US 7,480,799 B2 · Traffic manager for distributed computing environments

Abstract

Techniques suitable for facilitating communications between various computer programs operating on various nodes in a distributed computing environment are disclosed. The techniques can be used by a traffic manager operating in such environments. The traffic manager is capable of monitoring traffic exchanged between client and server programs operating in the distributed computing environment. Moreover, the traffic manager can be used to implement a variety of desirable features across different computing environments. These computing environments are typically separated by one or more distinguishing characteristics. As will be appreciated, the traffic manager provides an integral and cost effective solution which can bridge these distinguishing characteristics as well as define and enforce policies across disparate computing environments. This is achieved by centralizing the generation of interfaces which allow interaction between any of the nodes in a distributed computing system. This avoids the redundancy and inefficiency inherent in building these capabilities in each node, particularly in complex systems.

Claims45

Dependent claims

A computer-implemented method of implementing security for Simple Object Access Protocol (SOAP) messages which can be exchanged between client and server programs, the method comprising:

receiving a SOAP message;
determining whether at least one security rule has been defined for the SOAP message, the at least one security rule being defined based on a security policy for exchanging SOAP messages between at least one client program and at least one server program, wherein the at least one security rule includes at least one decryption rule;
and
performing at least one security related operation on the SOAP message based on the at least one security rule when the determining determines that at least one security rule is associated with the SOAP message, wherein the performing of the at least one operation comprises:
determining whether the SOAP message is encrypted, and
decrypting the SOAP message based on one or more decryption keys which are associated with the at least one decryption rule.

3 more elements

A computer-implemented method of implementing security for Simple Object Access Protocol (SOAP) messages exchanged between client and server programs, the method comprising:

receiving a SOAP message;
determining whether at least one decryption rule is associated with the SOAP message;
attempting to decrypt the SOAP message using one or more keys associated with the at least one decryption rule when the determining determines that at least one decryption rule is associated with the SOAP message;
determining whether at least one encryption rule is associated with the SOAP message;
encrypting the SOAP message using one or more keys associated with the at least one decryption rule when the determining determines that at least one encryption rule is associated with the SOAP message;
determining whether at least one signature verification rule is associated with the SOAP message;
verifying at least one signature associated with the SOAP message per requirements specified by the at least one signature verification rule when the determining determines that at least one signature verification rule is associated with the SOAP message;
determining whether at least one signing rule is associated with the SOAP message;
and
signing the SOAP message using one or more keys associated with the at least one signing rule.

7 more elements

A computer readable medium having computer program instructions stored therein for performing a method of implementing security for Simple Object Access Protocol (SOAP) messages exchanged between client and server programs, the method comprising:

receiving a SOAP message;
determining whether at least one decryption rule is associated with the SOAP message;
attempting to decrypt the SOAP message using one or more keys associated with the at least one decryption rule when the determining determines that at least one decryption rule is associated with the SOAP message;
determining whether at least one encryption rule is associated with the SOAP message;
encrypting the SOAP message using one or more keys associated with the at least one decryption rule when the determining determines that at least one encryption rule is associated with the SOAP message;
determining whether at least one signature verification rule is associated with the SOAP message;
verifying at least one signature associated with the SOAP message per requirements specified by the at least one signature verification rule when the determining determines that at least one signature verification rule is associated with the SOAP message;
determining whether at least one signing rule is associated with the SOAP message;
and
signing the SOAP message using one or more keys associated with the at least one signing rule.

7 more elements

A traffic manager for facilitating communication between a client node and a server node in a distributed computing environment, the server node having a first interface associated therewith which is incompatible with direct communications generated by the client node, the traffic manager comprising a central processing unit which can operate to:

receive a Simple Object Access Protocol (SOAP) message;
determine whether at least one decryption rule is associated with the SOAP message;
attempt to decrypt the SOAP message using one or more keys associated with the at least one decryption rule when the determining determines that at least one decryption rule is associated with the SOAP message;
determine whether at least one encryption rule is associated with the SOAP message;
encrypt the SOAP message using one or more keys associated with the at least one decryption rule when the determining determines that at least one encryption rule is associated with the SOAP message;
determine whether at least one signature verification rule is associated with the SOAP message;
verify at least one signature associated with the SOAP message per requirements specified by the at least one signature verification rule when the determining determines that at least one signature verification rule is associated with the SOAP message;
determine whether at least one signing rule is associated with the SOAP message;
and
sign the SOAP message using one or more keys associated with the at least one signing rule.

7 more elements

Dependencies are inferred from the claim text.

Traffic manager for distributed computing environments

Life of this patent

Traffic manager for distributed computing environments

Life of this patent

Abstract

Claims45