Directional optimization for policy evaluation

• US 9,563,781 B2
• Filed: 10/31/2008
• Issued: 02/07/2017
• Est. Priority Date: 10/31/2008
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Chen, Xiangfu, de Freitas, John G., Poon, Shiu F., Salz, Richard E.
• Primary Examiner(s): BAYARD, DJENANE M
• Application Number:
  US12/262,900
• Publication Number:
  US 20100115075A1
• Time in Patent Office: 3,021 Days
• Field of Search: 709/223, 709/226, 709/227
• US Class Current: 1/1
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules

Abstract

Embodiments of the present invention provide a method, system and computer program product for directional optimization of policy statements for a Web service. In an embodiment of the invention, a method for directional optimization of policy statements in a policy document can be provided. The method can include loading a policy document referenced for a Web service, extracting a policy from the policy document, and determining whether the extracted policy is bi-directional or direction agnostic. A single run time presentation for the extracted policy can be created when the extracted policy is direction agnostic. Otherwise, separate run time presentations can be created for each direction of the extracted policy when the extracted policy is bi-directional.

Claims

1. A method for directional optimization of policy statements in a policy document, the method comprising:

loading in a document data processing system executing in memory of a host computing platform a policy document referenced for a Web service;

extracting a policy from the policy document;

determining whether the extracted policy is bi-directional or direction agnostic without specifying a particular direction or multiple directions; and

,

creating a single run time presentation for the extracted policy when the extracted policy is direction agnostic, or creating separate run time presentations for each direction of the extracted policy when the extracted policy is bi-directional.

2. The method of claim 1, wherein loading a policy document referenced for a Web service, comprises loading a WS-Policy conformant policy document referenced in a Web services definition language (WSDL) document for a Web service.

3. The method of claim 1, wherein loading a policy document referenced for a Web service, comprises loading a WS-Policy conformant policy document referenced in an endpoint reference for a Web service.

4. The method of claim 1, further comprising repeating the extracting, determining and creating steps for each policy in the policy document.

5. A policy document data processing system configured for directional optimization of policy statements in a policy document, the system comprising:

a host computing system comprising memory and at least one processor;

a Web services server executing in the memory by the at least one processor of the host computing system and managing messaging exchanges for a Web service according to different runtime presentations of security policies for the Web service; and

,

policy evaluation logic coupled to the Web services server, the logic comprising program code enabled to parse a policy document for the Web service to extract one or more different policies, to identify ones of the extracted policies that are bi-directional and others that are direction agnostic without specifying a particular direction or multiple directions, and to create separate direction-aware runtime presentations of each of the identified ones of the extracted policies that are bi-directional but to create a single run time presentation for each of the identified ones of the extracted policies that are direction agnostic.

6. The system of claim 5, wherein the Web service is described by a Web services definition language (WSDL) conformant document and wherein the policy document is referenced in the WSDL conformant document and further conforms to WS-Policy.

7. The system of claim 5, wherein the Web service is described by a Web services definition language (WSDL) conformant document and wherein the policy document is referenced in an endpoint reference to the Web service and further conforms to WS-Policy.

8. A computer program product comprising a non-transitory computer usable storage medium embodying computer usable program code for directional optimization of policy statements in a policy document, the computer program product comprising:

computer usable program code for loading a policy document referenced for a Web service;

computer usable program code for extracting a policy from the policy document;

computer usable program code for determining whether the extracted policy is bi-directional or direction agnostic without specifying a particular direction or multiple directions; and

,

computer usable program code for creating a single run time presentation for the extracted policy when the extracted policy is direction agnostic, or creating separate run time presentations for each direction of the extracted policy when the extracted policy is bi-directional.

9. The computer program product of claim 8, wherein the computer usable program code for loading a policy document referenced for a Web service, comprises computer usable program code for loading a WS-Policy conformant policy document referenced in a Web services definition language (WSDL) document for a Web service.

10. The computer program product of claim 8, wherein the computer usable program code for loading a policy document referenced for a Web service, comprises computer usable program code for loading a WS-Policy conformant policy document referenced in an endpoint reference for a Web service.

11. The computer program product of claim 8, further comprising computer usable program code for repeating the extracting, determining and creating steps for each policy in the policy document.