System and method for actively managing service-oriented architecture

• US 20070033194A1
• Filed: 01/17/2006
• Published: 02/08/2007
• Est. Priority Date: 05/21/2004
• Status: Abandoned Application

• Current Assignee: Computer Associates Think Inc. (Broadcom, Inc.)
• Original Assignee: Computer Associates Think Inc. (Broadcom, Inc.)
• Inventors: Srinivas, Davanum, Sedukhin, Igor, Tcherevik, Dmitri, Parker, Leo, Umansky, Vlad
• Application Number:
  US11/333,481
• Publication Number:
  US 20070033194A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising

Abstract

A method for managing policy in a service-oriented architecture includes intercepting a communication representing a transaction between a client and a service along a network, interpreting the communication to determine details of the transaction, determining if the transaction complies with policy based on the details of the transaction and remediating where the transaction is determined to not comply with the policy.

Claims

1. A method for managing policy in a service-oriented architecture, comprising:

intercepting a communication representing a transaction between a client and a service along a network;

interpreting said communication to determine details of said transaction;

determining if said transaction complies with policy based on said details of said transaction; and

remediating where said transaction is determined to not comply with said policy.

2. The method of claim 1, wherein said service is a web service.

3. The method of claim 1, wherein said client is a client of a consumer.

4. The method of claim 1, wherein said service is a service of a provider.

5. The method of claim 1, wherein said network is a secure network backbone.

6. The method of claim 1, wherein said communication is an ordered message exchange.

7. The method of claim 1, wherein said communication conforms to XML standards.

8. The method of claim 1, wherein said communication conforms to SOAP standards.

9. The method of claim 1, wherein said communication conforms to HTTP standards.

10. The method of claim 1, wherein said policy comprises management policy.

11. The method of claim 1, wherein said policy comprises security policy.

12. The method of claim 1, wherein said step of remediating comprises blocking said communication.

13. The method of claim 1, wherein said step of remediating comprises logging said determination of non-compliance.

14. The method of claim 1, wherein said step of remediating comprises modifying said communication to produce a communication that represents a transaction that complies with said policy.

15. The inethod of claim 1, wherein said policy comprises rules and events, wherein said events may be executed based on said rules.

16. A system for managing policy in a service-oriented architecture, comprising:

a policy client sensor for intercepting a communication representing a transaction between a client and a service along a network;

a policy engine for interpreting said communication to determine details of said transaction and determining if said transaction complies with policy based on said details of said transaction; and

a policy client actuator for remediating where said transaction is determined to not comply with said policy.

17. The system of claim 16, wherein said service is a web service.

18. The system of claim 16, wherein said client is a client of a consumer.

19. The system of claim 16, wherein said service is a service of a provider.

20. The system of claim 16, wherein said network is a secure network backbone.

21. The system of claim 16, wherein said communication is an ordered message exchange.

22. The system of claim 16, wherein said communication conforms to XML standards.

23. The system of claim 16, wherein said communication conforms to SOAP standards.

24. The system of claim 16, wherein said communication conforms to HTTP standards.

25. The system of claim 16, wherein said policy comprises management policy.

26. The system of claim 16, wherein said policy comprises security policy.

27. The system of claim 16, wherein said policy client actuator blocks said communication where said transaction is determined to not comply with said policy.

28. The system of claim 16, wherein said policy client actuator logs said determination of non-compliance where said transaction is determined to not comply with said policy.

29. The system of claim 16, wherein said policy client actuator modifies said communication to produce a communication that represents a transaction that complies with said policy where said transaction is determined to not comply with said policy.

30. The system of claim 16, wherein said policy comprises rules and events, wherein said events may be executed based on said rules.

31. A computer system comprising:

a processor; and

a computer recording medium including computer executable code executable by the processor for managing policy in a service-oriented architecture, the computer executable code comprising;

code for intercepting a communication representing a transaction between a client and a service along a network;

code for interpreting said communication to determine details of said transaction;

code for determining if said transaction complies with policy based on said details of said transaction; and

code for remediating where said transaction is determined to not comply with said policy.

32. The computer system of claim 31, wherein said service is a web service.

33. The computer system of claim 31, wherein said client is a client of a consumer.

34. The computer system of claim 31, wherein said service is a service of a provider.

35. The computer system of claim 31, wherein said network is a secure network backbone.

36. The computer system of claim 31, wherein said communication is an ordered message exchange.

37. The computer system of claim 31, wherein said communication conforms to XML standards.

38. The computer system of claim 31, wherein said communication conforms to SOAP standards.

39. The computer system of claim 31, wherein said communication conforms to HTTP standards.

40. The computer system of claim 31, wherein said policy comprises management policy.

41. The computer system of claim 31, wherein said policy comprises security policy.

42. The computer system of claim 31, wherein said code for remediating comprises code for blocking said communication.

43. The computer system of claim 31, wherein said code for remediating comprises code for logging said determination of non-compliance.

44. The computer system of claim 31, wherein said code for remediating comprises code for modifying said communication to produce a communication that represents a transaction that complies with said policy.

45. The computer system of claim 31, wherein said policy comprises rules and events, wherein said events may be executed based on said rules.

46. A computer recording medium including computer executable code for managing policy in a service-oriented architecture, the computer executable code comprising:

code for intercepting a communication representing a transaction between a client and a service along a network;

code for interpreting said communication to determine details of said transaction;

code for determining if said transaction complies with policy based on said details of said transaction; and

code for remediating where said transaction is determined to not comply with said policy.