Embedding a security support provider interface in a communication class library
View Patent ↗An apparatus for and method of improving the efficiency of service request/response activity requiring security functions. A security facility, such as Security Support Provider Interface is embedded in a communication class library which controls the communication between client and server applications. A context token is associated with the service request which specifies the security functions to be provided in honoring that particular request without any particular attention by either client or server application, as the security functions are exclusively concerned with the communication process rather than the service request/response activity.
1. A method of handling a service request from a client application to a service application, comprising,
a. embedding a security facility within a communication class library;
b. generating a service request within a user terminal using said client application;
c. transferring said service request from said client application to said service application located within a computer which is different from said user terminal;
d. receiving said service request by said service application;
e. honoring said service request by said service application;
f. automatically implementing security functions from said embedded security facility during said step which honors said service request; and
g. having a context token transferred from said client to said service application identifying required security functions from said embedded security facility.
2. The apparatus of claim 1 wherein said security facility further comprises an encryption object.
3. The apparatus of claim 2 wherein said security facility further comprises security support provider interface.
4. The apparatus of claim 3 wherein said security facility further comprises a decryption object.
5. The apparatus of claim 4 wherein said user terminal is responsively coupled to a data base management system via a publically accessible digital data communication network and wherein said service application is located within said data base management system.
6. A method according to claim 1 wherein said transferring step further comprises transferring said service request to said service application via a publically accessible digital data communication network.
7. A method according to claim 6 wherein said client application is located within said user terminal.
8. A method according to claim 7 further comprising a data base management system wherein said service application is located within said data base management system.
9. The data processing system according to claim 8 wherein said context token is transferred from said client application to said service application along with said service request.