Merge rule wizard
View Patent ↗Various embodiments include a system comprising an interface coupled to a computer network, the interface operable to provide a merge rule wizard operable to generate one or more displayable dialog boxes that include selectable criteria for merging a plurality of sets of security rules into a single security rule base.
1. A system comprising:
a computer coupled to a computer network, the computer operable to execute a merge rule wizard operable to generate one or more displayable dialog boxes that include selectable criteria for merging a plurality of sets of security rules into a single security rule base;
the computer including at least one input device operable to allow a user to make a selection of one or more selectable fields displayed in at least one of the one or more displayable dialog boxes, the selectable fields corresponding to a merge criteria and associated with a field from a security rule, wherein the security rule comprises a plurality of fields with values;
wherein a first displayable dialog box generated by the merge rule wizard includes at least one selectable merge criteria, the at least one selectable merge criteria associated with a value of a field of a plurality of the security rules in the single security rule base; and
wherein upon receiving an indication that the selection of the one or more selectable fields has been completed, the merge rule wizard is operable to run a query on the single security rule base based on the selection of the at least one selectable merge criteria, and to automatically generate and display a listing of any located candidate merge rules.
2. The system of claim 1 , including a single enterprise manager operable to store the single security rule base and to manage a set of security policies for the computer network based on the single security rule base.
3. The system of claim 1 , wherein the single security rule base includes security rules for controlling authentication of a plurality of computer network users and security rules for controlling accessing one or more resources included in the computer network.
4. The system of claim 1 , wherein a second displayable dialog box generated by the merge rule wizard includes a plurality of edit boxes, each of the plurality of edit boxes operable to allow editing of the settings of values for a field of a given candidate merge rule.
5. The system of claim 1 , wherein a third displayable dialog box generated by the merge rule wizard includes a summary listing of all of the security rules in the single security rule base based on which the merge rules wizard is run.
6. The system of claim 1 , wherein the computer is further operable to display a warning message when a given one of the security rules in the single security rule base renders obsolete any other given one or more security rules in the single security rules base.
7. A merge rule wizard executing on one or more processors of a computer system connected to a computer network, the merge rule wizard including a method comprising:
displaying, on a display device communicatively coupled to a computer system, a dialog box including one or a plurality of elements for a set of security rules, the dialog box including a selectable merge rule criteria associated with one or more of the plurality of elements;
receiving an indication that a selection from the displayed dialog box of the selectable merge rule criteria has been completed for the one or more of the plurality of elements;
running a query on the set of security rules based on the selectable merge rule criteria to locate any candidate security rules in the set of security rules, the candidate security rules comprising a plurality of fields with values wherein each of the candidate security rules conforms to the selectable merge rule criteria; and
displaying a listing of any located candidate security rules.
8. The method of claim 7 , wherein running a query includes running a Structured Query Language query on the set of security rules.
9. The method of claim 7 , including displaying an all rules listing including a row associated with each of the security rules in the security rules database.
10. The method of claim 7 , including displaying a merge results rule editor dialog box including one or more edit boxes operable to allow a user to edit the entries included in a given element for a given candidate security rule.
11. The method of claim 7 , including displaying a results dialog box including a listing of a set of security rules included in a security rule base following running of the merge rule wizard on the security rule base and after any merges have been performed on each of the candidate security rules.
12. The method of claim 7 , wherein receiving an indication that a selection from the displayed dialog box of the selectable merge criteria has been completed for the one or more of the plurality of elements includes accepting a default selection for a merge criteria for a least one of the plurality of elements.
13. The method of claim 7 , wherein displaying the listing of any located candidate security rules includes displaying a selectable field for each of the candidate security rules being displayed, the selectable field operable to allow an indication as to whether the candidate security rule associated with the selection fields is accepted or rejected.
14. The method of claim 7 , wherein running a query on the set of security rules based on the selectable merge rule criteria further comprises adding a new security rule to the security rule base, running a query on the set of security rules including the added new security rule, and generating a warning if the new rule will obsolete any one or more of an existing security rule in the security rule base.
15. The method of claim 7 , wherein running a query on the set of security rules based on the selectable merge rule criteria includes merging multiple existing rule sets in the security rule base and running a query on the security rule base including the multiple existing rules sets.
16. The method of claim 7 , wherein running a query on the set of security rules based on the selectable merge rule criteria to locate any candidate security rules in the set of security rules comprises;
running the query as an auditing function on some periodic time basis when no known new security rules and no known changes to the security rule base have been performed; and
generating a warning if any security rule in the security rule base renders another security rule in the security rule base inoperative.
17. The method of claim 9 , wherein displaying the all rules listing includes displaying a row associated with each of the security rules in the security rules base and the displayed rows arranged in order by rule number.
18. The method of claim 15 , including generating a warning if any given one of the security rules is the multiple existing rule sets will obsolete any given one or more of the security rules in the security rule base.
19. A merge rule wizard executing on one or more processors of a computer system connected to a computer network wherein the merge rule wizard comprises instructions to cause the one or more processors to:
generate and display a first displayable dialog box including a plurality of elements, each of the elements having at least one selectable merge criteria,
receive an indication of a selection of a merge criteria for one or more of the elements having at least one selectable merge criteria,
run a query on a security rule base based on the selection of the merge criteria for the one or more elements having at least one selectable merge criteria to locate candidate security rules in the security rule base, the candidate security rules comprising a plurality of fields with values wherein each of the candidate entries conforms to the selectable merge rule criteria; and
generate and display a second displayable dialog box including displaying a merge rule result listing including a listing of any candidates security rules based on the results of the query.
20. The merge rule wizard of claim 19 , wherein the query is a Structured Query Language query.
21. The merge rule wizard of claim 19 , wherein the at least one of the at least one selectable merge criteria is a merge operation operable to combine all values for a given one of the one or more elements when merging a set of security rules from the security rules base with other security rules from the security rules base.
22. The merge rule wizard of claim 19 , wherein at least one of the merge criteria is a compare operation operable to compare values for a given one of the one or more elements when merging a set of security rules from the security rules base with other security rules from the security rules base, and to merge any security rules within the security rule base only if a value for the given one of the one or more elements is identical.
23. The merge rule wizard of claim 19 , wherein at least one of the selectable merge criteria is an ignore criteria operable when selected for a particular element of the plurality of elements to disregard a value associated with the particular element in determining whether or not a security rule is merged with any other security rules to form a candidate security rule.
24. A computer memory device storing instructions that when executed cause a processor to:
display a dialog box including one or a plurality of elements for a set of security rules, including a selectable merge rule criteria associated with each of the elements;
receive an indication that a selection of the selectable merge rule criteria has been completed for each of the elements;
run a query on the set of security rules based on the selectable merge rule criteria to locate any candidates security rules in the set of security rules, the candidate security rules comprising a plurality of fields with values wherein each of the candidate security rules conforms to the selectable merge rule criteria; and
display a listing of any located candidate security rules.