DIRECTIONAL OPTIMIZATION FOR POLICY EVALUATION

• US 20100115075A1
• Filed: 10/31/2008
• Published: 05/06/2010
• Est. Priority Date: 10/31/2008
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Poon, Shiu F., Chen, Xiangfu, de Freitas, John G., Salz, Richard E.
• Granted Patent: US 9,563,781 B2
• Time in Patent Office: Days
• US Class Current: 709/223
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules

Abstract

Embodiments of the present invention provide a method, system and computer program product for directional optimization of policy statements for a Web service. In an embodiment of the invention, a method for directional optimization of policy statements in a policy document can be provided. The method can include loading a policy document referenced for a Web service, extracting a policy from the policy document, and determining whether the extracted policy is bidirectional or direction agnostic. A single run time presentation for the extracted policy can be created when the extracted policy is direction agnostic. Otherwise, separate run time presentations can be created for each direction of the extracted policy when the extracted policy is bi-directional.

Claims

1. A method for directional optimization of policy statements in a policy document, the method comprising:

loading a policy document referenced for a Web service;

extracting a policy from the policy document;

determining whether the extracted policy is bi-directional or direction agnostic; and

,

creating a single run time presentation for the extracted policy when the extracted policy is direction agnostic, or creating separate run time presentations for each direction of the extracted policy when the extracted policy is bi-directional.

2. The method of claim 1, wherein loading a policy document referenced for a Web service, comprises loading a WS-Policy conformant policy document referenced in a Web services definition language (WSDL) document for a Web service.

3. The method of claim 1, wherein loading a policy document referenced for a Web service, comprises loading a WS-Policy conformant policy document referenced in an endpoint reference for a Web service.

4. The method of claim 1, further comprising repeating the extracting, determining and creating steps for each policy in the policy document.

5. A policy document data processing system configured for directional optimization of policy statements in a policy document, the system comprising:

a Web services server executing in a host computing platform and managing messaging exchanges for a Web service according to different runtime presentations of security policies for the Web service; and

,

policy evaluation logic coupled to the Web services server, the logic comprising program code enabled to parse a policy document for the Web service to extract one or more different policies, to identify ones of the extracted policies that are bi-directional, and to create separate direction-aware runtime presentations of each of the identified ones of the extracted policies that are bi-directional.

6. The system of claim 5, wherein the Web service is described by a Web services definition language (WSDL) conformant document and wherein the policy document is referenced in the WSDL conformant document and further conforms to WS-Policy.

7. The system of claim 5, wherein the Web service is described by a Web services definition language (WSDL) conformant document and wherein the policy document is referenced in an endpoint reference to the Web service and further conforms to WS-Policy.

8. A computer program product comprising a computer usable medium embodying computer usable program code for directional optimization of policy statements in a policy document, the computer program product comprising:

computer usable program code for loading a policy document referenced for a Web service;

computer usable program code for extracting a policy from the policy document;

computer usable program code for determining whether the extracted policy is bi-directional or direction agnostic; and

,

computer usable program code for creating a single run time presentation for the extracted policy when the extracted policy is direction agnostic, or creating separate run time presentations for each direction of the extracted policy when the extracted policy is bi-directional.

9. The computer program product of claim 8, wherein the computer usable program code for loading a policy document referenced for a Web service, comprises computer usable program code for loading a WS-Policy conformant policy document referenced in a Web services definition language (WSDL) document for a Web service.

10. The computer program product of claim 8, wherein the computer usable program code for loading a policy document referenced for a Web service, comprises computer usable program code for loading a WS-Policy conformant policy document referenced in an endpoint reference for a Web service.

11. The computer program product of claim 8, further comprising computer usable program code for repeating the extracting, determining and creating steps for each policy in the policy document.