Service oriented architecture with credential management

• US 20050273517A1
• Filed: 05/18/2005
• Published: 12/08/2005
• Est. Priority Date: 05/21/2004
• Status: Abandoned Application

• Current Assignee: BEA Systems Incorporated (Oracle Corporation)
• Original Assignee: BEA Systems Incorporated (Oracle Corporation)
• Inventors: Kasi, Jayaram, Mihic, Matthew, Urhan, Tolga, Kapoor, Chet, Aletty, Ashok, Patrick, Paul B.
• Application Number:
  US11/131,833
• Publication Number:
  US 20050273517A1
• Time in Patent Office: Days
• US Class Current: 709/238
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/51 Discovery or management thereof, e.g. service location protocol [SLP] or web services
• CPC Class Codes: H04L 67/56 Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54
• CPC Class Codes: H04L 67/564 Enhancement of application control based on intercepted application data
• CPC Class Codes: H04L 67/565 Conversion or adaptation of application format or content adding application control or application functional data H04L67/561

Abstract

A system, method and media for a service oriented architecture. This description is not intended to be a complete description of, or limit the scope of, the invention. Other features, aspects and objects of the invention can be obtained from a review of the specification, the figures and the claims.

Claims

1. A method for processing messages in a service proxy, comprising:

conveying a message in a first direction along a first path in a network of message processing nodes wherein the first path includes at least one of the message processing nodes;

affording each node in the first path the opportunity to process the message;

acquiring a credential relevant to a resource and/or a service identified by the message; and

wherein a message processing node implements an interface and/or protocol that is compatible with the service proxy.

2. The method of claim 1, further comprising:

providing the message to one of;

a service and service proxy.

3. The method of claim 1 wherein:

the service proxy is an intermediary between a client and one of;

a service and another service proxy.

4. The method of claim 1 wherein:

the first path is dynamically determined.

5. The method of claim 1 wherein:

the first path is dynamically determined based on message content.

6. The method of claim 1 wherein:

a message processing node can be added to or removed from the network dynamically.

7. The method of claim 1 wherein:

a message processing node can be configured dynamically.

8. The method of claim 1 wherein:

the first path includes a first message processing node to accept request messages and at least one second message processing node to accept response messages.

9. The method of claim 1 wherein:

a message processing node in the first path is capable of performing at least one of the following;

message authentication, message authorization, message validation, message transformation, message routing, performance monitoring, message tracking, message archiving, message logging, message publication, error reporting, and a user-defined process.

10. The method of claim 1 wherein:

a credential is an identity.

11. A machine readable medium having instructions stored thereon to cause a system to:

convey a message in a first direction along a first path in a network of message processing nodes wherein the first path includes at least one of the message processing nodes;

afford each node in the first path the opportunity to process the message;

acquire a credential relevant to a resource and/or a service identified by the message; and

wherein a message processing node implements an interface and/or protocol that is compatible with the service proxy.

12. A service proxy for processing messages, comprising:

a network of message processing nodes;

a first path in the network wherein the first path includes at least one of the message processing nodes and wherein the first path is capable of conveying a message in a first direction through the network wherein each node in the first path is capable of processing the message;

a first component capable of acquiring a credential relevant to a resource and/or a service identified by the message; and

wherein a message processing node implements an interface and/or protocol that is compatible with the service proxy.

13. The service proxy of claim 12, further comprising:

a second component capable of providing the message to one of;

a service and service proxy.

14. The service proxy of claim 12 wherein:

the service proxy is an intermediary between a client and one of;

a service and another service proxy.

15. The service proxy of claim 12 wherein:

the first path is dynamically determined.

16. The service proxy of claim 12 wherein:

the first path is dynamically determined based on message content.

17. The service proxy of claim 12 wherein:

a message processing node can be added to or removed from the network dynamically.

18. The service proxy of claim 12 wherein:

a message processing node can be configured dynamically.

19. The service proxy of claim 12 wherein:

the first path includes a first message processing node capable of accepting request messages and at least one second message processing node capable of accepting response messages.

20. The service proxy of claim 12 wherein:

a message processing node in the first path is capable of performing at least one of the following;

message authentication, message authorization, message validation, message transformation, message routing, performance monitoring, message tracking, message archiving, message logging, message publication, error reporting, and a user-defined process.

21. The service proxy of claim 12 wherein:

a credential is an identity.