System and method for using a declarative approach to enforce instance based security in a distributed environment
    1.
    发明授权
    System and method for using a declarative approach to enforce instance based security in a distributed environment 有权
    使用声明式方法在分布式环境中强制基于实例的安全性的系统和方法

    公开(公告)号:US08938786B2

    公开(公告)日:2015-01-20

    申请号:US11622698

    申请日:2007-01-12

    IPC分类号: G06F21/00 G06F21/62

    CPC分类号: G06F21/6227 G06F2221/2141

    摘要: A system and method for using a declarative approach to enforce instance based security in a distributed environment is presented. The invention described herein includes security logic in declarative specifications that, in turn, decouples the security logic from distributed object administration logic. An access manager identifies access requirements by combining object name property keys included in a distributed object with property key specifications included in a declarative specification. In turn, the access manager compares a caller's access attributes with the access requirements to determine whether to create a distributed object instance and allow the caller to invoke a method on the distributed object instance. The access requirements may also include role specifications and method parameter specifications.

    摘要翻译: 提出了一种使用声明式方法在分布式环境中实施基于实例的安全性的系统和方法。 本文描述的本发明包括声明性规范中的安全逻辑,其又将安全逻辑与分布式对象管理逻辑分离。 访问管理器通过将分布式对象中包含的对象名称属性键与包含在声明性规范中的属性键规范组合来标识访问要求。 反过来,访问管理器将调用者的访问属性与访问要求进行比较,以确定是否创建分布式对象实例并允许调用者调用分布式对象实例上的方法。 访问要求还可以包括角色规范和方法参数规范。

    SYSTEM AND METHOD FOR USING A DECLARATIVE APPROACH TO ENFORCE INSTANCE BASED SECURITY IN A DISTRIBUTED ENVIRONMENT
    2.
    发明申请
    SYSTEM AND METHOD FOR USING A DECLARATIVE APPROACH TO ENFORCE INSTANCE BASED SECURITY IN A DISTRIBUTED ENVIRONMENT 有权
    使用声明方法在分布式环境中实施基于实例的安全性的系统和方法

    公开(公告)号:US20080172727A1

    公开(公告)日:2008-07-17

    申请号:US11622698

    申请日:2007-01-12

    IPC分类号: G06F21/00

    CPC分类号: G06F21/6227 G06F2221/2141

    摘要: A system and method for using a declarative approach to enforce instance based security in a distributed environment is presented. The invention described herein includes security logic in declarative specifications that, in turn, decouples the security logic from distributed object administration logic. An access manager identifies access requirements by combining object name property keys included in a distributed object with property key specifications included in a declarative specification. In turn, the access manager compares a caller's access attributes with the access requirements to determine whether to create a distributed object instance and allow the caller to invoke a method on the distributed object instance. The access requirements may also include role specifications and method parameter specifications.

    摘要翻译: 提出了一种使用声明式方法在分布式环境中实施基于实例的安全性的系统和方法。 本文描述的本发明包括声明性规范中的安全逻辑,其又将安全逻辑与分布式对象管理逻辑分离。 访问管理器通过将分布式对象中包含的对象名称属性键与包含在声明性规范中的属性键规范组合来标识访问要求。 反过来,访问管理器将调用者的访问属性与访问要求进行比较,以确定是否创建分布式对象实例并允许调用者调用分布式对象实例上的方法。 访问要求还可以包括角色规范和方法参数规范。

    Enabling high availability and load balancing for JMX Mbeans
    3.
    发明授权
    Enabling high availability and load balancing for JMX Mbeans 失效
    为JMX Mbeans启用高可用性和负载平衡

    公开(公告)号:US07295952B1

    公开(公告)日:2007-11-13

    申请号:US11420019

    申请日:2006-05-24

    IPC分类号: G06F19/00

    CPC分类号: G06F9/505 G06F9/5033

    摘要: Provided is a method for programming module load balancing and failover in a distributed computing environment. The Java Management extensions (JMX) specification is enhanced to support load balancing and provide a high-availability of JMX management beans (Mbeans). Also provided are enhancements to the programming model and infrastructure to support the enhanced programming model. Two exemplary approaches for load balancing and failover are provided, one based both upon clustered Mbeans and one based upon unclustered Mbeans. In the unclustered approach, client affinity is supported in that a request from a particular client can be routed to a particular Mbean. In the clustered approach, a specific Mbean can be invoked by providing a special parameter in the Mbean invocation or by adding a special property to the specific Mbean's ObjectName to indicate that during runtime automatic routing should not be employed.

    摘要翻译: 提供了一种在分布式计算环境中对模块负载平衡和故障转移进行编程的方法。 增强了Java管理扩展(JMX)规范,以支持负载平衡并提供JMX管理bean(Mbeans)的高可用性。 还提供了编程模型和基础设施的增强功能,以支持增强的编程模型。 提供了两种用于负载平衡和故障切换的示例性方法,一种基于聚簇的Mbeans,另一种基于未聚簇的Mbeans。 在非集群方法中,支持客户端关联,因为来自特定客户端的请求可以路由到特定的Mbean。 在集群方法中,可以通过在Mbean调用中提供一个特殊参数或通过向特定的Mbean的ObjectName添加一个特殊属性来指示在运行时自动路由不应该使用的特定Mbean。

    Enabling high availability and load balancing for management modules in a computing environment
    4.
    发明授权
    Enabling high availability and load balancing for management modules in a computing environment 有权
    为计算环境中的管理模块启用高可用性和负载平衡

    公开(公告)号:US07603256B2

    公开(公告)日:2009-10-13

    申请号:US11874475

    申请日:2007-10-18

    IPC分类号: G06F19/00

    CPC分类号: G06F9/505 G06F9/5033

    摘要: Provided is a method for programming module load balancing and failover in a distributed computing environment. The Java Management extensions (JMX) specification is enhanced to support load balancing and provide a high-availability of JMX management beans (Mbeans). Also provided are enhancements to the programming model and infrastructure to support the enhanced programming model. Two exemplary approaches for load balancing and failover are provided, one based both upon clustered Mbeans and one based upon unclustered Mbeans. In the unclustered approach, client affinity is supported in that a request from a particular client can be routed to a particular Mbean. In the clustered approach, a specific Mbean can be invoked by providing a special parameter in the Mbean invocation or by adding a special property to the specific Mbean's ObjectName to indicate that during runtime automatic routing should not be employed.

    摘要翻译: 提供了一种在分布式计算环境中对模块负载平衡和故障转移进行编程的方法。 增强了Java管理扩展(JMX)规范,以支持负载平衡并提供JMX管理bean(Mbeans)的高可用性。 还提供了编程模型和基础设施的增强功能,以支持增强的编程模型。 提供了两种用于负载平衡和故障切换的示例性方法,一种基于聚簇的Mbeans,另一种基于未聚簇的Mbeans。 在非集群方法中,支持客户端关联,因为来自特定客户端的请求可以路由到特定的Mbean。 在集群方法中,可以通过在Mbean调用中提供一个特殊参数或通过向特定的Mbean的ObjectName添加一个特殊属性来指示在运行时自动路由不应该使用的特定Mbean。

    Metadata driven method and apparatus to configure heterogenous distributed systems
    5.
    发明申请
    Metadata driven method and apparatus to configure heterogenous distributed systems 审中-公开
    配置异构分布式系统的元数据驱动方法和装置

    公开(公告)号:US20060123016A1

    公开(公告)日:2006-06-08

    申请号:US11002696

    申请日:2004-12-02

    IPC分类号: G06F7/00

    摘要: A meta-data driven method and apparatus to manage configurations of coexisting heterogeneous subsystems. The present invention recognizes that schemas evolve incrementally from version to version. In a preferred embodiment, the present invention employs two stages: an identification specification stage, to identify and/or specify any changes in a heterogeneous distributed system, and a configuration validation stage, to implement and/or validate the changes thus identified or specified. In the first stage, the identification specification stage, the present invention programmably compares the next version of the schema from its previous version. This allows meta-data to be created that describes how a schema component evolves from version to version. In addition, a user may specify what appears in the schema. In the second stage, the configuration validation stage, the meta-data created in the first stage can be used to determine whether a particular component version of the subsystem is valid for a particular schema component, and vice versa, and/or to configure the subsystem to conform to the schema.

    摘要翻译: 一种用于管理并存异构子系统配置的元数据驱动方法和装置。 本发明认识到,模式从版本到版本逐渐发展。 在优选实施例中,本发明采用两个阶段:标识规范阶段,用于识别和/或指定异构分布式系统中的任何变化以及配置验证阶段,以实现和/或验证由此识别或指定的变化。 在第一阶段中,识别规范阶段,本发明可编程地比较其先前版本的下一版本的模式。 这允许创建描述模式组件从版本到版本的元数据。 此外,用户可以指定模式中显示的内容。 在第二阶段,配置验证阶段,在第一阶段创建的元数据可用于确定子系统的特定组件版本是否对特定模式组件有效,反之亦然,和/或配置 子系统符合模式。