Patent ID: 9537717
Date: 2017-01-03
CPC Classifications: G06F,H04L

Claim:
1. An automated policy-provisioning method for a computing system having a service-oriented architecture, the system comprising at least one managed service and at least one policy enforcement point operable to enforce a runtime policy for the service, the method comprising: using a physical computing device, receiving in machine-readable form at least one semantic rule defining a condition imposed by a business policy; using a physical computing device, receiving machine-readable data describing a runtime policy enforcement capability of the at least one policy enforcement point; using a physical computing device, determining based on the at least one rule and the capability whether the at least one policy enforcement point can meet the condition; using a physical computing device and based on the determination, deriving a runtime policy suitable for enforcing the condition; and using a physical computing device, communicating the runtime policy to the at least one policy enforcement point.