International Business Machines Corporation

Maryann Hondo

Anthony Joseph Nadalin

Ajamu Akinwunmi Wesley

Nataraj Nagaratnam

Stephen Glen Graham

Paula K Austel

Stephen L Burbeck

Michael G McIntosh

Toufic Boubez

James B Casler

A sending entity creates a structured document and communicates it to a receiving entity includes a transform to ensure document elements are not moved during communication. The structured document comprises a root element and a set of child elements. A child element is protected by a digital signature, prior to being positioned within the document. This element includes a sending entity security policy. The receiving entity includes a transform that determines whether the signed element is in a given position within the received document. The transform evaluates the data string against a set of ancestor elements of the signed element to determine whether the signed element is in the given position. If so, the transform preferably outputs the signed element itself. If the transform determines that the signed element has been moved, however, preferably it outputs a given value other than the signed element.

Method and system for detecting movement of a signed element in a structured document

An apparatus and method for service classification are provided. The apparatus and method make use of canonical service descriptions which designate minimum requirements for a service to be classified into a corresponding classification. Based on the canonical service description, it can be determined whether a service that wishes to be classified into a particular classification of a taxonomy on a service broker meets the minimum requirements for that classification. Furthermore, the use of canonical service descriptions ensures that all services classified into a particular classification have a minimum level of functionality that will allow them to function properly when invoked.

Apparatus and method for categorizing services using canonical service descriptions

A method, system, apparatus, or computer program product is presented for routing event messages between data processing systems based on privacy policies associated with the data processing systems and based on event policies associated with event types for the event messages. When a system attempts to publish an event message for a particular type of event or to subscribe to those event messages, an event policy is checked to determine whether the system may publish messages for that type of event or may subscribe to those messages. Moreover, if a publishing system publishes an event message that contains personally identifiable information for a user of a data processing system, and a subscribing system has subscribed to event messages having the same event type, then the privacy policies associated with the systems are compared to determine compatibility or incompatibility between the privacy policies before routing a message between the systems.

Method and system for message routing based on privacy policies

A method, system and computer program product for implementing authorization policies for web services may include defining an authorization policy for access to a web service. The method, system and computer program product may also include attaching the authorization policy to a service definition for the web service.

Growing community of inventors

Arlington, MA, United States of America

Maryann Hondo