IP Library Granted Patent US 10,855,540
Granted Patent B2
US 10,855,540 · App. 15/969,621 · Granted Dec 1, 2020

System and method for policy based networked application management

Inventor: Satoshi Kaneko (San Jose, CA)
Assignee: Hitachi, Ltd.
H04L41/0893G06F8/71G06F21/604G06F21/629H04L63/102H04L63/107H04L63/20
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,855,540
App. No.
15/969,621
Granted
Dec 1, 2020
Kind
B2
Abstract

Example implementations described herein are directed to systems and methods for policy based management of access to networked applications in compliance with rules or policies. An example implementation includes a method to manage access to a program where in response to receiving a request, the method identifies a source location indicated by program information and a destination location indicated by user information, determines a rule type based on the source location and the destination location, determines a rule for the program based on the source location, the destination location, and the rule type, applies a procedure to approve access based on the rule; and allows access to the program based on successful completion of the procedure.

Claims (57)

1. A method for access management of programs comprising:

in response to receiving a request from a user that comprises program information and user information:

identifying a source location and an access location of a program indicated by the program information and a destination location indicated by the user information, the source location of a program being a geographic location where the program was designed or is currently stored, the access location being a geographic location where the program can be accessed, and the destination location being a geographic location of the user;

determining that the program is valid based on one or more rules being associated with the program;

determining a rule type based on the source location and the destination location;

determining a rule for the program based on the source location, the destination location, and the rule type;

applying a procedure to approve access to the program based on the rule;

determining whether the program can be accessed based on the destination location indicated by the user information and the access location;

if the program can be accessed based on the access location, and can be accessed at the destination location:

configuring the program, by the procedure, for access at the destination location indicated by the user information, and

allowing access to the program at the destination location based on successful completion of the procedure, and

updating, by the procedure, a program table with the program configuration; and

if the program can be accessed based on the access location, but cannot be accessed at the destination location:

providing a clone of the program based on successful completion of the procedure, and

updating the program information in the program table with an indication that the clone was provided to the destination location indicated by the user information.

2. The method of claim 1 , further comprising receiving program attributes from a version control system to configure the program.

3. The method of claim 1 , wherein successful completion of the procedure indicates compliance with one or more regulations for a user to access the program between the source location and the destination location.

4. The method of claim 1 , wherein the procedure indicates a checklist associated with the rule.

5. The method of claim 4 , wherein successful completion of the procedure comprises obtaining a sequence of approvals for the checklist.

6. The method of claim 1 , wherein successful completion of the procedure comprises obtaining one or more approvals based on a workflow associated with the rule.

7. The method of claim 6 , wherein the workflow comprises an approval sequence for obtaining the one or more approvals.

8. The method of claim 1 , wherein the rule indicates a re-application of the procedure based on an event type.

9. A method for access approval to networked programs comprising:

in response to receiving an event of a program and a program identifier:

determining a geographic destination location of a user based on user information related to the user included in a user table;

determining a source location and an access location of the program, included in a program table, based on the program identifier, the source location of the program being a geographic location where the program was designed or is currently stored and the access location being a geographic location where the program can be accessed;

determining that the program is valid based on one or more rules associated with the program;

determining a rule assigned to the program based on the program identifier and an application table, the source location, and the geographic destination;

applying a procedure to approve access to the program based on the rule;

determining whether the program can be accessed based on the geographic destination location and the access location;

if the program can be accessed based on the access location, and can be accessed at the geographic destination location:

configuring the program for the user, by the procedure, for access at the geographic destination location, and

allowing access to the program at the geographic destination location based on successful completion of the procedure, and

updating, by the procedure, the program table with the program configuration; and

if the program can be accessed based on the access location, but cannot be accessed at the geographic destination location:

providing a clone of the program based on successful completion of the procedure, and

updating the program information in the program table with an indication that the clone was provided to the geographic destination.

10. The method of claim 9 , wherein the program identifier indicates a version of the program, and the event type indicates to modify, copy, or delete the version of the program.

11. The method of claim 9 , further comprising updating the application table based on the event.

12. The method of claim 9 , further comprising determining whether to re-apply the procedure based on the event type.

13. The method of claim 9 , wherein successful completion of the procedure indicates compliance with one or more regulations for the user to access the program between the source location and the destination location.

14. A non-transitory computer-readable medium storing instructions for a policy based network application management system including a processing device configured to:

identify a source location and an access location of a program indicated by program information and a destination location indicated by user information, the source location of a program being a geographic location where the program was designed or is currently stored the access location being a geographic location where the program can be accessed, and the destination location being a geographic location for a user;

determine that the program is valid based on one or more rules being associated with the program;

determine a rule type based on the source location and the destination location;

determine a rule for the program based on the source location, the destination location, and the rule type;

apply a procedure to approve access to the program based on the rule;

determining whether the program can be accessed based on the destination location indicated by the user information and the access location;

if the program can be accessed based on the access location, and can be accessed at the destination location:

configure the program, by the procedure, for access at the destination location indicated by the user information, and

allow access to the program at the destination location based on successful completion of the procedure;

updating, by the procedure, a program table with the program configuration; and

if the program can be accessed based on the access location, but cannot be accessed at the destination location:

provide a clone of the program based on successful completion of the procedure, and

update the program information in the program table with an indication that the clone was provided to the destination location indicated by the user information.

15. The non-transitory computer-readable medium of claim 14 , wherein the procedure indicates a checklist and a workflow associated with the rule, wherein successful completion of the procedure comprises obtaining a sequence of approvals for the checklist based on the workflow.

16. The non-transitory computer-readable medium of claim 14 , wherein successful completion of the procedure indicates compliance with one or more regulations for the user to access the program between the source location and the destination location.

Assignments (2)
COMPANY SPLIT Recorded Aug 20, 2024
From: HITACHI, LTD.
To: HITACHI VANTARA, LTD.
Reel/Frame 069518/0761 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 2, 2018
From: KANEKO, SATOSHI
To: HITACHI, LTD.
Reel/Frame 045698/0800 →
Continuity (1)
Related Publication 20190342174A1 · Nov 7, 2019