-
公开(公告)号:US08514749B2
公开(公告)日:2013-08-20
申请号:US12721356
申请日:2010-03-10
CPC分类号: H04L67/1002 , H04L67/1014
摘要: The present invention extends to methods, systems, and computer program products for routing requests for duplex applications. Embodiments of the invention provide a multi-machine scalability mechanism for duplex messages patterns based on a polling mechanism. Client requests and polls can be distributed to service instances running within a cluster of machines by a session-unaware load balancer. Messages to and from a given client can be accessed by any service instance in the cluster service instance, which allows capacity scale-out and seamless failover between service instances. A coordinated inbound message store is used to affinitize application requests to a particular service instance. A coordinated outbound message store is used to route application responses from the machine running the application to the machine where a polling request arrived. Further, the lifetime of the service instance is decoupled from the inbound or outbound message stores, allowing the client-server conversation to potentially span many instances of the service.
摘要翻译: 本发明扩展到用于路由双工应用请求的方法,系统和计算机程序产品。 本发明的实施例提供了一种基于轮询机制的双机消息模式的多机可扩展性机制。 客户端请求和轮询可以由会话不知道的负载均衡器分发到在机群集中运行的服务实例。 来自或来自给定客户端的消息可以由集群服务实例中的任何服务实例访问,这允许服务实例之间的容量展开和无缝故障转移。 协调的入站消息存储用于将应用程序请求联系到特定的服务实例。 协调的出站邮件存储区用于将运行应用程序的机器的应用程序响应路由到轮询请求到达的机器。 此外,服务实例的生命周期与入站或出站消息存储区分离,从而允许客户端 - 服务器对话潜在地跨越服务的许多实例。
-
公开(公告)号:US07873831B2
公开(公告)日:2011-01-18
申请号:US10788108
申请日:2004-02-26
IPC分类号: H04L9/32
CPC分类号: H04L9/3236 , H04L9/3247 , H04L2209/68
摘要: A signature system with a mechanism to identify element(s) of a signed document includes a sender having a signature module with a digest generator. The digest generator generates digests for identifying selected elements of the document. The resulting “identifying” digests are then used in generating a signature in which the sender signs the digests rather than the original elements. The receiver can then process the signature and use these digests to distinguish between elements, as needed.
摘要翻译: 具有识别签名文档的元素的机制的签名系统包括具有带摘要生成器的签名模块的发送者。 摘要生成器生成用于识别文档的所选元素的摘要。 然后,所得到的“识别”摘要用于生成签名,其中发送者签署摘要而不是原始元素。 然后,接收者可以处理签名,并根据需要使用这些摘要来区分元素。
-
公开(公告)号:US07716728B2
公开(公告)日:2010-05-11
申请号:US10779922
申请日:2004-02-16
CPC分类号: G06F21/60 , G06F21/51 , G06F21/606
摘要: A security system with a mechanism to identify types of information that need to be secured and another mechanism to specify how the types are to be secured. The system includes a sender having an application and a receiver having a security module and one or more datastores to store information related to types of information that need to be secured (e.g. “scopes”), how information is to be secured (e.g., “profiles”), and a mapping (e.g., “bindings”) between the scopes and profiles. Scopes can be implemented by application developers. Profiles can be implemented by application deployers and/or administrators. The security module determines which scope is appropriate for the message, and then determines the profile that is mapped to the scope. The security module can then make an access control decision using the profile.
摘要翻译: 一种具有识别需要保护的信息类型的机制的安全系统和另一种机制来指定类型是如何被保护的。 该系统包括具有应用的发送者和具有安全模块和一个或多个数据存储的接收者,用于存储与需要被保护的信息类型(例如“范围”)有关的信息,如何保护信息(例如“ 配置文件“)以及范围和配置文件之间的映射(例如”绑定“)。 范围可以由应用程序开发人员实现。 配置文件可以由应用程序部署人员和/或管理员实现。 安全模块确定哪个范围适合消息,然后确定映射到范围的配置文件。 安全模块然后可以使用配置文件进行访问控制决定。
-
公开(公告)号:US20110222442A1
公开(公告)日:2011-09-15
申请号:US12721356
申请日:2010-03-10
IPC分类号: H04L5/14
CPC分类号: H04L67/1002 , H04L67/1014
摘要: The present invention extends to methods, systems, and computer program products for routing requests for duplex applications. Embodiments of the invention provide a multi-machine scalability mechanism for duplex messages patterns based on a polling mechanism. Client requests and polls can be distributed to service instances running within a cluster of machines by a session-unaware load balancer. Messages to and from a given client can be accessed by any service instance in the cluster service instance, which allows capacity scale-out and seamless failover between service instances. A coordinated inbound message store is used to affinitize application requests to a particular service instance. A coordinated outbound message store is used to route application responses from the machine running the application to the machine where a polling request arrived. Further, the lifetime of the service instance is decoupled from the inbound or outbound message stores, allowing the client-server conversation to potentially span many instances of the service.
摘要翻译: 本发明扩展到用于路由双工应用请求的方法,系统和计算机程序产品。 本发明的实施例提供了一种基于轮询机制的双机消息模式的多机可扩展性机制。 客户端请求和轮询可以由会话不知道的负载均衡器分发到在机群集中运行的服务实例。 来自或来自给定客户端的消息可以由集群服务实例中的任何服务实例访问,这允许服务实例之间的容量展开和无缝故障转移。 协调的入站消息存储用于将应用程序请求联系到特定的服务实例。 协调的出站邮件存储区用于将运行应用程序的机器的应用程序响应路由到轮询请求到达的机器。 此外,服务实例的生命周期与入站或出站消息存储区分离,从而允许客户端 - 服务器对话潜在地跨越服务的许多实例。
-
公开(公告)号:US20110078212A1
公开(公告)日:2011-03-31
申请号:US12961115
申请日:2010-12-06
IPC分类号: G06F17/30
CPC分类号: H04L9/3236 , H04L9/3247 , H04L2209/68
摘要: A signature system with a mechanism to identify element(s) of a signed document includes a sender having a signature module with a digest generator. The digest generator generates digests for identifying selected elements of the document. The resulting “identifying” digests are then used in generating a signature in which the sender signs the digests rather than the original elements. The receiver can then process the signature and use these digests to distinguish between elements, as needed.
摘要翻译: 具有识别签名文档的元素的机制的签名系统包括具有带摘要生成器的签名模块的发送者。 摘要生成器生成用于识别文档的所选元素的摘要。 然后,所得到的“识别”摘要用于生成签名,其中发送者签署摘要而不是原始元素。 然后,接收者可以处理签名,并根据需要使用这些摘要来区分元素。
-
公开(公告)号:US07636939B2
公开(公告)日:2009-12-22
申请号:US11009926
申请日:2004-12-10
申请人: Christopher G. Kaler , Douglas A. Walter , Giovanni M. Della-Libera , Melissa W. Dunn , Richard L. Hasha , Tomasz Janczuk
发明人: Christopher G. Kaler , Douglas A. Walter , Giovanni M. Della-Libera , Melissa W. Dunn , Richard L. Hasha , Tomasz Janczuk
CPC分类号: H04L63/0428 , H04L63/16
摘要: A data structure with endpoint address and security information. The data structure includes an address field that includes one or more endpoint addresses for an entity. The data structure further includes a security field that includes one or more keys for facilitating secure communications with the entity. The data structure may also be such that the contents of the address field and the security field are serialized in the data structure. The data structure may be extensible such that new address fields and security fields may be added.
摘要翻译: 具有端点地址和安全信息的数据结构。 该数据结构包括一个包含一个或多个实体端点地址的地址字段。 数据结构进一步包括安全领域,其包括用于促进与实体的安全通信的一个或多个密钥。 数据结构还可以使得地址字段和安全字段的内容在数据结构中被序列化。 数据结构可以是可扩展的,使得可以添加新的地址字段和安全字段。
-
-
-
-
-