Loading patent…
AssigneeInternational Business Machines Corporation
InventorMichael S. Fortinsky
Estimating the term…
In a distributed computing environment, in which a client needing to access a server is issued, by a security server, with a ticket including an encoded certificate identifying, when decoded, the identity and privilege attributes of the client in a format understood by a server within the environment, access to a resource external to the environment through such a server within the environment is provided, when a request involving such access is received by the security server, by issuing an extended certificate including additional data which can be decoded to provide information decoded as to the identity and privilege attributes of the client with respect to and in a format acceptable to the external server, the additional data being recognized and decodable and formatable by that server within the environment which provides access to the external server, but transmitted within the environment in a format compatible with the certificates in regular tickets. A security server issuing a ticket including such an extended privilege attribute certificate has a registry extended to include data as to a client's privilege attributes with respect to accessible external servers, together with data as to the structure in which such data is to be presented, and an application server required to handle such extended certificates has attribute handlers to structure the decoded data for presentation to the external server.
In a distributed computing environment having a security server that includes an attribute registry containing data concerning client identities and attributes and client privileges in relation to resources within the distributed computing environment, the security server issuing a ticket on demand to a client within the distributed computing environment requiring service by an application server within the distributed computing environment, the ticket including a privilege attribute certificate containing encoded data which, on presentation to said application server, is decoded by said application server to provide information as to the client's identity and privilege attributes within the distributed computing environment, said distributed computing environment further comprising:
A programming extension to a distributed computing environment in which a security server issues tickets to clients wishing to access servers, the tickets including privilege attribute certificates containing encoded information as to a client's identity and privilege attributes, and in which a gateway server provides access to a resource external to the environment, the external resource having security requirements incompatible with those of the computing environment, the programming extension comprising:
Dependencies are inferred from the claim text.