Identification of web form parameters for an authorization engine

• US 9,497,222 B2
• Filed: 05/20/2014
• Issued: 11/15/2016
• Est. Priority Date: 05/20/2014
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Ho, Thuanan, Mishra, Rahul, Pedroza, Miguel, Pomerantz, Ori
• Primary Examiner(s): Kim, Jung
• Assistant Examiner(s): Wilcox, James J
• Application Number:
  US14/282,667
• Publication Number:
  US 20150341387A1
• Time in Patent Office: 910 Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/168 above the transport layer
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A method, system and computer-usable medium are disclosed for automating the identification of web form parameters for an authorization engine. A web page containing a set of parameters is received and then processed to identify structured portions it may contain. A target structured portion is then selected and processed to identify a corresponding set of web form parameters. Once identified, the set of web form parameters are then processed to generate a policy with a corresponding set of policy rule parameters. Matching operations are then performed to respectively match individual parameters of the set of web form parameters to individual parameters of the set of policy rule parameters. The policy is then associated with its associated web page URL and the process is repeated, proceeding with selecting another target structured portion to process.

Claims

1. A computer-implemented method for automating the identification of web form parameters for an authorization engine, comprising:

receiving a web page comprising a set of parameters;

processing the web page to identify a first structured portion of the web page;

performing parsing operations to identify a first set of structured portion parameters associated with the first structured portion of the web page;

processing the first set of structured portion parameters to generate a first policy comprising the first set of policy rule parameters, the first policy comprising an access policy;

providing the set of parameters to an authorization engine, the access policy being used by the authorization engine to approve access requests for resources;

associating a universal resource locator (URL) with the first policy, the URL corresponding to the web page;

processing a second set of structured portion parameters corresponding to the second structured portion of the web page to generate a second policy, the second policy comprising a second set of policy rule parameters; and

wherein

the authorization engine comprises a rules editor configured to perform editing operations on the first set of policy rule parameters.

2. The method of claim 1, further comprising:

receiving user input data comprising a first set of policy rule parameters.

3. A system comprising:

a processor;

a data bus coupled to the processor; and

a computer-usable medium embodying computer program code, the computer-usable medium being coupled to the data bus, the computer program code used for automating the identification of web form parameters for an authorization engine and comprising instructions executable by the processor and configured for;

receiving a web page comprising a set of parameters;

processing the web page to identify a first structured portion of the web page;

performing parsing operations to identify a first set of structured portion parameters associated with the first structured portion of the web page;

processing the first set of structured portion parameters to generate a first policy comprising the first set of policy rule parameters, the first policy comprising an access policy; and

providing the set of parameters to an authorization engine, the access policy being used by the authorization engine to approve access requests for resources;

associating a universal resource locator (URL) with the first policy, the URL corresponding to the web page;

processing a second set of structured portion parameters corresponding to the second structured portion of the web page to generate a second policy, the second policy comprising a second set of policy rule parameters; and

wherein

the authorization engine comprises a rules editor configured to perform editing operations on the first set of policy rule parameters.

4. The system of claim 3, further comprising:

receiving user input data comprising a first set of policy rule parameters.

5. A non-transitory, computer-readable storage medium embodying computer program code, the computer program code comprising computer executable instructions configured for:

receiving a web page comprising a set of parameters;

processing the web page to identify a first structured portion of the web page;

performing parsing operations to identify a first set of structured portion parameters associated with the first structured portion of the web page;

processing the first set of structured portion parameters to generate a first policy comprising the first set of policy rule parameters, the first policy comprising an access policy; and

providing the set of parameters to an authorization engine, the access policy being used by the authorization engine to approve access requests for resources;

associating a universal resource locator (URL) with the first policy, the URL corresponding to the web page;

processing a second set of structured portion parameters corresponding to a second structured portion of the web page to generate a second policy, the second policy comprising a second set of policy rule parameters; and

wherein

the authorization engine comprises a rules editor configured to perform editing operations on the first set of policy rule parameters.

6. The non-transitory, computer-readable storage medium of claim 5, further comprising:

receiving user input data comprising a first set of policy rule parameters.

7. The non-transitory, computer-readable storage medium of claim 5, wherein the computer executable instructions are deployable to a client system from a server system at a remote location.

8. The non-transitory, computer-readable storage medium of claim 5, wherein the computer executable instructions are provided by a service provider to a user on an on-demand basis.