System and method for policy conformance in a web application

• US 8,806,574 B2
• Filed: 10/05/2011
• Issued: 08/12/2014
• Est. Priority Date: 10/05/2011
• Status: Active Grant

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Manjunath, Geetha
• Primary Examiner(s): Dinh, Minh
• Application Number:
  US13/253,731
• Publication Number:
  US 20130091536A1
• Time in Patent Office: 1,042 Days
• Field of Search: None
• US Class Current: 726/3
• CPC Class Codes: G06F 21/629 to features or functions of an application
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

A method and system may analyze a script file of a web application, the script file representing actions of a task performed in conjunction with a web service, to determine whether the actions conform to policy criteria. The method and system may determine as restricted any of the actions which do not conform to the policy criteria. The method and system may execute the script file without the restricted actions to reproduce the task in response to a request by a user.

Claims

1. A method of performing policy conformance, the method being performed by a server and comprising:

receiving a request from a computing device operated by a user and remote from the server, the request being provided in response to the user initiating a web application on the computing device;

analyzing, with the server, a script file of the web application, the script file representing actions of a task performed in conjunction with a web service, to determine whether the actions conform to policy criteria, the policy criteria including policy criteria based on a type of computing device accessing the web application;

determining, with the server, that one or more actions do not conform to the policy criteria, the one or more actions being identified as being restricted; and

executing the script file without the restricted one or more actions to provide information corresponding to the task to the computing device.

2. The method of claim 1, wherein the script file representing actions of a task performed in conjunction with a web service comprises an instruction set and parameters representing the actions of the user performing a task in conjunction with a web service.

3. The method of claim 1, wherein the policy criteria further comprise a list of disallowed websites.

4. The method of claim 1, wherein the policy criteria further comprise policy criteria based on policy requirements of a web application repository, and wherein analyzing the script file of the web application includes retrieving the script file from the web application repository.

5. The method of claim 1, wherein:

analyzing the script file of the web application to determine whether the actions conform to policy criteria comprises comparing instructions and parameters in the script file to policy criteria in a web application container; and

determining that one or more actions do not conform to the policy criteria comprises determining that one or more instructions and one or more parameters do not conform to policy criteria in the web application container.

6. The method of claim 1, wherein:

analyzing the script file of the web application to determine whether the actions conform to policy criteria comprises comparing instructions and parameters that represent the actions of a user to the policy criteria; and

determining that one or more actions do not conform to the policy criteria comprises determining that one or more instructions and one or more parameters do not conform to the policy criteria.

7. The method of claim 1, wherein the policy criteria comprise policy criteria defined by a developer of the web application during creation of the web application.

8. The method of claim 1, wherein the policy criteria comprise policy criteria associated with a printer that accesses the web application.

20. The method of claim 1, wherein the policy criteria includes policy criteria based on one or more web application conformance policies and one or more device conformance policies.

9. A system comprising:

a memory; and

a processor coupled to the memory, the processor to;

receive a request from a computing device operated by a user and remote from the system, the request being provided in response to the user initiating a web application on the computing device;

analyze a script file of the web application, the script file representing actions of a task performed in conjunction with a web service, to determine whether the actions conform to conformance policies, the conformance policies including a policy based on a type of computing device accessing the web application;

determine that one or more actions do not conform to the conformance policies, the one or more actions being identified as being restricted; and

execute the script file without the restricted one or more actions to provide information corresponding to the task to the computing device.

10. The system of claim 9, wherein the script file representing actions of the task performed in conjunction with the web service comprises an automatically generated file created when the user performs a programming-by-browsing operation.

11. The system of claim 9, wherein the conformance policies further comprise a list of allowed websites.

12. The system of claim 9, wherein the processor:

analyzes the script file of the web application to determine whether the actions conform to conformance policies by comparing instructions and parameters in the script file to conformance policies in a web application container; and

determines that one or more actions do not conform to the conformance policies by determining that one or more instructions and one or more parameters in the script file do not conform to conformance policies in the web application container.

13. The system of claim 9, wherein the processor:

analyzes the script file of the web application to determine whether the actions conform to conformance policies by comparing instructions and parameters which represent the actions of a user to the conformance policies; and

determines that one or more actions do not conform to the conformance policies by determining which instructions and parameters in the script file violate the conformance policies.

14. The system of claim 9, wherein the conformance policies comprise conformance policies defined by a developer of the web application during creation of the web application.

15. The system of claim 9, the processor:

negotiates web application conformance policies and device conformance policies;

determines common conformance policies which correspond to a minimum common factor between the web application conformance policies and the device conformance policies; and

defines the conformance policies as the common conformance policies.

16. A non-transitory computer-readable medium storing instructions that, when executed by a processor, cause the processor to perform a method comprising:

negotiating web application conformance policies and device conformance policies;

determining common conformance policies which correspond to a minimum common factor between the web application conformance policies and the device conformance policies;

analyzing a script file of a web application, the script file representing actions of a task performed in conjunction with a web service, to determine whether the actions conform to the common conformance policies;

determining that one or more actions do not conform to the common conformance policies, the one or more actions being identified as being restricted; and

executing the script file without the restricted actions to reproduce the task in response to a request initiated on a computing device by a user.

17. The non-transitory computer-readable medium of claim 16, wherein the script file comprises an instruction set and parameters representing the actions of the user performing a task in conjunction with a web service.

18. The non-transitory computer-readable medium of claim 16, wherein the instructions cause the processor to (i) analyze the script file by comparing instructions and parameters that represent the actions of a user to the common conformance policies, and (ii) determine that one or more actions do not conform to the policy criteria by determining that one or more instructions and one or more parameters do not conform to the common conformance policies.

19. The non-transitory computer-readable medium of claim 16, wherein the instructions cause the processor to analyze the script file of the web application by retrieving the script file from a web application repository based on an identifier of the web application.