摘要:
The present invention relates to a method for granting a user (U1) secure access to one or more resources (D1, D2, D3) accessed by a process (P1), the process (P1) being defined in a SOA registry (100) and comprising one or more process-steps (S1, S2, S3), each process-step (S1, S2, S3) accessing one or more resources (D1, D2, D3) stored in a SOA repository (200), the method comprising the following steps: a. during an execution of the process (P1), for each resource (D1, D2, D3) accessed by at least one of the process-steps (S1, S2, S3), creating an entry (E1, E2) in the SOA registry (100) determining the accessed resource (D1, D2, D3); b. creating a process-instance-role (R1) in the SOA registry; c. for each resource (D1, D2, D3) accessed by at least one of the process-steps (S1, S2, S3), creating an access privilege (AP1) in the SOA repository (200) that grants access to the respective resource (D1, D2, D3) for the process-instance-role (R1); and d. assigning the process-instance-role (R1) to the user (U1).
摘要:
The present technology relates to a method for granting a user secure access to one or more resources accessed by a process. The process is defined in a Service-Oriented Architecture (SOA) registry and includes one or more process-steps, where each process-step accesses one or more resources stored in an SOA repository.
摘要:
Monitoring a software system based on a service oriented architecture (SOA). The method may involve system components communicating with each other via sending messages. The method may include receiving a monitoring message by a monitoring component where the monitoring message may be sent from a system component of the software system. The method may further include providing an ontology including at least one interpretation rule for the message by the monitoring component. The method may also include reacting of the monitoring component in accordance with the at least one interpretation rule.
摘要:
Monitoring a software system based on a service oriented architecture (SOA). The method may involve system components communicating with each other via sending messages. The method may include receiving a monitoring message by a monitoring component where the monitoring message may be sent from a system component of the software system. The method may further include providing an ontology including at least one interpretation rule for the message by the monitoring component. The method may also include reacting of the monitoring component in accordance with the at least one interpretation rule.
摘要:
Monitoring a software system based on a service oriented architecture (SOA). The method may involve system components communicating with each other via sending messages. The method may include receiving a monitoring message by a monitoring component where the monitoring message may be sent from a system component of the software system. The method may further include providing an ontology including at least one interpretation rule for the message by the monitoring component. The method may also include reacting of the monitoring component in accordance with the at least one interpretation rule.
摘要:
Certain example embodiments relate to a system for secure complex event processing (CEP). The system includes an input adaptor configured to receive at least one input event from at least one external source system. The at least one input event comprises at least one event-specific disclosure permission concerning data of the input event. A CEP engine is configured to process the at least one input event and to produce at least one corresponding complex output event. A security enforcer is configured to remove data from the at least one output event that is not in accordance with the at least one event-specific disclosure permission defined in the corresponding at least one input event. An output adaptor is configured to send the at least one output event to at least one external target system.
摘要:
Certain example embodiments relate to a system for secure complex event processing (CEP). The system includes an input adaptor configured to receive at least one input event from at least one external source system. The at least one input event comprises at least one event-specific disclosure permission concerning data of the input event. A CEP engine is configured to process the at least one input event and to produce at least one corresponding complex output event. A security enforcer is configured to remove data from the at least one output event that is not in accordance with the at least one event-specific disclosure permission defined in the corresponding at least one input event. An output adaptor is configured to send the at least one output event to at least one external target system.
摘要:
The invention concerns a SOA-registry (1) for the automatic deployment of at least one SOA-application onto at least one platform, the at least one SOA-application comprising one or more components, the SOA-registry (1) comprising: a. at least one SOA-application description (A1) being related to one or more abstract component descriptions (AC1, AC2, AC3) describing the components of the at least one SOA-application; b. at least one concrete component description (CC11, CC12, CC21, CC22, CC31) for each of the one or more abstract component descriptions (AC1, AC2, AC3), the at least one concrete component description (CC11, CC12, CC21, CC22, CC31) comprising one or more requirements of the respective component on a target platform; and c. at least one platform descriptor (P1, P2) comprising one or more properties of the at least one platform.
摘要:
A computing system includes a service-oriented architecture (SOA) registry that includes an SOA-application description, an abstract component description, a concrete component description, and a platform description. The SOA-application description is related to the abstract component description of a component of the SOA-application. The concrete component description includes a requirement of a respective component for a target platform. The platform descriptor describes a property of the target platform. The computing system is configured to deploy the SOA-application and its respective components to the target platform in accordance with the concrete descriptions.
摘要:
Monitoring a software system based on a service oriented architecture (SOA). The method may involve system components communicating with each other via sending messages. The method may include receiving a monitoring message by a monitoring component where the monitoring message may be sent from a system component of the software system. The method may further include providing an ontology including at least one interpretation rule for the message by the monitoring component. The method may also include reacting of the monitoring component in accordance with the at least one interpretation rule.