Distributed computing system
First Claim
1. An apparatus for use as a device within a distributed computing system, the distributed computer system comprising a plurality of devices interconnected by a data network, the interconnected devices being communicable with each other using messages transmitted over the data network, the apparatus comprising:
- a monitoring component and a correction component; and
at least one processor configured to execute the monitoring component and the correction component,wherein the monitoring component is operable to monitor the output of a policy controlled device, the policy controlled device forming one of the devices of the distributed computer system, the policy controlled device being associated with one or more policies which are applied to the policy controlled device in order to control the behavior of the policy controlled device, each said applied policy specifying a trigger event or events and an action or actions to be performed by the policy controlled device as a result of the trigger event being detected as having occurred,the monitoring component being further operable to compare the monitored output with one or more specified expected outputs and to generate a correction request in the event that the comparison indicates a divergence between the expected and observed outputs;
wherein the correction component is operable to perform corrective actions as specified in the correction request generated by the monitoring component; and
wherein each said applied policy further specifies the expected outputs with which the monitored output is compared by the monitor.
1 Assignment
0 Petitions
Accused Products
Abstract
A Policy Enforcement Point (PEP) enforcement module (100) comprises: a monitor (110), (120, 130, 140) for monitoring the output of a policy controlled module or PEP (200) operating within a distributed computer system and a correction performer module (150). The PEP (200) is associated with one or more policies (400) which are applied to the PEP. Each policy specifies a trigger event or events and an action or actions to be performed as a result of the trigger event occurring as well as expected output from the PEP (200) when it performs a specified action or actions. The monitor monitors output produced by the PEP (200) as a result of operating in compliance with a policy, and it compares the monitored output with one or more specified expected outputs specified in the policy. In the event that the comparison indicates a divergence between the expected and observed outputs a correction evaluator (140) evaluates an appropriate corrective action to take and issues a request to the correction performer module to perform such corrective action. The correction performer module (150) then performs the corrective actions as specified by the correction evaluator (140).
-
Citations
13 Claims
-
1. An apparatus for use as a device within a distributed computing system, the distributed computer system comprising a plurality of devices interconnected by a data network, the interconnected devices being communicable with each other using messages transmitted over the data network, the apparatus comprising:
-
a monitoring component and a correction component; and at least one processor configured to execute the monitoring component and the correction component, wherein the monitoring component is operable to monitor the output of a policy controlled device, the policy controlled device forming one of the devices of the distributed computer system, the policy controlled device being associated with one or more policies which are applied to the policy controlled device in order to control the behavior of the policy controlled device, each said applied policy specifying a trigger event or events and an action or actions to be performed by the policy controlled device as a result of the trigger event being detected as having occurred, the monitoring component being further operable to compare the monitored output with one or more specified expected outputs and to generate a correction request in the event that the comparison indicates a divergence between the expected and observed outputs; wherein the correction component is operable to perform corrective actions as specified in the correction request generated by the monitoring component; and wherein each said applied policy further specifies the expected outputs with which the monitored output is compared by the monitor. - View Dependent Claims (2, 3, 4)
-
-
5. A method of operating a distributed computer system, which comprises a plurality of devices interconnected by a data network, the interconnected devices being communicable with each other using messages transmitted over the data network, the distributed computer system including a policy controlled device whose behavior is at least partly specified by one or more policies, each of the one or more policies specifying a trigger event or events and an action or actions to be performed by the policy controlled device in response to a trigger event being detected, and wherein each policy additionally specifies expected output from the policy controlled device, the method comprising:
-
comparing the output from the policy controlled device with the expected output specified in a policy; and performing corrective actions in the event that the comparison indicates a difference between the monitored output and the expected output, wherein each applied policy further specifies the expected outputs with which the monitored output is compared by the monitor. - View Dependent Claims (6, 7, 8, 9)
-
-
10. An apparatus for use as a device within a distributed computing system, the distributed computer system comprising a plurality of devices interconnected by a data network, the interconnected devices being communicable with each other using messages transmitted over the data network, the apparatus comprising:
-
a communication circuit; and at least one processor and memory coupled thereto; wherein the at least one processor and the communication circuit are configured to cooperate with one another to enable the apparatus to interface with at least the data network, the at least one processor being further configured to control the apparatus to at least execute functionality comprising; monitoring the output of a policy controlled device, the policy controlled device forming one of the devices of the distributed computer system, the policy controlled device being associated with one or more policies applied to the policy controlled device in order to control the behavior of the policy controlled device, each said applied policy specifying a trigger event or events and an action or actions to be performed by the policy controlled device as a result of the trigger event being detected as having occurred; comparing the monitored output with one or more specified expected outputs; generating a correction request in the event that the comparison indicates a divergence between the expected and observed outputs; and causing performance of corrective actions, as specified in the generated correction request; and wherein each said applied policy further specifies the expected outputs with which the monitored output is compared by the monitor. - View Dependent Claims (11, 12, 13)
-
Specification