Communicating status regarding application of compliance policy updates

• US 9,674,227 B2
• Filed: 07/20/2016
• Issued: 06/06/2017
• Est. Priority Date: 03/03/2014
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Inventors: Libman, Mashuri, Koretsky, Anatoly, Parthasarathy, Krishna Kumar, Gao, Liphi, Xie, Yongjun, Blyth, David Alexander, Zhang, Hao, Chao, Lucy
• Primary Examiner(s): LEUNG, ROBERT B
• Application Number:
  US15/215,032
• Publication Number:
  US 20160330248A1
• Time in Patent Office: 321 Days
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 3/0484 for the control of specific functions or operations, e.g. selecting or manipulating an object, an image or a displayed text element, setting a parameter value or selecting a range
• CPC Class Codes: G06F 40/205 Parsing
• CPC Class Codes: G06Q 10/06 Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A set of compliance policy updates are received. The compliance policy updates are sent to workloads for application. A status of the application of the compliance policies to the workloads is received from the workloads and output.

Claims

1. A computing system comprising:

at least one hardware processor; and

memory storing instructions executable by the at least one hardware processor, wherein the instructions, when executed by the at least one hardware processor, configure the computing system to;

send a compliance policy update from the computing system to a workload for deployment to the workload;

send bindings from the computing system to the workload, the bindings being indicative of which portions of the workload that the compliance policy update applies to;

automatically receive a compliance policy status indicator at the computing system from the workload indicative of a status of deployment of the compliance policy update to the workload, the compliance policy status indicator including a binding level error indication indicative of whether an error occurred in deployment of the compliance policy update to each of the portions of the workload; and

based on the compliance policy status indicator, display a status display element indicative of whether the compliance policy update is currently being deployed to the workload or whether deployment of the compliance policy update to the workload has completed, the status display element indicating the binding level error indication.

2. The computing system of claim 1, wherein the binding level error indication is indicative of a plurality of different portions of the workload that the compliance policy update was unsuccessfully deployed to, and, for each of the different portions, an error that occurred during deployment of the compliance policy update, and wherein the instructions configure the computing system to:

display a status display element that identifies each of the different portions of the workload and the error that occurred in each different portion.

3. The computing system of claim 2, wherein the instructions configure the computing system to:

receive a user input indicative of a remedy for each identified error; and

send a modified version of the compliance policy update from the compliance policy authoring system for redeployment to the workload with an indication that each identified error has been remedied.

4. The computing system of claim 3, wherein the instructions configure the computing system to:

display the binding level error indication along with a drill user input mechanism actuatable to display an error detail display showing details corresponding to the binding level error indication.

5. The computing system of claim 2, wherein the workload comprises a multi-tenant workload, and wherein the instructions configure the computing system to:

send the compliance policy update to a plurality of different workloads for deployment to the plurality of different workloads; and

display a status display element indicative of a deployment status of the compliance policy update across all tenants in the multi-tenant workload.

6. The computing system of claim 5, wherein the instructions configure the computing system to:

display a status display element indicative of a deployment status of the compliance policy update across all of the plurality of different workloads.

7. The computing system of claim 2, wherein the instructions configure the computing system to:

display a redeploy user input mechanism to for redeploying the compliance policy update after the identified error has been remedied;

receive an indication of user actuation of the redeploy user input mechanism; and

send the modified version of the compliance policy update to the workload based on the user actuation of the redeploy user input mechanism.

8. A computing system comprising:

at least one hardware processor; and

memory storing instructions executable by the at least one hardware processor, wherein the instructions, when executed by the at least one hardware processor, configure the computing system to;

receive a compliance policy update at a workload from a compliance policy authoring system to be deployed to the workload;

receive bindings at the workload from the compliance policy authoring system, the binding being indicative of which portions of the workload that the compliance policy update applies to;

automatically deploy the compliance policy update to different portions of the workload identified by the received bindings;

automatically identify a deployment status at the workload indicative of whether the deployment of the compliance policy update to the workload is in progress or has completed;

automatically identify a binding level status indicative of a status of the deployment to each of the different portions of the workload and whether an error occurred in deployment of the compliance policy update to each portion; and

send the deployment status and the binding level status from the workload to a compliance policy management system.

9. The computing system of claim 8, wherein the workload comprises a multi-tenant workload, and wherein the instructions configure the computing system to:

send a deployment status and a binding level status for a plurality of tenants in the multi-tenant workload.

10. The computing system of claim 8, wherein the instructions configure the computing system to:

if the deployment is completed, identify whether the compliance policy update is deployed successfully or with errors, and identify the errors if the deployment is completed with errors.

11. The computing system of claim 10, wherein the instructions configure the computing system to:

if the deployment is completed with errors, identify the errors; and

re-deploy the compliance policy update to the workload after the identified errors are remedied.

12. The computing system 10, wherein the instructions configure the computing system to:

receive a modified version of the compliance policy update from the compliance policy management system at the workload for redeployment to the workload with an indication that each of the identified errors have been remedied for each portion.

13. The computing system of claim 12, wherein the instructions configure the computing system to:

redeploy a modified version of the compliance policy update to the workload after the identified errors are remedied.

14. A computer-implemented method comprising:

sending, by a computer hardware processor, a compliance policy update from a compliance policy authoring system to a workload for deployment to the workload;

sending bindings from the compliance policy authoring system to the workload, the bindings being indicative of which portions of the workload that the compliance policy update applies to;

automatically receiving a compliance policy status indicator at the compliance policy authoring system from the workload, the compliance policy status indicator being indicative of a status of deployment of the compliance policy update to the workload, the compliance policy status indicator including a binding level error indication indicative of whether an error occurred in deployment of the compliance policy update to each of the portions of the workload, wherein the binding level error indication is indicative of at least one portion of the workload that the compliance policy was unsuccessfully deployed to and, for each portion of the at least one portion, an error that occurred during deployment of the compliance policy update;

based on the compliance policy status indicator, displaying a status display element indicative of whether the compliance policy update is currently being deployed to the workload or whether deployment of the compliance policy update to the workload has completed, the status display element indicating the binding level error indication and identifying each portion of the at least one portion of the workload and the error that occurred in each portion;

receiving a user input indicative of a remedy for each identified error; and

sending a modified version of the compliance policy update from the compliance policy authoring system for redeployment to the workload with an indication that each identified error has been remedied.

15. The computer-implemented method of claim 14, wherein the binding level error indication is indicative of a plurality of different portions of the workload that the compliance policy update was unsuccessfully deployed to, and, for each of the different portions, an error that occurred during deployment of the compliance policy update, and wherein displaying a status display clement comprises:

displaying a status display element that identifies each of the different portions of the workload and the error that occurred in each different portion.

16. The computer-implemented method of claim 15, wherein displaying the status display element indicative of the compliance policy update being deployed with errors comprises:

displaying the binding level error indication along with a drill user input mechanism actuatable to display an error detail display showing details corresponding to the binding level error indication, wherein the remedy for each of the identified errors is determined by the user based on the error detail display.

17. The computer-implemented method of claim 15, wherein the workload comprises a multi-tenant workload and wherein displaying the status display element comprises:

displaying a status display element indicative of a deployment status of the compliance policy update across all tenants in the multi-tenant workload.

18. The computer-implemented method of claim 17, wherein sending comprises:

sending the compliance policy update to a plurality of different workloads for deployment to the plurality of different workloads.

19. The computer-implemented method of claim 18, wherein displaying the status display element comprises:

displaying a status display element indicative of a deployment status of the compliance policy update across all of the plurality of different workloads.

20. The computer-implemented method of claim 14, and further comprising:

receiving a user input indicative of a remedy for the error;

displaying a redeploy user input mechanism to redeploy the compliance policy update after the error has been remedied;

receiving an indication of user actuation of the redeploy user input mechanism; and

reploying the compliance policy update to the workload based on the user actuation of the redeploy user input mechanism.