System and method for determining effective policy profiles in a client-server architecture
View Patent ↗A system and method for determining effective policy profiles, is presented herein. The system includes one or more client devices configured to initiate a request for at least one effective policy profile, a server mechanism communicatively coupled to the one or more client devices and configured to receive the request for the at least one effective policy profile and determine the at least effective policy profiles for each of the requesting one or more client devices, and a policy data storage component communicatively coupled to the server mechanism and configured to store a plurality of policy profiles. The plurality of plurality of policy profiles includes an association between each of the one or more client devices and one or more of the plurality of policy profiles.
1. A server for determining effective policy profiles in a client-server architecture, comprising:
a local cache configured to store policy profiles having timeout values less than or equal to a predetermined value;
an integrated policy data store configured to store a policy profile hierarchy; and
one or more processors configured to:
receive a policy profile request from a client device;
determine whether the policy profiles stored in the local cache include an effective policy profile associated with the client device;
identify multiple policy profiles in the policy data store that are effective for the client device in response to determining that the policy profiles stored in the local cache do not include the effective policy profile associated with the client device;
select, based on distances within the policy profile hierarchy from the multiple identified policy profiles to a root associated with the policy data store, an identified policy profile from the multiple identified policy profiles in response to determining that the policy profiles stored in the local cache do not include an effective policy profile associated with the client device; and
return, to the client device, the selected policy profile in response to determining that the policy profiles stored in the local cache do not include the effective policy profile associated with the client device.
2. The server claim 1 , wherein the one or more processors are further configured to:
retrieve the effective policy profile associated with the client device from the local cache in response to determining that the policy profiles stored in the local cache do include the effective policy profile associated with the client device;
return the effective policy profile retrieved from the local cache to the client device in response to determining that the timeout value associated therewith does not exceed the predetermined value; and
search the policy data store to identify the multiple policy profiles that are effective for the client device in response to determining that the timeout value associated with the effective policy profile retrieved from the local cache exceeds the predetermined value.
3. The server claim 1 , wherein the one or more processors are configured to receive the policy profile request at a pre-scheduled time or in response to corruption associated with a local data store at the client device.
4. The server claim 1 , wherein the one or more processors are further configured to:
hierarchically order the multiple effective policy profiles identified in the policy data store according to the distances within the policy profile hierarchy from the multiple effective policy profiles to the root associated with the policy data store; and
remove one or more of the multiple effective policy profiles from the hierarchically ordered effective policy profiles in response to determining that the client device fails to meet one or more system requirements associated therewith or fails to validate that the one or more system requirements associated therewith can be met.
5. The server claim 4 , wherein the selected policy profile includes one of the hierarchically ordered effective policy profiles directly associated with the client device.
6. The server claim 4 , wherein the selected policy profile includes one of the hierarchically ordered effective policy profiles associated with a group to which the client device belongs when none of the hierarchically ordered effective policy profiles are directly associated with the client device.
7. The server of claim 4 , wherein selected policy profile includes one of the hierarchically ordered effective policy profiles associated with a container that contains the client device or a group to which the client device belongs when none of the hierarchically ordered effective policy profiles are directly associated with the client device or the group to which the client device belongs.
8. A computer-implemented method of determining effective policy profiles in a client-server architecture, the method being implemented in a computer system that includes one or more physical processors, the method comprising:
receiving a policy profile request from a client device;
determining whether policy profiles that are stored in a local cache of a server include an effective policy profile associated with the client device, wherein the stored policy profiles have timeout values less than or equal to a predetermined value;
identifying multiple policy profiles in a policy data store that are effective for the client device in response to determining that the policy profiles stored in the local cache do not include the effective policy profile associated with the client device, wherein the policy data store is configured to store a policy profile hierarchy;
selecting, based on distances within the policy profile hierarchy from the multiple identified policy profiles to a root associated with the policy data store, an identified policy profile from the multiple identified policy profiles that has a closest hierarchical distance to the client device in response to determining that the policy profiles stored in the local cache do not include an effective policy profile associated with the client device; and
returning, to the client device, the selected policy profile in response to determining that the policy profiles stored in the local cache do not include an effective policy profile associated with the client device.
9. The computer-implemented method of claim 8 , further comprising:
retrieving the effective policy profile associated with the client device from the local cache in response to determining that the policy profiles stored in the local cache do include the effective policy profile associated with the client device;
returning the effective policy profile retrieved from the local cache to the client device in response to determining that the timeout value associated therewith does not exceed the predetermined value; and
searching the policy data store to identify the multiple policy profiles that are effective for the client device in response to determining that the timeout value associated with the effective policy profile retrieved from the local cache exceeds the predetermined value.
10. The computer-implemented method of claim 8 , further comprising receiving the policy profile request at a pre-scheduled time or in response to corruption associated with a local data store at the client device.
11. The computer-implemented method of claim 8 , further comprising:
hierarchically ordering the multiple effective policy profiles identified in the policy data store according to the distances within the policy profile hierarchy from the multiple effective policy profiles to the root associated with the policy data store; and
removing one or more of the multiple effective policy profiles from the hierarchically ordered effective policy profiles in response to determining that the client device fails to meet one or more system requirements associated therewith or fails to validate that the one or more system requirements associated therewith can be met.
12. The computer-implemented method of claim 11 , wherein the selected policy profile includes one of the hierarchically ordered effective policy profiles directly associated with the client device.
13. The computer-implemented method of claim 11 , wherein the selected policy profile includes one of the hierarchically ordered effective policy profiles associated with a group to which the client device belongs when none of the hierarchically ordered effective policy profiles are directly associated with the client device.
14. The computer-implemented method of claim 11 , wherein selected policy profile includes one of the hierarchically ordered effective policy profiles associated with a container that contains the client device or a group to which the client device belongs when none of the hierarchically ordered effective policy profiles are directly associated with the client device or the group to which the client device belongs.