Interaction control list determination and device adjacency and relative topography
A third-party server may maintain a list of named entity devices that belong to one or more roles in an application environment. The server may receive an authorization query from a policy consuming device. The authorization query may include an identity of a particular named entity device which sent a message to the policy consuming device and contextual metadata associated with the message. The server may determine that the particular named entity device belongs to one of the roles and filter the list based on the contextual metadata. The server may generate an interaction control list that includes the filtered list and transmit the interaction control list to the policy consuming device as a response to the authorization query. The interaction control list causes the policy consuming device to react to the message based on the interaction control list.
1. A computer-implemented method comprising:
maintaining a list of named entity devices that belong to one or more roles in an application environment;
receiving an authorization query from a policy consuming device, the authorization query comprising (i) an identity of a particular named entity device which sent a message to the policy consuming device and (ii) contextual metadata associated with the message;
determining that the particular named entity device belongs to one of the roles;
filtering the list based on the contextual metadata;
generating an interaction control list that includes a filtered list of named entity devices that are selected based on the contextual metadata, the filtered list including the particular named entity device; and
transmitting the interaction control list to the policy consuming device as a response to the authorization query, the interaction control list causing the policy consuming device to react to the message based on the interaction control list.
2. The computer-implemented method of claim 1 , wherein the identity of the particular named entity device is stored in a domain name system.
3. The computer-implemented method of claim 1 , wherein the contextual metadata comprises a geolocation of the policy consuming device.
4. The computer-implemented method of claim 3 , wherein the filtering of the list is based on the geolocation of the policy consuming device to select a subset of named entity devices that are in proximity of the policy consuming device.
5. The computer-implemented method of claim 1 , wherein the list is filtered based on operating capacities of the named entity device to perform load balancing.
6. The computer-implemented method of claim 1 , wherein the identity of the particular named entity device has been authenticated by the policy consuming device before the authorization query is received.
7. The computer-implemented method of claim 1 , wherein the interaction control list is generated in a format that is standardized in the application environment.
8. The computer-implemented method of claim 1 , wherein an authorization of the role in the application environment is set by one or more policies defined by an organization operating the application environment.
9. A system comprising:
one or more processors;
memory coupled to the one or more processors, the memory for storing computer code comprising instructions, the instructions, when executed by the one or more processors, cause the one or more processors to:
maintain a list of named entity devices that belong to one or more roles in an application environment;
receive an authorization query from a policy consuming device, the authorization query comprising (i) an identity of a particular named entity device which sent a message to the policy consuming device and (ii) contextual metadata associated with the message;
determine that the particular named entity device belongs to one of the roles;
filter the list based on the contextual metadata;
generate an interaction control list that includes a filtered list of named entity devices that are selected based on the contextual metadata, the filtered list including the particular named entity device; and
transmit the interaction control list to the policy consuming device as a response to the authorization query, the interaction control list causing the policy consuming device to react to the message based on the interaction control list.
10. The system of claim 9 , wherein the identity of the particular named entity device is stored in a domain name system.
11. The system of claim 9 , wherein the contextual metadata comprises a geolocation of the policy consuming device.
12. The system of claim 11 , wherein the filtering of the list is based on the geolocation of the policy consuming device to select a subset of named entity devices that are in proximity of the policy consuming device.
13. The system of claim 9 , wherein the list is filtered based on operating capacities of the named entity device to perform load balancing.
14. The system of claim 9 , wherein the identity of the particular named entity device has been authenticated by the policy consuming device before the authorization query is received.
15. The system of claim 9 , wherein the interaction control list is generated in a format that is standardized in the application environment.
16. The system of claim 9 , wherein an authorization of the role in the application environment is set by one or more policies defined by an organization operating the application environment.
17. A non-transitory computer-readable medium for storing computer code comprising instructions, the instructions, when executed by one or more processors, cause the one or more processors to:
maintain a list of named entity devices that belong to one or more roles in an application environment;
receive an authorization query from a policy consuming device, the authorization query comprising (i) an identity of a particular named entity device which sent a message to the policy consuming device and (ii) contextual metadata associated with the message;
determine that the particular named entity device belongs to one of the roles;
filter the list based on the contextual metadata;
generate an interaction control list that includes a filtered list of named entity devices that are selected based on the contextual metadata, the filtered list including the particular named entity device; and
transmit the interaction control list to the policy consuming device as a response to the authorization query, the interaction control list causing the policy consuming device to react to the message based on the interaction control list.
18. The non-transitory computer-readable medium of claim 17 , wherein the identity of the particular named entity device is stored in a domain name system.
19. The non-transitory computer-readable medium of claim 17 , wherein the contextual metadata comprises a geolocation of the policy consuming device.
20. The non-transitory computer-readable medium of claim 19 , wherein the filtering of the list is based on the geolocation of the policy consuming device to select a subset of named entity devices that are in proximity of the policy consuming device.