International Business Machines Corporation

Steven Wright

Howard Shelton Lambert

Brian Innes

David A Barnes

Andrew J Parker

Secure access in a computing environment is provided. One implementation involves a client generating a sequence for tapping server ports, and the client identifying itself to the server by tapping the server ports based on the sequence. The server verifies if the tapping sequence is correct. If the tapping sequence is correct, access is provided from the client to the server.

Port tapping for secure access

Provided are methods, apparatus, and computer programs for self-generating device names for communications devices using processes running on the device. The device names are then used to enable the devices to be identified during network communications. This avoids the configuration overhead inherent in requiring unique device names to be allocated by a central naming authority. Uniqueness of device names is achieved by a class-based naming convention in which class names are associated with device types and unique device identifiers are allocated for devices within a class. The device identifiers of one class may have a very different format from device identifiers in other classes, and processes are provided for interpreting the different formats of device identifier to identify individual devices.

Naming convention for different types of device, and apparatus and methods using the naming convention

A session processing module for a server is adapted to communicate across the Internet with a plurality of clients. The processing module runs within a servlet and allocates a session identifier in response to a first input stream of a session between a client and the server; negotiates communication characteristics for the session; and instantiates, according to the communication characteristics, routines for processing subsequent session input streams containing request data and routines for generating session output streams containing response data. A variable depth of penetration to be applied to a dynamically specified quality of service for a session is enabled. Thus, in one embodiment the module relays encrypted request data for a session to a back-end server, and receives from the back-end server encrypted response data for the session for the client. Alternatively, the module itself decrypts input streams containing request data and processes the data to generate output streams containing encrypted response data for the client.

Growing community of inventors

Upham, United Kingdom

Steven Wright