Sprint Communications Comapny L.p.

Shrikant D Jannu

David K Fultz

Vijaykumar Cherukumudi

Dora Potluri

Balagurunathan Balasubramanian

Richard R Perez

Denis Tsai

Wing K Lee

Nadirshah N Jivani

Rudi Himawan

Mouaz Allababidi

Kenneth J Golden

Keyang Wang

Alan Hsin

Omar Dewan

A computer system is provided including a single sign-on system with applications and a data store storing user profiles, each including a user ID, wherein each of the user profiles has a corresponding application password for one or more of the applications, and a user profile administration tool. The user profile administration tool includes a password provisioning section where an administrator selects a user profile and further selects an application type. The application type includes an application type wherein the administrator resets the password for one or more of the applications. The application type also includes a stand-alone application type wherein the administrator resets a password for a stand-alone application. The user profile administration tool further includes a password synchronizing section wherein the user profile administration tool automatically synchronizes the application passwords with each of the corresponding user profiles.

Integrated user profile administration tool

A system for digital certificate direction is provided. The system includes an application server having one or more applications and a user computer. The system also includes a certificate optional server that is operable to communicate with the user computer regarding access to the one or more applications. The certificate optional server is operable, when the user computer communication is associated with a digital certificate, to direct the user computer to a digital certificate mandated computer to promote access to the one or more applications. When the user computer communication is not associated with the digital certificate, the certificate optional server is operable to direct the user computer to a certificate generator.

System and method for certificate based redirection

The present system allows disparate secure applications to communicate directly with one another in a heterogeneous application environment by providing for the creation of tokens that can be passed between the applications without human intervention. Security information is passed between applications in the form of a token with a string data type. Since a string is a primitive data type, it can be recognized by a large number of applications and interfaces. The token has no header and therefore no application-specific header configuration, making it platform and technology independent. This eliminates the need for conversion of security information between different formats. The use of tokens also eliminates the need for an application to be authenticated and authorized every time it sends a message to another application. Instead of a permanent context or session, a context is created with every invocation from one application to another.

Application-to-application security in enterprise security services

A system for preventing a user from interrupting a script launching one or more applications on a computer is provided. The system comprises a script operable to promote launching one or more applications. The system also comprises a security curtain application operable to prevent the user's input from interfering with operation of the script. The system further comprises enabling and disabling the security curtain application based upon one or more triggering events.

Secure authentication curtain system and method

A computer-implemented system for managing security using a SOAP message is provided. The system includes a SOAP message that has a security portion. The security portion of the SOAP message has at least one security component. The system includes a custom class and a handler. The custom class identifies the web services security version or draft of the security component within the SOAP message. The handler is operable based on the web services security version or draft related to the at least one security component promote processing of a security aspect of the SOAP message.

Web services security test framework and method

A system to validate a request for web services which includes a digital certificate is provided. The system includes a first certification authority that provides a public encryption key and a certificate revocation list in response to requests. The system also includes a certification revocation list component that determines whether a digital certificate is named in the certification revocation list, a certificate verification component that determines whether a digital certificate is valid, a plurality of verifier components that determine the validity of a request for web services and each of which operates in accordance with a different one of a plurality of OASIS Web Services Security versions. The system also includes a management component to determine the version of the OASIS Web Service Security version of the web services request and to select an appropriate verifier component.

Web services security architecture

Disclosed herein is a Directory Extension Service (DES) system and method for generating a count of a number of entries in a node or a number of entries in a node and any nested nodes in one or more directory databases. The Directory Extension Service may parse a count requests to generate one or more sets of commands to be sent to the one or more directory databases. The generated sets of commands may be particularly tailored according to proprietary operational attributes or controls supported by each vendor that implements a directory database. The count values retrieved from each of the directory databases may then be combined by the Directory Extension Service system and the resultant count value may be transparently presented to the application that has requested the count.

Directory access extension framework

A system for secure communication over a computer network. The system includes a web server, a component, and a service gateway. The web server is operable to receive a message from a customer application via a transport layer and validate a digital certificate associated with the message. The component, which may be a software component, receives the digital certificate from the web server at the transport layer and provides the digital certificate at an application layer. The service gateway receives the digital certificate at the application layer and identifies the customer application associated with the digital certificate. The service gateway promotes validation of the digital certificate and wherein the digital certificate is valid, the service gateway promotes communication of the message from the customer application to a supplier application.

Mechanism for layered authentication

A naming service for locating a service in an enterprise is provided. The naming service comprising a binding module to associate a first service with a location of an interface maintaining a reference to the first service, the binding module further operable to associate a second service with a location of the second service. The naming service further comprising a look-up module operative to provide the location of the interface in response to a request by an application for the first service, the look-up module further operable to provide the location of the second service in response to a request by a second application. A method for locating a service in an enterprise is also provided.

Enterprise naming service system and method

The present invention, known as the Middleware Brokering System, brokers messages between middleware computing products. Each middleware service can send data to the Middleware Brokering System in its native data format and programming syntax. The Middleware Brokering System converts the data transmitted from the different platforms into a standard format known as a structured event. Messages are then transmitted to and stored in an underlying, commercially available publish/subscribe engine. The Middleware Brokering System contains internal logic that determines whether any subscribers are interested in the messages. If an interested subscriber is found, the Middleware Brokering System retrieves the message from the publish/subscribe engine, converts the data from the structured event into the native format of the receiving application, and sends the message to the appropriate application.

Middleware brokering system

The present invention, known as the Middleware Brokering System Adapter, is a component useful with a Middleware Brokering System, which brokers messages between middleware computing products. Each middleware service can send data to and receive data from the Middleware Brokering System in its native data format and programming syntax. The Middleware Brokering System Adapter is a component of the Middleware Brokering System that transforms data messages from the native format of a middleware computing product or a mainframe computing system into a format known as a structured event and from a structured event into the native format of the middleware product or the mainframe system. In an embodiment of the invention, the Middleware Brokering System Adapter maps the fields of a Cobol copybook onto the fields of a structured event and the fields of a structured event onto the fields of a copybook. In an alternative embodiment, the Middleware Brokering System Adapter maps the fields of a Java Messaging Service MapMessage onto the fields of a structured event and the fields of a structured event onto the fields of a MapMessage.

Growing community of inventors

Frisco, TX, United States of America

Shrikant D Jannu