Policy Management System Using Rule Trees for Flexible Assignment
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current policy management systems are cumbersome and inefficient, particularly in large IT environments, as they require complex organizational structures and individual assignment of computers to groups for policy application, making it difficult and time-consuming for administrators to manage policies across numerous computers.
Innovation Solution
A system that identifies and applies policies to computers using a rule tree with decision points determining geography, operating system, type, and business unit, allowing for flexible policy assignment without hierarchical inheritance, enabling computers to receive a single set of policies and allowing administrators to easily switch between rule trees in response to changes or events like virus outbreaks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If hierarchical tree structure is used for policy management, then policy inheritance is enabled, but device complexity and ease of operation deteriorate due to rigid single-position constraints
Solution Approach 1:
The patent segments the policy management system into two independent components: (1) a hierarchical tree structure for organizing policy sets with inheritance capabilities, and (2) a flat population structure where computers can be freely assigned to any policy set. This segmentation allows policy inheritance to function while eliminating rigid position constraints, enabling administrators to assign computers flexibly without being bound by hierarchical positions.
Solution Approach 2:
The patent creates a universal policy assignment mechanism where a single policy set from the hierarchical tree can be applied to any computer in the population regardless of position. This multi-functional approach allows the same policy set to serve multiple computers across different organizational units, eliminating the need for computers to exist at specific hierarchical positions and enabling flexible assignment while maintaining inheritance benefits.
2Adaptability or versatility
If group policy management system is used, then computers can receive multiple policies, but device complexity increases due to individual assignment requirements
Solution Approach 1:
The patent extracts the complex individual assignment mechanism from the policy management system. Instead of requiring administrators to individually assign computers to multiple groups and manage overlapping policies, the system extracts policy sets from the hierarchical tree and applies them directly to computers in the population. This extraction eliminates the complexity of tracking multiple group memberships while preserving the ability for computers to receive multiple policies through straightforward population assignments.
3Manufacturing precision
If complex organizational structures are implemented, then policy granularity is improved, but productivity deteriorates due to time-consuming management
Solution Approach 1:
The patent implements preliminary action by pre-organizing policy sets within the hierarchical tree structure with all necessary granularity and inheritance relationships established in advance. Administrators create the detailed policy hierarchy once, then simply assign pre-packaged policy sets to computers in the population. This preliminary organization eliminates the need for continuous complex management operations, maintaining policy granularity while dramatically improving management efficiency through straightforward assignment operations.
Data Source
AI summary
A system, method and computer program product are provided for policy management. In use, a plurality of rules for applying policies to a computer are identified. Further, information associated with the computer is also identified. Such rules and information are then utilized for applying the policies to the computer.