International Business Machines Corporation

Paula K Austel

Isabelle Marie Rouvellou

Ignacio Silva-Lepe

Thomas Arthur Mikalsen

Revathi Subramanian

Han Chen

Upendra Sharma

Michael G McIntosh

Bin Wang

Jing Min Xu

Suresh N Chari

Hidayatullah Habeebullah Shaikh

Anthony Joseph Nadalin

He Huang

Alla Segal

Rahul P Akolkar

Francisco Phelan Curbera

Eugene Michael Maximilien

Matthew Jason Duftler

Rania Yousef Khalaf

Maryann Hondo

Nima Kaviani

Florian F Rosenberg

A distributed component software system that includes an analysis server that: (i) receives a set of messages, where each message is sent between components of a distributed component software system (DCSS), and where each message includes an identification of a respective source component, an identification of a respective target component and respective message content; (ii) for each message of the set of received messages, resolves the respective source component; (iii) for each message of the set of received messages, resolves the respective source component; (iv) determines a sequence of the plurality of messages; and (v) generates a human-understandable abstract corresponding to the set of received messages based upon the respective message sources, the respective message targets, the respective message content and the sequence of the set of received messages.

Automatic abstraction of flow of control in a distributed virtualization platform

A solution descriptor comprises a set of component workload units, a workload unit describing a deployable application component with application binary, configuration parameters and dependency declarations. An environment descriptor specifies a set of target platforms and plugins in an execution environment. A deployer interprets the solution descriptor and the environment descriptor, and generates a list of tuples comprising compatible workload-plugin-platform combinations. The deployer determines an execution order for the list of tuples, and invokes the plugins in the list of tuples in the execution order, wherein each of the plugins executes a corresponding compatible workload on a corresponding compatible target platform specified in the list of tuples.

Release and management of composite applications on PaaS

Release and management of composite applications on PAAS

A sending entity creates a structured document and communicates it to a receiving entity includes a transform to ensure document elements are not moved during communication. The structured document comprises a root element and a set of child elements. A child element is protected by a digital signature, prior to being positioned within the document. This element includes a sending entity security policy. The receiving entity includes a transform that determines whether the signed element is in a given position within the received document. The transform evaluates the data string against a set of ancestor elements of the signed element to determine whether the signed element is in the given position. If so, the transform preferably outputs the signed element itself. If the transform determines that the signed element has been moved, however, preferably it outputs a given value other than the signed element.

Method and system for detecting movement of a signed element in a structured document

A method, system and computer program product for security model for workflows aggregating third party secure services. In one embodiment, a workflow model described in a workflow language is provided and configured to declare security requirements of a composite application integrating protected data from two or more external network resources. The method also incorporates providing an authentication service executing on at least one secure server computer. The authentication service is configured to conduct user authentication and authorization to access the protected data at the external network resources on behalf of the composite application executing on at least one host server computer according to the workflow language.

Security model for workflows aggregating third party secure services

A method for single sign-on with established federation includes triggering a single sign-on operation from a first service to a second service, retrieving, by the first service, an associated federation key and pseudo identification for a user agent, generating, by the first service, a token signed with a federation key for the user agent based on the pseudo identification, redirecting, by the first service, the user agent to the second service, wherein the user agent transfers the token to the second service, verifying, by the second service, the token and determining an associated identification in the second service, and returning, by the second service, a resource to the user agent.

User initiated and controlled identity federation establishment and revocation mechanism

A system in a cloud services environment comprises one or more service offerings, one or more service instances and one or more service support utilities. Each of the one or more service offerings is described by at least one service descriptor. Each of the one or more service instances is obtained from at least one of the one or more service offerings. Each of the one or more service support utilities is customized by at least one service descriptor. A service comprises at least one component and a service descriptor comprises one or more models.

On-boarding services to a cloud environment

Growing community of inventors

Cortlandt Manor, NY, United States of America

Paula K Austel