POLICY UPDATE APPARATUS, POLICY MANAGEMENT SYSTEM, POLICY UPDATE METHOD, POLICY MANAGEMENT METHOD AND RECORDING MEDIUM

• US 20130290695A1
• Filed: 06/20/2012
• Published: 10/31/2013
• Est. Priority Date: 06/20/2011
• Status: Active Grant

• Current Assignee: IP Wave Pte. Ltd.
• Original Assignee: NEC Corporation
• Inventors: Ogawa, Ryuichi
• Granted Patent: US 9,183,009 B2
• Time in Patent Office: Days
• US Class Current: 713/100
• CPC Class Codes: G06F 16/122 using management policies backup systems G06F11/1446; file migration policies for HSM systems G06F16/185
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: G06F 9/44505 Configuring for program initiating, e.g. using registry, configuration files
• CPC Class Codes: H04L 63/0263 Rule management

Abstract

The present invention provides a policy update apparatus which can update a software policy appropriately corresponding to the configuration change in a resource. The policy update apparatus includes policy retrieving means which receives a resource identifier, reads out an install destination resource identifier corresponding to the resource identifier from resource management means which stores with providing a mapping between the resource identifier and the install destination resource identifier which indicates the resource in which the resource identified by the resource identifier is installed, and reads out the software policy corresponding to the resource identifier and the install destination resource identifier, and policy update means which updates the software policy, correlates the updated software policy to the resource identifier and the install destination resource identifier, and stores to policy storage means.

Claims

1. A policy update apparatus comprising:

policy storage unit which stores a software policy, which is setting information on a resource, with providing a mapping to a resource identifier which indicates said resource and an install destination resource identifier which indicates an install destination resource in which said resource is installed;

policy retrieving unit which receives the resource identifier, reads out the install destination resource identifier which is correlated to said received resource identifier from resource management unit which stores the resource identifier and the install destination resource identifier which indicates the install destination resource in which the resource identified by said resource identifier is installed with providing a mapping between of them, and reads out said software policy which is correlated to said received resource identifier and said read out install destination resource identifier; and

policy update unit which updates said read out software policy, correlates said updated software policy to said received resource identifier and said read out install destination resource identifier, and stores to said policy storage unit.

2. The policy update apparatus according to claim 1,

wherein said policy storage unit stores the resource identifier, a software identifier which indicates software being applied to the resource identified by said resource identifier, the install destination resource identifier and the software policy with providing a mapping among of them, and

wherein said policy retrieving unit receives the resource identifier and the software identifier, reads out the install destination resource identifier which is correlated to said resource identifier from said resource management unit, and reads out said software policy which is correlated to said resource identifier, said install destination resource identifier and said software identifier from said policy storage unit.

3. The policy update apparatus according to claim 2,

wherein said policy storage unit stores a software policy as a default policy with providing a mapping from the software policy to a software identifier, and

wherein said policy retrieving unit reads out said default policy when said software policy which is correlated to the resource identifier, said install destination resource identifier and said software identifier does not exist in said policy storage unit.

4. The policy update apparatus according to claim 1,

wherein said policy storage unit stores the resource identifier, the install destination resource identifier, the software policy and an update history of said software policy with providing a mapping among of them,

wherein said policy update apparatus includes verification unit,

wherein said policy retrieving unit passes the update history which is correlated to the read out software policy to said verification unit, and

wherein said verification unit verifies whether or not said software policy is correct based on the coincidence of the software policy updated by said policy update unit and the update history received from said policy retrieving unit.

5. The policy update apparatus according to claim 1, comprising verification unit,

wherein said policy retrieving unit passes a verification rule which is corresponding to the software policy read out from said policy storage unit to said verification unit, and

wherein said verification unit verifies the software policy updated by said policy update unit based on the verification rule received from said policy retrieving unit.

6. A policy management system comprising:

said policy update apparatus according to claim 1; and

said resource management unit.

7. The policy management system according to claim 6, comprising policy distribution unit which delivers the software policy,

wherein said resource management unit stores from a plurality of resource identifiers to one resource group identifier with providing a mapping of them, and

wherein said policy distribution unit reads out the resource group identifier which is correlated to the resource identifier, which is correlated to said software policy and stored in said policy storage unit, from said resource management unit, and delivers the software policy which said policy update unit has updated to the resource indicated by a predetermined resource identifier which is correlated to said read out resource group identifier.

8. The policy management system according to claim 6,

wherein said policy storage unit stores a cluster group identifier which indicates a cluster, an in-cluster server identifier which indicates a computer belonging to said cluster, the resource identifier, the install destination resource identifier and a cluster policy which is setting information on said computer with providing a mapping among of them,

wherein said policy management unit stores the resource identifier and the in-cluster server identifier which indicates the computer in which the resource indicated by said resource identifier is equipped with providing a mapping between of them,

wherein said policy retrieving unit reads out the cluster policy, which is correlated to the install destination resource identifier read out from said resource management unit, the resource identifier which said policy retrieving unit has received and the in-cluster server identifier which is correlated to said resource identifier and stored in said policy storage unit, from said policy storage unit, and

wherein said policy update unit updates the cluster policy which said policy retrieving unit has read out, makes a correlation among the updated cluster policy, said resource identifier and said install destination resource identifier, and stores to said policy storage unit.

9. A policy update method comprising:

storing a software policy, which is setting information on a resource, to policy storage means with providing a mapping to a resource identifier which indicates said resource and an install destination resource identifier which indicates an install destination resource in which said resource is installed;

receiving the resource identifier, reading out the install destination resource identifier which is correlated to said received resource identifier from resource management means which stores the resource identifier and the install destination resource identifier which indicates the install destination resource in which the resource identified by said resource identifier is installed with providing a mapping between of them, and reading out said software policy which is correlated to said received resource identifier and said read out install destination resource identifier; and

updating said read out software policy, correlating said updated software policy to said received resource identifier and said read out install destination resource identifier, and storing to said policy storage means.

10. A policy management method comprising:

storing a software policy, which is setting information on a resource, to policy storage means with providing a mapping to a resource identifier which indicates said resource and an install destination resource identifier which indicates an install destination resource in which said resource is installed;

storing the resource identifier and the install destination resource identifier which indicates the install destination resource in which the resource identified by said resource identifier is installed with providing a mapping between of them to resource management means;

receiving the resource identifier, reading out the install destination resource identifier which is correlated to said received resource identifier from said resource management means, and reading out said software policy which is correlated to said received resource identifier and said read out install destination resource identifier; and

updating said read out software policy, correlating said updated software policy to said received resource identifier and said read out install destination resource identifier, and storing to said policy storage means.

11. A non-transitory computer-readable recording medium including a policy update program which causes a computer to execute the processing which comprising:

processing which stores a software policy, which is setting information on a resource, to policy storage means with providing a mapping to a resource identifier which indicates said resource and an install destination resource identifier which indicates an install destination resource in which said resource is installed;

processing which receives the resource identifier, reads out the install destination resource identifier which is correlated to said received resource identifier from resource management means which stores the resource identifier and the install destination resource identifier which indicates the install destination resource in which the resource identified by said resource identifier is installed with providing a mapping between of them, and reads out said software policy which is correlated to said received resource identifier and said read out install destination resource identifier; and

processing which updates said read out software policy, correlates said updated software policy to said received resource identifier and said read out install destination resource identifier, and stores to said policy storage means.

12. A policy update apparatus comprising:

policy storage means for storing a software policy, which is setting information on a resource, with providing a mapping to a resource identifier which indicates said resource and an install destination resource identifier which indicates an install destination resource in which said resource is installed;

policy retrieving means for receiving the resource identifier, reading out the install destination resource identifier which is correlated to said received resource identifier from resource management means which stores the resource identifier and the install destination resource identifier which indicates the install destination resource in which the resource identified by said resource identifier is installed with providing a mapping between of them, and reading out said software policy which is correlated to said received resource identifier and said read out install destination resource identifier; and

policy update means for updating said read out software policy, correlating said updated software policy to said received resource identifier and said read out install destination resource identifier, and storing to said policy storage means.