Policy as Code Matching Component for Computing Entities

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing methods are labor-intensive and inefficient for determining whether a policy written as code is applicable to a computing entity, as they require manual processing of vast amounts of data and cannot be efficiently performed by humans.

Innovation Solution

A system comprising a processor and memory that executes computer executable components, including a matching component to compare commands executed on a computing entity with actions extracted from the policy as code, using artificial intelligence technologies like NLP to autonomously identify and enforce applicable policies.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If manual processing methods are used to determine policy applicability, then human operators can make judgment calls, but the process becomes labor-intensive and inefficient

Engineering Contradiction:

Improvepolicy applicability determination accuracyVSAvoidprocessing efficiency

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The system enables self-service by having the computing entities automatically generate and provide their own command data to the analysis system, eliminating the need for manual data collection and preparation while maintaining accurate policy applicability determination

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The patent replaces manual mechanical processing with an automated computer-based system that uses NLP and pattern matching algorithms to analyze commands and determine policy applicability, significantly improving processing efficiency while maintaining reliability

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

2Productivity

If automated comparison is implemented to improve efficiency, then processing speed increases, but system complexity increases

Engineering Contradiction:

Improveprocessing speedVSAvoidsystem complexity

Core Design Contradiction:

ProductivityVSDevice complexity

Solution Approach 1:

The system introduces an intermediary NLP processing layer that translates diverse command formats into a standardized representation, simplifying the comparison process and reducing system complexity while maintaining high processing speed

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent transforms the complexity management approach by changing parameters from manual review (high accuracy, low speed) to automated text analysis (high speed, managed complexity through standardization and pattern matching)

Inventive Principle:

Principle #35Parameter changes

Data Source

PatentUS11075954B2Identifying systems where a policy as a code is applicable

Publication Date: 2021.07.27 INTERNATIONAL BUSINESS MACHINE CORPORATION

AI summary

Techniques regarding identifying one or more systems where a policy as a code can be applicable are provided. For example, one or more embodiments described herein can comprise a system, which can comprise a memory that can store computer executable components. The system can also comprise a processor, operably coupled to the memory, and that can execute the computer executable components stored in the memory. The computer executable components can comprise a matching component, operatively coupled to the processor, that can determine whether a policy as a code is enforceable on a computing entity based on a comparison of a plurality of commands executed on the computing entity and a plurality of actions extracted from the code.