Method and system for establishing trust in downloaded proxy code
    1.
    发明授权
    Method and system for establishing trust in downloaded proxy code 有权
    建立下载代理代码信任的方法和系统

    公开(公告)号:US06901518B1

    公开(公告)日:2005-05-31

    申请号:US09543908

    申请日:2000-04-06

    IPC分类号: G06F21/00 H04L9/00

    CPC分类号: G06F21/51

    摘要: A system consistent with the present invention enables a program in a distributed system to determine whether downloaded code is trustworthy before using the downloaded code to communicate with other programs or services in the distributed system. A client that downloads proxy code from a service can verify that both the service and the downloaded code are trustworthy before using the code to communicate with the service. “Trustworthy” code is code the client knows will enforce the client's security constraints in communicating with the service, e.g., mutual authentication, confidentiality, and integrity.

    摘要翻译: 与本发明一致的系统使得分布式系统中的程序能够在使用下载的代码与分布式系统中的其他程序或服务进行通信之前确定下载的代码是否可信任。 从服务下载代理代码的客户端可以在使用代码与服务通信之前验证服务和下载的代码是否可信。 “值得信赖”的代码是客户端知道将在与服务通信中执行客户端的安全限制的代码,例如相互认证,机密性和完整性。

    Remote object activation in a distributed system
    2.
    发明授权
    Remote object activation in a distributed system 失效
    分布式系统中的远程对象激活

    公开(公告)号:US06957427B1

    公开(公告)日:2005-10-18

    申请号:US08950760

    申请日:1997-10-15

    IPC分类号: G06F9/44 G06F9/46 G06F17/00

    CPC分类号: G06F9/548

    摘要: A distributed computer system uses a single interface at the client site to handle calls to call both active and passive remote objects. Accordingly, the calling process does not need to be aware of distinctions between active and passive objects. Further, remote objects are aggregated into common groups of objects, thereby providing greater security between objects of disparate groups and efficiency between related objects of the same group. Preferably, different groups are run on different Java virtual machines.

    摘要翻译: 分布式计算机系统在客户端站点使用单个接口来处理调用主动和被动远程对象的调用。 因此,调用过程不需要意识到主动对象和被动对象之间的区别。 此外,远程对象被聚合成公共对象组,从而在不同组的对象之间提供更高的安全性并且在相同组的相关对象之间提供效率。 优选地,不同的组在不同的Java虚拟机上运行。

    System and Method for Programmatic Management of Distributed Computing Resources
    3.
    发明申请
    System and Method for Programmatic Management of Distributed Computing Resources 有权
    分布式计算资源的程序化管理系统与方法

    公开(公告)号:US20090271472A1

    公开(公告)日:2009-10-29

    申请号:US12110880

    申请日:2008-04-28

    IPC分类号: G06F15/16

    摘要: Systems and methods for providing a development and deployment platform for Software as a Service (SaaS) providers are disclosed. The platform may provide an application programming interface (API) through which customers may configure virtualized grids of language-level virtual machines (VMs), networks, and storage resources. A grid may be horizontally scalable and programmatically configurable by a customer and/or customer code. The platform may allow dynamic scaling of resources (up and down) to match changing demands, by allowing customers and/or customer code to programmatically alter their own system level structure at runtime, through the API. The grid may be accessed by both on-grid and off-grid processes, through internal and external connectivity resources provided by the platform. The platform may provide common utilities for end-user services, deployment operations, and development tasks (e.g., debugging), and may include frameworks and macro-components (e.g. web servers). The platform may host long-running Internet-based services and/or one-shot computational services.

    摘要翻译: 披露了为软件即服务(SaaS)提供商提供开发和部署平台的系统和方法。 该平台可以提供一个应用程序编程接口(API),客户可以通过它来配置语言级虚拟机(VM),网络和存储资源的虚拟网格。 网格可以是水平可扩展的并且可以由客户和/或客户代码以编程方式配置。 通过允许客户和/或客户代码在运行时通过API以编程方式改变自己的系统级结构,平台可以允许动态扩展资源(上下)以匹配不断变化的需求。 电网可以通过并网和离网过程,通过平台提供的内部和外部连接资源来访问。 该平台可以为最终用户服务,部署操作和开发任务(例如,调试)提供通用实用程序,并且可以包括框架和宏组件(例如web服务器)。 该平台可以承载长时间运行的基于Internet的服务和/或一次性计算服务。

    Method and system for deterministic hashes to identify remote methods

    公开(公告)号:US6134603A

    公开(公告)日:2000-10-17

    申请号:US45652

    申请日:1998-03-20

    IPC分类号: G06F9/46 G06F13/00

    CPC分类号: G06F9/548

    摘要: A method and system is provided to uniquely identify a remote method to invoke on a server using a hash value computed from the method signature sent from the client to the server with the call request. When a client wishes to invoke a remote method located on a server, the client sends a hash value identifying the remote method to the server in the "remote method invocation" (RMI) call. In one implementation, this hash value is created by applying a hash function to the method string name and the parameter type list and possibly the return type. When the server receives the RMI call, the server identifies which method is being called using the received hash value. The server maintains a mapping of hash values to their associated remote methods located on the server and references the correct method using the hash value. Additionally, in one implementation, the server creates the mapping table dynamically when a remote object is created. The server identifies the methods implemented by the object and creates hash values for each method. These hash values are stored in a mapping table which is used to reference the remote methods.

    System and method for programmatic management of distributed computing resources
    5.
    发明授权
    System and method for programmatic management of distributed computing resources 有权
    分布式计算资源的程序化管理系统和方法

    公开(公告)号:US07886021B2

    公开(公告)日:2011-02-08

    申请号:US12110880

    申请日:2008-04-28

    IPC分类号: G06F15/16

    摘要: Systems and methods for providing a development and deployment platform for Software as a Service (SaaS) providers are disclosed. The platform may provide an application programming interface (API) through which customers may configure virtualized grids of language-level virtual machines (VMs), networks, and storage resources. A grid may be horizontally scalable and programmatically configurable by a customer and/or customer code. The platform may allow dynamic scaling of resources (up and down) to match changing demands, by allowing customers and/or customer code to programmatically alter their own system level structure at runtime, through the API. The grid may be accessed by both on-grid and off-grid processes, through internal and external connectivity resources provided by the platform. The platform may provide common utilities for end-user services, deployment operations, and development tasks (e.g., debugging), and may include frameworks and macro-components (e.g. web servers). The platform may host long-running Internet-based services and/or one-shot computational services.

    摘要翻译: 披露了为软件即服务(SaaS)提供商提供开发和部署平台的系统和方法。 该平台可以提供一个应用程序编程接口(API),客户可以通过它来配置语言级虚拟机(VM),网络和存储资源的虚拟网格。 网格可以是水平可扩展的并且可以由客户和/或客户代码以编程方式配置。 通过允许客户和/或客户代码在运行时通过API以编程方式改变自己的系统级结构,平台可以允许动态扩展资源(上下)以匹配不断变化的需求。 电网可以通过并网和离网过程,通过平台提供的内部和外部连接资源来访问。 该平台可以为最终用户服务,部署操作和开发任务(例如,调试)提供通用实用程序,并且可以包括框架和宏组件(例如web服务器)。 该平台可以承载长时间运行的基于Internet的服务和/或一次性计算服务。

    Method and system for dynamic proxy classes
    6.
    发明授权
    Method and system for dynamic proxy classes 有权
    动态代理类的方法和系统

    公开(公告)号:US06877163B1

    公开(公告)日:2005-04-05

    申请号:US09332029

    申请日:1999-06-14

    IPC分类号: G06F9/46 G06F9/00

    CPC分类号: G06F9/548

    摘要: In an object-oriented data processing system, methods and systems in accordance with the present invention provide a proxy class dynamically generated at runtime that implements a list of interfaces specified at runtime such that a method invocation through an interface on an instance of the class is encoded and dispatched uniformly to an object that performs the invocation of the requested method. The generation of the proxy class at runtime and the specification at runtime of the list of interfaces implemented by the proxy class allow the interfaces to be used to be chosen at runtime before generation of the proxy class. Since the proxy class does not need to be created before compile time, the interface list implemented by the proxy class does not need to be known at the time the source code is written.

    摘要翻译: 在面向对象的数据处理系统中,根据本发明的方法和系统提供在运行时动态生成的代理类,其实现在运行时指定的接口的列表,使得通过类的实例上的接口的方法调用是 编码并统一调度到执行请求方法调用的对象。 运行时代理类的生成以及由代理类实现的接口列表的运行时的规范允许在生成代理类之前在运行时选择接口。 由于代理类不需要在编译之前被创建,因此代理类实现的接口列表在编写源代码时不需要知道。

    Method and system for deterministic hashes to identify remote methods
    7.
    发明授权
    Method and system for deterministic hashes to identify remote methods 有权
    用于识别远程方法的确定性散列的方法和系统

    公开(公告)号:US06629154B1

    公开(公告)日:2003-09-30

    申请号:US09688029

    申请日:2000-10-12

    IPC分类号: G06F1300

    摘要: A method and system is provided to uniquely identify a remote method to invoke on a server using a hash value computed from the method signature sent from the client to the server with the call request. When a client wishes to invoke a remote method located on a server, the client sends a hash value identifying the remote method to the server in the “remote method invocation” (RMI) call. In one implementation, this hash value is created by applying a hash function to the method string name and the parameter type list and possibly the return type. When the server receives the RMI call, the server identifies which method is being called using the received hash value. The server maintains a mapping of hash values to their associated remote methods located on the server and references the correct method using the hash value. Additionally, in one implementation, the server creates the mapping table dynamically when a remote object is created. The server identifies the methods implemented by the object and creates hash values for each method. These hash values are stored in a mapping table which is used to reference the remote methods.

    摘要翻译: 提供了一种方法和系统,用于使用从客户端发送到具有呼叫请求的服务器的方法签名计算的哈希值来唯一地标识在服务器上调用的远程方法。 当客户端希望调用位于服务器上的远程方法时,客户端会在“远程方法调用”(RMI)调用中向服务器发送标识远程方法的哈希值。 在一个实现中,通过将hash函数应用于方法字符串名称和参数类型列表以及可能的返回类型来创建此哈希值。 当服务器接收到RMI调用时,服务器使用接收到的散列值来标识正在调用哪个方法。 服务器将哈希值映射到位于服务器上的相关远程方法,并使用散列值引用正确的方法。 另外,在一个实现中,服务器在创建远程对象时动态创建映射表。 服务器识别由对象实现的方法,并为每个方法创建哈希值。 这些哈希值存储在用于引用远程方法的映射表中。

    Deferred reconstruction of objects and remote loading in a distributed system
    8.
    发明授权
    Deferred reconstruction of objects and remote loading in a distributed system 失效
    对象的延迟重建和分布式系统中的远程加载

    公开(公告)号:US06253256B1

    公开(公告)日:2001-06-26

    申请号:US08950756

    申请日:1997-10-15

    IPC分类号: G06F1300

    CPC分类号: G06F9/542 G06F9/548

    摘要: A method and system for transmitting objects in an object-oriented distributed system allows the reconstruction of objects and downloading of code associated with such object reconstruction to be deferred until it is needed by a program. The deferred reconstruction is accomplished by using a Java object called a “marshalled object,” which is a self-describing stream and which is a first-class entity in the system, meaning that it exists within a type system of a programming language and can be accessed and manipulated by instructions written in that language. Such an object can typically be produced by any object that can be passed from one address space to another, and it can be stored, passed to other objects, or used to reconstruct an object of the original type on demand. The reconstruction of an object is deferred until the code holding a marshalled object directly calls the creation of the object using the marshalled object. Any downloading of code is also deferred until the marshalled object is used to create a copy of the original object.

    摘要翻译: 用于在面向对象的分布式系统中传送对象的方法和系统允许对对象的重建和与这样的对象重建相关联的代码的下载被推迟直到程序需要。 延迟重建通过使用称为“编组对象”的Java对象来实现,该对象是自描述流,并且是系统中的第一类实体,意味着它存在于编程语言的类型系统中,并且可以 通过用该语言编写的指令进行访问和操作。 这样的对象通常可以由可以从一个地址空间传递到另一个地址空间的任何对象来生成,并且可以将其存储,传递给其他对象,或用于根据需要重建原始类型的对象。 一个对象的重建被推迟,直到保持编组对象的代码直接使用编组对象来调用对象的创建。 代码的任何下载也被推迟到使用编组的对象来创建原始对象的副本。

    Method and apparatus for dynamic distributed computing over a network
    9.
    发明授权
    Method and apparatus for dynamic distributed computing over a network 失效
    通过网络进行动态分布式计算的方法和装置

    公开(公告)号:US06446070B1

    公开(公告)日:2002-09-03

    申请号:US09030840

    申请日:1998-02-26

    IPC分类号: G06F900

    摘要: A homogeneous execution environment operates within a heterogeneous client-server network. A client selects a server and transmits a procedure call with parameters. In response, the system dynamically and securely downloads code to a compute server; invokes a generic compute method; executes the code on the compute server; and returns the results to the calling client method, preserving the result on the compute server if requested. This technique is efficient in that it does not require multiple copies of code to be downloaded or compiled since server byte-codes can be executed on each of the different systems. The code can be compiled once and downloaded as needed to the various servers as byte-codes and then executed.

    摘要翻译: 均匀的执行环境在异构的客户端 - 服务器网络内运行。 客户端选择一个服务器并发送具有参数的过程调用。 作为响应,系统动态安全地将代码下载到计算服务器; 调用通用计算方法; 执行计算服务器上的代码; 并将结果返回给调用客户端方法,如果请求,则在计算服务器上保留结果。 这种技术是有效的,因为不需要下载或编译多个代码副本,因为可以在每个不同的系统上执行服务器字节码。 代码可以编译一次,并根据需要下载到各种服务器作为字节代码,然后执行。