POLICY FAULT

• US 20080083009A1
• Filed: 09/29/2006
• Published: 04/03/2008
• Est. Priority Date: 09/29/2006
• Status: Abandoned Application

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Kaler, Christopher G., Walter, Douglas A.
• Application Number:
  US11/537,029
• Publication Number:
  US 20080083009A1
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

Communicating and requesting specialized policy information. A message is sent by a client to a service which provides the services requested by the message or a specialized processor that evaluates messages. The message is evaluated for compliance with a policy particular to the message. If the message does not comply with a policy particular to the message, policy information is sent, where the policy information indicates the correct policy particular to the message. In one embodiment, if the message complies with a policy particular to the message, policy information is sent, where the policy information indicates that the message complies with a policy particular to the message.

Claims

1. In a computing environment, a method of discerning appropriate policy for a particular message, the method comprising:

sending a message; and

in response to sending the message, receiving policy information, wherein the policy information either indicates that the message complies with a policy particular to the message or indicates the correct policy if the message does not comply with the policy particular to the message.

2. The method of claim 1, wherein sending a message comprises sending a message to a service, the message being intended to access the functionality of the service, and wherein the service is designed to provide the functionality if the message complies with the policy for a particular received message or to respond with an indication of an appropriate policy for a particular received message when a particular received message does not comply with a policy for the particular received message.

3. The method of claim 1, wherein sending the message comprises sending an indicator with the message indicating that the message should be evaluated for proper policy for the particular message.

4. The method of claim 3, wherein sending an indicator with the message comprises sending a header with the message, the header including an indication that the message should be checked for proper policy compliance.

5. The method of claim 3, wherein an indicator is sent with the message indicating that the message should be evaluated for proper policy, and wherein the message is not processed to access the functionality of the service that the message is intended to access irrespective of whether or not the message complies with the appropriate policy.

6. The method of claim 1, wherein sending the message comprises sending the message to a specialized processor other than a service for which the message is intended to access the functionality of the service, wherein the specialized processor is specifically implemented to verify a message'"'"'s compliance to a particular policy for the particular message.

7. The method of claim 1, further comprising sending an indicator with the message instructing the correct policy particular to the message to be returned.

8. The method of claim 1, wherein receiving policy information comprises receiving an error which contains policy information particular to the message.

9. The method of claim 8, wherein the error is at least one of an application or a an infrastructure error.

10. In a computing environment, a method of providing appropriate policy for a particular message, the method comprising:

receiving a message;

evaluating the message for compliance with a policy particular to the message; and

if the message does not comply with a policy particular to the message, sending policy information, wherein the policy information indicates the correct policy particular to the message.

11. The method of claim 10, further comprising:

receiving an indicator with the message indicating that the message should be evaluated for proper policy particular to the message; and

if the message complies with a policy particular to the message, sending policy information, wherein the policy information indicates that the message complies with a policy particular to the message.

12. The method of claim 11, wherein the message is not processed to access functionality of the service for which the message is intended to access irrespective of whether or not the message complies with a policy particular to the message.

13. The method of claim 11, wherein receiving an indicator with the message comprises receiving an indicator in a header of the message.

14. The method of claim 10, wherein sending policy information comprises sending an error message which contains policy information particular to the message.

15. The method of claim 10, wherein receiving a message comprises receiving a message at a service for which the message is intended to access the functionality of the service.

16. In a computing environment, a method of providing appropriate policy for a particular message, the method comprising:

receiving a message;

evaluating the message for compliance with a policy particular to the message;

if the message does not comply with a policy particular to the message, sending policy information, wherein the policy information indicates the correct policy particular to the message;

or

if the message complies with a policy particular to the message, sending policy information, wherein the policy information indicates that the message complies with a policy particular to the message.

17. The method of claim 16, wherein receiving a message comprises receiving a message at a stand-alone service configured to evaluate messages for policy compliance.

18. The method of claim 16, wherein receiving a message comprises receiving a message at a specialized endpoint of a service for which the message is intended to access the functionality of the service.

19. The method of claim 18, wherein the message is wrapped in a policy verification request.

20. The method of claim 19, further comprising receiving an indicator in a header of the message.