International Business Machines Corporation

Sandra Juni Schlosser

Fabian F Morgan

Sarah White Eagle

Yen-Fu Chen

Randolph Michael Forlenza

John W Dunsmoir

Messaoud Benantar

Wei Liu

Danny Y Chen

Ronald Patrick Doyle

William F Beausoleil

Alexander Druyan

Ching Yu Conrad Lo

Donald A James

John A Hupcey

Matt R Kuritzky

Charles R Berghorn

Arsalan K Lodhi

Rhonda L Childress

Eric Michael Anderson

Antonio Abbondanzio

Joel Leslie Smith

Patricia Stephany Hogan

James A Riosa

Kenneth M Becker

Kenneth Alan Rowland

Bradley Paul Anderson

An authentication configurator may define a LDAP security group for LDAP authentication, wherein the LDAP security group is associated with rights. It may define a native security group for native authentication users, wherein the native authentication group has at least one right not present in the LDAP security group, and define customer-specified LDAP chains. It may configure an LDAP authentication web application and a native authentication web application, wherein the LDAP authentication web application and the native authentication web application each connect to a service management database, and the LDAP authentication web application uses the customer-specified LDAP chains. A first Uniform Resource Locator (URL) for LDAP authentication to access the LDAP authentication web application and a second URL for native authentication to access the native authentication web application may also be configured. It may assess the authentication requirements of a customer and create a user identifier, responsive to assessing.

Multiple authentication support in a shared environment

This present invention provides an efficient method and system to manage service requests across multiple service request systems. This management method involves merging all service requests from multiple systems into standard system, sorting the request according to some standard and presenting a display list of all of the requests having a common characteristic to a technician or requester. Service requests are gathered from many different backend-ticketing systems and presented to the technicians in a single logical view. Service requests gathered from each backend ticketing system are packaged in an XML document format. The efficient use of a common XML format is an efficient way to manage all service requests from all backend-ticketing systems. These service requests can be sorted by ticket open or close date/time, status, severity of problem, etc. in ascending or descending order and be presented to the technicians in a single logical view. These requests are presented in a display as a single logical view of service requests from different backend systems.

Method and system for managing service requests across multiple systems

Revised component selector extracts a translation file comprising a plurality of English keys and translation language values in a database, including untranslated keys as an XML file. The revised component selector extracts a plurality of English keys and translation language values and determines whether there are XML unsupported characters in the XML file. The revised component selector first filters out the XML unsupported characters to form a resultant file, responsive to a determination that XML unsupported characters are in the XML file. The revised component second selector filters out translated data from the resultant file to form an untranslated file. The revised component selector selects a subset of data. The revised component selector, responsive to selecting, third filters out any data not included in the subset to form a translatable file, responsive to selecting. The revised component selector sends the translatable file to a translation center to translate.

Delta language translation

An account system obtains a first translation file associated with it. The account system obtains a second translation file from a second account system, wherein the second account system is a data processing system. The account system determines whether a third account system has a third translation file with untranslated terms. The account system obtains the third translation file from the third account system, responding to a determination that the third account system has the third translation file with untranslated terms. The account system, responding to a determination that the third account system has the third translation file with untranslated terms, forms a comprehensive file from at least two files selected from the group consisting of the first translation file, second and/or third translation files. The account system translates the comprehensive file to form a translated file.

Language translation reuse in different systems

A Centralized Authentication & Authorization (CAA) system that facilitates secure communication between service clients and service providers. CAA comprises a Service Request Filter (SRF), a Service Client Authentication Program (SCAP), a Service Authorization Program (SAP), and an Authorization Database (ADB). The SRF intercepts service requests, extracts the service client's identifier from a digital certificate attached to the request, and stores the identifier in memory accessible to service providers. In the preferred embodiment, the SRF forwards the service request to a web service manager. The web service manager invokes SCAP. SCAP matches the identifier with a record stored in ADB. SAP queries ADB to determine if the service request is valid for the service client. If the service request is valid, SAP authorizes the service request and the appropriate service provider processes the service request.

Architecture and design for central authentication and authorization in an on-demand utility environment

A Centralized Authentication & Authorization (CAA) system that prevents unauthorized access to client data using a secure global hashtable residing in the application server in a web services environment. CAA comprises a Service Request Filter (SRF) and Security Program (SP). The SRF intercepts service requests, extracts the service client's identifier from a digital certificate attached to the request, and stores the identifier in memory accessible to service providers. The client identifier is secured by the SP using a key unique to the client identifier. When the web services manager requests the client identifier, the web services manager must present the key to the SP in order to access the client identifier. Thus, the present invention prevents a malicious user from attempting to obtain sensitive data within the application server once the malicious user has gained access past the firewall.

Architecture and design for central authentication and authorization in an on-demand utility environment using a secured global hashtable

The 'Multiple Problem Ticket Creation Tool' (MPTCT) creates problem tickets on a network connected by an enterprise services bus having servers on the network with different problem ticketing systems. The MPTCT receives an original problem ticket, converts the original problem ticket to an XML or other format, determines which problem ticketing system is responsible for fixing the problem, determines which problem ticketing system are affected by the problem, creates an authoritative ticket on the responsible problem ticketing system, creates an informational ticket on every ticketing system affected by the problem, maps a tracking number between the original problem ticket and the related problem tickets created on other problem ticketing systems, tracks callbacks from each problem ticketing system, updates each related problem ticket with the callback information, and closes each related informational problem ticket and the original problem ticket when the authoritative problem ticket is closed.

System and method of managing events on multiple problem ticketing system

In one form, a method, for creating multiple segments of source information for presentation on a device having a limited size display screen, includes generating a first derivative file describing first presentation material. The derivative file is derived from a first copy of a master style sheet file. The master style sheet specifies a style of displaying the source information. The source information includes a plurality of attributes, of which a first set of attributes are included in the first derivative style sheet file. A second derivative file describing second presentation material is derived from a second copy of the master style sheet file. A second set of attributes included in the source information are included in the second derivative file. The first presentation and second presentation materials are generated responsive to the source information and the respective first and second derivative files.

Segmentation of views for simplified navigation on limited device

A method for dynamically translating bus address within a computer system is disclosed. In accordance with the method and system of the present invention, a computer system has a multiple of buses connected in a hierarchial manner. Information concerning a bus and a device attached to a bus are stored in a Hardware Namespace. In response to a request for an access to a device attached to one of the buses for the first time, a determination is made from the Hardware Namespace as to whether or not there is resource available for the device in a parent bus of the device. If there is resource available in the parent bus for the device, another determination is made from the Hardware Namespace as to whether or not the resource is exclusively allocated in the parent bus for the device. If the resource is exclusively allocated in the parent bus for the device, the device is configured according to the available resource. If the resource is not exclusively allocated in the parent bus for the device, the process resolves through each level of buses in the hierarchy until a bus having a resource that can be allocated for the device is found such that the device can be added to any one of the buses within the computer system independent of bus technology.

Method and system for dynamically translating bus addresses within a

A method and system for providing device driver configurations on demand during runtime within a computer system is disclosed. In accordance with a method of the present invention, a Hardware Namespace is constructed by a Hardware Resource Manager and a Logical Device Namespace is constructed by a Logical Device Manager within the computer system. A determination is made as to whether or not the peripheral device is contained within the Hardware Namespace and whether or not a device driver for the peripheral device is also contained within the Logical Device Namespace, in response to a first attempt to access a peripheral device after system boot-up by an application software. In response to a determination that the peripheral device is not contained within the Hardware Namespace, a user is prompted to install the peripheral device within the computer system. On the other hand, in response to a determination that the device driver for the peripheral device is not contained within the Logical Device Namespace, the user is prompted to install the device driver for the peripheral device within the computer system. After loading the device driver to a system memory, the peripheral device can be utilized by the application software via the device driver.

Method and system for providing device driver configurations on demand

. A shared fixed block architecture direct access storage system and method for use with a plurality of computer systems is described. The storage system includes a shared fixed block architecture direct access storage device with a plurality of shared files. A shared fixed block architecture control unit is coupled to the shared fixed block architecture direct access storage device and to the plurality of computer systems. The shared fixed block architecture control unit also includes a data unit responsible for moving data between a shared fixed block architecture direct access storage device in the computer systems, a SETL unit responsible for processing access requests and for creating control files corresponding to each shared file, and a heart beat unit responsible for updating the control files. The method of the present invention includes the steps of receiving an access request from one of the computers for access to a selected shared file; and if a control file corresponding to this selected file has not been previously created, then creating a control file corresponding to this selected file. The control file is read to determine if it contains a record indicating that another of the computer systems already has access to a selected file and whether that access is incompatible with the current access request. Finally, if either no other system currently has access to the requested file or if another system has access to the requested file which is not incompatible, then the access request is granted.

Growing community of inventors

Austin, TX, United States of America

Sandra Juni Schlosser