Invention Grant
- Patent Title: Optimized policy data structure for distributed authorization systems
-
Application No.: US17533937Application Date: 2021-11-23
-
Publication No.: US11669527B1Publication Date: 2023-06-06
- Inventor: Yuan Jiang
- Applicant: SAP SE
- Applicant Address: DE Walldorf
- Assignee: SAP SE
- Current Assignee: SAP SE
- Current Assignee Address: DE Walldorf
- Agency: Fountainhead Law Group P.C.
- Main IPC: G06F16/00
- IPC: G06F16/00 ; G06F16/2455 ; G06F16/25 ; G06F16/22

Abstract:
Methods and systems are disclosed for processing policies. A query policy tree with expressions and combination rules is received. A second policy tree stored in a policy repository is searched to select a sub-policy in a neutral format, reflecting a structure with a combination rule and a leaf with a condition expression. A depth of the structure is reduced through removal of redundant combination rules and combinable leaf expressions. The sub-policy tree is selected from the second stored policy tree by comparing the query policy tree. The selected sub-policy tree is copied to a third policy tree. Leaves of the third policy tree are evaluated against the leaves of the query policy. The nodes of the third policy are joined against the node of the query policy. The third policy is reduced to the neutral format by combining evaluated leaves and removing redundant combination rules. Finally, a response is provided.
Public/Granted literature
- US20230161772A1 OPTIMIZED POLICY DATA STRUCTURE FOR DISTRIBUTED AUTHORIZATION SYSTEMS Public/Granted day:2023-05-25
Information query