Providing a policy hierarchy in an enterprise data processing system

Patent metadata

Field	Value
Publication number	US-9785477-B2
Application number	US-42210006-A
Country	US
Kind code	B2
Filing date	Jun 5, 2006
Priority date	Jun 5, 2006
Publication date	Oct 10, 2017
Grant date	Oct 10, 2017

Abstract

A system, method and program product for providing a policy hierarchy usable in an enterprise system having at least one computer cluster. A request is sent to a jurisdictional authority for requesting that a resource be added to the computer cluster of the enterprise system. Following predetermined rules, the jurisdictional authority determines if the addition of said requested resource to said computer cluster is to be allowed. If the addition is determined to be allowed by the jurisdictional authority, the requested resource is added to the computer cluster by a computer cluster manager.

First claim

What is claimed is:

1. A method for processing requests for a resource in an enterprise system having a plurality of computer clusters, the method comprising:
registering with a jurisdictional authority having jurisdictional rules embedded within for managing requests for the resource, by a computer of the enterprise system, disparate policy engines comprising a plurality of policy engines to form a hierarchy in which the jurisdictional authority manages the plurality of policy engines for the enterprise system;
intercepting, by the computer using the jurisdictional authority, the requests for the resource that is a member of a free resource pool, managed by a provisioning manager, from the plurality of policy engines to add the resource to the plurality of computer clusters in the enterprise system;
intercepting, by the computer, policy requests associated with the requests for the resource from the provisioning manager for the jurisdictional authority;
selectively modifying, by the computer, the jurisdictional rules according to predetermined criteria including time of day to manage invocation and execution of policies for the plurality of policy engines;
identifying, by the computer using the jurisdictional authority, a jurisdictional ranking encoded into a respective policy associated with the requests;
determining, by the computer using the jurisdictional authority that mediates between two or more of the requests for the resource using the jurisdictional rules and the jurisdictional ranking in a context of the two or more of the requests for the resource, whether to perform an action associated with the requests selected from a group of actions consisting of permit, deny and alter;
in response to the computer determining to permit the requests for the resource, determining, by the computer using the jurisdictional authority, a highest priority computer cluster in the plurality of computer clusters to add the resource using the jurisdictional rules that identify priorities for assigning the resource, the jurisdictional ranking of the respective policy, and an assignment of the plurality of computer clusters to organizations associated with the plurality of policy engines;
in response to the computer determining the highest priority computer cluster in the plurality of computer clusters, adding, by the computer, the resource requested from the free resource pool by the provisioning manager to only the highest priority computer cluster and not adding the resource requested to another computer cluster of the plurality of computer clusters; and
in response to the computer determining to deny the requests for the resource, capturing, by the computer using the jurisdictional authority, patterns of the requests for the resource and reporting a potentially erroneous policy to respective policy engines of the plurality of policy engines associated with the requests.

2. The method according to claim 1 further comprising:
another computer, on which a policy engine in the plurality of policy engines is present, monitoring a parameter in a computer cluster in the plurality of computer clusters to determine whether the parameter indicates an approaching breach of a Service Level Agreement (SLA) governing operation of the computer cluster and making the request in the requests for the resource in response to determining that the parameter indicates the approaching breach.

3. The method according to claim 2 , wherein the parameter is a trigger threshold measured in the computer cluster.

4. The method according to claim 3 , wherein the trigger threshold is a predetermined volume of web site transactions in the computer cluster.

5. The method according to claim 1 , wherein the highest priority computer cluster is additionally determined using two or more factors selected from a group consisting of business policies, hierarchical service level agreements, contract value, and overall value to the enterprise system.

6. The method according to claim 1 , wherein determining the highest priority computer cluster further comprises:
the computer using a set of input collected by the plurality of policy engines, and wherein the highest priority computer cluster is additionally determined using the set of input collected by the plurality of policy engines in a corporate-wide policy decision regarding use of the resource requested.

7. The method according to claim 1 , wherein the jurisdictional rules comprises rules for adding the resource requested using the jurisdictional ranking of the respective policy and the assignment of the plurality of computer clusters to the organizations associated with the plurality of policy engines based on at least one of geographic areas for the organizations and functions of the organizations.

8. The method according to claim 1 , wherein the resource requested is not added to any other computer cluster in the plurality of computer clusters by the provisioning manager in response to the jurisdictional authority granting permission to the provisioning manager to provision the resource of the requests from the plurality of policy engines.

9. An apparatus for processing requests for a resource in an enterprise system having a plurality of computer clusters, the apparatus comprising:
a computer, a non-transitory computer-readable storage device, a computer-readable memory, and program instructions stored on the non-transitory computer-readable storage device for execution by the computer via the computer-readable memory to:
register with a jurisdictional authority having jurisdictional rules embedded within for managing requests for the resource, by the computer of the enterprise system, disparate policy engines comprising a plurality of policy engines to form a hierarchy in which the jurisdictional authority manages the plurality of policy engines for the enterprise system;
intercept, by the computer using the jurisdictional authority, the requests for the resource that is a member of a free resource pool managed by a provisioning manager from the plurality of policy engines to add the resource to the plurality of computer clusters in the enterprise system;
intercept, by the computer using the jurisdictional authority, policy requests associated with the requests for the resource from the provisioning manager for the jurisdictional authority;
selectively modify, by the computer, the jurisdictional rules according to predetermined criteria including time of day, to manage invocation and execution of policies for the plurality of policy engines;
identify, by the computer using the jurisdictional authority, a jurisdictional ranking encoded into a respective policy associated with the requests;
determine, by the computer using the jurisdictional authority that mediates between two or more of the requests for the resource using the jurisdictional rules and the jurisdictional ranking in a context of the two or more of the requests for the resource, whether to perform an action associated with the requests selected from a group of actions consisting of permit, deny and alter;
determine, by the computer using the jurisdictional authority and using the jurisdictional rules that identify priorities for assigning the resource, the jurisdictional ranking of the respective policy, and an assignment of the plurality of computer clusters to organizations associated with the plurality of policy engines, a highest priority computer cluster in the plurality of computer clusters to add the resource, in response to the computer using determining to permit the requests;
add the resource requested from the free resource pool by the provisioning manager to only the highest priority computer cluster identified and not add the resource requested

Assignees

• Childress Rhonda L
• Kumhyr David B
• Spisak Michael J
• IBM

Inventors

• Childress Rhonda L
• Kumhyr David B
• Spisak Michael J

Classifications

• G06F9/5061 Primary

  Partitioning or combining of resources · CPC title

• G06F2209/505

  Clust · CPC title

• G06Q10/0631

  Resource planning, allocation, distributing or scheduling for enterprises or organisations · CPC title