Abstract

Enforcing jurisdictional policies in global cloud environments can be challenging due to potentially unreliable internet protocol-based geolocation, ad-hoc policy formats that may lead to conflicts, and a potential absence of verifiable audit trails. This disclosure presents a system for verifiable jurisdictional policy enforcement. The system can determine a user's jurisdiction by fusing multiple weighted signals, such as global positioning system and cellular data, to derive a location with an associated confidence level. Regulatory documents may be ingested and transformed into formal rules using natural language processing. A policy engine can then use formal methods, for example, boolean satisfiability, to detect and resolve conflicts between jurisdictional rules. Enforcement decisions can be recorded in a cryptographic, tamper-evident log to provide a verifiable record of compliance actions and potentially improve the accuracy and auditable nature of policy enforcement in distributed infrastructures.

Creative Commons License

Creative Commons License
This work is licensed under a Creative Commons Attribution 4.0 License.

Share

COinS