COMMUNICATING STATUS REGARDING APPLICATION OF COMPLIANCE POLICY UPDATES

• US 20160330248A1
• Filed: 07/20/2016
• Published: 11/10/2016
• Est. Priority Date: 03/03/2014
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Inventors: Zhang, Hao, Parthasarathy, Krishna Kumar, Chao, Lucy, Libman, Mashuri, Koretsky, Anatoly, Gao, Liphi, Xie, Yongjun, Blyth, David Alexander
• Granted Patent: US 9,674,227 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 3/0484 for the control of specific functions or operations, e.g. selecting or manipulating an object, an image or a displayed text element, setting a parameter value or selecting a range
• CPC Class Codes: G06F 40/205 Parsing
• CPC Class Codes: G06Q 10/06 Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A set of compliance policy updates are received. The compliance policy updates are sent to workloads for application. A status of the application of the compliance policies to the workloads is received from the workloads and output.

Claims

1. A computing system comprising:

at least one processor; and

memory storing instructions executable by the at least one processor, wherein the instructions configure the computing system to;

send a compliance policy update to a workload for deployment to the workload;

send bindings to the workload, the bindings being indicative of which portions of the workload that the compliance policy update applies to;

automatically receive a compliance policy status indicator from the workload indicative of a status of deployment of the compliance policy update to the workload, the compliance policy status indicator including a binding level error indication indicative of whether an error occurred in deployment of the compliance policy update to each of the portions of the workload; and

based on the compliance policy status indicator, display a status display element indicative of whether the compliance policy update is currently being deployed to the workload or whether deployment of the compliance policy update to the workload has completed, the status display element indicating the binding level error indication.

2. The computing system of claim 1, wherein the binding level error indication is indicative of a plurality of different portions of the workload that the compliance policy update was unsuccessfully deployed to, and, for each of the different portions, an error that occurred during deployment of the compliance policy update, and wherein the instructions configure the computing system to:

display a status display element that identifies each of the different portions of the workload and the error that occurred in each different portion.

3. The computing system of claim 2, wherein the instructions configure the computing system to:

display the binding level error indication along with a drill user input mechanism actuatable to display an error detail display showing details corresponding to the binding level error indicator.

4. The computing system of claim 2, wherein the workload comprises a multi-tenant workload, and wherein the instructions configure the computing system to:

display a status display element indicative of a deployment status of the compliance policy update across all tenants in the multi-tenant workload.

5. The computing system of claim 4, wherein the instructions configure the computing system to:

send the compliance policy update to a plurality of different workloads for deployment to the plurality of different workloads

6. The computing system of claim 5, wherein the instructions configure the computing system to:

display a status display element indicative of a deployment status of the compliance policy update across all of the plurality of different workloads.

7. The computing system of claim 1, wherein the instructions configure the computing system to:

receive a user input indicative of a remedy for the error;

display a redeploy user input mechanism to redeploy the compliance policy update after the error has been remedied;

receive an indication of user actuation of the redeploy user input mechanism; and

redeploy the compliance policy update to the workload based on the user actuation of the redeploy user input mechanism.

8. A computing system comprising:

at least one processor; and

memory storing instructions executable by the at least one processor, wherein the instructions configure the computing system to;

receive a compliance policy update to be deployed at a workload;

receive bindings at the workload indicative of which portions of the workload that the compliance policy update applies to;

automatically deploy the compliance policy update to different portions of the workload identified by the received bindings;

automatically identify a deployment status indicative of whether the deployment of the compliance policy update to the workload is in progress or has completed;

automatically identify a binding level status indicative of a status of the deployment to each of the different portions of the workload and whether an error occurred in deployment of the compliance policy update to each portion; and

send the deployment status and the binding level status to a compliance policy management system.

9. The computing system of claim 8, wherein the workload comprises a multi-tenant workload, and wherein the instructions configure the computing system to:

send a deployment status and a binding level status for a plurality of tenants in the multi-tenant workload.

10. The computing system of claim 8, wherein the instructions configure the computing system to:

if the deployment is completed, identify whether the compliance policy update is deployed successfully or with errors.

11. The computing system of claim 10, wherein the instructions configure the computing system to:

if the deployment is completed with errors, identify the errors; and

re-deploy the compliance policy update to the workload after the identified errors are remedied.

12. The computing system of claim 11, wherein the instructions configure the computing system to:

receive an indication from the compliance policy management system that the identified errors have been remedied.

13. The computing system of claim 12, wherein the instructions configure the computing system to:

deploy a modified version of the compliance policy update.

14. A computer-implemented method comprising:

using a computer processor to send a compliance policy update from a compliance policy authoring system to a workload for deployment to the workload;

sending bindings from the compliance policy authoring system to the workload, the bindings being indicative of which portions of the workload that the compliance policy update applies to;

automatically receiving a compliance policy status indicator from the workload indicative of a status of deployment of the compliance policy update to the workload, the compliance policy status indicator including a binding level error indication indicative of whether an error occurred in deployment of the compliance policy update to each of the portions of the workload; and

based on the compliance policy status indicator, displaying a status display element indicative of whether the compliance policy update is currently being deployed to the workload or whether deployment of the compliance policy update to the workload has completed, the status display element indicating the binding level error indication.

15. The computer-implemented method of claim 14, wherein the binding level error indication is indicative of a plurality of different portions of the workload that the compliance policy update was unsuccessfully deployed to, and, for each of the different portions, an error that occurred during deployment of the compliance policy update, and wherein displaying a status display element comprises:

displaying a status display element that identifies each of the different portions of the workload and the error that occurred in each different portion.

16. The computer-implemented method of claim 15, wherein displaying the status display element indicative of the compliance policy update being deployed with errors comprises:

displaying the binding level error indication along with a drill user input mechanism actuatable to display an error detail display showing details corresponding to the binding level error indicator.

17. The computer-implemented method of claim 15, wherein the workload comprises a multi-tenant workload and wherein displaying the status display element comprises:

displaying a status display element indicative of a deployment status of the compliance policy update across all tenants in the multi-tenant workload.

18. The computer-implemented method of claim 17, wherein sending comprises:

sending the compliance policy update to a plurality of different workloads for deployment to the plurality of different workloads

19. The computer-implemented method of claim 18, wherein displaying the status display element comprises:

displaying a status display element indicative of a deployment status of the compliance policy update across all of the plurality of different workloads.

20. The computer-implemented method of claim 14, and further comprising:

receive a user input indicative of a remedy for the error;

display a redeploy user input mechanism to redeploy the compliance policy update after the error has been remedied;

receive an indication of user actuation of the redeploy user input mechanism; and

redeploy the compliance policy update to the workload based on the user actuation of the redeploy user input mechanism.