# US 2016/0366140 A1 · Dynamic extensible application server management

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2016/0366140 A1
- Document ID: US20160366140A1
- Status: Published application
- Kind: A1
- Application number: 15/250,111
- Filed: 2016-08-29
- Published: 2016-12-15
- Earliest claimed: 2014-02-26
- Assignees: International Business Machines Corporation
- Applicants: International Business Machines Corporation
- Inventors: Peter D. Birk; Gordan G. Greenlee; Richard J. McCarty
- Web page: https://patentgrep.com/patent/US20160366140A1

## CPC

- H04L 63/10: {for controlling access to devices or network resources}
- G06F 3/0484: for the control of specific functions or operations, e.g. selecting or manipulating an object, an image or a displayed text element, setting a parameter value or selecting a range
- H04L 41/0809: {Plug-and-play configuration}
- H04L 41/0816: the condition being an adaptation, e.g. in response to network events
- H04L 41/22: comprising specially adapted graphical user interfaces [GUI]
- H04L 63/1416: {Event detection, e.g. attack signature detection}
- H04L 63/1425: {Traffic logging, e.g. anomaly detection}
- H04L 63/1466: {Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks}
- H04L 63/168: {above the transport layer}
- H04L 67/10: in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46)
- H04L 41/042: comprising distributed management centres cooperatively managing the network
- H04L 41/0813: characterised by the conditions triggering a change of settings
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

A real-time plugin command-driven administrative control interface is provided that implements direct real-time command-driven control of operational functionality of application server plugins deployed at a group of application servers. One of request-level application server functionality and server-level application server functionality of at least one of the group of application servers is changed by issuing a real-time application-server plugin command received from the real-time plugin command-driven administrative control interface to a deployed application server plugin.

## Claims

### Claim 1

A system, comprising:
a communication interface; and
a processor programmed to:
provide a real-time plugin command-driven administrative control interface that implements direct real-time command-driven control of operational functionality of application server plugins deployed at a plurality of application servers; and
change, via the communication interface, by issuing a real-time application-server plugin command received via the real-time plugin command-driven administrative control interface to at least one of the deployed application server plugins, one of request-level application server operational functionality and server-level application server operational functionality of at least one of the plurality of application servers.

### Claim 2 (depends on 1)

The system of claim 1, where the real-time application-server plugin command issued to the at least one of the deployed application server plugins causes the at least one of the deployed application server plugins to:
perform, as the server-level application server operational functionality change, real-time monitoring of services selected from a group consisting of application server performance, application server security, and application server auditing of the at least one of the plurality of application servers.

### Claim 3 (depends on 1)

The system of claim 1, where the real-time application-server plugin command issued to the at least one of the deployed application server plugins causes the at least one of the deployed application server plugins to:
perform, as the request-level application server operational functionality change, a real-time change, during runtime without modification of an application server application, of at least one of a runtime input sent by a user to the application server application and a runtime output directed by the application server application to the user of the application server application associated with the user accessing the application server application.

### Claim 4 (depends on 1)

The system of claim 1, where the processor is further programmed to:
deploy, during runtime to the at least one of the plurality of application servers via the processor using the real-time plugin command-driven administrative control interface, the at least one of the deployed application server plugins with an initial runtime application server plugin operational configuration that performs an initial augmentation of the one of the request-level application server operational functionality and the server-level application server operational functionality of the at least one of the plurality of application servers; and
where the real-time application-server plugin command issued to the at least one of the deployed application server plugins changes the initial runtime application server plugin operational configuration of the at least one of the deployed application server plugins by adjusting the initial augmentation of the one of the request-level application server operational functionality and the server-level application server operational functionality of the at least one of the plurality of application servers.

### Claim 5 (depends on 1)

The system of claim 1, where the real-time application-server plugin command issued to the at least one of the deployed application server plugins causes the at least one of the deployed application server plugins to at least one of:
audit user accesses to the at least one of the plurality of application servers associated with an individual application executed by the one of the plurality of application servers;
audit Internet protocol (IP) address accesses to the at least one of the plurality of application servers associated with the user accesses to the individual application executed by the one of the plurality of application servers;
revoke access to the at least one of the plurality of application servers associated with the individual application executed by the one of the plurality of application servers from individual users;
revoke access to the at least one of the plurality of application servers associated with the individual application executed by the one of the plurality of application servers from individual IP addresses;
gather details of a request associated with the individual application executed by the one of the plurality of application servers comprising parameters, headers, and response information;
identify cross-site scripting attacks by analysis of parameters of requests associated with the individual application executed by the one of the plurality of application servers; and
identify anomalies associated with the request associated with the individual application executed by the one of the plurality of application servers.

### Claim 6 (depends on 1)

The system of claim 1, where the real-time application-server plugin command issued to the at least one of the deployed application server plugins causes the at least one of the deployed application server plugins to at least one of:
query a server security configuration of the at least one of the plurality of application servers;
query at least one of application status and configuration information of an individual application executed by the at least one of the plurality of application servers;
query logged in users of the at least one of the plurality of application servers; and
check for certificate expiration dates of certificates at the at least one of the plurality of application servers.

### Claim 7 (depends on 1)

The system of claim 1, where the real-time application-server plugin command issued to the at least one of the deployed application server plugins causes the at least one of the deployed application server plugins to:
dynamically start operational functionality of the at least one of the deployed application server plugins at the at least one of the plurality of application servers responsive to a plugin start command received via the real-time plugin command-driven administrative control interface; and
dynamically stop the operational functionality of the at least one of the deployed application server plugins at the at least one of the plurality of application servers responsive to a plugin stop command received via the real-time plugin command-driven administrative control interface.

### Claim 8

A computer program product, comprising:
a computer readable storage medium having computer readable program code embodied therewith, where the computer readable program code when executed on a computer causes the computer to:
provide a real-time plugin command-driven administrative control interface that implements direct real-time command-driven control of operational functionality of application server plugins deployed at a plurality of application servers; and
change, by issuing a real-time application-server plugin command received via the real-time plugin command-driven administrative control interface to at least one of the deployed application server plugins, one of request-level application server operational functionality and server-level application server operational functionality of at least one of the plurality of application servers.

### Claim 9 (depends on 8)

The computer program product of claim 8, where the real-time application-server plugin command issued to the at least one of the deployed application server plugins causes the at least one of the deployed application server plugins to:
perform, as the server-level application server operational functionality change, real-time monitoring of services selected from a group consisting of application server performance, application server security, and application server auditing of the at least one of the plurality of application servers.

### Claim 10 (depends on 8)

The computer program product of claim 8, where the real-time application-server plugin command issued to the at least one of the deployed application server plugins causes the at least one of the deployed application server plugins to:
perform, as the request-level application server operational functionality change, a real-time change, during runtime without modification of an application server application, of at least one of a runtime input sent by a user to the application server application and a runtime output directed by the application server application to the user of the application server application associated with the user accessing the application server application.

### Claim 11 (depends on 8)

The computer program product of claim 8, where the computer readable program code when executed on the computer further causes the computer to:
deploy, during runtime to the at least one of the plurality of application servers using the real-time plugin command-driven administrative control interface, the at least one of the deployed application server plugins with an initial runtime application server plugin operational configuration that performs an initial augmentation of the one of the request-level application server operational functionality and the server-level application server operational functionality of the at least one of the plurality of application servers; and
where the real-time application-server plugin command issued to the at least one of the deployed application server plugins changes the initial runtime application server plugin operational configuration of the at least one of the deployed application server plugins by adjusting the initial augmentation of the one of the request-level application server operational functionality and the server-level application server operational functionality of the at least one of the plurality of application servers.

### Claim 12 (depends on 8)

The computer program product of claim 8, where the real-time application-server plugin command issued to the at least one of the deployed application server plugins causes the at least one of the deployed application server plugins to at least one of:
audit user accesses to the at least one of the plurality of application servers associated with an individual application executed by the one of the plurality of application servers;
audit Internet protocol (IP) address accesses to the at least one of the plurality of application servers associated with the user accesses to the individual application executed by the one of the plurality of application servers;
revoke access to the at least one of the plurality of application servers associated with the individual application executed by the one of the plurality of application servers from individual users;
revoke access to the at least one of the plurality of application servers associated with the individual application executed by the one of the plurality of application servers from individual IP addresses;
gather details of a request associated with the individual application executed by the one of the plurality of application servers comprising parameters, headers, and response information;
identify cross-site scripting attacks by analysis of parameters of requests associated with the individual application executed by the one of the plurality of application servers; and
identify anomalies associated with the request associated with the individual application executed by the one of the plurality of application servers.

### Claim 13 (depends on 8)

The computer program product of claim 8, where the real-time application-server plugin command issued to the at least one of the deployed application server plugins causes the at least one of the deployed application server plugins to at least one of:
query a server security configuration of the at least one of the plurality of application servers;
query at least one of application status and configuration information of an individual application executed by the at least one of the plurality of application servers;
query logged in users of the at least one of the plurality of application servers; and
check for certificate expiration dates of certificates at the at least one of the plurality of application servers.

### Claim 14 (depends on 8)

The computer program product of claim 8, where the real-time application-server plugin command issued to the at least one of the deployed application server plugins causes the at least one of the deployed application server plugins to:
dynamically start operational functionality of the at least one of the deployed application server plugins at the at least one of the plurality of application servers responsive to a plugin start command received via the real-time plugin command-driven administrative control interface; and
dynamically stop the operational functionality of the at least one of the deployed application server plugins at the at least one of the plurality of application servers responsive to a plugin stop command received via the real-time plugin command-driven administrative control interface.