SYSTEM AND METHOD FOR PRIORITY-BASED RULE GENERATION WITH CONSISTENCY CHECK AND POLICY ENFORCEMENT

摘要

A network node receives rules from a plurality of different domain entities. Each domain entity has a different priority level, and each rule defines an action to be performed be a device in response to a predetermined event. The network node prioritizes the rules based on the priority levels of their respective domain entities, checks for conflicts between the prioritized rules, and generates a policy based on the prioritized rules.

主权项

1. A method for generating policies for a device, the method performed at a network node and comprising:
receiving first and second rules from respective first and second different domain entities, each rule defining one or more actions to be performed by the device responsive to detecting a predetermined event, and each domain entity having an associated predefined priority level relative to other domain entities; determining whether a conflict exists between the first and second rules based on the predefined priority levels of the first and second domain entities; and generating a policy for the device based on the first and second rules.