Policy enforcement using natural language processing

摘要

A term of use policy document defines permissible actions that may be implemented by a user using a computing device. A natural language processing (NLP)-based question and answer (Q&A) system is trained to understand the policy document. The device includes a management application that interacts with the Q&A system to identify a policy violation. When the user performs an action on the device, the application converts that action into an NLP query directed to the Q&A system to determine whether the action constitutes a violation. The query may be accompanied by metadata associated with the user, the device or its state. Upon receipt of the query and any associated metadata, the Q&A system determines if the user action is compliant with the policy and returns a response. Based on the response, the user's computing device may take an enforcement action, e.g., restricting or disabling functionality, or issuing a warning.

主权项

1. A method to identify a violation of a policy, comprising:
detecting an action associated with a computing entity; converting the action into a natural text query using a computer program executing on a hardware element; providing the natural text query for analysis to determine whether the action constitutes a policy violation, the determination being made by a natural language comparison of the natural text query against one or more terms of use that define the policy; receiving a response to the natural text query; and based on the response, taking a given action at the computing entity.