International Business Machines Corporation

Michael J Kerrigan

Russell Holden

Gerald Lebizay

Jane B Marcus

Daniel C Gurney

Alan D Eldridge

Peter Otto Mierswa

Chester E Ryder, Iii

Vinod R Seraphin

Robert John Paganetti

Patrick Charles Mancuso

Kenneth E Brunsen

David Scott Kern, Jr

Nikolaus K Brauer

Michael I Killoran

Alfred Weiss

Olin Lowe MacSorley

A secure database includes a catalog of information about one or more identity providers (IdPs) that are trusted by a service provider (SP) to authenticate users on the SP's behalf. The catalog securely stores one or more IdP configurations. An entry in the database stores information associated with the trusted IdP including artifacts to identify the IdP, artifacts used by the IdP for cryptographic operations, and a specification of one or more website(s) serviced by the trusted identity provider. Upon receipt by the SP of identity information representing a user that has authenticated to an IdP, information in the catalog of information is used to determine whether the IdP is trusted to authenticate the user on the service provider's behalf. The determination verifies that the SP uses the IdP and that a binding between an IdP identifier and at least one IdP cryptographic artifact is valid.

Secure configuration catalog of trusted identity providers

A request is received by a first computer. The first computer delegates the first request to a second computer. The second computer attempts to process the first request and identifies an imminent fault as a result of the attempt. The second computer sends a message to the first computer indicating an imminent fault as a result of the attempted processing of the first request. The first computer sends a message to a third computer indicating that a second request matching the first request should not be processed.

Heuristic failure prevention in software as a service (SAAS) systems

An input-output port control subsystem for use with a computer system having separate source and destination buses incorporated therein. Said system including circuitry for controlling operations of said system and said input/output subsystem, said subsystem including a bidirectional input/output bus for transferring data to and from said system, and separate gating means for selectively connecting said source and destination buses to said bidirectional I/O bus. External devices are connected to said bus thru an adaptor unit which is directly connected to said processing system by appropriate control lines. The input/output subsystem is adapted to operate either under programmed I/O control mode thru the central processing system or in cycle steal mode wherein the I/O devices themselves request cycle steal service time on the I/O bus thru their connected adaptor.

Input/output port control

Growing community of inventors

Salem, MA, United States of America

Michael J Kerrigan