International Business Machines Corporation

Other

Mario Ernesto De Armas

Thomas Charles Burke

Oswaldo Gago

Maria Elena Smith

Gaurang Shah

Ramon M Spence

Thomas L Roach

Christopher M Ketchuck

Srinivasan Muralidharan

Harvey M Ruback

Arnaud J Le Hors

Heather Marie Kreger

Andrew M Leonard

Stephen Rea

Steven Groeger

Robert G Laird

Steve Groeger

Wendi L Nusbickel

Matthew W Hartley

Edward D Shockley

Geetika Tandon

Joseph I Herman

A mechanism is provided in a data processing system comprising at least one processor and at least one memory, the at least one memory comprising instructions which are executed by the at least one processor and configure the processor to implement a healthcare blockchain framework for enforcing regulatory compliance in healthcare cloud solutions. The mechanism provides a healthcare blockchain framework to create, read, update, and delete elements of a healthcare compliance model supporting a dynamic allocation of cloud resources to a healthcare business network. Compliance with one or more healthcare regulations is built into the blockchain framework. Responsive to a cloud operations component within the healthcare blockchain framework attaching at least one evidence record to a compliance repository, the blockchain application stores the at least one evidence record in the compliance repository using chaincode within the healthcare blockchain framework. A compliance attestation component within the healthcare blockchain framework reviews the at least one evidence record using business rules to ensure compliance with the one or more healthcare regulations. The compliance attestation component stores a validation certification in the compliance repository responsive to the compliance attestation component approving the at least one evidence record based on the business rules.

Blockchain framework for enforcing regulatory compliance in healthcare cloud solutions

A mechanism is provided in a data processing system comprising at least one processor and at least one memory, the at least one memory comprising instructions which are executed by the at least one processor and configure the processor to implement a healthcare blockchain framework for continuous compliance auditing readiness and attestation in healthcare cloud solutions. The mechanisms provides a healthcare blockchain framework to create, read, update, and delete elements of a healthcare compliance model supporting a dynamic allocation of cloud resources to a healthcare business network. Compliance with one or more healthcare regulations is built into the blockchain framework. Responsive to an attestation event, a compliance attestation component within the healthcare blockchain framework reviews asset contents, state, and properties of an asset in a compliance repository. The compliance attestation component creates a bottom-up asset manifest for the asset and compares the asset manifest to a test case corresponding to an asset class of the asset. The compliance attestation component validates the asset against evidence rules corresponding to the asset class of the asset based on the comparison. Responsive to the compliance attestation component validating the asset, the mechanism generates a proof-of-validation certification.

Continuous compliance auditing readiness and attestation in healthcare cloud solutions

At least one set of enforceable policy provisions is identified within at least one defined service level policy to be enforced during runtime by a policy enforcement point (PEP). Each set of enforceable policy provisions includes a policy subject, a reference to a policy domain, and at least one assertion. Each identified set of enforceable policy provisions is transformed by the PEP into at least one runtime-executable processing rule that each includes at least one PEP processing action that each represents an atomic unit of policy enforcement level behavior executable by the PEP to enforce the respective at least one assertion against runtime objects associated with the policy subject within an area of runtime policy enforcement specified by the policy domain.

Dynamic generation of policy enforcement rules and actions from policy attachment semantics

A set of service level agreement (SLA) policies and service level definition (SLD) policies that are applied to a request message of a correlated request/response message pair are tracked. A response message of the correlated request/response message pair is detected. A corresponding set of platform-specific policy enforcement processing rules that are used to enforce the set of SLA policies and SLD policies on the response message are identified using the tracked set of SLA policies and SLD policies applied to the request message. The set of SLA policies and SLD policies are enforced on the response message using the identified corresponding set of platform-specific policy enforcement processing rules.

Symmetric coherent request/response policy enforcement

Source policy identification information of a registry service policy is correlated with configured policy enforcement processing rules and processing actions using a source policy reference key. The source policy identification information includes at least a source policy identifier (ID) of the registry service policy. Per-transaction service policy enforcement information that documents policy enforcement activities performed by a policy enforcement point (PEP) is correlated with the source policy identification information using the source policy reference key. The correlated per-transaction service policy enforcement information of at least one transaction from the per-transaction service data table is provided in response to a query from a policy monitoring point (PMP).

Instrumentation and monitoring of service level agreement (SLA) and service policy enforcement

A peer policy object named with a policy enforcement metric context identifier is created at a first policy enforcement point (PEP) platform of a group of peered PEP platforms. The peer policy object uniquely identifies a registered service policy to be enforced during runtime as a shared runtime policy enforcement activity by the group of peered PEP platforms within a peered policy enforcement deployment. The peer policy object named with the policy enforcement metric context identifier is deployed to at least one other peered PEP platform within the peered policy enforcement deployment to initiate the shared runtime policy enforcement activity by the group of peered PEP platforms. At least one runtime policy enforcement metric associated with runtime enforcement of the registered service policy is shared with the at least one other peered PEP platform during runtime using the policy enforcement metric context identifier.

Applying policy attachment service level management (SLM) semantics within a peered policy enforcement deployment

Source policy identification information of a registry service policy is captured. The source policy identification information includes a source policy identifier (ID), a source policy name, and a source policy uniform resource locator (URL). The captured source policy identification information is correlated with configured policy enforcement processing rules and processing actions using a source policy reference key. Per-transaction service policy enforcement information that documents policy enforcement activities performed by a policy enforcement point (PEP) is captured. The captured per-transaction service policy enforcement information is correlated with the captured source policy identification information using the source policy reference key.

An effective applied policy configuration associated with a selected policy resource is created responsive to a selection of a policy resource within a service policy visualization interface based upon results of programmatic introspection of the selected policy resource. The effective applied policy configuration includes correlated and combined effects of service policies identified by the programmatic introspection as attached to the selected policy resource within a resource hierarchy associated with the selected policy resource. The effective applied policy configuration associated with the selected policy resource, including the correlated and combined effects of the attached service policies, is displayed within the service policy visualization interface.

Visualization of runtime resource policy attachments and applied policy details

Embodiments of the present invention provide a method, system and computer program product for watch list oriented processing of events in a multi-object event data processing system. In an embodiment of the invention, a method for watch list oriented processing of events in a multi-object event data processing system, can include pre-processing a set of subscriptions against a pool of objects monitored for events in the data processing system to produce a watch list of objects. The method further can include receiving events in the data processing system corresponding to different ones of the objects in the pool of objects. The method yet further can include comparing the received events to the watch list to determine which events pertain to objects referenced in the watch list. Finally, for each one of the received events, a notification can be forwarded to one or more subscribers corresponding to an object in the watch list matching an object implicated by the one of the received events.

Subscription watch lists for event handling

The present invention provides a method, system and computer program product for watch list oriented processing of events in a multi-object event data processing system. In an embodiment of the invention, a method for watch list oriented processing of events in a multi-object event data processing system, can include pre-processing a set of subscriptions against a pool of objects monitored for events in the data processing system to produce a watch list of objects. The method further can include receiving events in the data processing system corresponding to different ones of the objects in the pool of objects. The method yet further can include comparing the received events to the watch list to determine which events pertain to objects referenced in the watch list.

Growing community of inventors

Wellington, FL, United States of America

Mario Ernesto De Armas