METHODS AND SYSTEMS FOR POLICY STATEMENT EXECUTION ENGINE
First Claim
1. A system for detecting exceptions to a policy expressed in a computer-executable policy statement, comprising:
- a storage device for storing a set of policy statements, the set of policy statements comprising at least one base policy statement and optionally one or more custom policy statements;
a data retrieval subsystem for connecting to a data storage device storing data for use in connection with determining policy exceptions;
a policy analysis engine responsive to each policy statement in the storage device for retrieving data corresponding to at least one entity stored in the storage device that is referenced by the policy statement the policy analysis engine being further operative for evaluating an indicator provided in the policy statement and determining a confidence level associated with the indicator; and
an exception determining component responsive to the determined confidence level exceeding a predetermined threshold value for generating data corresponding to an exception to the policy.
0 Assignments
0 Petitions
Accused Products
Abstract
A policy statement execution engine for use in connection with a policy compliance monitoring system that determines exceptions to policies expressed by computer-executable policy statements. The system allows establishment, codification, and maintenance of enterprise policies, monitors electronic transactions of the enterprise from various data sources, detects exceptions to established policies, reports exceptions to authorized users such as managers and auditors, and/or provides a case management system for tracking exceptions and their underlying transactions. A storage device stores a set of computer-executable policy statements. A data storage device stores enterprise data analyzed in connection with determining policy exceptions. A policy analysis engine retrieves data from the data storage device that is referenced by the policy statement, evaluates an indicator provided in the policy statement, and determines a confidence level associated with the indicator. An exception determining component responsive to the confidence level generates data indicating a policy exception.
-
Citations
78 Claims
-
1. A system for detecting exceptions to a policy expressed in a computer-executable policy statement, comprising:
-
a storage device for storing a set of policy statements, the set of policy statements comprising at least one base policy statement and optionally one or more custom policy statements; a data retrieval subsystem for connecting to a data storage device storing data for use in connection with determining policy exceptions; a policy analysis engine responsive to each policy statement in the storage device for retrieving data corresponding to at least one entity stored in the storage device that is referenced by the policy statement the policy analysis engine being further operative for evaluating an indicator provided in the policy statement and determining a confidence level associated with the indicator; and an exception determining component responsive to the determined confidence level exceeding a predetermined threshold value for generating data corresponding to an exception to the policy. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18)
-
-
19. A computer-implemented method for detecting exceptions to a policy expressed in a computer-executable policy statement, comprising the steps of:
-
opening a connection to a data storage device storing data for use in connection with determining policy exceptions; retrieving a base policy statement from a storage device; retrieving a custom policy statement from a storage device; for each policy statement, retrieving data corresponding to at least one entity stored in the storage device that is referenced by the policy statement; evaluating an indicator provided in the policy statement; determining a confidence level associated with an indicator determined in the evaluating step; and if a determined confidence level exceeds a predetermined threshold value, generating data corresponding to an exception to the policy. - View Dependent Claims (20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36)
-
-
37. A computer-implemented policy statement execution system for use in detecting possible exceptions to a policy expressed in a computer-executable policy statement, comprising:
-
a program module for retrieving a computer-executable policy statement from a storage device; an interpreter program module for interpreting the policy statement and determining computer operations corresponding to the policy statement; a program module for executing computer operations determined by the interpreter module; a program module for retrieving any required data for use in connection with the policy statement from one or more data sources; a program module for determining an exception based on resolution of a logical expression contained in the policy statement; and an output for providing data corresponding to an exception resulting from the exception determining program module. - View Dependent Claims (38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58)
-
-
59. A method for detecting possible exceptions to a policy expressed in a computer-executable policy statement, comprising the steps of:
-
retrieving a computer-executable policy statement from a storage device; interpreting the policy statement to determine computer operations corresponding to the policy statement; executing computer operations determined in the interpreting step; retrieving any required data for use in connection with the policy statement from one or more data sources; determining an exception based on resolution of a logical expression contained in the policy statement; and providing a data output corresponding to an exception resulting from the exception determining step. - View Dependent Claims (60, 61, 62, 63, 64, 65, 66, 67, 68, 69, 70, 71, 72, 73, 74, 75, 76, 77, 78)
-
Specification