Application server object-level security for distributed computing domains

US7448066B2 · kind B2 · utility

Assignee

• International Business Machines Corporation · US

Inventors

• Peter Daniel Birk · Austin, US
• Ching-Yun Chao · Austin, US
• Hyen Vui Chung · Round Rock, US
• Carlton Keith Mason · Austin, US
• Ajaykumar Karkala Reddy · Austin, US
• Vishwanath Venkataramappa · Austin, US

Key dates

• Filing date: Sep 19, 2002
• Grant date: Nov 4, 2008
• Expiry date: Dec 22, 2024

Classification

• Technology area (CPC G): Physics
• CPC primary: G06F21/31
• WIPO field: Computer technology
• WIPO sector: Electrical engineering

Abstract

Objects on application servers may be defined into classes which receive different levels of security protection, such as definition of user objects and administrative objects. Domain-wide security may be enforced on administrative objects, which user object security may be configured separately for each application server in a domain. In a CORBA architecture, IOR's for shared objects which are to be secured on a domain-wide basis, such as administrative objects, are provided with tagged components during IOR creation and exporting to a name server. Later, when the IOR is used by a client, the client invokes necessary security measures such as authentication, authorization and transport protection according to the tagged components.