International Business Machines Corporation

Ching Yun Chao

John Y Chang

John Conrad Sanchez

Hyen Vui Chung

Donald R Woods

David Michael Reichek

Timothy Lloyd Land

James N Paterson

Lorne D Long

Peter Daniel Birk

Keys Dylan Botzum

Hyen-Vui Chung

Provided are techniques for grouping resources based upon ownership in a cloud environment into a collection representing a composite application corresponding to a particular user; automatically monitoring the resources across two or more virtual machines and two or more physical computing devices; and displaying the monitored resources in a graphical user interface (GUI) in a context associated with the composite application for managing the composite application and the resources, wherein the resources are provided as one or more of a platform as service (PaaS) environment and an infrastructure as Service (IaaS) environment.

Dynamically grouping monitored resources in a cloud environment to collections representing a composite application

A method for providing security for a business application including receiving a request from a server including a server public key and a security token, deploying a virtual node implementing the business application in response to the request, using the security token in a bootstrap process by the virtual node to provide authentication to the server, and authenticating a message from the server using a server public key.

Managing security for computer services

A system or computer usable program product for providing security for a business application including receiving a request from a server including a server public key and a security token, deploying a virtual node implementing the business application in response to the request, using the security token in a bootstrap process by the virtual node to provide authentication to the server, and authenticating a message from the server using a server public key.

A method for tracking security attributes along invocation chain using secure propagation token. When a user is authenticated, a propagation token is created. The propagation token includes a caller list, a host list, and custom attributes. The propagation token may be propagated downstream along with other marker tokens. A service provider may associate custom attributes in the propagation token or create custom propagation token to be propagated. The propagation token tracks the original caller and subsequent callers when user switches occur and a list of hosts at which the propagation token lands on.

Method for tracking security attributes along invocation chain using secure propagation token

Growing community of inventors

Austin, TX, United States of America

Ching Yun Chao