Apparatus, system, and method for establishing an agency relationship to perform delegated computing tasks

• US 20060107311A1
• Filed: 11/12/2004
• Published: 05/18/2006
• Est. Priority Date: 11/12/2004
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Dawson, Colin Scott, Hochberg, Avishai Haim, Hattrup, Glen, Smith, James Patrick, Kaczmarski, Michael, Ramke, Thomas Franklin Jr.
• Granted Patent: US 7,774,462 B2
• Time in Patent Office: Days
• US Class Current: 726/5
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect

Abstract

An apparatus, system, and method are disclosed for establishing an agency relationship to perform delegated computing tasks. The apparatus system and method provide for initiation of the agency relationship, establishment of credentials to perform a delegated computing task, and performance of the delegated computing task. Benefits of establishing an agency relationship in a computing environment include improved security, efficiency, and reliability in performing delegated computing tasks.

Claims

1. An apparatus to establish an agency relationship to perform delegated computing tasks, the apparatus comprising:

an agent initiation module configured to initiate an agency relationship between an agent and a principal to perform a delegated computing task;

a credentials module configured to establish credentials of the agent to perform the delegated computing task on behalf of the principal; and

a computing module configured to perform delegated computing tasks of the agent on behalf of the principal.

2. The apparatus of claim 1, wherein the initiating module further comprises a communication module configured to communicate an agency request between a first logical node representative of the principal, and a second logical node representative of the agent, and communicate acceptance of the agency request.

3. The apparatus of claim 1, wherein the computing module further comprises an execution module of an agent computing device configured to execute the delegated computing task in cooperation with a target node.

4. The apparatus of claim 1, wherein the credentials module further comprises an authentication module configured to authenticate the agent for performing delegated computing tasks with a target node, wherein the agent uses credentials separate from the credentials of the principal.

5. The apparatus of claim 1, wherein the credentials module further comprises an agent authorization module configured to authorize, with agency credentials, the agent to perform delegated computing tasks with the target node on behalf of the principal, wherein the identity of the agent and the principal are recorded in association with the delegated computing task.

6. The apparatus of claim 1, further comprising a configuration module configured to apply configuration information to the agent that governs the delegated computing task, the configuration information corresponding to configuration information of the principal.

7. The apparatus of claim 1, further comprising an agent delegation module configured to delegate a second agent perform the delegated computing task on behalf of the agent, wherein the identity of the first agent, the second agent, and the principal are recorded in association with the delegated computing task.

8. The apparatus of claim 1, wherein the agency relationship exists within a shared data environment selected from a group consisting of a storage area network, a shared file system, a parallel file system, a parallel database, and a clustered file system.

9. The apparatus of claim 1, wherein the initiation module is further configured to request a list of principals for which the agent is authorized to perform tasks.

10. An apparatus to establish an agency relationship to perform delegated computing tasks, the apparatus comprising:

a principal initiation module configured to initiate an agency relationship between an agent and a principal to perform a delegated computing task;

a credentials module configured to register, with a designated target node, one or more agents authorized to perform the delegated computing task on behalf of the principal; and

a principal delegation module configured to delegate the delegated computing task to one of the agents.

11. A system to establish an agency relationship to perform delegated computing tasks, the system comprising:

an agent comprising;

an agent initiation module configured to initiate an agency relationship between an agent and a principal to perform a delegated computing task;

a credentials module configured to establish credentials to perform the delegated computing task on behalf of the principal; and

a computing module configured to perform delegated computing tasks on behalf of the principal.

a principal configured to delegate the delegated computing task to the agent; and

a target node upon which the delegated computing task is performed.

12. The system of claim 11, wherein the agent initiating module further comprises a communication module configured to communicate an agency request between a first logical node representative of the principal, and a second logical node representative of the agent, and communicate acceptance of the agency request.

13. The system of claim 12, wherein the computing module further comprises an execution module of an agent computing device configured to execute the delegated computing task in cooperation with a target node.

14. The system of claim 13, wherein the credentials module further comprises an authentication module configured to authenticate the agent to perform delegated computing tasks with a target node, wherein the agent uses credentials separate from the credentials of the principal.

15. The system of claim 14, wherein the credentials module further comprises an agent authorization module configured to authorize, with agency credentials, the agent to perform delegated computing tasks with the target node on behalf of the principal, wherein the identity of the agent and the principal are recorded in association with the delegated computing task.

16. The system of claim 15, further comprising a configuration application device configured to apply configuration information to the agent that governs the delegated computing task, the configuration information corresponding to configuration information of the principal.

17. The system of claim 16, further comprising an agent delegation device configured to delegate a second agent to perform the delegated computing task on behalf of the agent, wherein the identity of the first agent, the second agent, and the principal are recorded in association with the delegated computing task.

18. The system of claim 17, wherein the agency relationship exists within a shared data environment selected from a group consisting of data storage management, file management, processor load balancing, and network load balancing.

19. The system of claim 18, wherein the delegated computing task is selected from a group consisting of data backup, distribution of file packages, processor load balancing, and network load balancing.

20. A signal bearing medium tangibly embodying a program of machine-readable instructions executable by a digital processing apparatus to perform operations to establish an agency relationship to perform delegated computing tasks, the operations comprising:

initiating an agency relationship between an agent and a principal to perform a delegated computing task;

establishing credentials of the agent to perform a delegated computing task on behalf of the principal; and

performing the delegated computing task on behalf of the principal.

21. The signal bearing medium of claim 20, wherein initiating further comprises communicating an agency request between a first logical node representative of the principal, and a second logical node representative of the agent, and communicating acceptance of the agency request.

22. The signal bearing medium of claim 20, wherein performing further comprises executing the delegated computing task in cooperation with a target node.

23. The signal bearing medium of claim 20, wherein establishing credentials further comprises authenticating the agent to perform computing tasks with a target node, wherein the agent uses credentials separate from the credentials of the principal.

24. The signal bearing medium of claim 20, wherein establishing credentials further comprises authorizing, with agency credentials, the agent to perform delegated computing tasks with the target node on behalf of the principal, wherein the identity of the agent and the principal are recorded in association with the delegated computing task.

25. The signal bearing medium of claim 20, wherein the operations further comprise applying configuration information to the agent that governs the delegated computing task, the configuration information corresponding to configuration information of the principal.

26. The signal bearing medium of claim 20, wherein the operation to perform the delegated computing task further comprises delegating a second agent to perform the delegated computing task on behalf of the agent, wherein the identity of the first agent, the second agent, and the principal are recorded in association with the delegated computing task.

27. The signal bearing medium of claim 20, wherein the agency relationship exists within a shared data environment selected from a group consisting of a storage area network, a shared file system, a parallel file system, a parallel database, and a clustered file system.

28. The signal bearing medium of claim 20, wherein initiation further comprises requesting a list of principals for which the agent is authorized to perform tasks.

29. A method for establishing an agency relationship to perform delegated computing tasks, the method comprising:

initiating an agency relationship between an agent and a principal to perform a delegated computing task;

establishing credentials to perform a delegated computing task on behalf of the principal; and

performing the delegated computing task on behalf of the principal.

30. An apparatus to establish an agency relationship to perform delegated computing tasks, the apparatus comprising:

means for initiating an agency relationship between an agent and a principal to perform a delegated computing task;

means for establishing credentials to perform a delegated computing task on behalf of the principal; and

means for performing the delegated computing task on behalf of the principal.