System and method for defining and using topic-based profiles for distributed simulation

Description

1 / 12 SYSTEM AND METHOD FOR DEFINING AND USING TOPIC-BASED PROFILES FOR DISTRIBUTED SIMULATION Field of Invention

[0001] The present invention describes a system and method for defining and using topic-based profiles for distributed simulation via a Message-oriented Middleware (MoM). Background of the Invention

[0002] Message-oriented Middleware (MoM) is a software or hardware infrastructure that facilitates the exchange of messages between distributed systems. It acts as a communication layer, enabling the integrated interaction of different application modules across various platforms. This reduces the complexities associated with developing applications that span different operating systems and network protocols. MoM acts as an intermediary, providing application developers with an abstraction of the complexities inherent in different operating systems and network interfaces. By making available APIs that span heterogeneous platforms and networks, MoM allows independently developed software components running on different network platforms to communicate effectively.Furthermore, MoM supports asynchronous communication between client and server applications, simplifying the interaction process and reducing the burden on application developers associated with traditional client / server architectures. This message-based model, mediated by middleware, enables the creation of loosely coupled distributed systems, thus promoting greater flexibility and scalability. Petition 870250012714, dated 02 / 17 / 2025, page 9 / 26 2 / 12

[0003] Currently, several systems offer MoM solutions. Considering that the MoM plays a crucial role in providing a communication layer for distributed systems, it is important to emphasize that the management of access to information made available by applications should be coordinated by the applications themselves. In other words, the use of profiles, which are sets of rules that define which operations (publish, subscribe, or both) are allowed on the data, to control access to information transmitted by the MoM should be managed internally by the applications involved in the distributed system. In this way, the applications assume responsibility for the implementation and maintenance of security and access policies, while the MoM continues to provide the necessary infrastructure for efficient communication between distributed systems.

[0004] The use of profiles in a distributed simulation environment is an effective approach to restrict a given simulator's access only to relevant data from other simulators involved in the same distributed simulation. This is because not all data made available in the MoM by the simulators is necessary or relevant to the other participating simulators. For example, a simulator that models traffic behavior may not need weather data that another simulator is producing. By using profiles to control data access in the middleware, it is possible to control access more precisely, avoiding the waste of computational resources on transmitting or processing irrelevant data for certain simulators. This strategy optimizes the efficiency of the distributed simulation, ensuring that each simulator has access only to the information essential for its operation.

[0005] In the search for topic-based access control, where a topic serves as a logical abstraction capable of defining a shared understanding of the meaning and structure of transmitted data and Petition 870250012714, dated 17 / 02 / 2025, page 10 / 26 On December 3rd, while receiving data in a distributed systems environment, the following document was found, which partially overlaps with the topic:

[0006] Document US20220201024 A1 discloses a system and method for modeling a topic-based MoM in a security system. The method includes creating a policy and periodically analyzing the standardized graph to detect at least one deviation from the policy and issuing an alert in response to deviation detection. This patent document shows the relevance of topic-based access control in distributed systems, but does not address the use of profiles in a distributed simulation environment. Summary of the Invention

[0007] Thus, the present invention aims to provide a way to define and use topic-based profiles in a distributed simulation environment, allowing each participating simulator to access only the data relevant to its context.

[0008] In a first object, the present invention discloses a system of MoM for distributed simulation comprising: a. a policy repository (PR); b. a definition and configuration module (MD); c. an assignment module (AM); and d. an access control and operation module (MC); in which: • The policy repository (PR) comprises a set of data about simulators, profiles, topics, and operations allowed for each profile in each topic. This repository is accessed through the definition and configuration module (MD); Petition 870250012714, dated 02 / 17 / 2025, page 11 / 26 4 / 12 • The definition and configuration module (MD) includes the definition of simulators, profiles, and the association of topics and operations to the defined profiles. This module is associated with the assignment module (MA) and the access control and operation module (MC); • The assignment module (AM) comprises the assignment of profiles to simulators that connect to the MoM. This module is associated with the access control and operation module (AC). • The access control and operation (MC) module comprises the control of access for simulators connected to the MoM, taking into account the associated profiles. Each simulator can only access the topics and operations defined in its profile. Topics and operations not defined are denied access due to policy violation.

[0009] In a second object, the present invention discloses a method for defining and using topic-based profiles, comprising the steps of: a. receiving agreed-upon policies for distributed simulation and storing them in the policy repository (PR); b. acquisition of policies agreed upon by the definition and configuration module (MD); c. definition of profiles, topics and operations allowed by the definition and configuration module (MD); d. assigning a profile to a simulator that connects to the MoM via the assignment module (MA); e. execution of the distributed simulation by the access control and operation module (MC); in which: Petition 870250012714, dated 02 / 17 / 2025, page 12 / 26 5 / 12 • Agreed policies are defined before the execution of the distributed simulation and include the possible operations (publish, subscribe, or both) for each topic in each defined profile; and • The execution of the simulation implies publish and / or subscribe operations on various topics, and it is the responsibility of the control module (CM) to authorize the simulators' access to the topics, based on their profiles, for the execution of the permitted operations.

[0010] Furthermore, the inventive concept common to all the claimed protection contexts is the definition and use of topic-based profiles for distributed simulation (and for distributed systems) through a Message-oriented Middleware (MoM). Brief Description of the Figures

[0011] The invention is illustrated, by way of example and not limitation, in the figures of the accompanying drawings, in which similar references indicate similar elements.

[0012] Figure 1 is a block diagram of a distributed simulation environment in which systems and methods can be implemented for defining and using topic-based profiles for distributed simulation.

[0013] Figure 2 is a block diagram showing the modules of the present invention.

[0014] Figure 3 is a flowchart of an example method for defining and using topic-based profiles for distributed simulation.

[0015] Figure 4 is a block diagram of an example MoM system, incorporating the presented method for defining and using topic-based profiles for distributed simulation. Detailed Description of the Invention Petition 870250012714, dated 17 / 02 / 2025, page 13 / 26 6 / 12

[0016] The following detailed description includes references to the attached drawings, which form part of the detailed description. The drawings show illustrations according to examples of embodiments. The embodiments exemplified are described in sufficient detail to permit a clear understanding of the subject matter of the present patent application. The following detailed description should not be taken in a limiting sense, and the scope is defined by the attached claims.

[0017] The present invention provides a method and system for defining and using topic-based profiles for distributed simulation. The proposed system and method include functionality for defining and using topic-based profiles that can be included in different MoMs.

[0018] In a first object, the present invention proposes a system of MoM for distributed simulation comprising: a. a policy repository (PR); b. a definition and configuration module (MD); c. an assignment module (AM); d. an access control and operation module (MC); in which: • The policy repository (PR) comprises a set of data about simulators, profiles, topics, and operations allowed for each profile in each topic. This repository is accessed through the definition and configuration module (MD); • The definition and configuration (MD) module comprises the definition of profiles and the association of topics and operations to the defined profiles. This module is associated with the assignment module (MA) through the list of available profiles (LP) and with the access control and operation (MC) module through the defined access policies (PA); Petition 870250012714, dated 02 / 17 / 2025, page 14 / 26 7 / 12 • The assignment module (AM) comprises the assignment of profiles to simulators that connect to the MoM. This module is associated with the access control and operation module (AC). • The access control and operation (MC) module comprises the control of access for simulators connected to the MoM, taking into account the associated profiles. Once a simulator has an associated profile, it can only access the topics and operations defined for its profile in the access policy settings. Topics and operations not defined are denied access due to policy violation.

[0019] The policy repository (PR) comprises a set of data about simulators, profiles, topics, and operations. This set of information available in the policy repository (PR) is previously agreed upon by all participants in the distributed simulation. The data available in the policy repository (PR) can be organized into files in XML, JSON, or another format that meets the need.

[0020] In one embodiment, users participating in a distributed simulation must agree on the simulators and profiles that will be used and assign a list of topics and operations to each profile, making the policy repository (PR) available to be read by the definition and configuration module (DM).

[0021] The definition and configuration module (MD) comprises the definition of simulators, association of profiles to simulators, and association of topics and operations to the defined profiles. This module reads the policy repository (RP) and generates two artifacts: a list of profiles (LP) that will be used in the distributed simulation and that will be consulted by the assignment module (MA); and the access policy configurations (PA) that will be used by the control and operation module (MC) to orchestrate access to the topics of the distributed simulation. Petition 870250012714, dated 02 / 17 / 2025, page 15 / 26 8 / 12

[0022] In one implementation, the definition and configuration module (MD) acts in the initialization of the MoM, generating its artifacts that will be used by other modules: profile list (LP) and policy and access configuration (PA).

[0023] The assignment module (AM) comprises the assignment of profiles to simulators that connect to the MoM. This module is triggered by the control and operation module (CM) to assign a profile to the connecting simulator. The assigned profile must be in the profile list (PL) generated by the definition and configuration module (MD). The assignment module (AM) must assign a profile to the simulator, or else deny access if there is no defined association between the simulator and one of the profiles defined in the access control policies.

[0024] The access control and operation module (MC) comprises the control of access for simulators connected to the MoM. When a simulator connects to the MoM, the access control and operation module (MC) requests the assignment module (MA) to assign a profile from the profile list (LP) to the simulator. Once a simulator has an associated profile, it can only access the topics defined in its profile, to perform only the operations allowed for each topic. To perform this control, the access control and operation module (MC) uses the access policy (PA) configuration generated by the definition and configuration module (MD) at MoM initialization. An attempt to access topics not defined in the profile is denied access due to a policy violation.Attempting to publish a topic for which the profile only has subscribe permission will also result in access being denied due to a policy violation; in other words, connected simulators can only perform operations defined for their profile.

[0025] In a second object, the present invention proposes a method for defining and using topic-based profiles, comprising the steps of: Petition 870250012714, dated 02 / 17 / 2025, page 16 / 26 9 / 12 a. receiving agreed-upon policies for distributed simulation and storing them in the policy repository (PR), which can be an XML, JSON, or other format file; b. acquisition of policies agreed upon by the definition and configuration module (MD), through reading the policy repository (RP); c. Definition of the profile list (PL) and access policy configuration (AP) by the definition and configuration module (MD). The configuration links simulators, profiles, topics, and allowed operations that will be used by the access control and operation module (MC) to control access to the topics. d. Assigning a profile to a simulator that connects to the MoM via the assignment module (MA); When a simulator connects to the MoM, it is associated with a profile from the profile list (LP), according to the defined access policy. e. execution of the distributed simulation by the access control and operation module (MC), allowing simulators access to topics to perform operations defined in the access policy (PA); in which: • The agreed-upon policies are defined before the execution of the distributed simulation and include the possible operations (publish, subscribe, or both) for each topic in each defined profile; and • The execution of the simulation implies publish and / or subscribe operations on various topics, and it is the responsibility of the control module (CM) to authorize the simulators' access to the topics, based on their profiles, to execute the operations permitted in the access policy (AP).

[0026] Figure 1 is a block diagram of the distributed simulation environment (100), in which the definition and use of topic-based profiles can Petition 870250012714, dated 02 / 17 / 2025, page 17 / 26 10 / 12 to be applied. The environment may include simulators (110, 120 and 130) participating in a distributed simulation. These simulators connect via a MoM (200) to perform publish (pb) and / or subscribe (sb) operations on topics. There must be at least one topic publisher simulator and at least one subscribe simulator for the published topics.

[0027] Figure 2 is a block diagram showing the modules of the present invention. The policy repository (PR) (205) is a file that is read by the definition and configuration module (DM) (210), which in turn generates a list of profiles (LP) (215) and the configuration of access policies (AP) (225). The access control and operation module (AC) (230) uses the access policies (AP) (225) to control access to topics (400) by the simulators participating in the distributed simulation. The simulators can perform publish and / or subscribe operations on topics listed in their profile. The assignment module (AM) (220) uses the list of profiles (LP) (215) to assign a valid profile to a simulator that connects to the distributed simulation, according to the defined access policy. Once assigned, the profile is used throughout the execution of the distributed simulation.

[0028] Figure 3 is a flowchart of an example method for defining and using topic-based profiles for distributed simulation. The method begins with reading the policy repository (RP) (302) by the definition and configuration module (MD) integrated into the MoM. The definition and configuration module (MD) creates a profile list (LP) (304) and defines the access policy (PA) settings (306). The profile list (LP) (304) and the access policy settings (PA) (306) will be used by the assignment module (MA) and the access control and operation module (MC), respectively. A simulator, upon connecting to the MoM, must receive a profile. The assignment module (MA) associates a profile with the simulator, according to the defined access control policies (308). The simulator with an assigned profile (310) can publish to one or more topics. The control module Petition 870250012714, dated 02 / 17 / 2025, page 18 / 26 The 11 / 12 access and operation (MC) module checks, based on the defined access policy, whether the simulator profile is authorized or not to perform the operation on the requested topic(s). The simulator with an assigned profile (312) can subscribe to one or more topics. The access and operation control (MC) module checks, based on the defined access policy, whether the profile is authorized or not to perform the operation on the requested topic(s). The method should deny access to topics for simulators without a profile (314) or for profiles not authorized in the defined access policy.

[0029] Figure 4 is a block diagram of an example MoM system, incorporating the presented method for defining and using topic-based profiles for distributed simulation. A distributed simulation (100) can have at least one publisher simulator that performs publish pb on at least one topic and must have at least one subscriber simulator that performs subscribe sb on at least one topic. In the example, the simulators with references 110 and 120 perform publish and subscribe operations, while the simulator with reference 130 performs only subscribe operations. The MoM (200) incorporates the modules presented in Figure 2. Upon initialization, the MoM (200) triggers the definition and configuration module (MD) (210), which reads the policy repository (RP) (205) and generates the profile list (LP) (215) and the access policy configuration (PA) (225). When a simulator connects to the MoM (200), it must receive a profile.The access control and configuration module (MC) (230) triggers the assignment module (MA) (220), which checks which profile is associated with the simulator and searches for it in the profile list (215). If the profile exists, then the MA (220) assigns the profile to the simulator. The access control and configuration module (MC) (230) then allows the simulator access to the topics (400), strictly to perform the authorized operations according to the associated profile and the access policy (PA) settings (225). Petition 870250012714, dated 02 / 17 / 2025, page 19 / 26 12 / 12

[0030] This describes the system and method for defining and using topic-based profiles for distributed simulation via a Message-Oriented Middleware (MoM). Petition 870250012714, dated 02 / 17 / 2025, page 20 / 26

Claims

1 / 2 Claims 1. Message-oriented Middleware (MoM) system for distributed simulation, characterized by comprising: a. a policy repository (RP) comprising a set of data on simulators, profiles, topics, and operations allowed for each profile in each topic; b. a definition and configuration module (MD) comprising the definition of simulators, profiles, and association of topics and operations to the defined profiles; c. an assignment module (MA) comprising the assignment of profiles to simulators that connect to the MoM; and d. an access control and operation module (MC) comprising the control of access from simulators connected to the MoM, taking into account the associated profiles.

2. A system, according to claim 1, characterized by the control of access to the topics available in the distributed simulation being orchestrated by the MoM, based on the profile used by the participating simulators, and by the publish and / or subscribe operations being authorized per topic.

3. System, according to claim 2, characterized by the MoM supporting asynchronous communication between client and server applications.

4. A system, according to any of the preceding claims, characterized by the MoM enabling the creation of loosely coupled distributed systems.

5. Method for defining and using topic-based profiles for distributed simulation, characterized by comprising a system as defined in claims 1 to 4, and by comprising the steps of: a. receiving agreed-upon policies for distributed simulation and storing them in a policy repository (PR); b. acquiring the agreed-upon policies by a definition and configuration module (DM), by reading the policy repository (PR); c. defining a list of profiles (LP) and an access policy configuration (AP) by the definition and configuration module (DM); d. assigning a profile to a simulator that connects to a MoM by an assignment module (AM); and e. executing a distributed simulation by an access control and operation module (AC), in order to allow simulators to access the topics to perform operations defined in the access policy (AP).Petition 870250012714, dated 02 / 17 / 2025, pp. 22 / 26.

Images