Patent ID: 11928531
Assignee: UNIFIED COMPLIANCE FRAMEWORK (NETWORK FRONTIERS)
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 5:
6. One or more instances of computer-readable media not constituting transitory propagating signals, per se, the one or more instances of computer-readable media collectively having contents configured to cause a computing system to perform a method for processing application programming interface (API) requests to retrieve license-compliant content, the method comprising:
establishing, by a server, a plurality of API endpoints each tailored to a respective compliance content type of a plurality of compliance content types, wherein the plurality of API endpoints forms a hierarchy of linked responders to API invocations;
receiving, from a requesting application and by a first API endpoint of the plurality of API endpoints that is tailored to a first compliance type of the plurality of compliance content types, a first API invocation comprising:
a first argument identifying one or more units of compliance content of the first compliance type to return, and
a second argument indicating whether the requesting application attests that the requesting application is compliant with a license that applies to the units of compliance content identified by the first argument;

responsive to determining that the second argument indicates that the requesting application attests that the requesting application is compliant with the license that applies to the units of compliance content identified by the first argument:
constructing a first response message containing the one or more units of compliance content of the first compliance type identified by the first argument, the one or more units of compliance content of the first compliance type including content identifying information that identifies one or more units of compliance content of a second compliance type of the plurality of compliance content types and access to a license that applies to the one or more units of compliance content of the second compliance type, which further including a mandate object that includes, for a particular mandate:
a copy of the mandate; and
for a control that is a distinct unit of the one or more units of compliance content of the second compliance type, and to which the mandate has been mapped constituting a deduplication of the mandate against one or more equivalent other mandates:
identifying information for the control usable by the requesting application to retrieve an object containing the control using the second API endpoint; and
a link to a license that applies to the control; and

transmitting the first response message to the requesting application, in response to the first API invocation;

receiving, from the requesting application and by a second API endpoint of the plurality of API endpoints that is tailored to the second compliance type of the plurality of compliance content types, a second API invocation comprising:
a third argument identifying the one or more units of compliance content of the second compliance type to return, using at least a portion of the content identifying information included in the first response message, and
a fourth argument indicating whether the requesting application attests that the requesting application is compliant with the license that applies to the one or more units of compliance content of the second compliance type;

responsive to determining that the fourth argument indicates that the requesting application attests that the requesting application is compliant with the license that applies to the one or more units of compliance content identified by the third argument:
constructing a second response message containing the one or more units of compliance content of the second compliance type as identified by the third argument; and
transmitting the second response message to the requesting device, in response to the second API invocation.