Cross-jurisdiction workload control systems and methods

Patent metadata

Field	Value
Publication number	US-12596969-B2
Application number	US-202217572746-A
Country	US
Kind code	B2
Filing date	Jan 11, 2022
Priority date	Dec 8, 2016
Publication date	Apr 7, 2026
Grant date	Apr 7, 2026

Abstract

At design time, cross-jurisdiction workload controls may be presented by a process platform server to a user (e.g., a workload creator or process builder) who is using the process platform to create or update an application having a workload functionality with zero, one, or more applicable regulation controls. If no regulation control is selected, or if there is no exception provided, the process platform server may operate to block the user from proceeding to complete the workload creation process. The application with the workload thus created/updated is delivered to end user(s). Responsive to a user request to open the application on a client device, a server (the process platform server or an application gateway server) may operate to automatically determine whether a target location associated with the user request is permitted in accordance with a cross-jurisdiction workload control associated the workload defined in the application.

First claim

What is claimed is:

1 . A method for cross-jurisdictional workload control enforcement, the method comprising:
at design time, presenting, by a workload design application, a workload design interface that prompts a workload creator for input regarding a plurality of target locations and corresponding local controls; determining whether the local controls are available as a condition to allow the workload creator to create a workload; receiving, by the workload design application via the workload design interface, input indicating whether to turn on or off the local controls for individual ones of the target locations; monitoring actions of the workload creator and applying local controls for individual ones of the target locations that are turned on to identify tasks that the workload creator attempts to add to the workload that involve cross-jurisdictional movement of data; blocking an identified task from being added to the workload based on the controls; creating the workload including tasks that have not been blocked; unblocking the identified task in response to overriding the local controls; and adding the identified task to the workload.

2 . The method of claim 1 , further comprising, in response to identifying a first task which the workload creator attempts to add to the workload which involves cross-jurisdictional movement of data, presenting a notification to the workload creator via the workload design interface.

3 . The method of claim 2 , further comprising receiving, by the workload design application via the workload design interface, input responsive to the notification which indicates an exception to one of the local controls that caused the notification, and enabling the first task to be added to the workload.

4 . The method of claim 2 , further comprising receiving, by the workload design application via the workload design interface, input responsive to the notification which indicates an approval to override one of the local controls that caused the notification, and enabling the first task to be added to the workload.

5 . The method of claim 4 , further comprising, in response to receiving the approval to override the one of the local controls that caused the notification, generating an audit record indicative of the approval.

6 . The method of claim 1 , further comprising presenting, by the workload design interface, information for each of the local controls, including information on one or more of:
approvals; regulations; and audit requirements.

7 . The method of claim 1 , further comprising delivering the workload to an application, the application being adapted to enable an end user to execute the workload at runtime.

8 . A system for cross-jurisdictional workload control enforcement, the system comprising:
a processor; a non-transitory computer-readable medium; and stored instructions translatable by the processor for:
at design time,
presenting, by a workload design application, a workload design interface that prompts a workload creator for input regarding a plurality of target locations and corresponding local controls;
determining whether the local controls are available as a condition to allow the workload creator to create a workload;
receiving, by the workload design application via the workload design interface, input indicating whether to turn on or off the local controls for individual ones of the target locations;
monitoring actions of the workload creator and applying local controls for individual ones of the target locations that are turned on to identify tasks that the workload creator attempts to add to the workload that involve cross-jurisdictional movement of data;
blocking an identified task from being added to the workload based on the local controls;
creating the workload including tasks that have not been blocked
unblocking the identified task in response to overriding the local controls; and
adding the identified task to the workload.

9 . The system of claim 8 , the stored instructions further translatable by the processor for, in response to identifying a first task which the workload creator attempts to add to the workload which involves cross-jurisdictional movement of data, presenting a notification to the workload creator via the workload design interface.

10 . The system of claim 9 , the stored instructions further translatable by the processor for receiving, by the workload design application via the workload design interface, input responsive to the notification which indicates an exception to one of the local controls that caused the notification, and enabling the first task to be added to the workload.

11 . The system of claim 9 , the stored instructions further translatable by the processor for receiving, by the workload design application via the workload design interface, input responsive to the notification which indicates an approval to override one of the local controls that caused the notification, and enabling the first task to be added to the workload.

12 . The system of claim 11 , the stored instructions further translatable by the processor for, in response to receiving the approval to override the one of the local controls that caused the notification, generating an audit record indicative of the approval.

13 . The system of claim 8 , the stored instructions further translatable by the processor for presenting, by the workload design interface, information for each of the local controls, including information on one or more of: approvals; regulations; and audit requirements.

14 . The system of claim 8 , the stored instructions further translatable by the processor for delivering the workload to an application, the application being adapted to enable an end user to execute the workload at runtime.

15 . A computer program product for cross-jurisdictional workload control enforcement, the computer program product comprising a non-transitory computer-readable medium storing instructions translatable by a computer processor for:
at design time, presenting, by a workload design application, a workload design interface that prompts a workload creator for input regarding a plurality of target locations and corresponding local controls; determining whether the local controls are available as a condition to allow the workload creator to create a workload; receiving, by the workload design application via the workload design interface, input indicating whether to turn on or off the local controls for individual ones of the target locations; monitoring actions of the workload creator and applying local controls for individual ones of the target locations that are turned on to identify tasks that the workload creator attempts to add to the workload that involve cross-jurisdictional movement of data; blocking an identified task from being added to the workload based on the local controls; creating the workload including tasks that have not been blocked unblocking the identified task in response to overriding the local controls; and adding the identified task to the workload.

16 . The computer program product of claim 15 , the instructions further translatable by the computer processor for, in response to identifying a first task which the workload creator attempts to add to the workload which involves cross-jurisdictional movement of data, presenting a notification to the workload creator via the workload design interface.

17 . The computer program product of claim 16 , the instructions further translatable by the computer processor for receiving, b

Assignees

• Open Text Sa Ulc

Inventors

• Blair Steven C

Classifications

• H04L65/40

  Support for services or applications · CPC title

• H04W12/63

  Location-dependent; Proximity-dependent · CPC title

• H04L67/00

  Network arrangements or protocols for supporting network services or applications (user-to-user messaging H04L51/00; network arrangements, protocols or services for supporting real-time applications in data packet communications networks H04L65/00) · CPC title

• H04L63/107

  wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals · CPC title

• H04W12/08

  Access security · CPC title