Optimization of spawning request handling processes in a secured computing environment
AssigneeInternational Business Machines Corporation
InventorsDavid Hadas, Aner Hamama, Nadav Yosef Har'el, Eran Rom
Life of this patent
Estimating the term…
Loading patent…
AssigneeInternational Business Machines Corporation
InventorsDavid Hadas, Aner Hamama, Nadav Yosef Har'el, Eran Rom
Estimating the term…
Systems and methods for associating a first process with a first state and a first computing environment initialized according to a first set of parameters, wherein a first task is to be performed under a first security context. The method further comprising associating a second process with a second state and a second computing environment initialized according to a second set of parameters; in response to the first process submitting a first request, the second process spawning a third process which has the second state; wherein the third process sets a security context for the third process to the first security context and the third process sets the computing environment for the third process according to a first a set of parameters; executing the third process under the first security context and in association with the second state; and executing the first task in the first computing environment.
A method for execution of a task in a computing environment, the method comprising:
Apparatus for handling service requests, comprising:
Dependencies are inferred from the claim text.
Drawings are temporarily unavailable. Open the PDF at USPTO
From the US filing history. Foreign family members aren’t listed.
Security arrangements for protecting computers, components thereof, programs or data against unauthorised
Task transfer initiation or dispatching: by program, e.g. task dispatcher, supervisor, operating system
To service a request: the resource being a machine, e.g. CPUs, Servers, Terminals
During program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow: by executing in a restricted environment, e.g.…
About 6 years 2 months of term left · ends 26 Dec 2032 (estimated)
A portion of the disclosure of this patent document may contain material, which is subject to copyright protection. The owner has no objection to the facsimile reproduction by any one of the patent document or the patent disclosure, as it appears in the Patent and Trademark Office patent file or records, but otherwise reserves all copyrights whatsoever.
Certain marks referenced herein may be common law or registered trademarks of the applicant, the assignee or third parties affiliated or unaffiliated with the applicant or the assignee. Use of these marks is for providing an enabling disclosure by way of example and shall not be construed to exclusively limit the scope of the disclosed subject matter to material associated with such marks.
The disclosed subject matter relates generally to optimizing the servicing of requests in a secured computing environment and, more particularly, to a system and method for improving performance of a service with measures for securely processing requests from different users.
The disclosed embodiments may be better understood by referring to the figures in the attached drawings, as provided below.
FIG. 1 illustrates an exemplary computing environment in accordance with one or more embodiments, wherein a server is implemented to service a plurality of requests.
FIGS. 2A and 2B is an exemplary block diagram of a security gateway and request processing components in the exemplary computing environment shown in FIG. 1, in accordance with one embodiment.
Features, elements, and aspects that are referenced by the same numerals in different figures represent the same, equivalent, or similar features, elements, or aspects, in accordance with one or more embodiments.
In the following, numerous specific details are set forth to provide a thorough description of various embodiments. Certain embodiments may be practiced without these specific details or with some variations in detail. In some instances, certain features are described in less detail so as not to obscure other aspects. The level of detail associated with each of the elements or features should not be construed to qualify the novelty or importance of one feature over the others.
In accordance with one or more embodiments, the processing of requests in a computing environment is optimized and improved by pre-initializing processes that are designated to perform one or more requests. In other words, the processes are initialized in advance (e.g., prior to the time a request is received) prior to being assigned a dedicated privilege. In computing environment 100 (see FIG. 1), requests submitted by client 110 to server 120 may be processed by servicing entities (e.g., request processors 132, 134) with limited privileges to perform tasks on behalf of client 110. As such, data belonging to another client remains inaccessible to tasks or processes designated for servicing requests submitted by client 110. In one implementation, a unique tenant ID is assigned to client 110 and the data associated with client 110, so that client's data stored on one or more media (e.g., media 142) is accessible via the associated tenant ID (e.g., tenant ID 1) while data belonging to another client (e.g., media 144) remains inaccessible.