Configuration mechanism for flexible messaging security protocols

A method to configure an application to process network messages, the method comprising:

• creating a data structure to store security information of network messages;
• storing security information in the data structure, the security information including a specification of a method to select a security token of a requester when multiple security tokens are contained in network messages;
• and
• processing a network message, the processing comprising the application applying the method to select a security token of a requestor.

An apparatus to configure an application to process network messages, the apparatus comprising:

• a storage to store security information of network messages, the security information to include a specification of a method to select a security token of a requester when multiple security tokens are contained in network messages, wherein the storage comprises:
• a deployment descriptor to store specifications of security requirements;
• a binding storage to store values of parameters of security information;
• and
• a platform level storage to store platform-specific security information;
• and
• a processor to process network messages, the processing to include deploying the application and accessing by the application the method to select a security token of a requestor.

A computer program product to configure an application to generate security information of network messages, the computer program comprising a computer useable medium having a computer readable program, wherein the computer readable program when executed on a computer causes the computer to:

• create a data structure to store security information of network messages;
• store security information in the data structure, the security information including a specification of a cryptographic key and a specification of a format to represent information about the cryptographic key;
• and
• generate by the application security information of a network message, the generating comprising accessing by the application the specification of a cryptographic key and the specification of a format.