Filtered application-to-application communication

• US 20020059517A1
• Filed: 05/24/2001
• Published: 05/16/2002
• Est. Priority Date: 05/24/2000
• Status: Active Grant

• Current Assignee: Mellanox Technologies TLV Ltd. (NVIDIA Corporation)
• Original Assignee: Voltaire Advanced Data Security Limited (NVIDIA Corporation)
• Inventors: Corem, Guy, Haviv, Yaron
• Granted Patent: US 7,216,225 B2
• Time in Patent Office: Days
• US Class Current: 713/154
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/168 above the transport layer
• CPC Class Codes: H04L 67/1001 for accessing one among a plurality of replicated servers

Abstract

Some embodiments of the present invention are directed to a system that enables filtered application-to-application communication in a server farm in a multi-channel reliable hardware environment (e.g. InfiniBand). The system may also improve the performance of application-to-application communication between servers in the farm. The implementation of multi-channel reliable communication hardware may reduce the number of communication software layers above.

Claims

1. A method for filtered application-to-application communication comprising:

providing a communication interface to an application;

filtering application data received from a process of said application according to a predetermined policy; and

providing said filtered application data directly to communication hardware.

2. The method of claim 1 further comprising:

verifying the identity of said application prior to providing said filtered application data.

3. The method of claim 2 further comprising:

sending at least one security token.

4. The method of claim 1 further comprising:

verifying the identity of a machine participating in said process prior to providing said filtered application data.

5. The method of claim 4 further comprising:

sending at least one security token.

6. The method of claim 1, wherein providing said filtered application data comprises providing said filtered application data directly to a multi-channel network interface card having direct user-to-hardware access.

7. The method of claim 6, wherein said multi-channel network interface card is an InfiniBand card.

8. A method for filtered application-to-application communication comprising:

providing a communication interface to an application;

filtering application data received from a process of said application;

sending an authentication request to an authentication service;

receiving authentication information; and

providing said filtered application data directly to communication hardware.

9. The method of claim 8 further comprising:

verifying the identity of said application prior to providing said filtered application data.

10. The method of claim 9 further comprising:

sending at least one security token.

11. The method of claim 8 further comprising:

verifying the identity of a machine participating in said process prior to providing said filtered application data.

12. The method of claim 11 further comprising:

sending at least one security token.

13. The method of claim 8, wherein providing said filtered application data comprises providing said filtered application data directly to a multi-channel network interface card having direct user-to-hardware access.

14. The method of claim 13, wherein said multi-channel network interface card is an InfiniBand card.

16. The system of claim 15, wherein said communication hardware is a multi-channel network interface card having direct user-to-hardware access.

17. The system of claim 16, wherein said multi-channel network interface card is an InfiniBand card.

19. The system of claim 18, wherein said communication hardware is a multi-channel network interface card having a direct user-to-hardware access.

20. The system of claim 19, wherein said multi-channel network interface card is an InfiniBand card.

15. A system for filtered application-to-application communication comprising:

multi-channel communication hardware; and

at least one application interface and filter operative to provide filtered data from an application process directly to said multi-channel communication hardware.

18. A system for filtered application-to-application communication comprising:

multi-channel communication hardware;

at least one application interface and filter operative to provide filtered data from an application process directly to said multi-channel communication hardware; and

at least one authentication service adapted to determine whether said application process is genuine and/or whether at least one machine participating in said application process is genuine.