International Business Machines Corporation

Miguel Pedroza

Craig Robert William Forster

Rahul Mishra

Ori Pomerantz

Kerry R Gunn

Vernon Murdoch

Umesh Prithviraj Adtani

Thuanan Ho

Yogesh Suresh Shukla

A method, system and computer-usable medium are disclosed for automating the identification of web form parameters for an authorization engine. A web page containing a set of parameters is received and then processed to identify structured portions it may contain. A target structured portion is then selected and processed to identify a corresponding set of web form parameters. Once identified, the set of web form parameters are then processed to generate a policy with a corresponding set of policy rule parameters. Matching operations are then performed to respectively match individual parameters of the set of web form parameters to individual parameters of the set of policy rule parameters. The policy is then associated with its associated web page URL and the process is repeated, proceeding with selecting another target structured portion to process.

Identification of web form parameters for an authorization engine

A machine-implemented method for evaluating a context-based (e.g., XACML) policy having a set of attributes formulates a search against one or more existing external repositories using a query that is dynamically-generated based on the security policy being evaluated. The approach shifts the building of a candidate set of potentially-allowable resources to the authorization engine (e.g., a Policy Decision Point (PDP)). In operation, an application calls the PDP using an entitlement request and, in response, the PDP builds the candidate set of values based on the defined security policy by generating a query to an external data repository and receiving the results of that query. This approach enables a policy-driven entitlement query at runtime.

Dynamic policy-based entitlements from external data repositories

Computer implemented method, system and computer usable program code for facilitating utilization of data. A computer implemented method for facilitating utilization of data includes receiving data, wherein the received data is in a first representation. The received data is converted from the first representation to a common representation that is mapped to the first representation using an external configuration file. The common representation of the data is output to facilitate utilization of the data.

Facilitating the utilization of complex data objects

Growing community of inventors

Austin, TX, United States of America

Miguel Pedroza