Method, hardware product, and computer program product for optimizing security in the context of credential transformation services
    1.
    发明授权
    Method, hardware product, and computer program product for optimizing security in the context of credential transformation services 有权
    方法,硬件产品和计算机程序产品,用于在证书转换服务的上下文中优化安全性

    公开(公告)号:US08291479B2

    公开(公告)日:2012-10-16

    申请号:US12269343

    申请日:2008-11-12

    IPC分类号: G06F15/16

    摘要: Security is optimized in the context of a credential transformation service (CTS) by utilizing a web services client runtime to gather information for determining whether or not a target web service is hosted in a security domain used by a client application and for determining whether or not the target web service uses an authentication mechanism substantially identical to that used by the client application. The gathered information is carried in an endpoint reference (EPR) of the target web service. In response to the client receiving the EPR, the client applies an optimization process to eliminate a possible unnecessary invocation of the CTS, wherein the target web service is an authoritative manageable resource having minimal or no responsibility for providing its identity, and having minimal or no responsibility for advertising any creation and destruction lifecycle related events.

    摘要翻译: 安全性在证书转换服务(CTS)的上下文中通过利用Web服务客户机运行时间来收集用于确定目标Web服务是否托管在客户端应用程序使用的安全域中的信息并用于确定是否进行 目标Web服务使用与客户端应用程序基本相同的认证机制。 所收集的信息在目标web服务的端点参考(EPR)中携带。 响应于客户端接收EPR,客户端应用优化过程以消除CTS的可能的不必要的调用,其中目标Web服务是权威可管理的资源,对于提供其身份具有最小或无责任,并且具有最小或无 任何创建和销毁生命周期相关事件的责任。

    METHOD, HARDWARE PRODUCT, AND COMPUTER PROGRAM PRODUCT FOR OPTIMIZING SECURITY IN THE CONTEXT OF CREDENTIAL TRANSFORMATION SERVICES
    2.
    发明申请
    METHOD, HARDWARE PRODUCT, AND COMPUTER PROGRAM PRODUCT FOR OPTIMIZING SECURITY IN THE CONTEXT OF CREDENTIAL TRANSFORMATION SERVICES 有权
    方法,硬件产品和计算机程序产品,用于在证书转换服务的背景下优化安全性

    公开(公告)号:US20100122328A1

    公开(公告)日:2010-05-13

    申请号:US12269343

    申请日:2008-11-12

    IPC分类号: H04L9/32 G06F21/00

    摘要: Security is optimized in the context of a credential transformation service (CTS) by utilizing a web services client runtime to gather information for determining whether or not a target web service is hosted in a security domain used by a client application and for determining whether or not the target web service uses an authentication mechanism substantially identical to that used by the client application. The gathered information is carried in an endpoint reference (EPR) of the target web service. In response to the client receiving the EPR, the client applies an optimization process to eliminate a possible unnecessary invocation of the CTS, wherein the target web service is an authoritative manageable resource having minimal or no responsibility for providing its identity, and having minimal or no responsibility for advertising any creation and destruction lifecycle related events.

    摘要翻译: 安全性在证书转换服务(CTS)的上下文中通过利用Web服务客户机运行时间来收集用于确定目标Web服务是否托管在客户端应用程序使用的安全域中的信息并用于确定是否进行 目标Web服务使用与客户端应用程序基本相同的认证机制。 所收集的信息在目标web服务的端点参考(EPR)中携带。 响应于客户端接收EPR,客户端应用优化过程以消除CTS的可能的不必要的调用,其中目标Web服务是权威可管理的资源,对于提供其身份具有最小或无责任,并且具有最小或无 任何创建和销毁生命周期相关事件的责任。

    Providing compartmentalized security in product reviews
    6.
    发明授权
    Providing compartmentalized security in product reviews 失效
    在产品评论中提供隔断安全

    公开(公告)号:US08521503B2

    公开(公告)日:2013-08-27

    申请号:US12817455

    申请日:2010-06-17

    IPC分类号: G06F9/445

    CPC分类号: G06F21/6218

    摘要: A mechanism is provided for providing compartmentalized security in product reviews. A central authoritative state module within a compartmentalized security mechanism identifies a clearance level associated with a user that has been authenticated. Responsive to the clearance level of the user being sufficient to access the information, the central authoritative state module determines whether the information requires a simulation to be executed. Responsive to the information failing to require execution of a simulation, a coordination module in the compartmentalized security mechanism retrieves the information. A display and input interaction module on a client system then displays the information in accordance with the clearance level of the user thereby forming displayed information. Displaying the information in accordance with the clearance level of the user comprises displaying in detail only portions of the information of the product that the user has access to.

    摘要翻译: 提供了一种机制,用于在产品评论中提供划分的安全性。 分区式安全机制中的中央权威状态模块识别与已通过身份验证的用户相关联的清除级别。 响应于用户足够访问信息的清除级别,中央权威状态模块确定信息是否需要执行仿真。 响应于无法执行仿真的信息,分区安全机制中的协调模块检索信息。 客户系统上的显示和输入交互模块随后根据用户的间隙级别显示信息,从而形成显示的信息。 根据用户的清除级别显示信息包括仅详细显示用户有权访问的产品的信息的部分。

    Providing Compartmentalized Security in Product Reviews
    7.
    发明申请
    Providing Compartmentalized Security in Product Reviews 失效
    在产品评论中提供隔离安全

    公开(公告)号:US20110313751A1

    公开(公告)日:2011-12-22

    申请号:US12817455

    申请日:2010-06-17

    CPC分类号: G06F21/6218

    摘要: A mechanism is provided for providing compartmentalized security in product reviews. A central authoritative state module within a compartmentalized security mechanism identifies a clearance level associated with a user that has been authenticated. Responsive to the clearance level of the user being sufficient to access the information, the central authoritative state module determines whether the information requires a simulation to be executed. Responsive to the information failing to require execution of a simulation, a coordination module in the compartmentalized security mechanism retrieves the information. A display and input interaction module on a client system then displays the information in accordance with the clearance level of the user thereby forming displayed information. Displaying the information in accordance with the clearance level of the user comprises displaying in detail only portions of the information of the product that the user has access to.

    摘要翻译: 提供了一种机制,用于在产品评论中提供划分的安全性。 分区式安全机制中的中央权威状态模块识别与已通过身份验证的用户相关联的清除级别。 响应于用户足够访问信息的清除级别,中央权威状态模块确定信息是否需要执行仿真。 响应于无法执行仿真的信息,分区安全机制中的协调模块检索信息。 客户系统上的显示和输入交互模块随后根据用户的间隙级别显示信息,从而形成显示的信息。 根据用户的清除级别显示信息包括仅详细显示用户有权访问的产品的信息的部分。

    System and method for performing systems management on IT-resources using web services
    8.
    发明授权
    System and method for performing systems management on IT-resources using web services 失效
    使用Web服务对IT资源执行系统管理的系统和方法

    公开(公告)号:US08082548B2

    公开(公告)日:2011-12-20

    申请号:US11836925

    申请日:2007-08-10

    IPC分类号: G06F9/46 G06F15/173 G06F9/44

    摘要: The present invention relates to the field of systems management on IT-resources using web services. An improved method proposes a single web service implementation which dynamically and automatically generates multiple WSDLs for respective multiple resource type classes. This implementation is model-agnostic, as it doesn't require any knowledge about the underlying model, be that a resource model, or any other model in question, and uses introspection of the applied model at the time of invocation for the dynamic WSDL generation. The state of the resource is maintained within the instrumentation of the resource. No additional persistence on top needs to be implemented. A single implementation of a low number of generic web services, basically only two, reduces implementation and maintenance efforts significantly.

    摘要翻译: 本发明涉及使用web服务的IT资源的系统管理领域。 一种改进的方法提出了单个Web服务实现,其为相应的多个资源类型类动态地和自动地生成多个WSDL。 这种实现与模型无关,因为它不需要任何关于底层模型的知识,即资源模型或任何其他模型,并且在调用动态WSDL生成时使用应用模型的内省 。 资源的状态保存在资源的工具中。 不需要执行额外的持续性。 单个实施的通用Web服务数量很少,基本上只有两个,显着降低了实施和维护工作。

    System and Method for Load-Balancing in a Resource Infrastructure Running Application Programs
    9.
    发明申请
    System and Method for Load-Balancing in a Resource Infrastructure Running Application Programs 有权
    在资源基础设施中运行应用程序的负载平衡的系统和方法

    公开(公告)号:US20080201720A1

    公开(公告)日:2008-08-21

    申请号:US12028252

    申请日:2008-02-08

    IPC分类号: G06F9/46

    CPC分类号: G06F9/5088

    摘要: The idea of the present invention is to provide a challenge-response mechanism to acquire work scope split range information from the application's Work Scope Split component of the over-utilized resource. By using the work scope split range information, the provisioning system is able to add a new resource, install a new application for that new resource, configure the new and the over-utilized resource's application, and reconfigure the load-balancer in accordance with the work scope split range information. The present invention adds scalability to complex and stateful application programs and allows dynamic provisioning of resources for these application programs.

    摘要翻译: 本发明的思想是提供一种挑战响应机制,以从应用程序的过度利用资源的工作范围分割组件获取工作范围分割范围信息。 通过使用工作范围分割范围信息,配置系统能够添加新资源,为新资源安装新应用程序,配置新的和过度利用的资源应用程序,并根据 工作范围分割范围信息。 本发明增加了复杂和有状态的应用程序的可扩展性,并且允许动态地为这些应用程序提供资源。