Policy-based service management system
A policy-based management mechanism is provided, whereby the mechanism provides for at least the controlling of access to network resources, the integration of different frameworks into a common open standard, and modular components for assembling integrated date and voice services. The mechanism accomplishes this by using an access management component that checks for access credentials, a service management component that identifies which resources are available to a requestor of resources, and a resource management component that manages the requested resources. In one exemplary implementation, a fourth component, the policy management component links the first three components such that a resource request gains access to resources based on policy decisions determined by the fourth component for the first three components.
1. A system comprising:
a processor; and
memory coupled to the processor, the memory comprising executable instructions that when executed by the processor cause the processor to effectuate operations comprising:
issuing a credential comprising a description of a resource allocation policy pertaining to a resource;
performing a first query to a policy repository comprising a plurality of resource allocation policies;
authenticating access to the resource based on a result of the first query;
performing a second query to the policy repository;
authorizing the credential based on a result of the second query;
granting a request to utilize the resource based on the result of the second query;
determining, based on monitored utilization of the resource, whether the utilization of the resource is in accordance with the request and in accordance with the resource allocation policy; and
managing the utilization of the resource in accordance with the determination.
2. The system of claim 1 , wherein the resource allocation policy governs an amount of the resource that can be utilized in accordance with the request to utilize the resource.
3. The system of claim 1 , wherein the resource policy governs how the resource can be utilized by a requestor requesting to utilize the resource.
4. The system of claim 1 , wherein the policy repository comprises the plurality of policies stored in a centralized policy database.
5. The system of claim 1 , wherein managing the utilization of the resource comprises dynamic management of the resource during a data session.
6. The system of claim 1 , the operations further comprising recording how the resource is being utilized.
7. A method comprising:
issuing a credential comprising a description of a resource allocation policy pertaining to a resource;
performing a first query to a policy repository comprising a plurality of resource allocation policies;
authenticating access to the resource based on a result of the first query;
performing a second query to the policy repository;
authorizing the credential based on a result of the second query;
granting a request to utilize the resource based on the result of the second query;
determining, based on monitored utilization of the resource, whether the utilization of the resource is in accordance with the request and in accordance with the resource allocation policy; and
managing the utilization of the resource in accordance with the determination.
8. The method of claim 7 , wherein the resource allocation policy governs an amount of the resource that can be utilized in accordance with the request.
9. The method of claim 7 , wherein the policy repository comprises the plurality of policies stored in a centralized policy database.
10. The method of claim 7 , wherein the resource policy governs allowable utilization of the resource by a requestor requesting to utilize the resource.
11. The method of claim 7 , wherein managing the utilization of the resource comprises dynamic management of the resource during a data session.
12. The method of claim 7 , further comprising recording information pertaining to the utilization of the resource.
13. A computer readable storage medium that is not a propagating signal, the computer-readable storage medium comprising executable instructions that, when executed by a processor, cause the processor to effectuate operations comprising:
issuing a credential comprising a description of a resource allocation policy pertaining to a resource;
performing a first query to a policy repository comprising a plurality of resource allocation policies;
authenticating access to the resource based on a result of the first query;
performing a second query to the policy repository;
authorizing the credential based on a result of the second query;
granting a request to utilize the resource based on the result of the second query;
determining, based on monitored utilization of the resource, whether the utilization of the resource is in accordance with the request and in accordance with the resource allocation policy; and
managing the utilization of the resource in accordance with the determination.
14. The computer readable storage medium of claim 13 , wherein the resource allocation policy governs an amount of the resource that can be utilized in accordance with the request.
15. The computer readable storage medium of claim 13 , wherein the policy repository comprises the plurality of policies stored in a centralized policy database.
16. The computer readable storage medium of claim 13 , wherein managing the utilization of the resource comprises dynamic management of the resource during a data session.
17. The computer readable storage medium of claim 13 , the operations further comprising recording information pertaining to the utilization of the resource.
18. The computer-readable storage medium of claim 13 , wherein the resource policy governs allowable utilization of the resource by a requestor requesting to utilize the resource.