Digital Equipment Corporation

Ram Sudama

Brad A Johnson

Thomas Courtenay Porcher

David M Griffin

Jerrold S Leichter

Dexter Sealy

James Shelhamer

Owen H Tallman

Dah-Ming Chiu

Kenneth W Ouellette

David L Magid

This invention consists of a method for providing security for distributing management operations among components of a computer network using a network of mutually trusting, mutually authenticating management services to dispatch operations to selected host systems. Mutual authentication and trust are established on every transmission link from a point of submission to a designated management server which invokes a service provider to perform management operations on a selected host.

Method for providing a security facility for a network of management

The following is a method and apparatus for administering an operation specified for performance on a set of independently managed hosts. The operation is received initially by one of a plurality of management servers in a managed host system. The operation, specifying a group object, is transferred to the management server designated by the system to administer the operation specified on the group object. The designated management server thereafter decomposes the group object into constituent objects which may be host objects or additional group objects. Next, the locally administered objects are scheduled for execution on the hosts administered by the designated management server. The non-locally administered objects are transferred to the management servers identified in a database for administering the objects. After executing the operation on the host objects, the host objects and group objects return status information back to the designated management server. The status information is then transmitted to the management server that initially received the operation.

Method and apparatus for network computer systems management group

Method and apparatus facilitating the processing of a request from a client application for a service, or for access to a resource, in a distributed computing environment. A shared repository is organized in such a manner that binding information, defining how a server is accessed, can be stored in the repository and accessed by multiple clients without their having knowledge of more than the common name for the requested service, or the common name of a specific resource for performing the service. The binding information for each server is stored in a server entry sub-hierarchy of the namespace in the shared repository, and the full names of server entries are stored in a service entry sub-hierarchy of the namespace and a resource entry sub-hierarchy of the namespace. When a client requests access to a service or to a specific resource, the server entry names are accessible from the service entry sub-hierarchy of the namespace or the resource entry sub-hierarchy of the namespace, using only common names for the service or resource. Once a server entry name is obtained, the binding information is retrieved for the client, and a logical connection can be established between the client and the requested service or resource, without having to provide each client with detailed information about the location or name of the server binding information.

Mechanism for locating without search discrete application resources

The invention provides a new and improved system for transferring information between a host system and a terminal system. A digital data processing system includes a host computer system which runs processors and a terminal system which is connected to the application host computer system over a communication link. The terminal system includes one or more virtual terminals each of which allows an operator to enter information and allows output information to be displayed. The association between a terminal device and an application process is a session. Initially, a session is selected by means of a command transferred over the communications link. Thereafter, information, associated with the selected session, may be transferred over the communication link. This may continue until another session is selected. This transfer system minimizes the amount of control information which is required to identify the particular session with which data being transmitted over the communications link is associated. Once a session is selected, it remains selected until another session is selected, after which the data transmitted is associated with the newly selected session.

Terminal device session management protocol

A method is used for collecting information at the session level for a multiple node distributed processing system. A first component software program monitors all packets passing through a node and extracts packet headers having a predetermined format from all nodes. A second component software program identifies a session in which each of the extracted packet headers was transmitted and, for each session, accumulates characterizing information about that session and calculates statistical data concerning all the sessions.

Growing community of inventors

Concord, MA, United States of America

Ram Sudama