Systems and methods for data communications
AssigneeStep Software Inc.
InventorsJames Leo Freeman, Robert Jan Nijkamp
Life of this patent
Estimating the term…
Abstract
A middleware system and corresponding methods are described whereby data communications, either inter-device or intra-device, are coordinated using a set of cryptographic identifiers that correspond to computing elements, such as interfaces, methods, parameters, classes, among others, the identifiers used for authentication against an access control list to determine whether an originator device is permitted to use a computational element. The cryptographic identifiers are coupled to data messages being sent across the middleware system.
Claims20
A computer implemented system for coordinating data messaging, the system comprising:
- a processor coupled to computer memory, the processor configured to:
- generate a set of cryptographic identifiers representing one or more interaction characteristics of a computational element associated with a hardware device or a software handler;
- receive, from a source device, a new message for routing to a target device or a logical target associated with the target device for processing, the new message including at least one cryptographic identifier of the set of cryptographic identifiers;
- process the new message based on the computational element corresponding to the at least one cryptographic identifier of the new message;
- and
- route the processed new message to the target device;
- wherein the processing of the new message comprises:
- (i) authenticating the new message by comparing the at least one cryptographic identifier of the new message using an access control list (ACL) against an identifier of an originator device of the new message to determine whether the originator device is permitted to use the computational element associated with the at least one cryptographic identifier;
- and
- (ii) transforming the new message to indicate authorization of the utilization of the computational element associated with the at least one cryptographic identifier;
- wherein the access control list (ACL) is stored on non-transitory computer readable media and includes a data structure storing a plurality of user accounts mapped to a plurality of role identifier labels, each role identifier label of the plurality of role identifier labels coupled with a permissions list defining a set of available computational elements that the role identifier label is permitted to interact with;
- wherein the plurality of role identifier labels include at least two of a user label, an administrator label, and a superuser label, and each identifier label of the plurality of role identifier labels includes different associated cryptographic identifiers indicative of different available computational elements that the role identifier label is permitted to interact with.
A computer implemented method for coordinating data messaging, the method comprising:
- generating a set of cryptographic identifiers representing one or more interaction characteristics of a computational element associated with a hardware device or a software handler;
- receiving, from a source device, a new message for routing to a target device or a logical target associated with the target device for processing, the new message including at least one cryptographic identifier of the set of cryptographic identifiers;
- processing the new message based on the computational element corresponding to the at least one cryptographic identifier of the new message;
- and
- routing the processed new message to the target device;
- wherein the processing of the new message comprises:
- (i) authenticating the new message by comparing the at least one cryptographic identifier of the new message using an access control list (ACL) against an identifier of an originator device of the new message to determine whether the originator device is permitted to use the computational element associated with the at least one cryptographic identifier;
- and
- (ii) transforming the new message to indicate authorization of the utilization of the computational element associated with the at least one cryptographic identifier;
- wherein the access control list (ACL) is stored on non-transitory computer readable media and includes a data structure storing a plurality of user accounts mapped to a plurality of role identifier labels, each role identifier label of the plurality of role identifier labels coupled with a permissions list defining a set of available computational elements that the role identifier label is permitted to interact with;
- wherein the plurality of role identifier labels include at least two of a user label, an administrator label, and a superuser label, and each identifier label of the plurality of role identifier labels includes different associated cryptographic identifiers indicative of different available computational elements that the role identifier label is permitted to interact with.
A non-transitory computer readable medium storing machine interpretable instructions, which when executed by a processor, cause the processor to perform a method for coordinating data messaging, the method comprising:
- generating a set of cryptographic identifiers representing one or more interaction characteristics of a computational element associated with a hardware device or a software handler;
- receiving, from a source device, a new message for routing to a target device or a logical target associated with the target device for processing, the new message including at least one cryptographic identifier of the set of cryptographic identifiers;
- processing the new message based on the computational element corresponding to the at least one cryptographic identifier of the new message;
- and
- routing the processed new message to the target device;
- wherein the processing of the new message comprises:
- (i) authenticating the new message by comparing the at least one cryptographic identifier of the new message using an access control list (ACL) against an identifier of an originator device of the new message to determine whether the originator device is permitted to use the computational element associated with the at least one cryptographic identifier;
- and
- (ii) transforming the new message to indicate authorization of the utilization of the computational element associated with the at least one cryptographic identifier;
- wherein the access control list (ACL) is stored on non-transitory computer readable media and includes a data structure storing a plurality of user accounts mapped to a plurality of role identifier labels, each role identifier label of the plurality of role identifier labels coupled with a permissions list defining a set of available computational elements that the role identifier label is permitted to interact with;
- wherein the plurality of role identifier labels include at least two of a user label, an administrator label, and a superuser label, and each identifier label of the plurality of role identifier labels includes different associated cryptographic identifiers indicative of different available computational elements that the role identifier label is permitted to interact with.
Dependencies are inferred from the claim text.