Back to results
US 8,898,304 B2Granted
Managing access to resources of computer systems using codified policies generated from policies
AssigneeCA, Inc.
InventorEitan Hadar
Life of this patent
Estimating the term…
Abstract
A computer system is disclosed that includes a policy repository, a policy codifier, and a policy manager. The policy repository contains policies. The policy codifier generates codified policies from the policies. The policy manager manages access to resources of the computer system responsive to the codified policies. Related methods and computer program products for operating computer systems are also disclosed.
Claims16
A computer system comprising:
- processor circuit;
- and
- memory device coupled to the processor circuit and comprising computer readable program code that when executed by the processor circuit causes the processor circuit to perform operations comprising:
- accessing a policy repository that contains policies to manage access to resources of the computer system;
- generating codified policies from the policies, wherein the generating comprises:
- categorizing semantic terms in the policies, and
- substituting representations of the categories for the semantic terms to generate the codified policies;
- and
- condensing a structure of a selected one of the codified policies by de-duplicating identical entries within the structure;
- communicating the condensed structure for the selected codified policy to a managed machine to manage access to resources of the computer system used by the managed machine.
7 more elements
A computer system comprising:
- processor circuit;
- and
- memory device coupled to the processor circuit and comprising computer readable program code that when executed by the processor circuit causes the processor circuit to perform operations comprising:
- accessing a policy repository that contains policies to manage access to resources of the computer system;
- generating codified policies from the policies, wherein the generating comprises:
- categorizing semantic terms in the policies, and
- substituting representations of the categories for the semantic terms to generate the codified policies;
- and
- associating the codified policies with a plurality of managed machines;
- selecting among the codified policies to communicate to selected ones of the managed machines in response to comparing similarity of the codified policies associated with different ones of the managed machines;
- and
- communicating the selected codified policies to the selected ones of the managed machines.
9 more elements
A method of operating a computer system, the method comprising:
- accessing a policy repository that contains policies to manage access to resources of the computer system;
- generating codified policies from the policies, wherein the generating comprises:
- categorizing semantic terms in the policies, and
- substituting representations of the categories for the semantic terms to generate the codified policies;
- and
- condensing a structure of a selected one of the codified policies by de-duplicating identical entries within the structure;
- communicating the condensed structure for the selected codified policy to a managed machine to manage access to resources of the computer system used by the managed machine.
4 more elements
A method of operating a computer system, the method comprising:
- accessing a policy repository that contains policies to manage access to resources of the computer system;
- generating codified policies from the policies, wherein the generating comprises:
- categorizing semantic terms in the policies, and
- substituting representations of the categories for the semantic terms to generate the codified policies;
- and
- associating the codified policies with a plurality of managed machines;
- selecting among the codified policies to communicate to selected ones of the managed machines in response to comparing similarity of the codified policies associated with different ones of the managed machines;
- and
- communicating the selected codified policies to the selected ones of the managed machines.
6 more elements
Dependencies are inferred from the claim text.