Filtering technique for processing security measures in web service messages
    1.
    发明授权
    Filtering technique for processing security measures in web service messages 失效
    用于处理Web服务消息中的安全措施的过滤技术

    公开(公告)号:US07934252B2

    公开(公告)日:2011-04-26

    申请号:US11771350

    申请日:2007-06-29

    IPC分类号: G06F9/00

    CPC分类号: H04L63/168 H04L67/02

    摘要: A message gateway apparatus is provided for use in a web service system to process a message containing a request for a destination web service application, in which the message includes a plurality of events within a structured document conforming to a web service protocol and each event of the plurality of events has a name and a content thereof. The message gateway apparatus comprises a message parsing module configured to sequentially identify the events of the plurality of events of the message, an input object creation module configured to sequentially extract the events of the plurality of events from the message parsing module, and a message filtering module configured to sequentially access the events of the plurality of events as the events are extracted from the message parsing module by the input object creation module to analyze the name of each event and perform security processing on the content of each event for which the corresponding name indicates that security measures have been applied according to a security protocol. The input object creation module is configured to construct an input object including input parameters for the destination web service application based on the message. The input object creation module constructing the input object by adding a representation of each event of the plurality of events to the input object after each event is accessed by the message filtering module.

    摘要翻译: 提供消息网关装置,用于在web服务系统中处理包含对目的地web服务应用的请求的消息,其中消息包括符合web服务协议的结构化文档内的多个事件,并且每个事件 多个事件具有名称和内容。 所述消息网关装置包括:消息解析模块,被配置为顺序地识别所述消息的所述多个事件的事件;被配置为从所述消息解析模块中顺序提取所述多个事件的事件的输入对象创建模块,以及消息过滤 模块,其被配置为当所述输入对象创建模块从所述消息解析模块中提取所述事件时,顺序地访问所述多个事件的事件,以分析每个事件的名称,并且对每个事件的内容进行安全处理, 表示根据安全协议应用了安全措施。 输入对象创建模块被配置为基于该消息来构建包括用于目的地web服务应用的输入参数的输入对象。 通过在消息过滤模块访问每个事件之后,通过将多个事件的每个事件的每个事件的表示加到输入对象来构成输入对象的输入对象创建模块。

    FILTERING TECHNIQUE FOR PROCESSING SECURITY MEASURES IN WEB SERVICE MESSAGES
    2.
    发明申请
    FILTERING TECHNIQUE FOR PROCESSING SECURITY MEASURES IN WEB SERVICE MESSAGES 失效
    用于处理WEB服务消息中的安全措施的过滤技术

    公开(公告)号:US20090007253A1

    公开(公告)日:2009-01-01

    申请号:US11771350

    申请日:2007-06-29

    IPC分类号: G06F17/00 G06F15/16

    CPC分类号: H04L63/168 H04L67/02

    摘要: A message gateway apparatus is provided for use in a web service system to process a message containing a request for a destination web service application, in which the message includes a plurality of events within a structured document conforming to a web service protocol and each event of the plurality of events has a name and a content thereof. The message gateway apparatus comprises a message parsing module configured to sequentially identify the events of the plurality of events of the message, an input object creation module configured to sequentially extract the events of the plurality of events from the message parsing module, and a message filtering module configured to sequentially access the events of the plurality of events as the events are extracted from the message parsing module by the input object creation module to analyze the name of each event and perform security processing on the content of each event for which the corresponding name indicates that security measures have been applied according to a security protocol. The input object creation module is configured to construct an input object including input parameters for the destination web service application based on the message. The input object creation module constructing the input object by adding a representation of each event of the plurality of events to the input object after each event is accessed by the message filtering module.

    摘要翻译: 提供消息网关装置用于在web服务系统中处理包含对目的地web服务应用的请求的消息,其中该消息包括符合web服务协议的结构化文档内的多个事件,并且每个事件 多个事件具有名称和内容。 所述消息网关装置包括:消息解析模块,被配置为顺序地识别所述消息的所述多个事件的事件;被配置为从所述消息解析模块中顺序提取所述多个事件的事件的输入对象创建模块,以及消息过滤 模块,其被配置为当所述输入对象创建模块从所述消息解析模块中提取所述事件时,顺序地访问所述多个事件的事件,以分析每个事件的名称,并且对每个事件的内容进行安全处理, 表示根据安全协议应用了安全措施。 输入对象创建模块被配置为基于该消息来构建包括用于目的地web服务应用的输入参数的输入对象。 通过在消息过滤模块访问每个事件之后,通过将多个事件的每个事件的每个事件的表示加到输入对象来构成输入对象的输入对象创建模块。

    Optimization of signing soap body element
    3.
    发明授权
    Optimization of signing soap body element 失效
    签名肥皂体元素的优化

    公开(公告)号:US08375211B2

    公开(公告)日:2013-02-12

    申请号:US12427095

    申请日:2009-04-21

    IPC分类号: H04L29/06

    摘要: An XML digital signature mechanism for providing message integrity. A sending party serializes a source XML document into a serialized byte array, calculates the source offset and length of the array of the signed part in the serialized byte array, and calculates a source hash value using the serialized array and the source offset and length. The serialized byte array is a non-canonicalized array. The array and source hash value used to sign a part or the whole of the serialized byte array is sent to a receiving party. The receiving party calculates the target offset and length of the signed part in the serialized byte array and calculates a target hash value of the signed part by using the array and the target offset and length. The receiving party compares the target hash value and the source hash value to verify the integrity of the target XML document.

    摘要翻译: 一种用于提供消息完整性的XML数字签名机制。 发送方将源XML文档串行化为串行字节数组,计算序列化字节数组中有符号部分的数组的源偏移量和长度,并使用序列化数组和源偏移量和长度计算源散列值。 序列化字节数组是非规范数组。 用于对部分或全部序列化字节数组进行签名的数组和源哈希值发送给接收方。 接收方计算序列化字节数组中有符号部分的目标偏移量和长度,并使用数组和目标偏移量和长度计算有符号部分的目标散列值。 接收方比较目标散列值和源哈希值,以验证目标XML文档的完整性。

    Optimization of Signing SOAP Body Element
    4.
    发明申请
    Optimization of Signing SOAP Body Element 失效
    签名SOAP体元素的优化

    公开(公告)号:US20100268952A1

    公开(公告)日:2010-10-21

    申请号:US12427095

    申请日:2009-04-21

    IPC分类号: H04L9/32 H04L9/28

    摘要: An XML digital signature mechanism for providing message integrity. A sending party serializes a source XML document into a serialized byte array, calculates the source offset and length of the array of the signed part in the serialized byte array, and calculates a source hash value using the serialized array and the source offset and length. The serialized byte array is a non-canonicalized array. The array and source hash value used to sign a part or the whole of the serialized byte array is sent to a receiving party. The receiving party calculates the target offset and length of the signed part in the serialized byte array and calculates a target hash value of the signed part by using the array and the target offset and length. The receiving party compares the target hash value and the source hash value to verify the integrity of the target XML document.

    摘要翻译: 一种用于提供消息完整性的XML数字签名机制。 发送方将源XML文档串行化为串行字节数组,计算序列化字节数组中有符号部分的数组的源偏移量和长度,并使用序列化数组和源偏移量和长度计算源散列值。 序列化字节数组是非规范数组。 用于对部分或全部序列化字节数组进行签名的数组和源哈希值发送给接收方。 接收方计算序列化字节数组中有符号部分的目标偏移量和长度,并使用数组和目标偏移量和长度计算有符号部分的目标散列值。 接收方比较目标散列值和源哈希值以验证目标XML文档的完整性。

    METHOD AND SYSTEM FOR ANALYZING PERFORMANCE OF AN INFORMATION PROCESSING SYSTEM
    5.
    发明申请
    METHOD AND SYSTEM FOR ANALYZING PERFORMANCE OF AN INFORMATION PROCESSING SYSTEM 失效
    分析信息处理系统性能的方法和系统

    公开(公告)号:US20070288201A1

    公开(公告)日:2007-12-13

    申请号:US11739730

    申请日:2007-04-25

    IPC分类号: G06F11/30

    摘要: A method for analyzing performance of an information processing system having information processing apparatuses providing services to each other. Communication packets sent or received between the apparatuses are acquired. The apparatuses receive calls from other apparatuses for providing services indicated in the packets. A service call count aji of the calls received by the apparatuses during period j of m periods for the service i of n services is computed. A busy time bj is computed by summing processing times by the apparatuses for performing the services pertaining to the calls received by the apparatuses during period j. An average processing time di is computed by the apparatuses for each service i, as is an error εj in di wherein εj=bj−Σiajidi, by minimizing an index indicative of εj. The average processing time di is stored in a storage device and/or displayed on a display device.

    摘要翻译: 一种用于分析具有彼此提供服务的信息处理设备的信息处理系统的性能的方法。 获取在设备之间发送或接收的通信分组。 这些设备接收来自其他设备的呼叫以提供在分组中指示的服务。 计算n个服务的服务i的m个周期的周期j期间由设备接收的呼叫的服务呼叫计数。 通过在时段j期间由用于执行由设备接收的呼叫的服务的设备对处理时间求和来计算忙碌时间b。。 平均处理时间d i i i由用于每个服务i的装置计算,如在d i i中的错误ε,其中ε。 平均处理时间d i i i被存储在存储装置中和/或显示在显示装置上。

    SYSTEM, METHOD, AND PROGRAM FOR GENERATING WEB PAGE
    6.
    发明申请
    SYSTEM, METHOD, AND PROGRAM FOR GENERATING WEB PAGE 有权
    用于生成网页的系统,方法和程序

    公开(公告)号:US20120079361A1

    公开(公告)日:2012-03-29

    申请号:US13237992

    申请日:2011-09-21

    IPC分类号: G06F17/00

    CPC分类号: G06F17/3089 G06F17/30887

    摘要: A method, article, and system for reconfiguring a web page. The method includes: extracting dependencies between pages, files, and components of the web page; measuring a network delay value, a transfer efficiency value, and a component size; estimating load time of a candidate file using information of the network delay value, the transfer efficiency value, the dependencies, and the component size; generating an integer programming problem to minimize an object function representing the load time of the web page by analyzing the web page; solving the integer programming problem; reconfiguring a library file from the solution; and reconfiguring the web page by replacing a link to the library file of each page with a link to the reorganized file.

    摘要翻译: 用于重新配置网页的方法,文章和系统。 该方法包括:提取网页,文件和组件之间的依赖关系; 测量网络延迟值,传输效率值和组件尺寸; 使用网络延迟值,传输效率值,依赖性和组件尺寸的信息来估计候选文件的加载时间; 生成整数规划问题,通过分析网页来最小化表示网页的加载时间的对象函数; 求解整数规划问题; 从解决方案重新配置库文件; 并通过将链接替换到每个页面的库文件的链接来重新配置网页,并链接到重新组织的文件。

    METHOD FOR DETECTING ABNORMAL INFORMATION PROCESSING APPARATUS
    7.
    发明申请
    METHOD FOR DETECTING ABNORMAL INFORMATION PROCESSING APPARATUS 审中-公开
    检测异常信息处理装置的方法

    公开(公告)号:US20080022159A1

    公开(公告)日:2008-01-24

    申请号:US11779474

    申请日:2007-07-18

    IPC分类号: G06F11/34

    摘要: To efficiently detect, in an information processing system including a plurality of information processing apparatuses, an information processing apparatus in which an abnormality has occurred. For each of the information processing apparatuses, a detection apparatus stores a previously estimated average processing time per service for a plurality of services provided by the information processing apparatuses. Then, for each of the information processing apparatuses, by using communication packets acquired in a predetermined period, the detection apparatus computes the number of calling times when the services have been called, and computes a busy time, which is a total amount of time when transactions are performed. Thereafter, the detection apparatus judges that an abnormality has occurred in each of the information processing apparatuses, if a point corresponding to coordinate values indicated by the computed number of calling times and busy time deviates, beyond a predetermined criterion from a hyperplane indicated by the previously estimated average processing time per service, in a multidimensional space formed by coordinate axes indicating the number of calling times per service and also by a coordinate axis indicating the busy time.

    摘要翻译: 为了在包括多个信息处理装置的信息处理系统中有效地检测出发生异常的信息处理装置。 对于每个信息处理装置,检测装置存储由信息处理装置提供的多个服务的先前估计的每个服务的平均处理时间。 然后,对于每个信息处理装置,通过使用在预定时间段中获取的通信分组,检测装置计算已经被调用服务的呼叫次数,并且计算忙时间,该占用时间是 执行交易。 此后,如果与由计算出的呼叫次数和忙时间指示的坐标值相对应的点超出了从先前所示的超平面指定的超平面的预定标准,则检测装置判断每个信息处理设备中已经发生异常 每个服务的估计平均处理时间,在由指示每个服务的呼叫次数的坐标轴形成的多维空间中,以及指示忙碌时间的坐标轴。

    Method and system for analyzing performance of an information processing system
    8.
    发明授权
    Method and system for analyzing performance of an information processing system 失效
    分析信息处理系统性能的方法和系统

    公开(公告)号:US07496476B2

    公开(公告)日:2009-02-24

    申请号:US11739730

    申请日:2007-04-25

    IPC分类号: G06F15/00 G06F15/16

    摘要: A method for analyzing performance of an information processing system having information processing apparatuses providing services to each other. Communication packets sent or received between the apparatuses are acquired. The apparatuses receive calls from other apparatuses for providing services indicated in the packets. A service call count aji of the calls received by the apparatuses during period j of m periods for the service i of n services is computed. A busy time bj is computed by summing processing times by the apparatuses for performing the services pertaining to the calls received by the apparatuses during period j. An average processing time di is computed by the apparatuses for each service i, as is an error εj in di wherein εj=bj−Σiajidi, by minimizing an index indicative of εj. The average processing time di is stored in a storage device and/or displayed on a display device.

    摘要翻译: 一种用于分析具有彼此提供服务的信息处理设备的信息处理系统的性能的方法。 获取在设备之间发送或接收的通信分组。 这些设备接收来自其他设备的呼叫以提供在分组中指示的服务。 计算n个服务的服务i在m个周期的周期j期间由设备接收的呼叫的服务呼叫计数aji。 通过在时段j期间由用于执行与由设备接收的呼叫有关的服务的设备的处理时间相加来计算繁忙时间bj。 平均处理时间di由每个服务i的装置计算,如di所示的其中epsilonj = bj-Sigmaiajidi的误差ε,通过使指示epsilonj的索引最小化。 平均处理时间di被存储在存储装置中和/或显示在显示装置上。

    System, method, and program for generating web page
    9.
    发明授权
    System, method, and program for generating web page 有权
    用于生成网页的系统,方法和程序

    公开(公告)号:US09069871B2

    公开(公告)日:2015-06-30

    申请号:US13237992

    申请日:2011-09-21

    IPC分类号: G06F17/22 G06F17/30

    CPC分类号: G06F17/3089 G06F17/30887

    摘要: A method, article, and system for reconfiguring a web page. The method includes extracting dependencies between pages, files, and components of the web page, measuring a network delay value, a transfer efficiency value, and a component size, estimating load time of a candidate file using information of the network delay value, the transfer efficiency value, the dependencies, and the component size. An integer programming problem is generated to minimize an object function representing the load time of the web page by analyzing the web page, solving the integer programming problem, reconfiguring a library file from the solution and reconfiguring the web page by replacing a link to the library file of each page with a link to the reorganized file.

    摘要翻译: 用于重新配置网页的方法,文章和系统。 该方法包括提取网页的页面,文件和组件之间的相关性,测量网络延迟值,传输效率值和组件大小,使用网络延迟值的信息估计候选文件的加载时间,传输 效率值,依赖性和组件大小。 生成整数规划问题,通过分析网页来最小化表示网页加载时间的对象函数,解决整数规划问题,从解决方案重新配置库文件,并通过替换到库的链接重新配置网页 每个页面的文件与重新组织的文件的链接。