Monitoring in distributed computing system
AssigneeMastercard International Incorporated
InventorsCristian Radu, Mehdi Collinge, Omar Laazimani
Life of this patent
Estimating the term…
Abstract
A method is described of monitoring a service performed at a computing node. The computing node is one of a plurality of computing nodes in a distributed computing system. Each computing node is adapted to perform at least one service for clients. A monitoring process is adapted to monitor a service process performing the process. In the method, the monitoring process monitors the service process on performance of the service. The monitoring service then provides monitoring information to a monitoring process for another service process. A suitable computing node for performing the service is described, as is a coordinated monitoring service for supporting multiple monitoring services.
Claims20
A method of monitoring a first service performed at a computing node, wherein the computing node is one of a plurality of computing nodes in a distributed computing system, wherein each node is adapted to perform at least one service for clients, wherein a first monitoring process is adapted to monitor a first service process performing the first service, the method comprising:
- monitoring the first service process for expected use of the first service;
- capturing a first execution trace relating to use of the first service for a first transaction, wherein the first execution trace relates to generation of a credential;
- storing the first execution trace in a first transaction database associated with the first service;
- providing monitoring information between the first monitoring process and a second monitoring process for a second service process, wherein the first service process comprises generation of the credential and the second service process comprises validation of the credential, and wherein the credential includes a transaction-related challenge, a cryptogram, and an identifier for a requesting party;
- and
- determining, based on the transaction-related challenge, whether the credential has been misused;
- wherein the monitoring information provided between the first monitoring process and the second monitoring process includes the transaction-related challenge and an indication of credential misuse.
A computing node to monitor a first service performed in a distributed information security system, the computing node comprising:
- a hardware security module (HSM) to store a plurality of keys, wherein the computing node is one of a plurality of computing nodes in a distributed computing system, wherein each node is adapted to perform at least one service for clients, wherein a first monitoring process is adapted to monitor a first service process performing the first service;
- wherein the computing node is adapted to:
- monitor the first service process for expected use of the first service;
- capture a first execution trace relating to use of the first service for a first transaction, wherein the first execution trace relates to generation of a credential;
- store the first execution trace in a first transaction database associated with the first service;
- provide monitoring information between the first monitoring process and a second monitoring process for a second service process, wherein the first service process comprises generation of the credential and the second service process comprises validation of the credential, and wherein the credential includes a transaction-related challenge, a cryptogram, and an identifier for a requesting party;
- and
- determine, based on the transaction-related challenge, whether the credential has been misused;
- wherein the monitoring information provided between the first monitoring process and the second monitoring process includes the transaction-related challenge and an indication of credential misuse.
A computing node to monitor a first service performed in a distributed information security system, the computing node comprising:
- a hardware security module (HSM) to store a plurality of keys, wherein the computing node is one of a plurality of computing nodes in a distributed computing system, wherein each node is adapted to perform at least one service for clients, wherein a first monitoring process is adapted to monitor a first service process performing the first service;
- wherein the computing node is adapted to:
- monitor the first service process for expected use of the first service;
- provide monitoring information between the first monitoring process and a second monitoring process for a second service process, wherein the first service process comprises generation of a credential and the second service process comprises validation of the credential, and wherein the credential includes a transaction-related challenge, a cryptogram, and an identifier for a requesting party;
- and
- determine, based on the transaction-related challenge, whether the credential has been misused;
- wherein the monitoring information provided between the first monitoring process and the second monitoring process includes the transaction-related challenge and an indication of credential misuse.
Dependencies are inferred from the claim text.