Automatic deployment of software applications to meet regulatory compliance requirements

• US 9,250,884 B2
• Filed: 07/17/2012
• Issued: 02/02/2016
• Est. Priority Date: 07/17/2012
• Status: Active Grant

• Current Assignee: Oracle International Corporation (Oracle Corporation)
• Original Assignee: Oracle International Corporation (Oracle Corporation)
• Inventors: Ravi, Kiran Vedula Venkata Naga
• Primary Examiner(s): Wong, Don
• Assistant Examiner(s): Luna, Roberto E
• Application Number:
  US13/551,449
• Publication Number:
  US 20140026131A1
• Time in Patent Office: 1,295 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 8/60 Software deployment
• CPC Class Codes: G06F 9/44505 Configuring for program initiating, e.g. using registry, configuration files

Abstract

A method, system, and computer program product for cloud-based deployments of software applications that are monitored for compliance with regulatory requirements. One exemplary method commences upon receiving an indication of a compliance corpus such as HIPPA or SOX, then mapping the compliance corpus to one or more predetermined configurations of a virtual compliance platform. Any of the particular predetermined configurations include steps, operations, and/or rules for provisioning infrastructure (e.g., using cloud-resident resources). After provisioning the virtual compliance platform based on the predetermined configuration, the provisioning operations further deploys a compliance monitor. The compliance monitor encapsulates the software application within the compliance monitor so as to monitor and/or log the operation and performance of the software application with respect to the compliance regulations. In some cases, a virtual compliance platform includes a virtual machine.

Claims

1. A computer implemented method for automatic deployment of software applications to meet regulatory compliance requirements, the method comprising:

providing, via a cloud service provider, a virtual compliance platform, wherein the compliance platform is configurable to provide compliance as a service to a customer;

receiving a software application, the software application developed by the customer;

receiving an indication of a compliance corpus, wherein the compliance corpus corresponds to a set of compliance regulations, the set of compliance regulations maintained using cloud infrastructure by the cloud service provider;

mapping the compliance corpus to one or more predetermined configurations, the one or more predetermined configurations specifying a set of cloud infrastructure components corresponding to the received indication of the compliance corpus;

configuring the virtual compliance platform based at least in part on the at least one of the predetermined configurations, wherein the configured virtual compliance platform hosts a compliance monitor; and

encapsulating the software application within the compliance monitor.

2. The method of claim 1, wherein the compliance corpus comprises compliance regulations for at least one of HIPPA, SOX, or PCI.

3. The method of claim 1, further comprising receiving a second compliance corpus.

4. The method of claim 1, wherein mapping the compliance corpus to one or more predetermined configurations comprises using a configuration data structure.

5. The method of claim 1, wherein the provisioning is performed in response to a compiled specification.

6. The method of claim 1, wherein the provisioning is performed in response to one or more configuration templates.

7. The method of claim 1, wherein the virtual compliance platform is a virtual machine.

8. The method of claim 1, further comprising uploading an instance of the software application to run within the compliance monitor.

21. The method of claim 1, wherein the software application is at least one of an instance of the software application and an application environment.

9. A computer system for automatic deployment of software applications to meet regulatory compliance requirements, comprising:

a computer processor to execute a set of program code instructions; and

a memory to hold the program code instructions, in which the program code instructions comprises program code to perform,

providing, via a cloud service provider, a virtual compliance platform, wherein the compliance platform is configurable to provide compliance as a service to a customer;

receiving a software application, the software application developed by the customer;

receiving an indication of a compliance corpus, wherein the compliance corpus corresponds to a set of compliance regulations, the set of compliance regulations maintained using cloud infrastructure by the cloud service provider;

mapping the compliance corpus to one or more predetermined configurations, the one or more predetermined configurations specifying a set of cloud infrastructure components corresponding to the received indication of the compliance corpus;

configuring the virtual compliance platform based at least in part on the at least one of the predetermined configurations, wherein the configured virtual compliance platform hosts a compliance monitor; and

encapsulating the software application within the compliance monitor.

10. The computer system of claim 9, wherein the compliance corpus comprises compliance regulations for at least one of, HIPPA, SOX, or PCI.

11. The computer system of claim 9, further comprising receiving a second compliance corpus.

12. The computer system of claim 9, wherein mapping the compliance corpus to one or more predetermined configurations comprises using a configuration data structure.

13. The computer system of claim 9, wherein the provisioning is performed in response to a compiled specification.

14. The computer system of claim 9, wherein the provisioning is performed in response to one or more configuration templates.

15. The computer system of claim 9, wherein the virtual compliance platform is a virtual machine.

16. A computer program product embodied in a non-transitory computer readable medium, the computer readable medium having stored thereon a sequence of instructions which, when executed by a processor causes the processor to execute a process to implement automatic deployment of software applications to meet regulatory compliance requirements, the process comprising:

providing, via a cloud service provider, a virtual compliance platform, wherein the compliance platform is configurable to provide compliance as a service to a customer;

receiving a software application, the software application developed by the customer;

receiving an indication of a compliance corpus, wherein the compliance corpus corresponds to a set of compliance regulations, the set of compliance regulations maintained using cloud infrastructure by the cloud service provider;

mapping the compliance corpus to one or more predetermined configurations, the one or more predetermined configurations specifying a set of cloud infrastructure components corresponding to the received indication of the compliance corpus;

configuring the virtual compliance platform based at least in part on the at least one of the predetermined configurations, wherein the configured virtual compliance platform hosts a compliance monitor; and

encapsulating the software application within the compliance monitor.

17. The computer program product of claim 16, wherein the compliance corpus comprises compliance regulations for at least one of, HIPPA, SOX, or PCI.

18. The computer program product of claim 16, wherein mapping the compliance corpus to one or more predetermined configurations comprises using a configuration data structure.

19. The computer program product of claim 16, wherein the provisioning is performed in response to a compiled specification.

20. The computer program product of claim 16, wherein the provisioning is performed in response to one or more configuration templates.