Configuring computer systems
First Claim
1. An apparatus for use in generating configuration information for a computer system employing hierarchical entities, the apparatus comprising:
- a policy system for receiving a definition of a high-level policy for the configuration of the computer system and permitted refinements to that policy, the definition referring to a plurality of the entities;
an entity memory for storing information about the computer system and its environment including the entities, the hierarchy thereof and non-hierarchical relations between the entities; and
a processor coupled to the policy system and the entity memory and operable to produce refinement of the high-level policy definition with reference to the permitted refinements thereto and the stored information about the entities to which the high-level policy definition relates in order to produce a refined policy definition deployable on the computer system, the refinement including adding details to the high-level policy definition.
3 Assignments
0 Petitions
Accused Products
Abstract
An apparatus (22,44) is described for use in generating configuration information for a computer system (12) employing hierarchical entities.
A policy template (24) is employed which contains a definition of an abstract high-level policy, for the configuration of the system, and permitted refinements to that policy, the definition referring to a plurality of the entities. An information and system model (16) contains information about the computer system and its environment including the entities referred to in the high-level policy definition, the hierarchy thereof and non-hierarchical relations between the entities. A policy authoring engine (26) refines the high-level policy definition with reference to the permitted refinements thereto and the stored information about the entities to which the high-level policy definition relates in order to produce a refined policy definition. In doing this, the engine presents refinement options to a user (10) via a user interface (28) and refines the high-level policy definition in dependence upon options selected by the user via the user interface. Some of the entities stored in the model (16) may be abstract entities, but with pointers to data in the computer system representing an instance of that abstract entity. The refined policy may be in terms of a policy context, referring to unbound entities, and a policy statement. A policy deployer (20) stores rules for interpreting the policy statement as instructions executable by the computer system and is operable, with reference to the information and system model (16), to bind the unbound entities in the policy context to instances of those entities, and, with reference to the stored rules, to interpret the policy statement into a series of instructions to the computer system referring to the bound instances or derivatives of them.
The apparatus facilitates the refinement of abstract policies and implementation of the refined policies.
142 Citations
32 Claims
-
1. An apparatus for use in generating configuration information for a computer system employing hierarchical entities, the apparatus comprising:
-
a policy system for receiving a definition of a high-level policy for the configuration of the computer system and permitted refinements to that policy, the definition referring to a plurality of the entities; an entity memory for storing information about the computer system and its environment including the entities, the hierarchy thereof and non-hierarchical relations between the entities; and a processor coupled to the policy system and the entity memory and operable to produce refinement of the high-level policy definition with reference to the permitted refinements thereto and the stored information about the entities to which the high-level policy definition relates in order to produce a refined policy definition deployable on the computer system, the refinement including adding details to the high-level policy definition. - View Dependent Claims (2, 3, 6, 7, 9, 10, 29)
-
-
4. An apparatus for use in generating configuration information for a computer system employing hierarchical entities, the apparatus comprising:
-
a policy system for receiving a definition of a high-level policy for the configuration of the computer system and permitted refinements to that policy, the definition referring to a plurality of the entities; a user interface with which a user can interact with the apparatus; and a processor coupled to the policy system and the user interface and operable, in accordance with the high-level policy definition, to present refinement information to the user via the user interface so that a refined policy definition deployable on the computer system can be produced, the presented refinement information including added details to the high-level policy information. - View Dependent Claims (5, 25, 26, 30)
-
-
8. An apparatus for use in generating configuration information for a computer system employing hierarchical entities, the apparatus comprising:
-
a policy system for receiving a definition of a high-level policy for the configuration of the computer system and permitted refinements to that policy, the definition referring to a plurality of the entities; a user interface with which a user can interact with the apparatus; an entity memory for storing information about the computer system and its environment including the entities, the hierarchy thereof and non-hierarchical relations between the entities; a processor coupled to the policy system and the entity memory and operable to refine the high-level policy definition with reference to the permitted refinements thereto and the stored information about the entities to which the high-level policy definition relates in order to produce a refined policy definition deployable on the computer system, the processor being operable, in accordance with the high-level policy definition, to present refinement options to the user via the user interface and to refine the high-level policy definition in dependence upon options selected by the user via the user interface; and a library of policy templates, each template including a respective such high-level policy definition and respective such permitted policy refinements, the library being coupled to the policy system and a desired one or more of the policy templates being selectable by the user via the user interface for supply to the policy system, the policy template format providing for each policy template to have a plurality of components executable in turn by the processor, at least one of the components being a flow directive and causing the processor to present such options to the user via the user interface and to jump to one of a plurality of the other components in dependence upon the flow directive and the selection made by the user via the user interface.
-
-
11. An apparatus for use in generating configuration information for a computer system, the apparatus comprising:
-
a policy system for receiving a policy for the configuration of the computer system in terms of a policy context referring to unbound entities and a policy statement; an entity memory for storing, for each of the unbound entities, a pointer to data in the computer system representing at least one instance of that entity; a rule memory for storing rules for interpreting the policy statement as instructions executable by the computer system; and a processor which is operable, with reference to the pointers, to bind the unbound entities in the policy context to instances of those entities and, with reference to the interpretation rules, to interpret the policy statement into a series of instructions to the computer system referring to the bound instances or derivatives of them. - View Dependent Claims (12, 13)
-
-
14. A method for use in generating configuration information for a computer system employing hierarchical entities, the method comprising the steps of:
-
receiving a definition of a high-level policy for the configuration of the system and permitted refinements to that policy, the definition referring to a plurality of the entities; and refining the high-level policy definition with reference to the permitted refinements thereto and stored information about the entities to which the high-level policy definition relates in order to produce a refined policy definition deployable on the computer system, the permitted refinement information including added details to the high-level policy definition. - View Dependent Claims (15, 28, 31)
-
-
16. A method for use in generating configuration information for a computer system employing hierarchical entities, the method comprising the steps of:
-
receiving a definition of a high-level policy for the configuration of the system and permitted refinements to that policy, the definition referring to a plurality of the entities; and presenting refinement information, in accordance with the high-level policy definition, to a user via a user interface so that a refined policy definition deployable on the computer system can be produced, the refinement including adding details to the high-level policy definition. - View Dependent Claims (17, 18, 19, 32)
-
-
20. A method of generating configuration information for a computer system employing hierarchical entities, the method comprising the steps of:
-
receiving a definition of a high-level policy for the configuration of the system and permitted refinements to that policy, the definition referring to a plurality of the entities; presenting refinement information, in accordance with the high-level policy definition, to a user via a user interface so that a refined policy definition deployable on the computer system can be produce; providing a library of policy templates, each template including a respective such high-level policy definition and respective such permitted policy refinements; selecting one or more of the policy templates for refinement in accordance with input by the user via a user interface; presenting refinement options, in accordance with the high level policy definition, to the user via a user interface; and refining the high-level policy definition in dependence upon options selected by the user via the user interfaces wherein the policy template format provides for each policy template to have a plurality of components executable in turn during refinement, at least one of the components being a flow directive and causing such options to be presented to the user via the user interface and the refinement process to jump to one of a plurality of the other components in dependence upon the flow directive and the selection made by the user via the user interface.
-
-
21. A method of generating configuration information for a computer system employing hierarchical entities, the method comprising the steps of:
-
receiving a definition of a high-level policy for the configuration of the system and permitted refinements to that policy, the definition referring to a plurality of the entities; and refining the high-level policy definition with reference to the permitted refinements thereto and stored information about the entities to which the high-level policy definition relates in order to produce a refined policy definition deployable on the computer system, wherein the refined policy being is in terms of a policy context referring to unbound entities and a policy statement, and the stored information about at least some of the entities relates to abstract entities and includes, for each such abstract entity, a pointer to data in-the computer system representing an instance of that abstract entity; binding, with reference to the stored information, the unbound entities in the policy context to instances of those entities; and interpreting, with reference for stored rules for interpreting the policy statement as instructions executable by the computer system, the policy statement into a series of instructions to the computer system referring to the bound instances or derivatives of them.
-
-
22. A method for use in generating configuration information for a computer system, the method comprising the steps of:
-
receiving a policy for the configuration of the computer system in terms of a policy context referring to unbound entities and a policy statement; storing, for each of the unbound entities, a pointer to data in the computer system representing at least one instance of that entity; storing rules for interpreting the policy statement as instructions executable by the computer system; binding, with reference to the pointers, the unbound entities in the policy-context to instances of those entities; and interpreting, with reference to the interpretation rules, the policy statement into a series of instructions to the computer system referring to the bound instances or derivatives of them. - View Dependent Claims (23, 24)
-
-
27. An apparatus for use in generating configuration information for a computer system employing hierarchical entities, the apparatus comprising:
-
a policy system for receiving a definition of a high-level policy for the configuration of the computer system and permitted refinements to that policy, the definition referring to a plurality of the entities; a user interface with which a user can interact with the apparatus; a processor coupled to the policy system and the user interface and operable, in accordance with the high-level policy definition, to present refinement information to the user via the user interface so that a refined policy definition deployable on the computer system can be produced, the processor being operable to present the refinement information to the user as refinement options and to refine the high-level policy definition in dependence upon options selected by the user via the user interface to produce the refined policy definition; and a library of policy templates, each template including a respective such high-level policy definition and respective such permitted policy refinements, the library being coupled to the policy system, and a desired one or more of the policy templates being selectable by the user via the user interface for supply to the policy system, wherein the policy templates have a common format, the policy template format providing for each policy template to have a plurality of components executable in turn by the processor, at least one of the components being a flow directive and causing the processor to present such options to the user via the user interface and to jump to one of a plurality of the other components in dependence upon the flow directive and the selection made by the user via the user interface.
-
Specification