17 results about "Policy decision" patented technology

The application discloses a kind of based on blockchain's pedigree data dynamic permission access control system and method, rely on attribute-based access control paradigm, and combine pedigree data access constraint to carry out dynamic access control.First, user sends access request to policy decision point;Decision point according to the policy loaded from policy management point, request relevant information to blockchain, and call user historical behavior verification module based on pedigree data, the legality of current access request is verified using dependency relationship and pedigree data graph.System administrator records access request and verification result to blockchain, to support the fast verification of same query, reduce query overhead.In addition, the system passes access information such as query user, time, result, operation content to management node, for subsequent user access tracking and management.The method uses the anonymity and non-tamperability of blockchain, provides strong evidence for user supervision, realizes efficient management and reasoning to source information.

Various embodiments of the teachings herein include an automated method for data access to a device by an external client, allowing the device to communicate with an internal communication network while the external client communicates with an external communication network. An example method includes: sending a communication access request from the external client for the device to a software implemented application access point; configuring a corresponding software implemented connector using the application access point, so the connector acts as an endpoint for a communication tunnel to the device; configuring a corresponding software implemented policy decision point using the application access point as an interface to the external network for arriving of application data traffic of the external client, so the policy decision point is set up to validate, accept, and forward the access request of the external client to the connector; and accessing the device via the communication tunnel.

Technique or mechanism in which network security policies are applied close to the source or origin associated with policy decisions. For example. the disclosed technology moves dropped flows from a firewall cluster to a leaf switch based on host location.

Systems, apparatuses, and methods for updating and optimizing task scheduling policies are disclosed. A new policy is obtained and updated at runtime by a client based on a server analyzing a wide spectrum of telemetry data on a relatively long time scale. Instead of only looking at the telemetry data from the client's execution of tasks for the previous frame, the server analyzes the execution times of tasks for multiple previous frames so as to determine a more optimal policy for subsequent frames. This mechanism enables making a more informed task scheduling policy decision as well as customizing the policy per application, game, and user without requiring a driver update. Also, this mechanism facilitates improved load balancing across the various processing engines, each of which has their own task queues. The improved load balancing is achieved by analyzing the telemetry data including resource utilization statistics for the different processing engines.

Some embodiments provide a method for evaluating a policy for authorizing an API (Application Programming Interface) call to an application. Based on a first set of parameters available before receiving the API call, the method evaluates only a portion of the policy to produce a partially evaluated policy. The method stores the partially evaluated policy in a cache. The method then receives an API call to authorize, and determines whether the API call should be authorized by fully evaluating the policy, using the partially evaluated policy retrieved from the cache first storage, and a second set of parameters associated with the API call. The method responds to the API call with a policy decision based on the fully evaluated authorization policy.

A cloud-based, query management and education system enables provider organizations to query and educate clinicians on how to clarify clinical documentation, resulting in more accurate reimbursement, public reporting, research and policy decisions. Query authors create compliant queries from stored templates which may be supplemented by attaching and / or annotating selected documentation from the patient record. Clinician responses to such queries automatically generate addenda in the relevant patient record. All events around a query are tracked and reportable through a graphical performance scorecards and reporting dashboards.

The application discloses a kind of capacity limited vehicle path problem solving method based on timing coding and attention mechanism, first construct the initial feasible solution satisfying constraint condition, and current solution is expressed as containing node level, journey level and solution level hierarchical feature structure;By timing modeling to node sequence in journey and aggregation, journey level feature is obtained, and then the feature set of multiple journeys is modeled by attention, to generate solution embedding vector representing the overall structure of solution;The solution embedding vector is fused with environmental state features and input into the policy decision network, and the selection result of local optimization operator is output, and the solution is iteratively updated according to the selection result until the termination condition is met.The application can enhance the modeling capability of node order change and inter-journey correlation, and improve the stability and generalization performance of the algorithm under different scales.

The application discloses a kind of compatible XACML standard's trusted access control method and system, belong to access control technical field, the trusted access control method conforms to the XACML standard popular in industry, adopts the policy decision point of decentralization realized by block chain technology, eliminates the mutual distrust between different organizations, guarantee the trusted of access request verification result, to realize the trusted access across organization;With the access control function conforms to the XACML standard popular in industry, the specific implementation can reuse XACML policy decision point, policy enforcement point related open source code, and the deployment access control function is low in cost;Block chain is based on the read-write separation characteristics of XACML policy decision point, with low redundancy parallel execution request verification task, make full use of the computing capacity of block chain node, reduce the request verification overhead, improve the block chain throughput.

This invention discloses a rule-embedded intelligent strategy decision-making method and system, belonging to the field of artificial intelligence technology. It obtains decision schemes corresponding to game-based adversarial data based on a strategy model. The strategy model includes: a backbone network for generating a situation vector based on the game-based adversarial data; a situation encoder for converting the situation vector into a situation representation matrix reflecting spatial relationships and environmental influences; a rule constraint layer for generating mathematical constraints based on the situation representation matrix; and a scheme generation layer for generating decision schemes based on the situation representation matrix and mathematical constraints. This invention can overcome the key bottleneck from pixel perception to semantic decision-making, meeting the urgent needs of modern large-scale interactive systems for real-time, accurate, and intelligent situational awareness.

The application discloses an agent workflow visual construction and debugging method based on reinforcement learning, comprising the following steps: step one: obtaining agent workflow execution data and policy decision data to form continuous time series and policy sequences; step two: extracting execution contract features to generate execution contract signatures and merging execution fragments to form main trajectories and expansion sets; step three: constructing an improved DynNoSlice space-time graph; step four: performing RUDDER reinforcement learning reward redistribution to form a residual field; step five: forming a metric graph according to the residual field; step six: locating a fault position and forming a reversible repair front; step seven: forming a debugging trajectory graph; and step eight: performing iterative layout solving to output visual construction results and debugging results. The application improves the accuracy of agent workflow time series expression, fault positioning and debugging analysis.

This invention provides a parallel I / O write consistency guarantee method based on state preheating, belonging to the field of computer technology. This invention collects the I / O operation timestamp sequence of MPI processes and the inter-process communication topology, and uses a risk assessment model fused with temporal causal convolution and graph attention to output risk scores for each variable's write operation. It then uses an adaptive preheating timing estimation algorithm based on a queuing network to calculate the expected completion time variance of the I / O path, determining whether to trigger the preheating process. Finally, it uses a preheating intensity adjustment function to fuse the risk scores, MPI process size, and historical write success rate, triggering policy upgrades and retrying when deviations are detected. The execution results are updated with reinforcement learning reward signals to update the parameters of the artificial intelligence model and the weights of the policy decision model, achieving closed-loop adaptive adjustment. This solves the technical problem that parallel I / O write consistency guarantee mechanisms cannot adaptively adjust the synchronization strategy strength according to the real-time system load status and the risk of abnormal propagation between processes.

A wireless communication method for use in a policy control function is disclosed. The method comprises: determining a flexible quality of service (QoS) profile for a QoS flow, and transmitting, to a session management function (SMF), the flexible QoS profile for the QoS flow, wherein the flexible QoS profile comprises a default QoS parameter set for the QoS flow and subordinate QoS information of at least one subordinate QoS parameter set for at least one inner flow in the QoS flow.

Embodiments of the present disclosure relate to an access control enforcement architecture for dynamic manufacturing systems. A computer system comprising one or more resource servers (220) having resources (223), access to the resources (223) being controlled according to a control policy specified in a computer-readable access control language, and a centralized authorization server (240) that is common to the resource servers (220) and implements a second type policy decision point (240'). The computer system further comprises a first type policy decision point (241') and one or more second type policy decision points (241"), the first type policy decision point (241') being implemented by the authorization server and configured to decide on dynamic policy privileges, the second type policy decision points (241") being implemented by respective ones of the resource servers and configured to decide on static policy privileges.