Resource and data administration technologies for IT non-experts

Claim 3

The system of claim 1 , further comprising a security component operable for authorizing and authenticating users of the system, wherein said security component is operable to categorize administrators of the system to work with different classes of resources and re-use different classes of event, condition, and action definitions from said system.

Claim 4

The system of claim 1 , wherein the policies comprise conflict-free policies stored in a relational format in the policy database.

Claim 5

The system of claim 1 , wherein the second device further comprises: a unit for resolving conflicts between a newly defined or modified policy and the existing policies; and a storage component operable for storing conflict-free policies in the policy database.

Claim 6

The system of claim 4 , wherein the unit further comprises a plurality of meta-policies, the meta-policies describing precedence among operations on each resource and precedence among policy makers.

Claim 7

The system of claim 1 , wherein the third device further comprises: a first sub-component operable for detecting occurrence of events; a second sub-component operable for evaluating conditions corresponding to detected events, the conditions being defined in policies corresponding to the detected event; and a third sub-component operable for executing actions corresponding to evaluated conditions, the actions being defined in policies corresponding to the detected events and the evaluated conditions.

Claim 8

The system of claim 1 , wherein the interface further comprises: a monitor operable for monitoring and accessing resources; a first sub-unit for handling the conditions; and a second sub-unit for handling the actions.

Claim 9

The system of claim 7 , wherein the monitor enables access of resources to events, conditions and actions.

Claim 10

The system of claim 1 , wherein the first device further comprises a set of GUIs.

Claim 11

The system of claim 1 , wherein visualization of policies is presented as a hierarchical tree structure.

Claim 14

The method of claim 11 , wherein the step of validating the defined policies further comprises notifying a policy creator about a policy conflicting with the existing policies.

Claim 15

The method of claim 11 , wherein the step of executing the policies comprises: detecting occurrence of events in the system; extracting the policies corresponding to detected events from the policy database; evaluating the conditions defined in the extracted policy; and executing the actions defined in the extracted policy based on the evaluated conditions.

Claim 16

The method of claim 11 , wherein the policies are defined in the intuitive manner using GUIs.

Claim 19

The system of claim 15 , wherein the policy database further comprises: a first storage unit operable for staring information about events; and a second storage unit operable for storing conditions and subsequent actions for each event.

Claim 20

A policy based system for managing resources using a plurality of policies, the policies being stored in a policy database, the policies being defined by events, conditions, and actions, wherein said events comprise temporal and composite events, the system having a plurality of client machines that enable a user to define, modify, and visualize policies in an intuitive manner, the system further comprising: a server connected to each of the plurality of client machines, the server comprising: a first unit operable for deploying created policies, the first unit comprising a converter operable for convening policies comprising conflict-free policies defined in an intuitive manner into a format that can be directly stored in a policy database; a second unit operable for executing deployed policies on an occurrence of an event, wherein execution of policies resulting in management of resources; and an interface operable for interfacing resources with the first unit and the second unit, the resources including a policy database that stores the deployed policies in a relational format, and wherein said interface is further operable for viewing, updating, deleting, inserting records, and detecting changes in said policy database, wherein said policies comprise only conflict-free policies, whereby a conflicting policy comprises defining conflicting actions on the occurrence of a same event and condition occurring, wherein meta-policies are used to disallow a simultaneous execution of multiple conflicting policies, wherein said policies comprise access control policies relating to specifying access control on data and accessing said resources, and wherein said access control policies are defined at each of an event, condition, and action level.

Claim 21

A policy based system for managing resources using a plurality of policies, the policies being stored in a policy database, the policies being defined by events, conditions, and actions, wherein said events comprise temporal and composite events, the system having a plurality of client machines that enable a user to define, modify, and visualize policies in an intuitive manner, the system further comprising: a server connected to each of the plurality of client machines, the server comprising: a first unit operable for deploying created policies, the first unit comprising a converter operable for convening policies comprising conflict-free policies defined in an intuitive manner into a format that can be directly stored in a policy database; a second unit operable for executing deployed policies on an occurrence of an event, wherein execution of policies resulting in management of resources; and an interface operable for interfacing resources with the first unit and the second unit, the resources including a policy database that stores the deployed policies in a relational format, and wherein said interface is further operable for viewing, updating, deleting, inserting records, and detecting changes in said policy database, wherein said policies comprise only conflict-free policies, whereby a conflicting policy comprises defining conflicting actions on the occurrence of a same event and condition occurring, wherein meta-policies are used to disallow a simultaneous execution of multiple conflicting policies, wherein said policies comprise access control policies relating to specifying access control on data and accessing said resources, and wherein said access control policies are defined at each of an event, condition, and action level.

Claim 22

A policy based system operable for managing a plurality of resources, the system including a server connected to a plurality of client machines, the server including a first device operable for deploying policies in a policy database, the policies being deployed on an occurrence of an event, the policies being defined by events, conditions, and actions, wherein said events comprise temporal and composite events, the first device including a converter operable for converting policies defined in an intuitive manner into policies comprising conflict-free policies defined in a relational meta-language format, wherein each of the client machines comprises: a first component operable for enabling a user to define, modify and visualize policies in the intuitive manner, wherein the first component comprises: a plurality of user interfaces for taking commands and data from the user, wherein one of said plurality of user interfaces is operable for viewing, updating, deleting, inserting records, and detecting changes in said policy database; and a unit operable for mapping a predefined set of system commands to the plurality of user interfaces, wherein one system command maps to at least one user interface; a second component operable for exchanging information with a server in order to define, modify, and visualize policies, wherein said policies comprise only conflict-free policies, whereby a conflicting policy comprises defining conflicting actions on the occurrence of a same event and condition occurring, wherein meta-policies are used to disallow a simultaneous execution of multiple conflicting policies, wherein said policies comprise access control policies relating to specifying access control on data and accessing said resources, and wherein said access control policies are defined at each of an event, condition, and action level.

Claim 23

A policy based system operable for managing a plurality of resources, the system including a server connected to a plurality of client machines, the server including a first device operable for deploying policies in a policy database, the policies being deployed on an occurrence of an event, the policies being defined by events, conditions, and actions, wherein said events comprise temporal and composite events, the first device including a converter operable for converting policies defined in an intuitive manner into policies comprising conflict-free policies defined in a relational meta-language format, wherein each of the client machines comprises: a first component operable for enabling a user to define, modify and visualize policies in the intuitive manner, wherein the first component comprises: a plurality of user interfaces for taking commands and data from the user, wherein one of said plurality of user interfaces is operable for viewing, updating, deleting, inserting records, and detecting changes in said policy database; and a unit operable for mapping a predefined set of system commands to the plurality of user interfaces, wherein one system command maps to at least one user interface; a second component operable for exchanging information with a server in order to define, modify, and visualize policies, wherein said policies comprise only conflict-free policies, whereby a conflicting policy comprises defining conflicting actions on the occurrence of a same event and condition occurring, wherein meta-policies are used to disallow a simultaneous execution of multiple conflicting policies, wherein said policies comprise access control policies relating to specifying access control on data and accessing said resources, and wherein said access control policies are defined at each of an event, condition, and action level.

Claim 26

The system of claim 19 , wherein said access control policies specify access control on data.

Claim 27

A computer program product for performing a method for managing resources using a plurality of policies, the policies being stored in a policy database, the policies being defined by events, conditions, and actions, wherein said events comprise temporal and composite events, the method comprising: enabling a user to define, modify, delete, and visualize the policies in an intuitive manner; deploying the policies defined by the user, further comprising: converting conflict-free policies defined in the intuitive manner into a meta-language format that can be directly stored in the policy database; executing deployed policies on an occurrence of an event; and interfacing the resources with the user, wherein said interfacing comprises interacting with the policies in said policy database, wherein said interacting comprises viewing, updating, deleting, inserting records, and detecting changes in said policy database, wherein said policies comprise only conflict-free policies, whereby a conflicting policy comprises defining conflicting actions on the occurrence of a same event and condition occurring, wherein meta-policies are used to disallow a simultaneous execution of multiple conflicting policies, wherein said policies comprise access control policies relating to specifying access control on data and accessing said resources, and wherein said access control policies are defined at each of an event, condition, and action level.

Claim 28

A computer program product for performing a method for managing resources using a plurality of policies, the policies being stored in a policy database, the policies being defined by events, conditions, and actions, wherein said events comprise temporal and composite events, the method comprising: enabling a user to define, modify, delete, and visualize the policies in an intuitive manner; deploying the policies defined by the user, further comprising: converting conflict-free policies defined in the intuitive manner into a meta-language format that can be directly stored in the policy database; executing deployed policies on an occurrence of an event; and interfacing the resources with the user, wherein said interfacing comprises interacting with the policies in said policy database, wherein said interacting comprises viewing, updating, deleting, inserting records, and detecting changes in said policy database, wherein said policies comprise only conflict-free policies, whereby a conflicting policy comprises defining conflicting actions on the occurrence of a same event and condition occurring, wherein meta-policies are used to disallow a simultaneous execution of multiple conflicting policies, wherein said policies comprise access control policies relating to specifying access control on data and accessing said resources, and wherein said access control policies are defined at each of an event, condition, and action level.

Claim 29

The computer program product of claim 21 , wherein said method further comprises: detecting an occurrence of events; evaluating conditions corresponding to detected events, the conditions being defined in policies corresponding to the detected events; and executing actions corresponding to evaluated conditions, the actions being defined in policies corresponding to the detected events and the evaluated conditions.