System and method for secure configuration of sensitive web services
AssigneeInternational Business Machines Corporation
InventorsWolfgang Eibach, Matthias Gruetzner, Dietmar Kuebler
Life of this patent
Estimating the term…
Loading patent…
AssigneeInternational Business Machines Corporation
InventorsWolfgang Eibach, Matthias Gruetzner, Dietmar Kuebler
Estimating the term…
The present invention discloses a system and method for configuration of access rights to sensitive information handled by a sensitive Web-Service. In a case of requested configuration changes initiated by the client system the Web-Server system provides a configuration data file to the client system preferably using a SOAP-communication protocol. The changes of the configuration data file are exclusively performed offline at the client side and the updated configuration data file is signed with authentication information and sent as a part of a SOAP-request to the Web-Server system. The Web-Server system provides a filter component for identifying and discarding non-SOAP requests as well as an access control manager for providing authentication examination for incoming SOAP-requests. After successful passing these components the SOAP-request is used for updating the existing configuration data file.
A server system for providing a sensitive Web-Service to a client system, comprising:
A client system for configuration of a sensitive Web-Service provided by a server system having
Dependencies are inferred from the claim text.