Method, hardware product, and computer program product for optimizing security in the context of credential transformation services
View Patent ↗Security is optimized in the context of a credential transformation service (CTS) by utilizing a web services client runtime to gather information for determining whether or not a target web service is hosted in a security domain used by a client application and for determining whether or not the target web service uses an authentication mechanism substantially identical to that used by the client application. The gathered information is carried in an endpoint reference (EPR) of the target web service. In response to the client receiving the EPR, the client applies an optimization process to eliminate a possible unnecessary invocation of the CTS, wherein the target web service is an authoritative manageable resource having minimal or no responsibility for providing its identity, and having minimal or no responsibility for advertising any creation and destruction lifecycle related events.
1. A computer-executable method for optimizing security in a context of a credential transformation service (CTS), the method comprising:
utilizing a web services client runtime to gather information for determining whether or not a target web service is hosted in a security domain used by a client application of a client computer and for determining whether or not the target web service uses an authentication mechanism substantially identical to that used by the client application, wherein the gathered information is carried in an endpoint reference (EPR) of the target web service;
in response to the client computer receiving the EPR, the client computer applying an optimization process to eliminate a possible unnecessary invocation of the CTS, wherein the target web service is an authoritative manageable resource having minimal or no responsibility for providing identity of the authoritative manageable resource, and having minimal or no responsibility for advertising any creation and destruction lifecycle related events;
providing a services oriented architecture (SOA) that defines one or more services needed to manage the authoritative manageable resource within a distributed and heterogeneous management system;
providing a component model that defines one or more interfaces and one or more interactions to be implemented by the authoritative manageable resource within the SOA; and
wherein the optimization process is based on the gathered information carried in the EPR.
2. The method of claim 1 wherein the EPR is a web service (WS)-Addressing EPR.
3. The method of claim 1 wherein the target web service is implemented as a Virtualization Engine (VE) Foundation service.
4. The method of claim 1 wherein the gathered information comprises a security domain name.
5. The method of claim 4 wherein the gathered information identifies an authentication mechanism that is supported by the security domain name.
6. The method of claim 5 wherein the gathered information is arranged as a web services (ws)-policy that is attached to the EPR.
7. The method of claim 6 wherein the web services (ws)-policy is attached to the EPR when the EPR is created.
8. A computer program product comprising a non-transitory computer readable storage medium readable by a processing circuit and storing instructions for execution by the processing circuit for facilitating a method for optimizing security in a context of a credential transformation service (CTS), the method comprising:
utilizing a web services client runtime to gather information for determining whether or not a target web service is hosted in a security domain used by a client application of a client computer and for determining whether or not the target web service uses an authentication mechanism substantially identical to that used by the client application, wherein the gathered information is carried in an endpoint reference (EPR) of the target web service;
in response to the client computer receiving the EPR, the client computer applying an optimization process to eliminate a possible unnecessary invocation of the CTS, wherein the target web service is an authoritative manageable resource having minimal or no responsibility for providing identity of the authoritative manageable resource, and having minimal or no responsibility for advertising any creation and destruction lifecycle related events;
providing a services oriented architecture (SOA) that defines one or more services needed to manage the authoritative manageable resource within a distributed and heterogeneous management system;
providing a component model that defines one or more interfaces and one or more interactions to be implemented by the authoritative manageable resource within the SOA; and
wherein the optimization process is based on the gathered information carried in the EPR.
9. The computer program product of claim 8 wherein the EPR is a web service (ws)-Addressing EPR.
10. The computer program product of claim 8 wherein the target web service is implemented as a Virtualization Engine (VE) Foundation service.
11. The computer program product of claim 8 wherein the gathered information comprises a security domain name.
12. The computer program product of claim 11 wherein the gathered information identifies an authentication mechanism that is supported by the security domain name.
13. The computer program product of claim 12 wherein the gathered information is arranged as a web services (ws)-policy that is attached to the EPR.
14. The computer program product of claim 13 wherein the attaching web services (ws)-policy is attached to the EPR when the EPR is created.
15. A hardware product comprising a non-transitory computer readable storage medium readable by a processing circuit and storing instructions for execution by the processing circuit for facilitating a method for optimizing security in a context of a credential transformation service (CTS), the method comprising:
utilizing a web services client runtime to gather information for determining whether or not a target web service is hosted in a security domain used by a client application of a client computer and for determining whether or not the target web service uses an authentication mechanism substantially identical to that used by the client application, wherein the gathered information is carried in an endpoint reference (EPR) of the target web service;
in response to the client computer receiving the EPR, the client computer applying an optimization process to eliminate a possible unnecessary invocation of the CTS, wherein the target web service is an authoritative manageable resource having minimal or no responsibility for providing identity of the authoritative manageable resource, and having minimal or no responsibility for advertising any creation and destruction lifecycle related events;
providing a services oriented architecture (SOA) that defines one or more services needed to manage the authoritative manageable resource within a distributed and heterogeneous management system;
providing a component model that defines one or more interfaces and one or more interactions to be implemented by the authoritative manageable resource within the SOA; and
wherein the optimization process is based on the gathered information carried in the EPR.
16. The hardware product of claim 15 wherein the EPR is a web service (ws)-Addressing EPR.
17. The hardware product of claim 15 wherein the target web service is implemented as a Virtualization Engine (VE) Foundation service.
18. The hardware product of claim 15 wherein the gathered information comprises a security domain name.
19. The hardware product of claim 18 wherein the gathered information identifies an authentication mechanism that is supported by the security domain name.
20. The computer program product of claim 19 wherein the gathered information is arranged as a web services (ws)-policy that is attached to the EPR when the EPR is created.