Identification of Web Form Parameters for an Authorization Engine

• US 20150341387A1
• Filed: 05/20/2014
• Published: 11/26/2015
• Est. Priority Date: 05/20/2014
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Mishra, Rahul, Pedroza, Miguel, Pomerantz, Ori, Ho, Thuanan
• Granted Patent: US 9,497,222 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/168 above the transport layer
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A method, system and computer-usable medium are disclosed for automating the identification of web form parameters for an authorization engine. A web page containing a set of parameters is received and then processed to identify structured portions it may contain. A target structured portion is then selected and processed to identify a corresponding set of web form parameters. Once identified, the set of web form parameters are then processed to generate a policy with a corresponding set of policy rule parameters. Matching operations are then performed to respectively match individual parameters of the set of web form parameters to individual parameters of the set of policy rule parameters. The policy is then associated with its associated web page URL and the process is repeated, proceeding with selecting another target structured portion to process.

Claims

1. A computer-implemented method for automating the identification of web form parameters for an authorization engine, comprising:

receiving a web page comprising a set of parameters;

processing the web page to identify a first structured portion of the web page;

performing parsing operations to identify a set of parameters associated with the first structured portion; and

providing the set of parameters to an authorization engine.

2. The method of claim 1, further comprising:

receiving user input data comprising a first set of policy rule parameters.

3. The method of claim 2, further comprising:

processing the first set of structured portion parameters and the first set of policy rule parameters to generate a first policy comprising the first set of policy rule parameters.

4. The method of claim 3, further comprising:

associating a URL with the first policy, the URL corresponding to the web page.

5. The method of claim 4, further comprising:

repeating the process for a second structured portion of the web page and creating a second policy corresponding to the second structured portion, the second policy comprising a second set of policy rule parameters.

6. The method of claim 2, wherein:

the authorization engine comprises a rules editor configured to perform editing operations on the first set of policy rule parameters.

7. A system comprising:

a processor;

a data bus coupled to the processor; and

a computer-usable medium embodying computer program code, the computer-usable medium being coupled to the data bus, the computer program code used for automating the identification of web form parameters for an authorization engine and comprising instructions executable by the processor and configured for;

receiving a web page comprising a set of parameters;

processing the web page to identify a first structured portion of the web page;

performing parsing operations to identify a set of parameters associated with the first structured portion; and

providing the set of parameters to an authorization engine.

8. The system of claim 7, further comprising:

receiving user input data comprising a first set of policy rule parameters.

9. The system of claim 8, further comprising:

processing the first set of structured portion parameters and the first set of policy rule parameters to generate a first policy comprising the first set of policy rule parameters.

10. The system of claim 9, further comprising:

associating a URL with the first policy, the URL corresponding to the web page.

11. The system of claim 10, further comprising:

repeating the process for a second structured portion of the web page and creating a second policy corresponding to the second structured portion, the second policy comprising a second set of policy rule parameters.

12. The system of claim 7, wherein:

the authorization engine comprises a rules editor configured to perform editing operations on the first set of policy rule parameters.

13. A non-transitory, computer-readable storage medium embodying computer program code, the computer program code comprising computer executable instructions configured for:

receiving a web page comprising a set of parameters;

processing the web page to identify a first structured portion of the web page;

performing parsing operations to identify a set of parameters associated with the first structured portion; and

providing the set of parameters to an authorization engine.

14. The non-transitory, computer-readable storage medium of claim 13, further comprising:

receiving user input data comprising a first set of policy rule parameters.

15. The non-transitory, computer-readable storage medium of claim 14, further comprising:

processing the first set of structured portion parameters and the first set of policy rule parameters to generate a first policy comprising the first set of policy rule parameters.

16. The non-transitory, computer-readable storage medium of claim 15, further comprising:

associating a URL with the first policy, the URL corresponding to the web page.

17. The non-transitory, computer-readable storage medium of claim 16, further comprising:

repeating the process for a second structured portion of the web page and creating a second policy corresponding to the second structured portion, the second policy comprising a second set of policy rule parameters.

18. The non-transitory, computer-readable storage medium of claim 13, wherein:

the authorization engine comprises a rules editor configured to perform editing operations on the first set of policy rule parameters.

19. The non-transitory, computer-readable storage medium of claim 13, wherein the computer executable instructions are deployable to a client system from a server system at a remote location.

20. The non-transitory, computer-readable storage medium of claim 13, wherein the computer executable instructions are provided by a service provider to a user on an on-demand basis.