Boundary based edge device compliance program for managing end user data compliance

Patent metadata

Field	Value
Publication number	US-12189803-B2
Application number	US-202218056272-A
Country	US
Kind code	B2
Filing date	Nov 17, 2022
Priority date	Nov 17, 2022
Publication date	Jan 7, 2025
Grant date	Jan 7, 2025

Abstract

A method for boundary based edge device compliance includes receiving a request to process data and identifying a cluster of edge devices to process the data located within a boundary area. The method includes applying compliance rules to the cluster of edge devices and instructing the cluster of edge devices to perform computations while adhering to the compliance rules associated with the boundary area. In response to determining that a first edge device from the cluster of edge devices is relocating outside of the boundary area, the method includes instructing the first edge device to transfer data to a second edge device from the cluster of edge devices prior to crossing the boundary to adhere to the compliance rules.

First claim

What is claimed is:

1. A computer-implemented method comprising:
responsive to receiving a request to process data utilizing a plurality of edge devices, identifying a cluster of edge devices to process the data located within a boundary, wherein the boundary defines a boundary area;
applying one or more compliance rules to the cluster of edge devices, wherein the one or more compliance rules are associated with the boundary area;
instructing the cluster of edge devices to perform computations while adhering to the one or more compliance rules associated with the boundary area; and
responsive to determining that a first edge device from the cluster of edge devices is relocating outside of the boundary area, instructing the first edge device to transfer data to a second edge device from the cluster of edge devices prior to crossing the boundary to adhere to the one or more compliance rules.

2. The computer-implemented method of claim 1 , further comprising:
filtering the cluster of edge devices within the boundary based on baseline parameters, wherein the baseline parameters are selected from a group consisting of: minimal hardware specifications, minimal security protocols and encryptions standards, one or more privacy specifications, and one or more local regulations for a geographical area in which the boundary area is located.

3. The computer-implemented method of claim 2 , wherein the baseline parameters are associated with the request to process data utilizing the plurality of edge devices.

4. The computer-implemented method of claim 1 , further comprising:
determining whether the first edge device form the cluster of edge devices is relocating outside of the boundary area based on a defined path of travel for the first edge device.

5. The computer-implemented method of claim 1 , further comprising:
determining whether the first edge device form the cluster of edge devices is relocating outside of the boundary area based on the first edge device approaching a threshold line near a boundary perimeter for the boundary area.

6. The computer-implemented method of claim 1 , wherein instructing the first edge device to transfer data to the second edge device from the cluster of edge devices prior to crossing the boundary is based on at least one of: availability, processing capabilities, an expected duration in the boundary area, a level of security protocols and encryptions, and a type of edge device.

7. The computer-implemented method of claim 1 , further comprising:
instructing a portion of the cluster of edge devices that includes the second edge device to relocate towards the first edge device.

8. A computer program product comprising:
one or more computer-readable storage media and program instructions stored on the one or more computer-readable storage media capable of performing a method, the method comprising:
responsive to receiving a request to process data utilizing a plurality of edge devices, identifying a cluster of edge devices to process the data located within a boundary, wherein the boundary defines a boundary area;
applying one or more compliance rules to the cluster of edge devices, wherein the one or more compliance rules are associated with the boundary area;
instructing the cluster of edge devices to perform computations while adhering to the one or more compliance rules associated with the boundary area; and
responsive to determining that a first edge device from the cluster of edge devices is relocating outside of the boundary area, instructing the first edge device to transfer data to a second edge device from the cluster of edge devices prior to crossing the boundary to adhere to the one or more compliance rules.

9. The computer program product of claim 8 , further comprising:
filtering the cluster of edge devices within the boundary based on baseline parameters, wherein the baseline parameters are selected from a group consisting of: minimal hardware specifications, minimal security protocols and encryptions standards, one or more privacy specifications, and one or more local regulations for a geographical area in which the boundary area is located.

10. The computer program product of claim 9 , wherein the baseline parameters are associated with the request to process data utilizing the plurality of edge devices.

11. The computer program product of claim 8 , further comprising:
determining whether the first edge device form the cluster of edge devices is relocating outside of the boundary area based on a defined path of travel for the first edge device.

12. The computer program product of claim 8 , further comprising:
determining whether the first edge device form the cluster of edge devices is relocating outside of the boundary area based on the first edge device approaching a threshold line near a boundary perimeter for the boundary area.

13. The computer program product of claim 8 , wherein instructing the first edge device to transfer data to the second edge device from the cluster of edge devices prior to crossing the boundary is based on at least one of: availability, processing capabilities, an expected duration in the boundary area, a level of security protocols and encryptions, and a type of edge device.

14. The computer program product of claim 8 , further comprising:
instructing a portion of the cluster of edge devices that includes the second edge device to relocate towards the first edge device.

15. A computer system comprising:
one or more computer processors, one or more computer-readable storage media, and program instructions stored on the one or more of the computer-readable storage media for execution by at least one of the one or more processors capable of performing a method, the method comprising:
responsive to receiving a request to process data utilizing a plurality of edge devices, identifying a cluster of edge devices to process the data located within a boundary, wherein the boundary defines a boundary area;
applying one or more compliance rules to the cluster of edge devices, wherein the one or more compliance rules are associated with the boundary area;
instructing the cluster of edge devices to perform computations while adhering to the one or more compliance rules associated with the boundary area; and
responsive to determining that a first edge device from the cluster of edge devices is relocating outside of the boundary area, instructing the first edge device to transfer data to a second edge device from the cluster of edge devices prior to crossing the boundary to adhere to the one or more compliance rules.

16. The computer system of claim 15 , further comprising:
filtering the cluster of edge devices within the boundary based on baseline parameters, wherein the baseline parameters are selected from a group consisting of: minimal hardware specifications, minimal security protocols and encryptions standards, one or more privacy specifications, and one or more local regulations for a geographical area in which the boundary area is located.

17. The computer system of claim 16 , wherein the baseline parameters are associated with the request to process data utilizing the plurality of edge devices.

18. The computer system of claim 15 , further comprising:
determining whether the first edge device form the cluster of edge devices is relocating outside of the boundary area based on a defined path of travel for the first edge device.

19. The computer system of claim 15 , further comprising:
determining whether the first edge device form the cluster of

Assignees

• IBM

Inventors

• Fox Jeremy R
• Miller Grant Douglas
• Agrawal Tushar
• Mene Atul
• Rakshit Sarbajit K

Classifications

• H04L63/20

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title

• G06F21/6218 Primary

  to a system of files or objects, e.g. local or distributed file system or database · CPC title