Policy-based application architecture generation

Patent metadata

Field	Value
Publication number	US-12019776-B2
Application number	US-202217733726-A
Country	US
Kind code	B2
Filing date	Apr 29, 2022
Priority date	Apr 30, 2021
Publication date	Jun 25, 2024
Grant date	Jun 25, 2024

Abstract

In some examples, policy-based application architecture generation may include generating, based on a knowledge model schema, data residency policies, and a data classification ontology, a knowledge model, and determining, based on the knowledge model, whether an application includes regulated data. Based on an analysis of application data and user data, user location and regulated data insights may be generated to determine location specific data residency policies. Location specific regulated data in-flow and data source hosted location insights may be analyzed to determine a location compliance assessment that includes an indication of whether a location associated with the application is compliant or not compliant with the location specific data residency policies. Based on an indication of non-compliance, a strategy may be generated for compliance of application architecture for the application with the location specific data residency policies, and re-architecting of the application architecture may be implemented.

First claim

What is claimed is:

1. A policy-based application architecture generation apparatus comprising:
at least one hardware processor;
a knowledge model instantiator, executed by the at least one hardware processor, to
generate, based on a knowledge model schema, data residency policies, and a data classification ontology, a knowledge model that includes residency policies and a regulated data ontology;

a data analyzer, executed by the at least one hardware processor, to
ascertain, for an application, application data, and
determine, based on analysis of the application data with respect to the knowledge model, whether the application includes regulated data;

a file reader, executed by the at least one hardware processor, to
obtain user data for a user associated with the application,
wherein the data analyzer and the file reader generate, based on an analysis of the application data and the user data, user location and regulated data insights;

a knowledge model query performer, executed by the at least one hardware processor, to
query, based on the user location and regulated data insights, the knowledge model, and
determine, based on the query of the knowledge model, location specific data residency policies;

a regulated data in-flow analyzer, executed by the at least one hardware processor, to
determine, based on an analysis of the location specific data residency policies, location specific regulated data in-flow;

an architecture reader, executed by the at least one hardware processor, to
generate, based on an analysis of deployment architecture artifacts for the application, data source hosted location insights;

a policy adherence analyzer, executed by the at least one hardware processor, to
determine, based on an analysis of the location specific regulated data in-flow and the data source hosted location insights, a location compliance assessment, wherein the location compliance assessment includes an indication of whether a location associated with the application is compliant or not compliant with the location specific data residency policies; and

a strategy recommender and implementer, executed by the at least one hardware processor, to
generate, based on a determination that the location associated with the application is not compliant with the location specific data residency policies, a strategy for compliance of application architecture for the application with the location specific data residency policies, and
implement, based on the strategy, re-architecting of the application architecture.

2. The policy-based application architecture generation apparatus according to claim 1 , wherein the data analyzer is executed by the at least one hardware processor, to:
determine the regulated data for the location associated with the application relative to regulated data for a plurality of locations.

3. The policy-based application architecture generation apparatus according to claim 1 , wherein the data analyzer is executed by the at least one hardware processor, to:
determine a total number of unique users for the location associated with the application relative to a total numbers of users across all locations.

4. The policy-based application architecture generation apparatus according to claim 1 , wherein the data analyzer is executed by the at least one hardware processor to determine, based on analysis of the application data with respect to the knowledge model, whether the application includes regulated data by:
determining a user percentage as a function of a user data for the location associated with the application relative to user data for all locations;
determining the regulated data as a function of regulated records for the location associated with the application relative to regulated records for all locations; and
determining a regulated data intensity as a function of the user percentage and the regulated data.

5. The policy-based application architecture generation apparatus according to claim 1 , wherein the strategy recommender and implementer is executed by the at least one hardware processor to:
generate, based on the location compliance assessment, an optimum architecture for the application by performing location prioritization for deployment.

6. The policy-based application architecture generation apparatus according to claim 1 , wherein the regulated data in-flow analyzer is executed by the at least one hardware processor to determine, based on the analysis of the location specific data residency policies, location specific regulated data in-flow by:
determining a regulated data in-flow value as a function of a regulated data intensity, and a sum of operations allowed relative to a total number of operations.

7. The policy-based application architecture generation apparatus according to claim 6 , the regulated data in-flow analyzer is executed by the at least one hardware processor to:
determine, based on the regulated data in-flow value, a processing datacenter for processing the application data by identifying the processing datacenter including the highest regulated data in-flow value.

8. A method for policy-based application architecture generation, the method comprising:
generating, by at least one hardware processor based on a knowledge model schema, data residency policies, and a data classification ontology, a knowledge model that includes residency policies and a regulated data ontology;
ascertaining, by the at least one hardware processor, for an application, application data;
determining, by the at least one hardware processor, based on analysis of the application data with respect to the knowledge model, whether the application includes regulated data;
obtaining, by the at least one hardware processor, user data for a user associated with the application;
generating, by the at least one hardware processor based on an analysis of the application data and the user data, user location and regulated data insights;
querying, by the at least one hardware processor based on the user location and regulated data insights, the knowledge model;
determining, by the at least one hardware processor based on the query of the knowledge model, location specific data residency policies;
determining, by the at least one hardware processor based on an analysis of the location specific data residency policies, location specific regulated data in-flow;
generating, by the at least one hardware processor based on an analysis of deployment architecture artifacts for the application, data source hosted location insights;
determining, by the at least one hardware processor based on an analysis of the location specific regulated data in-flow and the data source hosted location insights, a location compliance assessment, wherein the location compliance assessment includes an indication of whether a location associated with the application is compliant or not compliant with the location specific data residency policies;
generating, by the at least one hardware processor based on a determination that the location associated with the application is not compliant with the location specific data residency policies, a strategy for compliance of application architecture for the application with the location specific data residency policies, and
implementing, by the at least one hardware processor based on the strategy, re-architecting of the application architecture.

9. The method according to claim 8 , further comprising:
determining, by the at least one hardware processor, the regulated data for the location associated with the application relative to regulated data for a plurality of locations.

10. The method according to claim 8 , further compris

Assignees

• Accenture Global Solutions Ltd

Inventors

• Singi Kapil
• Kaulgud Vikrant
• Phokela Kanchanjot Kaur
• Durg Kishore P
• Gon Choudhury Swapnajeet

Classifications

• G06F16/24564 Primary

  Applying rules; Deductive queries · CPC title

• G06F16/2457

  with adaptation to user needs · CPC title

• G06F16/2458

  Special types of queries, e.g. statistical queries, fuzzy queries or distributed queries · CPC title

• G06N5/022

  Knowledge engineering; Knowledge acquisition · CPC title

• G06F16/24575

  using context · CPC title