System and method for integrating applications in different enterprises separated by firewalls

• US 20050102500A1
• Filed: 11/12/2003
• Published: 05/12/2005
• Est. Priority Date: 11/12/2003
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Khangaonkar, Manoj, Sathye, Adwait
• Application Number:
  US10/712,665
• Publication Number:
  US 20050102500A1
• Time in Patent Office: Days
• US Class Current: 713/153
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload

Abstract

A system for integrating applications in different enterprises separated by firewalls comprises: an input for receiving high level business data from a source application; an encryption engine for encrypting the business data to produce encrypted business data; a queue manager for receiving the encrypted business data and for storing the business data for delivery to a target application; and an output for transmitting the encrypted business data to the target application; wherein the system and the target application are separated by at least one firewall.

Claims

1. A system for integrating applications in different enterprises separated by firewalls, the system comprising:

an input for receiving high level business data from a source application;

an encryption engine for encrypting the business data to produce encrypted business data;

a queue manager for receiving the encrypted business data and for storing the business data for delivery to a target processor; and

an output for transmitting the encrypted business data to the target application, wherein the system and the target processor are separated by at least one firewall.

2. The system of claim 1, further comprising the at least one firewall for coupling the output to a wide area network.

3. The system of claim 1, wherein the encryption engine comprises a secure sockets layer protocol.

4. The system of claim 1, wherein the encryption engine comprises an HTTPS protocol.

5. A method for integrating applications hosted at different enterprises separated by at least one firewall, comprising steps of:

receiving data from a source application program;

encoding the data according to a message queuing protocol to provide an MQ message;

encrypting the MQ message to provide an encrypted MQ message; and

transmitting the encrypted MQ message to a destination application program for processing of the data.

6. The method of claim 5 further comprising storing the encrypted MQ message in a queue manager prior to transmitting the encrypted MQ message.

7. The method of claim 5 further comprising sending a message to the source application program instructing the source application program to stop sending data.

8. The method of claim 5 further comprising maintaining a record of the messages received from the source application program.

9. The method of claim 8 wherein the record of the messages received from the source application program comprises information on the number of messages received.

10. The method of claim 8 wherein the record of the messages received from the source application program comprises information on the type of messages received.

19. The method of claim 9, wherein the high level data comprises customer information

20. The method of claim 9, wherein transmitting the MQ message further comprises using a hypertext transfer protocol.

21. The method of claim 9, wherein transmitting the MQ message further comprises a secure socket layer protocol.

22. The method of claim 9, wherein transmitting the MQ message further comprises a hypertext transfer protocol over a secure socket layer.

11. A computer readable medium comprising program instructions for receiving data from a source application program;

encoding the data according to a message queuing protocol to provide an MQ message;

encrypting the MQ message to provide an encrypted MQ message; and

transmitting the encrypted MQ message to a destination application program for processing of the data.

12. The computer readable medium of claim 11 further comprising an instruction for storing the encrypted MQ message in a queue manager prior to transmitting the encrypted MQ message.

13. The computer readable medium of claim 11 further comprising an instruction for sending a message to the source application program instructing the source application program to stop sending data.

14. The computer readable medium of claim 11 further comprising an instruction for maintaining a record of the messages received from the source application program.

15. The computer readable medium of claim 14 wherein the record of the messages received from the source application program comprises information on the number of messages received.

16. The computer readable medium of claim 14 wherein the record of the messages received from the source application program comprises information on the type of messages received.

17. A remote agent comprising:

an input for receiving a message from a first application, the message comprising high level data and a request to process the data by a second application at a target node in a network, wherein the target node is located at another side of a firewall from the agent; and

a first queue manager for receiving messages from the agent and for transmitting the messages to the target node when the target node can receive the messages.

18. A method for transmitting high-level data in real time to one or more enterprises, the method comprising:

receiving, from an application, a message comprising high level data and a request to process the data by a server;

converting the message into an MQ message using a message queuing protocol;

encrypting the MQ message using a security protocol to provide a secure MQ message; and

transmitting the MQ message to a first queue manager for retransmission at a time when the network is suitable for transporting the message to the server.