Methods and systems for interactive evaluation using dynamically generated, interactive resultant sets of policies
AssigneeCitrix Systems, Inc.
InventorRichard Hayton
Life of this patent
Estimating the term…
Abstract
A method for interactive policy evaluation using dynamically generated, interactive resultant sets of policies includes the step of receiving, by a graphical user interface, at least one of: a description of a client requesting access to a resource, a description of the resource, and a description of a method of access requested by the client. The graphical user interface displays at least one policy applicable to the client request for access to the resource. The graphical user interface displays a decision made by applying the at least one policy to the received description.
Claims21
A method for interactive policy evaluation using dynamically generated interactive resultant sets of policies, the method comprising:
- receiving, by a graphical user interface, at least one of:
- a description of a client requesting access to a resource,
- a description of the resource,
- a description of a method of access requested by the client;
- displaying, by the graphical user interface, at least one policy applicable to the at least one received description;
- displaying, by the graphical user interface, a decision made by applying the at least one policy to the at least one received description;
- displaying, by the graphical user interface, a first description of a first policy aspect;
- wherein the first policy aspect resulted in denial of access to at least one of a client, resource, or method of access in the case the client, resource, or method of access has been denied, the first description comprising a summary of the first policy aspect that resulted in denial of access, wherein the graphical user interface includes a user interface element for requesting an override of the first policy aspect and
- displaying, by the graphical user interface, a second description of a second policy aspect;
- wherein the second policy aspect resulted in a grant of access to at least one of a client, resource, or method of access in the case the client, resource, or method of access has been granted, the second description comprising a summary of the second policy aspect that resulted in the grant of access.
A system for interactive policy evaluation using dynamically generated interactive resultant sets of policies, the system comprising:
- a graphical user interface, executing on a client device and configured to receive at least one of:
- a description of a client requesting access to a resource,
- a description of the resource,
- a description of a method of access requested by the client;
- a first element in the graphical user interface configured to display at least one policy applicable to the at least one received description;
- a second element in the graphical user interface configured to display a decision made by applying the at least one policy to the at least one received description;
- a third element in the graphical user interface configured to display a description of a first policy aspect;
- wherein the first policy aspect resulted in denial of access to at least one of a client, resource, or method of access in the case a client, resource, or method of access has been denied, the first description comprising a summary of the first policy aspect that resulted in denial of access, wherein the graphical user interface includes a user interface element for requesting an override of the first policy aspect and
- a fourth element in the graphical user interface configured to display a second description of a second policy aspect wherein the second policy aspect resulted in a grant of access to at least one of a client, resource, or method of access in the case the client, resource, or method of access has been granted, the second description comprising a summary of the second policy aspect that resulted in the grant of access.
Dependencies are inferred from the claim text.