摘要 |
The invention relates to a method of and apparatus for managing a decision making engine in a policy driven system. In particular the invention provides a method of ensuring one or more of state segregation, resource segregation, and process isolation for a logical instance in a policy based computer system, the method comprising creating a contextualised policy decision point for a logical instance within the policy based computer system, creating a context identifier for the unique logical instance, which context identifier sufficiently characterises the logical instance to ensure at least one of state segregation, resource segregation, and process isolation. The apparatus for a policy based computer system may include a set of computer resources including memory and processors, and one or more associated Policy Decision Points wherein; each logical instance of the system is associated with a contextualised Policy Decision Point which is associated with a context identifier, the context identifier also being associated with a set of policies and computer resources that are unique to the logical instance and are preferably used exclusively for performing the tasks of policy decision making for this logical instance and are isolated from each other, and wherein the context identifier may be further associate with a set of business transactions or a set of users or a set of network resources or any combination of these on which the policies of that logical instance may apply.
|