International Business Machines Corporation

Robert Howard High, Jr

David Yu Chang

Geoffrey Martin Hambrick

Rodney Alan Little

Sridhar Sudarsan

Nataraj Nagaratnam

George Prentice Copeland

Messaoud Benantar

Russell Ley Newcombe

Martin Mulholland

Vinoj Narayan Kumar

Kathryn Sarah Warr

John Alexander Buslawski

Gordon Douglas Hutchison

Jeffrey Alan Frey

Anthony Joseph Nadalin

Vishwanath Venkataramappa

Ian Robinson

Thomas James Freund

Rohit Kapoor

Simon Antony Holdsworth

Virgil Anthony Albaugh

James Lee Van Oosten

Stephen James Cocks

Michael Cheng

Peter John Schommer

Carlton Keith Mason

Charlie James Redlin

Derek Wan Hok Ho

Debasish Banerjee

David Alan Zavala

Tim Alan Fors

Ute Schuerfeld

Mahesh Kumar Rathi

Philip Yen-Tang Cheng

Russell Lev Newcombe

Lori Jane Milhans VanGulick

Ashvin Radiya

Mohamad Kodeih

An install factory creates install packages used to install complex applications onto multiple data processing systems in a reliable and reproducible manner. The install factory takes a variety of inputs to build a custom installation package. The custom install package may be used repeatedly for installs, using the same install package, a full install on a first data processing system, an updated install on a second data processing system, a fix or service pack on a third data processing system, and also configure an application on a fourth data processing system. Thereafter, all data processing systems have the desired level of the application installed. In addition, the install factory may create install packages that are modified in accordance with user preferences.

Method and apparatus for creation of customized install packages for installation of software

The present invention provides a method, apparatus and computer program product which enables a target service to provide operations which behave, on a per operation basis, in a way appropriate to the type of client that requested the operation to be performed. As a result the target service can provide operations which behave differently for different clients. Further the client can obtain details of the behavior characteristics of the operations, according to its type, at runtime and act appropriately in the event of the request being timed out or resulting in a communication failure. For example, the client middleware can take action to re-issue a timed out request if the behavior characteristic for that operation indicates that multiple invocations of the operation will yield the same result.

Client/server request handling

An improved method, apparatus, and computer instructions for creating and running batch jobs in an object oriented environment, such as a J2EE environment. A request to execute a batch job is received. A deployment descriptor file is processed to identify a batch bean to be invoked. This batch job session bean processes the request, parses deployment descriptor file that comprises definitions of relationships between other helper classes, entity and session beans. The identified batch bean is invoked to execute the batch job step in the order described in the deployment descriptor applying checkpoints at intervals specified in the descriptor.

Implementing container managed batch jobs in an enterprise java bean environment

A batch component model is provided within a distributed object environment. The batch component is designed to capture the iterative logic of a batch program as it reads from one or more input streams, invokes operations on other business component functions, and generates output to one or more output streams. Deployment descriptors express declarative policies for the component that will influence how the component is managed including the streams it uses, business components it depends on, how processing costs are accounted, and the resource demands the job will put on the system. Input streams and output streams are encapsulated in objects that hide the actual source of input and output data so that the component can be redeployed in different execution environments to different physical data sources without requiring the program to be changed. A batch container enforces the deployment policies declared for the batch component.

Component model for batch computing in a distributed object environment

A method, apparatus, and computer instructions are provided for implementing container managed uses, ownerships, and references in an enterprise JavaBean&#x2122; environment. A user may specify a uses, ownership, reference relationships between entity beans and sessions in a deployment descriptor file. When the file is processed, the present embodiment generates methods on the entity beans and allows the container to recognize the relationships, such that the user may access the session beans based on the specified relationships.

Apparatus for implementing container managed uses, ownerships, and references in an enterprise javabean environment

A method and system for providing client locale information to a server in a distributed computer enterprise. When a client generates a request to a remote server, the client's locale and time zone information, known as the international context, is associated with the request. The server then processes requests from the client according to the internationalization context. The client's international context is propagated to successive servers that further service the client's request.

Localization in distributed computer environments

Method and apparatus for implementing container managed uses, ownerships, and references in an enterprise JavaBean environment

A method and system to allow multiple users of a client computer to establish a secure connection for each of the multiple users between the client computer and a server computer. Each user is allowed to unlock a keyfile unique to that user. The unique keyfile is able to authenticate the user's identity to the server computer. Access to the users unique keyfile is accomplished by the user inputting into the client computer a unique user password for the user's unique keyfile. A Graphical User Interface (GUI) is provided to allow the user to input the unique user password for that user's unique keyfile. Upon input of the password, the selected keyfile is opened to enable a user authentication process to authenticate the user's identity to the server computer, thus creating an authenticated secure connection between the server computer and the client computer for the specific user.

Multiple secure socket layer keyfiles for client login support

Methods, systems, and computer program products are disclosed for protecting the security of resources in distributed computing environments. The disclosed techniques improve administration and enforcement of security policies. Allowed actions on resources, also called permissions, (such as invocations of particular methods, read or write access of a particular row or perhaps a particular column in a database table, and so forth) are grouped, and each group of permissions is associated with a role name. A particular action on a particular resource may be specified in more than one group, and therefore may be associated with more than one role. Each role is administered as a security object. Users and/or user groups may be associated with one or more roles. At run-time, access to a resource is protected by determining whether the invoking user has been associated with (granted) at least one of the roles required for this type of access on this resource.

Role-permission model for security policy administration and enforcement

A method and system for providing security protection to Common Object Request Broker Architecture (CORBA) objects located on a server. An EJB shadow object is created for the CORBA object. The EJB shadow object invokes an EJB security mechanism on behalf of the CORBA object, thus protecting the CORBA object from unauthorized object requesters. In a preferred embodiment, requesters are categorized and identified by their roles in the enterprise. Only those requesters having a proper role are authorized to access the requested object.

Securing non-EJB corba objects using an EJB security mechanism

A method and implementing computer system are provided in which a Quality Of Protection (QOP) indication is established in a tagged component for servers in a network domain. Each server may have one QOP setting associated with the server for inbound messages and another QOP setting associated with the server for outbound messages. In an exemplary embodiment, the QOP settings are contained in a list which may be updated to include additional QOPs which the server may be equipped to support.

Network domain with secured and unsecured servers

A system for efficiently generating keys for subsequently objects during object creation and for finding and activating objects using the generated keys in an object oriented system includes one or more processors, a storage system, one or more I/O controllers, a system bus, operatively connecting the processors, the storage system and the I/O controllers, a system control program for controlling the operation of the system, and an extensible instance manager which generates keys and manages instances of objects under the control of the system control program.

Object oriented information handling system including an extensible instance manager

A method and apparatus in a computer system for establishing a connection between a client proxy object and a server target object. A request is received from the client proxy object to access the server target object, wherein the request includes an identification of a type of communication and type of message to be sent to the server target object. A connection object is identified based on the type of communication and the type of message. The connection object implementing the type of communication is returned, wherein the connection between the client proxy object and the server target object is facilitated using the connection object.

Method and apparatus for multiple security service enablement in a data processing system

A method and apparatus for optimizing references to objects in a distributed data processing system. A method is invoked in a client process by client application on a target object. In response to determining that the target object is on a remote process reference, a smart proxy determines whether the message can be processed within the client process. In response to determining that the message can be processed in the client process, the message is processed locally. Otherwise the message is sent to the target object for processing.

Method and apparatus for optimizing references to objects in a data processing system

A method and system for maintaining a secure association between a client and a server in a distributed computing system by computing a session identifier as a function of a Kerberos-based authentication ticket. The session identifier is independently derived or verified by the client and the server upon a first request by the client to the server, and each subsequent request by the client to the server is tagged with this session identifier to provide a reliable security association.

Growing community of inventors

Round Rock, TX, United States of America

Robert Howard High, Jr