Natural Language Security Policy Configuration With AI Clarification

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional approaches to creating and managing intent-based security policies involve cumbersome guided interactive workflows, requiring administrators to repeatedly select from hundreds of entities and parameters, making the process time-consuming and laborious, especially in large enterprise networks.

Innovation Solution

A natural language processing system that allows administrators to configure security policies through conversational interactions, leveraging AI to translate and clarify intent-based policies, reducing the need for manual selection and streamlining policy creation.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If conventional guided interactive workflows are used for policy configuration, then administrators can select from hundreds of entities and parameters with precise control, but the process becomes time-consuming and laborious

Engineering Contradiction:
Improvepolicy configuration precisionVSAvoidpolicy creation time
Core Design Contradiction:
Measurement precisionVSLoss of time

Solution Approach 1:

The patent introduces an intermediary natural language processing system that translates conversational input into structured policy configurations. This mediator converts unstructured natural language into precise policy parameters, maintaining configuration accuracy while eliminating the need for administrators to manually navigate through hundreds of entities and parameters in traditional workflows

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent replaces the mechanical interactive workflow system with a natural language processing system. Instead of requiring administrators to click through guided workflows and select from dropdown menus, the system uses NLP to interpret conversational input and automatically generate policy configurations, substituting manual mechanical interactions with automated language-based processing

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Adaptability or versatility

If traditional interactive workflows are used, then comprehensive policy parameters can be configured, but the device complexity and operational burden increase

Engineering Contradiction:
Improvepolicy parameter coverageVSAvoidpolicy configuration ease
Core Design Contradiction:
Adaptability or versatilityVSEase of operation

Solution Approach 1:

The natural language processing system enables self-service policy configuration by automatically interpreting administrator intent and generating appropriate policy parameters. The system serves itself by converting unstructured natural language into structured configurations without requiring administrators to manually navigate complex parameter selections, thereby maintaining comprehensive policy coverage while dramatically improving ease of operation

Inventive Principle:
Principle #25Self-service

3Measurement precision

If manual selection from hundreds of entities is required, then precise policy targeting is achieved, but productivity decreases

Engineering Contradiction:
Improvepolicy targeting accuracyVSAvoidpolicy creation throughput
Core Design Contradiction:
Measurement precisionVSProductivity

Solution Approach 1:

The patent replaces manual mechanical selection processes with automated natural language processing. The NLP system interprets conversational input to automatically identify and configure precise policy targets, eliminating the need for administrators to manually search through and select from hundreds of entities. This substitution maintains targeting accuracy while enabling parallel processing of multiple policies, thereby significantly increasing productivity

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentUS20260046318A1Intent-based policy configuration using natural language
Publication Date: 2026.02.12 CISCO TECHNOLOGY INC
  • US20260046318A1 patent drawing
  • US20260046318A1 patent drawing
  • US20260046318A1 patent drawing

AI summary

Techniques are described for providing a natural language network security policy assistant for allowing a network administrator to implement network security policies using natural language security policy requests. A natural language request can be received by a user and can be translated using Artificial Intelligence into one or more security policy clauses. If the natural language security policy request leads to ambiguities with regard to intended security policies, one or more clarifying questions can be generated as natural language questions and sent to the user for clarification. One or more security policies can be implemented based on the one or more security policy clauses generated in response to the natural language security policy request and/or the natural language response to the clarifying questions.