Associating Code To a Target Through Code Inspection

• US 20070156727A1
• Filed: 12/22/2006
• Published: 07/05/2007
• Est. Priority Date: 12/29/2005
• Status: Active Grant

• Current Assignee: Nextlabs
• Original Assignee: Blue Jungle
• Inventors: Lim, Keng
• Granted Patent: US 8,156,566 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 11/3438 monitoring of user actions tracking the activity of the user H04L67/535
• CPC Class Codes: G06F 16/122 using management policies backup systems G06F11/1446; file migration policies for HSM systems G06F16/185
• CPC Class Codes: G06F 16/13 File access structures, e.g. distributed indices arrangements of input from, or output to, record carriers G06F3/06
• CPC Class Codes: G06F 16/176 Support for shared access to files; File sharing support
• CPC Class Codes: G06F 16/93 Document management systems
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 9/468 Specific access rights for resources, e.g. using capability register
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 63/205 involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved negotiation of communication capabilities H04L69/24

Abstract

Code is associated to a target based on an inspection of the code. A target may be a device or a user. A number of code components may be inspected at one time and then transferred or otherwise associated to a target based on the target'"'"'s profile. A code component may be a policy of an information management system.

Claims

1. A method comprising:

providing a plurality of code components;

providing a plurality of devices having device profiles;

inspecting contents of the plurality of code components; and

based on a result of the inspection of the contents of the code components and the device profiles, determining which of the devices to associate a code component with.

2. The method of claim 1 wherein each code component comprises a policy.

3. The method of claim 1 wherein each code component comprises a policy abstraction.

4. The method of claim 1 where a code component comprises at least one of a statement, a statement having at least one expression, a statement having at least one variable, a script, an uncompiled C language file, an uncompiled high-level programming language file, an ASCII file, an expression, an expression having at least one variable, a binary file, or an executable file.

5. The method of claim 1 further comprising:

for a first device, transferring at least one code component associated with the first device to the first device.

6. The method of claim 1 further comprising:

for a first device, altering at least one code component associated with the first device; and

transferring the altered at least one code component to the first device.

7. The method of claim 1 wherein a first code component associated with a first device is provided in a first format and the method further comprises:

transforming the first code component into a second code component having a second format, different from the first format; and

transferring the second code component to the first device.

8. The method of claim 1 wherein a first set of code components associated with a first device is provided in a first format and the method further comprises:

transforming the first set of code components into a second set of code components having a second format, different from the first format; and

transferring the second set of code components to the first device.

9. The method of claim 8 wherein the second set has fewer code components than the first set.

10. The method of claim 8 wherein the second set has a greater number of code components than the first set.

11. The method of claim 8 wherein the first set and second set have the same number of code components.

12. The method of claim 1 further wherein the plurality of devices comprise the first device and a second device and the method further comprises:

for the first device, transferring at least a first code component associated with the first device to the first device;

for the second device, transferring at least a second code component associated with the second device to the second device;

after the transferring the at least a first code component and the transferring the at least a second code component, providing a third device having a third device profile;

after providing the third device, inspecting the contents of the plurality of code components;

after providing the third device, based on a result of the inspection of the contents of the code components and the third device profile, determining which of the code components to associate with the third device; and

for the third device, transferring at least a third code component associated with the third device to the third device.

13. A system comprising:

a database comprising a plurality of policies;

a plurality of devices, each having a profile; and

an inspection engine comprising executable code to cause inspection of each of the policies and executable code to determine based on the result of the inspection and the profiles of the devices which of the devices each of the policies will be associated with.

14. The system of claim 13 wherein a policy comprises at least one of a statement, a statement having at least one expression, a statement having at least one variable, a script, an uncompiled C language file, an uncompiled high-level programming language file, an ASCII file, a code file, an expression, an expression having at least one variable, a binary file, or an executable file.

15. The system of claim 13 wherein a database comprises a plurality of files.

16. The system of claim 13 wherein a database comprises a plurality of policy files.

17. The system of claim 13 wherein the executable code causes inspection on at least a portion of each of the policies.

18. A system comprising:

a plurality of code files;

a plurality of devices, each having a profile; and

an inspection engine comprising executable code to cause inspection of each of the code files and executable code to determine based on the result of the inspection and the profiles of the devices which of the devices each of the code files will be associated with.