Policy-based service management system
A policy-based management mechanism is provided, whereby the mechanism provides for at least the controlling of access to network resources, the integration of different frameworks into a common open standard, and modular components for assembling integrated date and voice services. The mechanism accomplishes this by using an access management component that checks for access credentials, a service management component that identifies which resources are available to a requestor of resources, and a resource management component that manages the requested resources. In one exemplary implementation, a fourth component, the policy management component links the first three components such that a resource request gains access to resources based on policy decisions determined by the fourth component for the first three components.
1. A system comprising:
a processor; and
memory coupled to the processor, the memory comprising executable instructions that when executed by the processor cause the processor to effectuate operations comprising:
receiving a request to utilize a resource;
generating a credential comprising a description of a resource allocation policy pertaining to the resource;
issuing the credential;
performing a first query to a policy repository comprising a plurality of resource allocation policies;
authenticating access to the resource based on a result of the first query;
performing a second query to the policy repository;
authorizing the credential based on a result of the second query;
granting the request to utilize the resource based on the result of the second query;
monitoring utilization of the resource;
determining, based on the monitored utilization of the resource,
whether the utilization of the resource that is in accordance with the request and in accordance with the resource allocation policy; and
managing the utilization of the resource in accordance with the determination.
2. The system of claim 1 , wherein the resource allocation policy governs an amount of the resource that can be utilized in accordance with the request.
3. The system of claim 1 , wherein the policy repository comprises the plurality of policies stored in a centralized policy database.
4. The system of claim 1 , wherein managing the utilization of the resource comprises dynamic management of the resource during a data session.
5. The system of claim 1 , the operations further comprising recording how the resource is being utilized.
6. A method comprising:
receiving a request to utilize a resource;
generating a credential comprising a description of a resource allocation policy pertaining to the resource;
issuing the credential;
determining, by monitoring the resource, whether utilization of the resource is in accordance with the resource allocation policy;
performing a first query to a policy repository comprising a plurality of resource allocation policies;
authenticating access to the resource based on a result of the first query;
performing a second query to the policy repository;
authorizing the credential based on a result of the second query;
granting the request to utilize the resource based on the result of the second query; and
managing the utilization of the resource in accordance with the resource allocation policy.
7. The method of claim 6 , wherein the resource allocation policy governs an amount of the resource that can be utilized in accordance with the request.
8. The method of claim 7 , wherein the policy repository comprises the plurality of policies stored in a centralized policy database.
9. The method of claim 6 , wherein managing the utilization of the resource comprises dynamic management of the resource during a data session.
10. The method of claim 6 , further comprising recording information pertaining to the utilization of the resource.
11. A computer readable storage medium that is not a propagating signal, the computer-readable storage medium comprising executable instructions that, when executed by a processor, cause the processor to effectuate operations comprising:
receiving a request to utilize a resource;
generating a credential comprising a description of a resource allocation policy pertaining to the resource;
issuing the credential;
performing a first query to a policy repository comprising a plurality of resource allocation policies;
authenticating access to the resource based on a result of the first query;
performing a second query to the policy repository;
authorizing the credential based on a result of the second query;
granting the request to utilize the resource based on the result of the second query;
monitoring utilization of the resource;
determining, based on the monitored utilization of the resource, whether the utilization of the resource that is in accordance with the request and in accordance with the resource allocation policy; and
managing the utilization of the resource in accordance with the determination.
12. The computer readable storage medium of claim 11 , wherein the resource allocation policy governs an amount of the resource that can be utilized in accordance with the request.
13. The computer readable storage medium of claim 12 , wherein the policy repository comprises the plurality of policies stored in a centralized policy database.
14. The computer readable storage medium of claim 11 , wherein managing the utilization of the resource comprises dynamic management of the resource during a data session.
15. The computer readable storage medium of claim 11 , the operations further comprising recording information pertaining to the utilization of the resource.