US 7,735,115 B2 · System which enforces policy for virtual private organization and method thereof

Abstract

System formed of a group of management entities including an enforcement environment of a policy description program, and service, data, software and hardware, in which the enforcement environment of the policy description program correlates resources to be managed (group) with a management entity which is to enforce a policy and includes a dynamic conversion unit, an enforcement unit, a unit of an interface between the management entities and a unit of an interface to the resources to be managed (group).

Drawings

Drawings are temporarily unavailable. Open the PDF at USPTO

Drawings

Claims29

Dependent claims

A system which enforces a policy for a virtual private organization formed of a plurality of management entities, each of said plurality of management entities comprising:

a processor;
a memory storing software modules, said software modules comprising a policy enforcement environment;
and
resources to be managed, wherein:
a management console which manages said plurality of management entities distributes a policy description program to each of said plurality of management entities,
each of said plurality of management entities correlates an access to information of a class in said policy description program with an information request to said resources to be managed or other said management entity, and correlates operation to a class in said policy description program with an enforcement request to said resources to be managed or other said management entity, and
the classes are classes in an object-oriented program.

4 more elements

A method of enforcing a policy for a virtual private organization formed of a plurality of management entities, each of said plurality of management entities comprising a policy enforcement environment and resources to be managed, said method comprising:

distributing a policy description program from a management console which manages said plurality of management entities to each of said plurality of management entities,
in each of said plurality of management entities, correlating an access to information of a class in said policy description program with an information request to said resources to be managed or other said management entity, and
correlating operation to a class in said policy description program with an enforcement request to said resources to be managed or other said management entity,
wherein the classes are classes in an object-oriented program.

1 more element

A program which conducts policy enforcement for a virtual private organization formed of a plurality of management entities, each of said plurality of management entities comprising a policy enforcement environment and resources to be managed, said program comprising:

software instructions for enabling a computer to perform predetermined operations;
and
a tangible computer readable medium bearing said software instructions;
said predetermined operations comprising:
distributing a policy description program from a management console which manages said plurality of management entities to each of said plurality of management entities,
correlating an access to information of a class in said policy description program with an information request to said resources to be managed or other said management entity by said management entity, and
correlating operation to a class in said policy description program with an enforcement request to said resources to be managed or other said management entity,
wherein the classes are classes in an object-oriented program.

5 more elements

Dependencies are inferred from the claim text.

Description11,156 words

Summary4,470 words

#1. Field of the Invention

#The present invention relates to a system which automatizes construction, maintenance, updating and destruction procedures of a virtual private organization that delivers services and information on the Internet to enforce a policy for a management entity which is an abstraction of service, data, software and hardware forming the virtual private organization and, more particular, a system of enforcing a policy for a virtual private organization which system enables automation of a maintenance procedure by failure recovery and an updating procedure at the time of scale expansion, and a method therefore.

#2. Description of the Related Art

Brief description of the drawings17 figures

#The present invention will be understood more fully from the detailed description given herebelow and from the accompanying drawings of the preferred embodiment of the invention, which, however, should not be taken to be limitative to the invention, but are for explanation and understanding only.

#In the drawings:

#FIG. 1 is a block diagram of a virtual private organization that provides content distribution with each other, which shows a structure of a policy enforcing system according to a first embodiment of the present invention;

Detailed description6,178 words

#The preferred embodiment of the present invention will be discussed hereinafter in detail with reference to the accompanying drawings. In the following description, numerous specific details are set forth in order to provide a thorough understanding of the present invention. It will be obvious, however, to those skilled in the art that the present invention may be practiced without these specific details. In other instance, well-known structures are not shown in detail in order to unnecessary obscure the present invention.

#With reference to FIG. 1, a policy enforcing system according to a first embodiment of the present invention includes an operator management console 102, a directory management entity 103 and content management entities 104 to 107 in a virtual private organization 101 set up on an internet 100 to provide content distribution with each other.

#With reference to FIG. 2, the operator management console 102 is formed of three data bases, a policy data base 200, a user information data base 201 and a management information data base 202, a static conversion unit 205 and a policy distribution interface (IF) 206.

Facts

Application

11/037,124Filed 19 Jan 2005

Priority

JP 2004-01062219 Jan 2004

Published

US 2005/0160296 A121 Jul 2005

Granted

8 Jun 2010

Term ends

31 Jan 2028

Estimated · how

20 years from earliest known nonprovisional domestic filing plus recorded patent term adjustment, including 1,107 days of adjustment. Maintenance-fee lapses, terminal disclaimers and statutory extensions have not been checked. The continuity chain may be incomplete; this is not an enforceability determination.

Classification4 codes

H04L 63/102
For controlling access to devices or network resources: entity profiles
H04L 41/0894
Configuration management of networks or network elements: policy-based network configuration management
H04L 41/0897
Bandwidth or capacity management, i.e. automatically increasing or decreasing capacities: by horizontal or vertical scaling of resources, or by…
H04L
Digital communication

Timeline

19 Jan 2004Priority claimedJP 2004-010622
19 Jan 2005Application filedUS 11/037,124
19 Jan 2005Assigned to NEC Corporationassignment of assignor's interest
21 Jul 2005PublishedUS 2005/0160296 A1
8 Jun 2010GrantedUS 7,735,115 B2
12 Oct 2026TodayWithin its term
31 Jan 2028Term endsEstimated, includes 1,107 days of adjustment

System which enforces policy for virtual private organization and method thereof

Life of this patent

System which enforces policy for virtual private organization and method thereof

Life of this patent

Life of this patent

Abstract

Drawings

Drawings

Claims29

Description11,156 words

Drawings

Classification4 codes

Life of this patent

Description11,156 words