes; Adam Paul Schepis; Vikram K. Pillai; Joe Kinsella - Web page: https://patentgrep.com/patent/US20190318019A1 ## CPC - G06F 16/122: {using management policies (point-in-time backing up or restoration of persistent data G06F11/1446; file migration policies for HSM systems G06F16/185)} - G06F 16/211: {Schema design and management} - G06F 16/22: Indexing; Data structures therefor; Storage structures - G06F 9/45533: {Hypervisors; Virtual machine monitors} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A computer-implemented method of executing a policy-based operation on a shared computer infrastructure includes storing in a computer memory a dynamically extensible metadata system that is in communication with a processor that executes policy-based operations, where the dynamically extensible metadata system includes a data structure, a collection method, a policy processing method, and a policy condition. The collection method is then executed to collect data from a first computer resource in the shared computer infrastructure using a first data structure and from a second computer resource in the shared computer infrastructure using a second data structure, where the first data structure and the second data structure are different data structures. The collected data is then processed with the policy processing method to determine if the collected data meets the policy condition. ## Claims ### Claim 1 A computer-implemented method of executing a policy-based operation on a shared computer infrastructure, the method comprising: a) storing in a computer memory a dynamically extensible metadata system that is in communication with a processor that executes policy-based operations, the dynamically extensible metadata system comprising a data structure, a collection method, a policy processing method, and a policy condition; b) executing the collection method to collect data from a first computer resource in the shared computer infrastructure using a first data structure and from a second computer resource in the shared computer infrastructure using a second data structure, wherein the first data structure and the second data structure are different data structures; and c) processing the collected data with the policy processing method to determine if the collected data meets the policy condition. ### Claim 2 (depends on 1) The computer-implemented method of executing the policy-based operation on the shared computer infrastructure of claim 1 further comprising modifying the dynamically extensible metadata system by modifying at least one of the data structure, the collection method, the policy processing method, and the policy condition stored in the computer memory. ### Claim 3 (depends on 2) The computer-implemented method of executing the policy-based operation on the shared computer infrastructure of claim 2 wherein the modifying the dynamically extensible metadata system is performed at run time. ### Claim 4 (depends on 2) The computer-implemented method of executing the policy-based operation on the shared computer infrastructure of claim 2 wherein modifying the dynamically extensible metadata system comprises redefining the data structure to add a new virtual machine asset type. ### Claim 5 (depends on 2) The computer-implemented method of executing the policy-based operation on the shared computer infrastructure of claim 2 wherein modifying the dynamically extensible metadata system comprises redefining the policy processing method such that a policy rule for an existing service provider and a policy rule for a new service provider are the same policy rule. ### Claim 6 (depends on 2) The computer-implemented method of executing the policy-based operation on the shared computer infrastructure of claim 2 wherein modifying the dynamically extensible metadata system comprises redefining the policy processing method such that a policy rule is extended using a logical expression. ### Claim 7 (depends on 2) The computer-implemented method of executing the policy-based operation on the shared computer infrastructure of claim 2 wherein modifying the dynamically extensible metadata system comprises redefining the collection method to add a new collection channel. ### Claim 8 (depends on 1) The computer-implemented method of executing the policy-based operation on the shared computer infrastructure of claim 1 further comprising normalizing the collected data from the first computer resource and the collected data from the second computer resource such that the collected data from the first computer resource and the collected data from the second computer resource have a common class, thereby generating normalized data. ### Claim 9 (depends on 8) The computer-implemented method of executing the policy-based operation on the shared computer infrastructure of claim 8 where the processing collected data with the policy processing method to determine if the collected data meets the policy condition comprises processing the normalized data with the policy processing method to determine if the normalized data meets the policy condition. ### Claim 10 (depends on 8) The computer-implemented method of executing the policy-based operation on the shared computer infrastructure of claim 8 wherein the common class comprises a user. ### Claim 11 (depends on 8) The computer-implemented method of executing the policy-based operation on the shared computer infrastructure of claim 8 wherein the common class comprises an account. ### Claim 12 (depends on 8) The computer-implemented method of executing the policy-based operation on the shared computer infrastructure of claim 8 wherein the common class comprises an asset type. ### Claim 13 (depends on 8) The computer-implemented method of executing the policy-based operation on the shared computer infrastructure of claim 8 wherein the common class comprises a property of the collected data. ### Claim 14 (depends on 1) The computer-implemented method of executing the policy-based operation on the shared computer infrastructure of claim 1 wherein the collecting data using the collection method comprises streaming the collected data to generate a collected data stream. ### Claim 15 (depends on 1) The computer-implemented method of executing the policy-based operation on the shared computer infrastructure of claim 1 wherein the processing the collected data to determine if the collected data meets the policy condition comprises determining if the collected data meets the policy condition in near-real time. ### Claim 16 (depends on 1) The computer-implemented method of executing the policy-based operation on the shared computer infrastructure of claim 1 wherein the processing the collected data with the policy processing method to determine if the collected data meets the policy condition comprises determining whether the collected data meets the policy condition on demand. ### Claim 17 (depends on 1) The computer-implemented method of executing the policy-based operation on the shared computer infrastructure of claim 1 further comprising aggregating the collected data. ### Claim 18 (depends on 1) The computer-implemented method of executing the policy-based operation on the shared computer infrastructure of claim 1 further comprising evaluating the processed collected data to determine a new policy condition. ### Claim 19 (depends on 18) The computer-implemented method of executing the policy-based operation on the shared computer infrastructure of claim 18 further comprising storing in the computer memory the new policy condition. ### Claim 20 (depends on 1) The computer-implemented method of executing the policy-based operation on the shared computer infrastructure of claim 1 further comprising evaluating the processed collected data to determine a new data type. ### Claim 21 (depends on 1) The computer-implemented method of executing the policy-based operation on the shared computer infrastructure of claim 1 further comprising generating a violation trigger based on whether the collected data meets the policy condition. ### Claim 22 (depends on 1) The computer-implemented method of executing the policy-based operation on the shared computer infrastructure of claim 1 wherein the data structure comprises an asset. ### Claim 23 (depends on 1) The computer-implemented method of executing the policy-based operation on the shared computer infrastructure of claim 1 wherein the data structure comprises performance metrics. ### Claim 24 (depends on 1) The computer-implemented method of executing the policy-based operation on the shared computer infrastructure of claim 1 wherein the data structure comprises log entries. ### Claim 25 (depends on 1) The computer-implemented method of executing the policy-based operation on the shared computer infrastructure of claim 1 wherein the collection method comprises accepting inbound data from the shared computer infrastructure. ### Claim 26 (depends on 1) The computer-implemented method of executing the policy-based operation on the shared computer infrastructure of claim 1 wherein the policy condition comprises performance characteristics of a computer system. ### Claim 27 (depends on 1) The computer-implemented method of executing the policy-based operation on the shared computer infrastructure of claim 1 wherein the policy condition comprises cost characteristics of a computer system. ### Claim 28 (depends on 1) The computer-implemented method of executing the policy-based operation on the shared computer infrastructure of claim 1 wherein the policy condition comprises characteristics of software application processes. ### Claim 29 (depends on 1) The computer-implemented method of executing the policy-based operation on the shared computer infrastructure of claim 1 wherein the policy condition comprises characteristics of frequency and number of ingested events. ### Claim 30 (depends on 1) The computer-implemented method of executing the policy-based operation on the shared computer infrastructure of claim 1 wherein the policy processing method comprises calculating a number of failed logins. ### Claim 31 (depends on 1) The computer-implemented method of executing the policy-based operation on the shared computer infrastructure of claim 1 wherein the policy processing method comprises calculating a cost of executing a software application. ### Claim 32 (depends on 1) The computer-implemented method of executing the policy-based operation on the shared computer infrastructure of claim 1 wherein the first computer resource comprises a computer resource located in a first service provider domain and the second computer resource comprises a computer resource located in a second service provider domain that is different from the first service provider domain. ### Claim 33 (depends on 1) The computer-implemented method of executing the policy-based operation on the shared computer infrastructure of claim 1 wherein the first computer resource comprises a CPU. ### Claim 34 (depends on 1) The computer-implemented method of executing the policy-based operation on the shared computer infrastructure of claim 1 wherein the first computer resource comprises a data storage unit. ### Claim 35 (depends on 1) The computer-implemented method of executing the policy-based operation on the shared computer infrastructure of claim 1 wherein the first computer resource comprises a snapshot of virtual machine's disk file. ### Claim 36 (depends on 1) The computer-implemented method of executing the policy-based operation on the shared computer infrastructure of claim 1 wherein the first computer resource comprises a virtual machine. ### Claim 37 (depends on 1) The computer-implemented method of executing the policy-based operation on the shared computer infrastructure of claim 1 wherein the processing method comprises applying a logical expression to the collected data. ### Claim 38 A computer system for executing a policy-based operation on a shared computer infrastructure, the computer system comprising: a) a shared computer infrastructure comprising a first and a second computer resource; b) a memory comprising a dynamically extensible metadata system comprising a data structure, a collection method, a policy processing method, and a policy condition; c) a collector electrically connected to the shared computer infrastructure and electrically connected to the memory, the collector being configured to collect data from the first and second computer resource using the collection method; and d) a processor having an input electrically connected to an output of the collector and electrically connected to the memory, the processor receiving the collected data from the collector and being configured to process the collected data with the policy processing method to determine if the collected data meets the policy condition. ### Claim 39 (depends on 38) The computer system for executing a policy-based operation on a shared computer infrastructure of claim 38 wherein the processor is further configured to normalize the collected data from the first computer resource and the collected data from the second computer resource such that the collected data from the first computer resource and the collected data from the second computer resource have a common class, thereby generating normalized data. ### Claim 40 (depends on 38) The computer system for executing a policy-based operation on a shared computer infrastructure of claim 38 wherein the processor is further configured to modify at least one of the data structure, the collection method, the policy processing method, and the policy condition and store the modified at least one of the data structure, the collection method, the policy processing method, and the policy condition in the memory. ### Claim 41 (depends on 40) The computer system for executing a policy-based operation on a shared computer infrastructure of claim 40 wherein the storing of the modified at least one of the data structure, the collection method, the policy processing method, and the policy condition in the memory is performed at run time. ### Claim 42 (depends on 38) The computer system for executing a policy-based operation on a shared computer infrastructure of claim 38 wherein the first computer resource comprises a CPU. ### Claim 43 (depends on 38) The computer system for executing a policy-based operation on a shared computer infrastructure of claim 38 wherein the first computer resource comprises a snapshot of virtual machine's disk file. ### Claim 44 (depends on 38) The computer system for executing a policy-based operation on a shared computer infrastructure of claim 38 wherein the first computer resource comprise a virtual machine.