Ca, Inc.

Mike Arnold Lyons

Kenneth William Scott Morrison

Sascha Horst Preibisch

Vincent Chan

Francois Lascelles

Richard Jason Refuerzo Raquepo

Anthony Peiqun Yu

To determine whether a set of software services underlying an API adhere to architecture guidelines, an architecture guideline validation system analyzes program code as part of a compilation process for the services to generate a data structure that indicates an organization of the services and invocations between the services. The system analyzes the data structure to determine whether any architecture guidelines have been violated. Example architecture guidelines can include limitations on a number of successive invocations and restrictions as to a directionality of invocations (e.g. an invocation by a private, secure service to an exposed, client-facing service). If any violations are identified, the system indicates the violations and may display the violations as compiler errors or warnings.

Automated enforcement of architecture guidelines for application programming interfaces

A method of ensuring the identity of a first processing device to a second processing device allows for secure network communication between the devices. A network resource address including an encoded trusted identifier in a portion of the address excluding the host name of the first processing device are provided to a second processing device by a trusted distribution mechanism. The trusted identifier is derived from a public key of the first processing device. Communication is initiated with the first processing device at the network resource address and a public key purporting to identify the first processing device is received in response to initiating the communication. The trusted identifier is compared to a transformation of at least a portion of the public key to determine a match between the identifier and the transformation. If the trusted identifier and the transformation match, the identity of the first processing device is verified.

Server public key pinning by URL

Systems and techniques for representing data transformation loss in a system model that includes multiple nodes are disclosed. In an embodiment, an interface generator determines that a first node in a data path applies a data coding. In response, at least in part, to determining that a second node that is downstream from the first node applies a data transcoding, the interface generator determines a decoding stability factor that corresponds to a combined data transformation loss incurred by the data transcoding in combination with the data coding. The interface generator generates a display object having a display indicator that corresponds to the decoding stability factor.

Detecting and displaying cumulative lossy transformation

A secure protocol for registering a user, device and application with a computing device, such as a server, is provided. The protocol uses a single sign-on or registration request that enables multiple applications executing on single mobile computing device to access server resources' without each application separately registering with the server. After registration, a server is able to determine which user is using which application on which computing device whenever a request is sent from a device to the server. This type of registration enables fine grained access control to protected resources, such as information and/or services, of the server.

Growing community of inventors

Vancouver, Canada

Mike Arnold Lyons