The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.
The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.
Patent No.:
Date of Patent:
Aug. 12, 2008
Filed:
May. 20, 2004
Messaoud Benantar, Austin, TX (US);
Yen-fu Chen, Austin, TX (US);
John W. Dunsmoir, Round Rock, TX (US);
Randolph Michael Forlenza, Austin, TX (US);
Wei Liu, Wexford, PA (US);
Sandra Juni Schlosser, Austin, TX (US);
Messaoud Benantar, Austin, TX (US);
Yen-Fu Chen, Austin, TX (US);
John W. Dunsmoir, Round Rock, TX (US);
Randolph Michael Forlenza, Austin, TX (US);
Wei Liu, Wexford, PA (US);
Sandra Juni Schlosser, Austin, TX (US);
International Business Machines Corporation, Armonk, NY (US);
Abstract
A Centralized Authentication & Authorization (CAA) system that prevents unauthorized access to client data using a secure global hashtable residing in the application server in a web services environment. CAA comprises a Service Request Filter (SRF) and Security Program (SP). The SRF intercepts service requests, extracts the service client's identifier from a digital certificate attached to the request, and stores the identifier in memory accessible to service providers. The client identifier is secured by the SP using a key unique to the client identifier. When the web services manager requests the client identifier, the web services manager must present the key to the SP in order to access the client identifier. Thus, the present invention prevents a malicious user from attempting to obtain sensitive data within the application server once the malicious user has gained access past the firewall.