Software Ag, Inc.

Software Ag Usa, Inc.

Dieter Hermann Kessler

Eckehard Hermann

Terence G Kennedy

Thomas Vogler

Harald Schöning

Johannes Viegener

Heiko Weber

Kay Hans-Peter Winkler

Uwe Henker

Eddie McDaid

Desmond Chan

Dietmar Gaertner

Arno Zude

Michael Ulrich Körner

Rene Kollmorgen

Neil Beesley

James Holme

Harald Ralf Schöning

René Kollmorgen

Certain example embodiments relate to techniques for use with mainframe computing systems that include both general-purpose processors (e.g., CPs) and special-purpose processors that can be used to perform only certain limited operations (e.g., zIIPs). Certain example embodiments automatically help these special-purpose processors perform user exits and other routines thereon, rather than requiring those operations to be performed on general-purpose processors. This approach advantageously can improve system performance when executing programs including these user exits and other routines, and in a preferred embodiment, it can be accomplished in connection with a suitably-configured user exit daemon. In a preferred embodiment, the daemon and its clients can use a user exit property table or the like to communicate with one another about the state of each user exit or other routine that has been analyzed, classified, and possibly modified.

User exit daemon for use with special-purpose processor, mainframe including user exit daemon, and associated methods

In a method, system, or computer-readable medium for an ontology-based request/reply service (RRS), different request/reply services (RRS) are hosted, each different RRS dedicatedly represents a different unique service and provides connections from client to server instance of the unique service, each different RRS accessed by client and server instances through a same independent communication layer (ICL). A request from the client is received through the ICL. The RRS is determined by the unique service indicated in the request, and instantiated dynamically as needed, according to an individual RRS ontology which establishes a syntactical and semantical framework dedicated to the unique service. The request is routed to the RRS and then through a server instance of the unique service to process the request; then a response is returned to the client to satisfy the request. It provides transport connectivity and mutual communication between combinations of clients, different RRSs, and server instances.

Method and system for an ontology based request/reply service

System and method for storing identity mapping information in an identity management system to enable a user authenticated at a first domain to access a second domain. The method may include digitally signing the identity mapping information by the user; providing the mapping information to an identity management system; and storing the user-signed mapping information after being further digitally signed by the identity management system.

Methods and system for storing and retrieving identity mapping information

A method for authenticating an entity at a first data resource, the method comprising the steps of: sending a first request token from the entity () to a token distribution unit () to request a first one-way authentication token, the first request token being a function of authentication information provided by the entity (); sending the first one-way authentication token from the token distribution unit () to the entity (); sending the first one-way authentication token from the entity () to the first data resource () to authenticate the entity () at the first data resource (); sending the first one-way authentication token from the first data resource () to the token distribution unit () to validate the first one-way token; and invalidating the first one-way token.

Authentication over a network using one-way tokens

Method of authenticating a user in a heterogeneous computer environment. The method may include defining a set of unique prefixes, each prefix identifying a type of user repository; defining a set of abstract repository names, each abstract repository name identifying an address of a user repository; and authenticating the user in the heterogeneous computer environment by assigning a sequence comprising a unique prefix, a reference to an abstract repository name and a unique identifier for the user within the user repository indicated by the reference to the abstract repository name.

Method and system for authenticating a user

Source access using request and one-way authentication tokens

Methods and apparatuses for validating a message with a signature. The method may include receiving the message with the signature and carrying out an integrated validation and storing process. The signature may be validated based on a validation algorithm and a key. The received message may be stored in a database. A method for generating a signature for a message may include carrying out an integrated receiving and generating process. The message to be sent may be received and the signature may be generated based on a signing algorithm and a key. The message may be sent with the signature.

Signature validation and generation

A trusted agent for enabling the check of the access of a user operating a first computer system controlled by a first security system to software and/or data on a second computer system controlled by a second security system. The trusted agent includes several functions, including: (a) reception of a user-id for the second computer system and transmission of the user-id to the second security system; (b) retrieval of a shared secret, which is registered in the fist security system and in the second security system, from the second security system; and (3) transmission of the shared secret from the trusted agent to the second computer system.

Method for checking user access

Growing community of inventors

Grafenhausen, Germany

Dieter Hermann Kessler