International Business Machines Corporation

Kohsuke Okamoto

Takashi Miyamoto

Kuniaki Kawabata

Hiroyuki Ogura

Katsuyoshi Yamamoto

Yohsuke Kinoe

Tsukasa Takemura

Minako Matsuda

Naofumi Muranaka

Norimasa Uchiyama

A system for managing sessions between a client and multiple servers includes: a receiver for receiving, as a proxy for each of the servers, a request from the client to any of the servers; a determination unit for determining, upon receipt of the request from the client to any of the servers, whether sessions established between the client and the multiple servers are maintained; a disconnection unit for disconnecting, on condition that a session between the client and any of the multiple servers is already disconnected, the sessions established between the client and the servers different from the disconnected server; and a forward unit for forwarding, on condition that the sessions established between the client and all of the multiple servers are maintained, the received request to the destination server for the request.

Session management technique

The present invention provides a technique for measuring the efficiency of components in a computer. An echo server is provided which comprises several units. A socket generation unit generates a receiving server socket on the basis of information on a correspondence between a plurality of components in a computer. And generates a client socket that is a dedicated socket inheriting information of the receiving server socket when data is transmitted. A stream acquisition unit acquires a transmission path for acquiring data transmitted and received between components. A thread generation unit generates a transmission path by coupling streams. A transfer execution unit transfers data acquired via a thread to an original destination component. Using these units, the technique monitors and running verifies behavior by observing data running on the network.

Technique for monitoring component processing

The present invention is directed to various systems and/or methods relating to a software platform that provides for authentication of a requestor. Preferably, this authentication happens before there is an opportunity for any resource intensive request to harm operation of the system. Preferably, a reliability level is based on authentication so that the amount and/or type of resource access is controlled based, at least in part, on the authentication information. Preferably, heap usage is controlled by this reliability level. Preferably, the software platform is a virtual machine, preferably the Java Virtual Machine.

Virtual machine

Object To provide a technique for authenticating a communication partner using an electronic certificate containing personal information. Solving Means When a client apparatus receives a request for an electronic certificate from a server apparatus, the server apparatus reads a client certificate containing personal information and a server public key of the server apparatus from a storage unit and encrypts the client certificate using the server public key. The client apparatus also creates a temporary electronic certificate by setting, in a basic field of an electronic certificate, a predetermined item indicating that the electronic certificate is a temporary electronic certificate and by setting the client certificate having been encrypted in an extension field of the electronic certificate. Then, the client apparatus sends the temporary electronic certificate to the server apparatus.

System, apparatus, method, and program product for authenticating communication partner using electronic certificate containing personal information

Systems and methods are provided that record an easily viewable log of operations. A particular system includes a response receiving unit that receives an input response from a server, the input response related to a first client request and including first content adapted to prompt data input via a client. Additionally, the system includes a response sending unit that sends the client an output response, including the first content and an identifier to identify the first content and a logging database to record the first content in association with the identifier. Further, the system includes a request receiving unit that receives a second client request including input data related to the first content and the identifier and a content combining unit that combines the input data extracted from the second client request with the first content that is retrieved from the logging database based on the identifier.

Recording a log of operations

When a client apparatus receives a request for an electronic certificate from a server apparatus, the server apparatus reads a client certificate containing personal information and a server public key of the server apparatus from a storage unit and encrypts the client certificate using the server public key. The client apparatus also creates a temporary electronic certificate by setting, in a basic field of an electronic certificate, a predetermined item indicating that the electronic certificate is a temporary electronic certificate and by setting the client certificate having been encrypted in an extension field of the electronic certificate. Then, the client apparatus sends the temporary electronic certificate to the server apparatus.

To manage sessions between a client apparatus and a plurality of sever devices. Provided is a system including: a receiver for receiving, as a proxy for each of the plurality of server apparatuses, a request from the client apparatus to each of the plurality of server apparatuses; a determination unit for determining, upon receipt of the request from the client apparatus to any of the plurality of sever apparatuses, whether sessions established between the client apparatus and the plurality of server apparatuses are maintained; a disconnection unit for disconnecting, on condition that a session between the client apparatus and at least any one of the plurality of server apparatuses is already disconnected, the sessions established between the client apparatus and the server apparatuses different from the at least any one of the plurality of server apparatuses; and a forward unit for forwarding, on condition that the sessions established between the client apparatus and all of the plurality of server apparatuses are maintained, the received request to the destination server apparatus for the request.

Growing community of inventors

Sagamihara, Japan

Kohsuke Okamoto