International Business Machines Corporation

Margaret K LaBelle

Donna N Dillenberger

Timothy James Hahn

John C Dayka

Mark A Nelson

Michael Gerard Mall

Richard Henry Guski

Richard Dievendorff

Patrick S Botz

Stuart L Silen

Earle H Jenner

Roger L Brockmeyer

Daniel E House

An authenticated identity propagation and translation technique is provided based on a trust relationship between multiple user identification and authentication services resident on different computing components of a multi-component transaction processing computing environment including distributed and mainframe computing components. The technique includes, in one embodiment, forwarding, in association with transaction requests, identified and authenticated user identification and authentication information from a distributed component to a mainframe component, facilitating the selection of the appropriate mainframe user identity with which to execute the mainframe portion of the transaction, and creating the appropriate run-time security context.

Authenticated identity propagation and translation within a multiple computing unit environment

An extension of the two phase commit protocol allows distributed participation among physically distant agents independent of the communications mechanism being used in a data processing system. An extra stage of processing is added to the two phase commit protocol called End Phase One Processing (EPOP) which enables a distribution of the coordinator function across systems using any communication mechanism. EPOP is an extra stage in which a participant can receive control. In this extra stage, a participant flows two phase commit protocol sequences to distributed systems. The communication mechanism is used in such a way that it becomes part of a distributed coordinator. The coordinator itself does not need knowledge of other systems. The extra stage of processing is enabled by an operating system service called Enable End Phase One Exit Processing (EEPOEP). EEPOEP causes an extension of two phase commit protocol to be used on the issuing system. In this way, not only distributed databases can be supported, but also distributed users and distributed generic resource managers. A new response, called ABSTAIN, can be used by a resource manager in response to a PREPARE signal from the coordinator. This response from the resource manager to the coordinator indicates that the resource manager wants to continue to be involved with the unit of work two phase commit process but does not want to influence the final decision (i.e., COMMIT or BACKOUT) of the unit of work.

Extension of two phase commit protocol to distributed participants

Growing community of inventors

Poughkeepsie, NY, United States of America

Margaret K LaBelle