Cross-jurisdiction workload control systems and methods

Patent metadata

Field	Value
Publication number	US-10659537-B2
Application number	US-201715828852-A
Country	US
Kind code	B2
Filing date	Dec 1, 2017
Priority date	Dec 8, 2016
Publication date	May 19, 2020
Grant date	May 19, 2020

Abstract

At design time, cross-jurisdiction workload controls may be presented by a process platform server to a user (e.g., a workload creator or process builder) who is using the process platform to create or update an application having a workload functionality with zero, one, or more applicable regulation controls. If no regulation control is selected, or if there is no exception provided, the process platform server may operate to block the user from proceeding to complete the workload creation process. The application with the workload thus created/updated is delivered to end user(s). Responsive to a user request to open the application on a client device, a server (the process platform server or an application gateway server) may operate to automatically determine whether a target location associated with the user request is permitted in accordance with a cross-jurisdiction workload control associated the workload defined in the application.

First claim

What is claimed is:

1. A method for cross-jurisdictional workload control, the method comprising:
presenting, by a process platform server through a process platform user interface at design time of an application of a collaborative type, cross-jurisdiction workload controls to a user of the process platform in creating or updating the application;
responsive to the user selecting a cross-jurisdiction workload control through the process platform user interface, placing the cross-jurisdiction workload control on a workload in the application, the cross-jurisdiction workload control specific to a regulation that regulates moving data from a first jurisdiction to a second jurisdiction;
communicating the application with the cross-jurisdiction workload control for the workload to a client device associated with an end user;
responsive to a request from the client device to open the application on the client device, determining, by a server computer, a geophysical location associated with the request;
determining, by the server computer, whether the geophysical location is permitted in accordance with the cross-jurisdictional workload control for the workload in the application;
automatically allowing, by the server computer, the client device to open the application when the geophysical location associated with the request is permitted in accordance with the cross-jurisdictional workload control for the workload in the application; and
automatically denying, by the server computer, the client device to open the application when the geophysical location associated with the request is not permitted in accordance with the cross-jurisdictional workload control for the workload in the application to thereby enforce the regulation.

2. The method according to claim 1 , further comprising:
determining, by the process platform server, whether an exception applies to the user of the process platform; and
blocking the user from creating or updating the workload when no exception is found and no cross-jurisdiction workload control is selected through the process platform user interface.

3. The method according to claim 1 , further comprising:
monitoring, by the process platform server, user actions relative to the process platform user interface;
detecting that the user of the process platform is to include a task in the workload that involves moving data from one jurisdiction to another; and
prompting the user of the process platform to check whether a particular regulation applies or regulations apply to the task.

4. The method according to claim 1 , further comprising:
monitoring, by the process platform server, user actions relative to the process platform user interface;
detecting that the user of the process platform is to include a task in the workload that involves moving data from one jurisdiction to another;
determining whether a particular regulation applies or regulations apply to the task;
allowing the user of the process platform to include the task in the workload that involves moving data from one jurisdiction to another when no regulation applies to the task; and
blocking the user of the process platform from including the task in the workload that involves moving data from one jurisdiction to another when a regulation applies to the task.

5. The method according to claim 1 , further comprising:
generating an entry in a file or database when the geophysical location associated with the request is not permitted in accordance with the cross-jurisdictional workload control for the workload.

6. The method according to claim 1 , further comprising:
generating a notification when the geophysical location associated with the request is not permitted in accordance with the cross-jurisdictional workload control for the workload.

7. The method according to claim 1 , wherein the cross-jurisdiction workload control module comprises a plurality of function including a review function, an approval function, and an audit function.

8. A system for cross-jurisdictional workload control, the system comprising:
a process platform server having a processor, a non-transitory computer-readable medium, a process platform user interface, and a cross-jurisdiction workload control module;
wherein the cross-jurisdiction workload control module is configured for:
presenting, through the process platform user interface at design time of an application of a collaborative type, cross-jurisdiction workload controls to a user of the process platform in creating or updating the application; and
responsive to the user selecting a cross-jurisdiction workload control through the process platform user interface, placing the cross-jurisdiction workload control on a workload in the application, the cross-jurisdiction workload control specific to a regulation that regulates moving data from a first jurisdiction to a second jurisdiction;

wherein the process platform server is configured for:
communicating the application with the cross-jurisdiction workload control for the workload to a client device associated with an end user;
responsive to a request from the client device to open the application on the client device, determining a geophysical location associated with the request;
determining whether the geophysical location is permitted in accordance with the cross-jurisdictional workload control for the workload in the application;
automatically allowing the client device to open the application when the geophysical location associated with the request is permitted in accordance with the cross-jurisdictional workload control for the workload in the application; and
automatically denying the client device to open the application when the geophysical location associated with the request is not permitted in accordance with the cross-jurisdictional workload control for the workload in the application to thereby enforce the regulation.

9. The system of claim 8 , wherein the process platform server is further configured for:
determining whether an exception applies to the user of the process platform; and
blocking the user from creating or updating the workload when no exception is found and no cross-jurisdiction workload control is selected through the process platform user interface.

10. The system of claim 8 , wherein the process platform server is further configured for:
monitoring user actions relative to the process platform user interface;
detecting that the user of the process platform is to include a task in the workload that involves moving data from one jurisdiction to another; and
prompting the user of the process platform to check whether a particular regulation applies or regulations apply to the task.

11. The system of claim 8 , wherein the process platform server is further configured for:
monitoring user actions relative to the process platform user interface;
detecting that the user of the process platform is to include a task in the workload that involves moving data from one jurisdiction to another;
determining whether a particular regulation applies or regulations apply to the task;
allowing the user of the process platform to include the task in the workload that involves moving data from one jurisdiction to another when no regulation applies to the task; and
blocking the user of the process platform from including the task in the workload that involves moving data from one jurisdiction to another when a regulation applies to the task.

12. The system of claim 8 , wherein the process platform server is further configured for:
generating an entry in a file or database when the geophysical location associated with the request is not permitted

Assignees

• Open Text Sa Ulc

Inventors

• Blair Steven C

Classifications

• H04L67/00

  Network arrangements or protocols for supporting network services or applications (user-to-user messaging H04L51/00; network arrangements, protocols or services for supporting real-time applications in data packet communications networks H04L65/00) · CPC title

• H04W4/02

  Services making use of location information · CPC title

• G06F9/5055

  considering software capabilities, i.e. software resources associated or available to the machine · CPC title

• H04W12/08

  Access security · CPC title

• H04L67/10

  in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46) · CPC title