Authentication with credentials in Java messaging service

1. A method for authentication with credentials in a Java messaging service (“JMS”), the method comprising:

providing pre-authenticated credentials for a Java security domain for a user application, the pre-authenticated credentials comprising authentication credentials that are already authenticated when obtained by the user application and that are subsequently used again in JMS authentication;

caching the pre-authenticated credentials in a middleware security application; and

creating a JMS connection for the user application, including accepting the pre-authenticated credentials in a JMS connection function and authenticating the user application for the JMS in dependence upon the pre-authenticated credentials.

2. The method of claim 1 further comprising caching the pre-authenticated credentials in the user application.

3. The method of claim 1 wherein:

providing pre-authenticated credentials for a user application further comprises retaining an instance of the pre-authenticated credentials, serializing the pre-authenticated credentials, and providing the serialized pre-authenticated credentials to the user application;

accepting the pre-authenticated credentials in a JMS connection function further comprises accepting the serialized pre-authenticated credentials in a JMS connection function; and

authenticating the user application for the JMS in dependence upon the pre-authenticated credentials further comprises deserializing the serialized pre-authenticated credentials accepted in the JMS connection function and comparing the deserialized pre-authenticated credentials accepted in the JMS connection function and the retained instance of the pre-authenticated credentials.

4. The method of claim 1 wherein:

providing pre-authenticated credentials for a user application further comprises serializing the pre-authenticated credentials, retaining a copy of the serialized pre-authenticated credentials, and providing the serialized pre-authenticated credentials to the user application;

accepting the pre-authenticated credentials in a JMS connection function further comprises accepting the serialized pre-authenticated credentials in a JMS connection function; and

authenticating the user application for the JMS in dependence upon the pre-authenticated credentials further comprises comparing the serialized pre-authenticated credentials accepted in the JMS connection function and the retained copy of the serialized pre-authenticated credentials.

5. The method of claim 4 wherein:

retaining a copy of the serialized pre-authenticated credentials further comprises hashing the serialized pre-authenticated credentials and storing the hash of the serialized pre-authenticated credentials; and

comparing the serialized pre-authenticated credentials accepted in the JMS connection function and the retained copy of the serialized pre-authenticated credentials further comprises hashing the serialized pre-authenticated credentials accepted in the JMS connection function and comparing the hash of the serialized pre-authenticated credentials accepted in the JMS connection function and the stored hash of the serialized pre-authenticated credentials.

6. The method of claim 1 wherein:

providing pre-authenticated credentials for a user application further comprises stringifying the pre-authenticated credentials, retaining a copy of the stringified pre-authenticated credentials, and providing the stringified pre-authenticated credentials to the user application;

accepting the pre-authenticated credentials in a JMS connection function further comprises accepting the stringified pre-authenticated credentials in a JMS connection function; and

authenticating the user application for the JMS in dependence upon the pre-authenticated credentials further comprises comparing the stringified pre-authenticated credentials accepted in the JMS connection function and the retained copy of the stringified pre-authenticated credentials.

7. The method of claim 6 wherein:

retaining a copy of the stringified pre-authenticated credentials further comprises hashing the stringified pre-authenticated credentials to the user application and storing the hash of the stringified pre-authenticated credentials; and

comparing the stringified pre-authenticated credentials accepted in the JMS connection function and the retained copy of the stringified pre-authenticated credentials further comprises hashing the stringified pre-authenticated credentials accepted in the JMS connection function and comparing the hash of the stringified pre-authenticated credentials accepted in the JMS connection function and the stored hash of the stringified pre-authenticated credentials.

8. A system for authentication with credentials in a Java messaging service (“JMS”), the system comprising:

means for providing pre-authenticated credentials for a Java security domain for a user application, the pre-authenticated credentials comprising authentication credentials that are already authenticated when obtained by the user application and that are subsequently used again in JMS authentication;

means for caching the pre-authenticated credentials in a middleware security application; and

means for creating a JMS connection for the user application, including means for accepting the pre-authenticated credentials in a JMS connection function and means for authenticating the user application for the JMS in dependence upon the pre-authenticated credentials.

9. The system of claim 8 further comprising means for caching the pre-authenticated credentials in the user application.

10. The system of claim 8 wherein:

means for providing pre-authenticated credentials for a user application further comprises means for retaining an instance of the pre-authenticated credentials, means for serializing the pre-authenticated credentials, and means for providing the serialized pre-authenticated credentials to the user application;

means for accepting the pre-authenticated credentials in a JMS connection function further comprises means for accepting the serialized pre-authenticated credentials in a JMS connection function; and

means for authenticating the user application for the JMS in dependence upon the pre-authenticated credentials further comprises means for deserializing the serialized pre-authenticated credentials accepted in the JMS connection function and means for comparing the deserialized pre-authenticated credentials accepted in the JMS connection function and the retained instance of the pre-authenticated credentials.

11. The system of claim 8 wherein:

means for providing pre-authenticated credentials for a user application further comprises means for serializing the pre-authenticated credentials, means for retaining a copy of the serialized pre-authenticated credentials, and means for providing the serialized pre-authenticated credentials to the user application;

means for accepting the pre-authenticated credentials in a JMS connection function further comprises means for accepting the serialized pre-authenticated credentials in a JMS connection function; and

means for authenticating the user application for the JMS in dependence upon the pre-authenticated credentials further comprises means for comparing the serialized pre-authenticated credentials accepted in the JMS connection function and the retained copy of the serialized pre-authenticated credentials.

12. The system of claim 11 wherein:

means for retaining a copy of the serialized pre-authenticated credentials further comprises means for hashing the serialized pre-authenticated credentials and means for storing the hash of the serialized pre-authenticated credentials; and

means for comparing the serialized pre-authenticated credentials accepted in the JMS connection function and the retained copy of the serialized pre-authenticated credentials further comprises means for hashing the serialized pre-authenticated credentials accepted in the JMS connection function and means for comparing the hash of the serialized pre-authenticated credentials accepted in the JMS connection function and the stored hash of the serialized pre-authenticated credentials.

13. The system of claim 8 wherein:

means for providing pre-authenticated credentials for a user application further comprises means for stringifying the pre-authenticated credentials, means for retaining a copy of the stringified pre-authenticated credentials, and means for providing the stringified pre-authenticated credentials to the user application;

means for accepting the pre-authenticated credentials in a JMS connection function further comprises means for accepting the stringified pre-authenticated credentials in a JMS connection function; and

means for authenticating the user application for the JMS in dependence upon the pre-authenticated credentials further comprises means for comparing the stringified pre-authenticated credentials accepted in the JMS connection function and the retained copy of the stringified pre-authenticated credentials.

14. The system of claim 13 wherein:

means for retaining a copy of the stringified pre-authenticated credentials further comprises means for hashing the stringified pre-authenticated credentials to the user application and means for storing the hash of the stringified pre-authenticated credentials; and

means for comparing the stringified pre-authenticated credentials accepted in the JMS connection function and the retained copy of the stringified pre-authenticated credentials further comprises means for hashing the stringified pre-authenticated credentials accepted in the JMS connection function and means for comparing the hash of the stringified pre-authenticated credentials accepted in the JMS connection function and the stored hash of the stringified pre-authenticated credentials.

15. A computer program product for authentication with credentials in a Java messaging service (“JMS”), the computer program product comprising:

a recording medium;

means, recorded on the recording medium, for providing pre-authenticated credentials for a Java security domain for a user application, the pre-authenticated credentials comprising authentication credentials that are already authenticated when obtained by the user application and that are subsequently used again in JMS authentication;

means, recorded on the recording medium, for caching the pre-authenticated credentials in a middleware security application; and

means, recorded on the recording medium, for creating a JMS connection for the user application, including means, recorded on the recording medium, for accepting the pre-authenticated credentials in a JMS connection function and means, recorded on the recording medium, for authenticating the user application for the JMS in dependence upon the pre-authenticated credentials.

16. The computer program product of claim 15 further comprising means, recorded on the recording medium, for caching the pre-authenticated credentials in the user application.

17. The computer program product of claim 15 wherein:

means, recorded on the recording medium, for providing pre-authenticated credentials for a user application further comprises means, recorded on the recording medium, for retaining an instance of the pre-authenticated credentials, means, recorded on the recording medium, for serializing the pre-authenticated credentials, and means, recorded on the recording medium, for providing the serialized pre-authenticated credentials to the user application;

means, recorded on the recording medium, for accepting the pre-authenticated credentials in a JMS connection function further comprises means, recorded on the recording medium, for accepting the serialized pre-authenticated credentials in a JMS connection function; and

means, recorded on the recording medium, for authenticating the user application for the JMS in dependence upon the pre-authenticated credentials further comprises means, recorded on the recording medium, for deserializing the serialized pre-authenticated credentials accepted in the JMS connection function and means, recorded on the recording medium, for comparing the deserialized pre-authenticated credentials accepted in the JMS connection function and the retained instance of the pre-authenticated credentials.

18. The computer program product of claim 15 wherein:

means, recorded on the recording medium, for providing pre-authenticated credentials for a user application further comprises means, recorded on the recording medium, for serializing the pre-authenticated credentials, means, recorded on the recording medium, for retaining a copy of the serialized pre-authenticated credentials, and means, recorded on the recording medium, for providing the serialized pre-authenticated credentials to the user application;

means, recorded on the recording medium, for accepting the pre-authenticated credentials in a JMS connection function further comprises means, recorded on the recording medium, for accepting the serialized pre-authenticated credentials in a JMS connection function; and

means, recorded on the recording medium, for authenticating the user application for the JMS in dependence upon the pre-authenticated credentials further comprises means, recorded on the recording medium, for comparing the serialized pre-authenticated credentials accepted in the JMS connection function and the retained copy of the serialized pre-authenticated credentials.

19. The computer program product of claim 18 wherein:

means, recorded on the recording medium, for retaining a copy of the serialized pre-authenticated credentials further comprises means, recorded on the recording medium, for hashing the serialized pre-authenticated credentials and means, recorded on the recording medium, for storing the hash of the serialized pre-authenticated credentials; and

means, recorded on the recording medium, for comparing the serialized pre-authenticated credentials accepted in the JMS connection function and the retained copy of the serialized pre-authenticated credentials further comprises means, recorded on the recording medium, for hashing the serialized pre-authenticated credentials accepted in the JMS connection function and means, recorded on the recording medium, for comparing the hash of the serialized pre-authenticated credentials accepted in the JMS connection function and the stored hash of the serialized pre-authenticated credentials.

20. The computer program product of claim 15 wherein:

means, recorded on the recording medium, for providing pre-authenticated credentials for a user application further comprises means, recorded on the recording medium, for stringifying the pre-authenticated credentials, means, recorded on the recording medium, for retaining a copy of the stringified pre-authenticated credentials, and means, recorded on the recording medium, for providing the stringified pre-authenticated credentials to the user application;

means, recorded on the recording medium, for accepting the pre-authenticated credentials in a JMS connection function further comprises means, recorded on the recording medium, for accepting the stringified pre-authenticated credentials in a JMS connection function; and

means, recorded on the recording medium, for authenticating the user application for the JMS in dependence upon the pre-authenticated credentials further comprises means, recorded on the recording medium, for comparing the stringified pre-authenticated credentials accepted in the JMS connection function and the retained copy of the stringified pre-authenticated credentials.

21. The computer program product of claim 20 wherein:

means, recorded on the recording medium, for retaining a copy of the stringified pre-authenticated credentials further comprises means, recorded on the recording medium for hashing the stringified pre-authenticated credentials to the user application and means, recorded on the recording medium, for storing the hash of the stringified pre-authenticated credentials; and

means, recorded on the recording medium, for comparing the stringified pre-authenticated credentials accepted in the JMS connection function and the retained copy of the stringified pre-authenticated credentials further comprises means, recorded on the recording medium, for hashing the stringified pre-authenticated credentials accepted in the JMS connection function and means, recorded on the recording medium, for comparing the hash of the stringified pre-authenticated credentials accepted in the JMS connection function and the stored hash of the stringified pre-authenticated credentials.