Granted Patent B2

US 8,763,070 · App. 12/476,136 · Granted Jun 24, 2014

Abstract

Claims (53)

1. A system for processing electronic transactions according to policies, comprising:

a user module configured to store computer-readable information related to at least one user;

a policy module configured to store a plurality of policies for electronic transactions, wherein each policy for an electronic transaction comprises a subject value, target value, and action value, and wherein each policy also comprises at least one of an authorization or an obligation policy; and

a processor configured to receive a request by the at least one user to access a physical space or be authorized to purchase an available item, and configured to dynamically compare, upon receipt of the request by the processor, the subject value, the target value, and the action value of each of the plurality of policies for the electronic transactions to the request by the at least one user to determine whether at least one of the plurality of policies applies to the request by the at least one user to access the physical space or be authorized to purchase the available item,

wherein the subject value comprises an identification of the at least one user, the target value comprises an identification of the physical space or available item, and the action value comprises the request to access the physical space or the request to be authorized to purchase the available item, and

wherein each of the plurality of policies is configured to apply to a plurality of users.

2. The system of claim 1 , wherein determining whether at least one of the plurality of policies applies to the request by the at least one user comprises determining whether to provide, to the at least one user, access to the physical space or access to purchase the available item.

3. The system of claim 1 , further comprising a communications module configured to communicate with a policy execution point device (PEP), wherein the communications module is configured to communicate an indication to the PEP indicating whether to provide, to the at least one user, access to the physical space or item based on the application of the plurality of policies to the at least one user.

4. The system of claim 1 ,

wherein the plurality of policies for the electronic transactions further comprise an obligation regarding access to a physical space or item by the at least one user, and

wherein the processor is further configured to receive a command for the at least one user to complete the electronic transaction, and configured to apply the at plurality of policies to the at least one user based on the command to complete the electronic transaction.

5. The system of claim 4 , further comprising a communications module configured to communicate to the at least one user a message indicating the command for the at least one user to complete the electronic transaction.

6. The system of claim 1 , wherein the user module is configured to store information related to a plurality of users.

7. A system for processing electronic transactions according to policies, comprising:

a user module configured to store computer-readable information related to at least one user;

a policy module configured to store a plurality of policies for electronic transactions, wherein each policy for an electronic transaction comprises a subject value, target value, and action value; and

a processor configured to receive a request by the at least one user to be authorized to purchase an available item, and configured to dynamically compare, upon receipt of the request by the processor, the subject value, the target value, and the action value of each of the plurality of policies for electronic transactions to the request by the at least one user to determine whether at least one of the plurality of policies applies to the request by the at least one user to be authorized to purchase the available item,

wherein the subject value comprises an identification of the at least one user, the target value comprises an identification of the available item, and the action value comprises the request to be authorized to purchase the available item,

wherein each of the plurality of policies is configured to apply to a plurality of users, and

wherein determining whether at least one of the plurality of policies applies to the request by the at least one user comprises determining for the at least one user the price and authorization to purchase the available item.

8. The system of claim 7 , wherein determining the price and availability of the item for the at least one user comprises determining whether to provide, to the at least one user, an adjustment to a value of the item.

9. The system of claim 7 , wherein determining the price and availability of the item for the at least one user comprises determining whether the at least one user has the access to purchase the item.

10. The system of claim 7 , further comprising a communications module configured to communicate with a policy execution point device (PEP), wherein the communications module is configured to communicate an indication to the PEP indicating at least one of a value of the item to the at least one user, or the availability of the item to the at least one user, based on the application of the plurality of policies to the at least one user.

11. A system for processing electronic transactions according to policies, comprising:

a user module configured to store computer-readable information related to at least one user;

a policy module configured to store a plurality of policies for electronic transactions, wherein each policy for an electronic transaction comprises a subject value, target value, and action value, and wherein each policy comprises at least one of an authorization or an obligation policy; and

a processor configured to receive at least one of a request from the at least one user to complete an electronic transaction, or a command for the at least one user to complete an electronic transaction, indicating a change in at least a displayable portion of an electronic educational user interface of an application between the system and the at least one user at a policy execution point (PEP), and configured to dynamically compare, upon receipt by the processor of the request to complete the electronic transaction or command to complete the electronic transaction, the subject value, the target value, and the action value of each of the plurality of policies for electronic transactions to the request or the command by the at least one user to determine whether to change the displayable portion of the electronic educational user interface of the application,

wherein the subject value comprises an identification of the at least one user, the target value comprises an identification of the application, and the action value comprises the request or the command, and

wherein each of the plurality of policies is configured to apply to a plurality of users.

12. The system of claim 11 , wherein for each policy:

the subject value is configured to indicate a subject;

the action value is configured to indicate an action performed by the subject; and

the target value is configured to indicate a target associated with the action by the subject.

13. The system of claim 11 , wherein the authorization policy comprises at least one of a permission or a prohibition.

14. The system of claim 11 , wherein the obligation policy comprises a refrain policy.

15. The system of claim 11 , further comprising a communications module configured to communicate with the PEP, wherein the communications module is configured to communicate an indication to the PEP indicating a change in the electronic educational user interface based on the application of the plurality of policies to the at least one user.

16. A method for processing electronic transactions according to policies, comprising:

receiving at least one of a request from at least one user to complete an electronic transaction comprising a subject value, target value, and action value, or a command for the at least one user to complete the electronic transaction, the electronic transaction comprising changing at least a displayable portion of an electronic educational user interface of an application displayed to the at least one user; and

dynamically comparing, upon receipt of the request or the command to complete the electronic transaction, the subject value, the target value, and the action value of each of a plurality of policies for electronic transactions to the request or the command to determine whether to change the at least a displayable portion of the electronic educational user interface,

wherein the subject value comprises an identification of the at least one user, the target value comprises an identification of the application, and the action value comprises the request or command to change the at least a displayable portion of the electronic educational user interface of the application, and

wherein each of the plurality of policies is configured to apply to a plurality of users and comprises at least one of an authorization or an obligation policy.

17. The method of claim 16 , further comprising indicating, to the at least one user, a result of the application of the plurality of policies to the at least one user.

18. A non-transitory machine-readable medium encoded with instructions for processing electronic transactions according to policies, the instructions comprising code for:

receiving at least one of a request from at least one user to complete an electronic transaction comprising a subject value, target value, and action value, or a command for the at least one user to complete the electronic transaction, the electronic transaction comprising changing at least a displayable portion of an electronic educational user interface of an application displayed to the at least one user; and

dynamically comparing, upon receipt of the request or the command to complete the electronic transaction, the subject value, the target value, and the action value of each of a plurality of policies for electronic transactions to the request or the command to determine whether to change the at least a displayable portion of the electronic educational user interface,

wherein the subject value comprises an identification of the at least one user, the target value comprises an identification of the application, and the action value comprises the request or command to change the at least a displayable portion of the electronic educational user interface of the application, and

wherein each of the plurality of policies is configured to apply to a plurality of users and comprises at least one of an authorization or an obligation policy.

19. A system for processing electronic transactions according to policies, comprising:

a user module configured to store computer-readable information related to at least one user;

a policy module configured to store a plurality of policies for electronic transactions, wherein each policy for an electronic transaction comprises a subject value, target value, and action value indicating a permission to access a physical space by a user, and wherein each policy comprises at least one of an authorization or an obligation policy; and

a processor configured to receive a request to access a physical space by the at least one user, and configured to dynamically compare, upon receipt of the request by the processor, the subject value, the target value, and the action value of each of the plurality of policies for the electronic transactions to the request by the at least one user to determine whether at least one of the plurality of policies applies to the request by the at least one user to access the physical space,

wherein the subject value comprises an identification of the at least one user, the target value comprises an identification of the physical space, and the action value comprises the request to access the physical space,

wherein each of the plurality of policies is configured to apply to a plurality of users.

Assignments (14)