Autonomic assistance for policy generation

• US 10,454,767 B2
• Filed: 01/02/2013
• Issued: 10/22/2019
• Est. Priority Date: 08/06/2003
• Status: Active Grant

• Current Assignee: SailPoint Technologies Holdings, Inc.
• Original Assignee: SailPoint Technologies Holdings, Inc.
• Inventors: Kaminsky, David L., Ogle, David M.
• Primary Examiner(s): Strange, Aaron N
• Application Number:
  US13/732,497
• Publication Number:
  US 20130185407A1
• Time in Patent Office: 2,484 Days
• Field of Search: 705 1, 709220, 709223, 709224, 709230
• CPC Class Codes: G06N 5/02 Knowledge representation; Symbolic representation
• CPC Class Codes: H04L 41/00 Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time

Abstract

A system, method and apparatus for autonomically assisting in the creation of an administrative policy. The method can include detecting a stimuli in a system under study and monitoring a response by a systems administrator to the stimuli. The stimuli and the response can be forwarded to a policy maker suited to analyze the stimuli and the response. Also, the policy maker can be queried for a preferred response to the stimuli. Based upon the preferred response to the stimuli, a policy for responding to the stimuli can be formulated. As such, the policy can be enforced in managing the system under study. Moreover, the policy can be forwarded for future consideration to the systems administrator.

Claims

1. A system for autonomically assisting in the creation of an administrative policy comprising:

a computer communicatively coupled to a system under study, the computer comprising at least one processor and a memory comprising;

a systems administration component executing in the memory of the computer and configurable in a number of modes comprising a predictive mode, an adaptive mode and an autonomic mode, the systems administration component comprising program code enabled to enter the predictive mode in which the program code is operable during execution by the at least one processor to detect a stimuli in the system under study and to monitor a response by a systems administrator to said stimuli, the stimuli being a particular computing situation in the system under study in which an uncertainty exists for how to proceed in order to redress the particular computing situation, and the response being a particular course of action taken in response to the stimuli so as to perform the redress;

a workflow component executing in the memory of the computer and coupled to a policy generation component and a data store of stimuli/responses comprising a collection of stimuli flowing from operation of the system under study and responses performed by the systems administrator, the workflow component comprising program code enabled to forward said stimuli and said response to a policy maker suited to analyze said stimuli and said response specified in a table of policy makers and particular stimuli, and to query said policy maker for a preferred response to said stimuli; and

,

the policy generation component executing in the memory of the computer, the policy generation component comprising program code enabled to formulate a policy for responding to said stimuli based upon said preferred response;

the program code of the systems administration component being further operable during execution by the at least one processor to enter subsequent to the predictive mode, an autonomic mode during which the program code utilizes the formulated policy to respond to said stimuli based upon said preferred response without requiring intervention by the systems administrator.

2. The system of claim 1, further comprising a data store of stimuli and responses in said system under study.

3. The system of claim 1, wherein the systems administration component further comprises program code enabled to enforce said policy in managing said system under study.

4. The system of claim 1, wherein the policy generation component further comprises program code enabled to forward said policy to said systems administrator.

5. The system of claim 1, wherein the systems administration component further comprises program code enabled to store said stimuli and response in a data store for subsequent analysis.

6. The system of claim 1, wherein the systems administration component further comprises program code enabled

to monitor the performance of said system under study in respect to said policy;

and,

to report said monitored performance to at least one of said systems administrator and said policy maker.

7. The system of claim 1, wherein the workflow component further comprises program code enabled

to identify a policy maker among a plurality of policy makers, said identified policy maker having an association with at least one of said system under study, said stimuli and said response;

and,

to route said stimuli and response to said identified policy maker.

8. The system of claim 1, wherein the workflow component further comprises program code enabled

to identify a policy maker among a plurality of policy makers, said identified policy maker having knowledge of another policy maker among said plurality of policy makers, said another policy maker having an association with at least one of said system under study, said stimuli and said response;

and,

to route said stimuli and response to said identified policy maker, said identified policy maker further routing said stimuli and response to said another policy maker.

9. The system of claim 1, wherein the workflow component further comprises program code enabled to query said policy maker for at least one of an identity of a related stimuli, an identity of a related response, and an identity of a related system to which said policy can apply.

10. The system of claim 9, wherein the policy generation component further comprises program code enabled to formulate said policy additionally based upon said at least one of said identity of said related stimuli, said identity of said related response, and said identity of said related system to which said policy can apply.